last executing test programs: 19m10.021017742s ago: executing program 3 (id=155): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) userfaultfd(0x80001) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 19m9.64491118s ago: executing program 3 (id=160): r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x1, 0x2002, 0x8, "00196bf0c39008ced3900813726203000437b065c6b388e3cdf73cc88bfd1b04"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000340)=""/230) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) dup3(r5, r4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1}, 0x6e) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r6, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000a80)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x8824000) 19m8.195770488s ago: executing program 3 (id=161): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) 19m7.270958335s ago: executing program 3 (id=166): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10000844) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 19m5.836295902s ago: executing program 3 (id=169): mkdir(&(0x7f0000000040)='./file1\x00', 0xc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 19m5.636011372s ago: executing program 3 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x1c, r1, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 18m50.536536091s ago: executing program 32 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x1c, r1, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 5.813107641s ago: executing program 0 (id=4540): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000880), &(0x7f0000000100)='syzkaller\x00', 0xaf, 0xf6, &(0x7f00000003c0)=""/246, 0x100, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xa, 0xfffffff5, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0), &(0x7f00000000c0)=[{0x3, 0x1, 0x1, 0x5}, {0x2, 0x1000004, 0xe, 0x2}, {0x3, 0x2, 0x9, 0x9}, {0x4, 0x1, 0x4, 0x4}], 0x10, 0x7fff, @void, @value}, 0x94) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000300)={0x82}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x12, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x619) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, r1, 0x2b, 0x3b, r2, @void, @void, @void, @value, r3}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r5, r5, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2}, 0x18) mount$pvfs2(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x1080, &(0x7f00000009c0)=ANY=[@ANYBLOB="2c6d6f756e7473002c73797a6b616c6c6572002c2f232c3aeb3a7d2a7d2c292c6d6f756e7473002c67656e657665002c2d27242a5e282d2a2c2723265e2a2129242127212c6673757569643d64396434653235322d346535382d616565332d355063662d00303832333135372c736d61636b6673726f6f743d277d2c686173682c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c706f0b000001003ed37ef6e66bbb9c0daf39c41f7603027a589effc6a9e06434f8b3665ab6a7763caa81d7c250df2dc0d6bc672b7aaac467cdb3564bc2"]) close(r6) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x34, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.334190082s ago: executing program 4 (id=4541): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)="261a", 0x2}], 0x1}}], 0x1, 0x2c000011) sendto(r0, &(0x7f00000002c0)='q', 0x100000, 0x8000, 0x0, 0x0) 5.177326382s ago: executing program 4 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000300000002001c1f0000c808ffffffea0800", @ANYRES32=r0, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 5.084354012s ago: executing program 4 (id=4544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.520927843s ago: executing program 4 (id=4551): r0 = syz_usb_connect(0x6, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2cdf, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f00000000c0), &(0x7f0000000440)) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x2a) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00224b0000004b21a23087fb210d7f2cdc52865fb4c76dac0ab241fa4e5a2127f602f58464a512a2db80b6ded6e4c2a780e30f53c5c58b75544d1350a6a9c2260c66999172609a43ce9137b42fb8136764"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x1040}}, 0x20}}, 0x400c004) 4.319444583s ago: executing program 1 (id=4554): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x103, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_io_uring_setup(0x1bff, 0x0, 0x0, 0x0) 4.250771053s ago: executing program 5 (id=4555): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x82, {0x82, 0x23, "40976b56093ba861c3319ef42dd5a06983f9ad74f829834f36977d33ad1aff8cdfade23f48efa10c1a4fe1d07d9ce55ffb331aa06a3086d5a6a2bf8a2146c8a97175cb9650ece5e45ccb15fb47119ba68a0e0d762a17cba21d92d3fd7a0bc7fdfbeb0f783013241811c3929d241f839cd430efc9d45f3845bce2594d4a7fd0e7"}}, 0x0}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8a280) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0xc05c6104, &(0x7f00000000c0)) 4.089167143s ago: executing program 1 (id=4556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x493e0}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x728e, &(0x7f0000000300)={0x0, 0x0, 0x4000, 0x0, 0x330, 0x0, r6}, &(0x7f0000000000)=0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) syz_pidfd_open(r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x40}, 0x18) 3.229384685s ago: executing program 5 (id=4558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0xfdef) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 3.212266285s ago: executing program 1 (id=4559): syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48884}, 0x20018840) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0x3, 0x5, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x13ae], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.210905725s ago: executing program 4 (id=4560): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000d40)={0x40, 0x9, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.916275325s ago: executing program 1 (id=4562): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b000100", @ANYRES32=r1, @ANYBLOB="08000a009c"], 0x44}}, 0x20008040) 2.679378635s ago: executing program 1 (id=4564): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r0, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 2.477398516s ago: executing program 1 (id=4566): unshare(0x6a040000) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xa7, 0xa9, 0x46, 0x40, 0xe748, 0x7698, 0x38cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0xef, 0x1, 0x1}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x0) 2.476579796s ago: executing program 2 (id=4567): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007912d80000000000c6000000000008009500000c000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x2808b28, 0x0, 0x1, 0x6, 0xfffffffe, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r3, r0, 0xffffffffffffffff, r1]}}], 0x48, 0x81}}, {{&(0x7f00000004c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="7f28747bf131a1e47b8713f1f6e5264ec7d9957688bc02da9479d45c5498bb388cac75bc086f63a0d00d907bbf62de2701bf0c5e0a928bfa61c0434166bb5d585b933c685887331f4bf5612a41c3d192b77c6c135be7f1c10358ca094a04f710c07178c3d36309ca78", 0x69}, {&(0x7f00000005c0)}, {0x0}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}], 0x40}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) 2.154663777s ago: executing program 5 (id=4568): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x82, {0x82, 0x23, "40976b56093ba861c3319ef42dd5a06983f9ad74f829834f36977d33ad1aff8cdfade23f48efa10c1a4fe1d07d9ce55ffb331aa06a3086d5a6a2bf8a2146c8a97175cb9650ece5e45ccb15fb47119ba68a0e0d762a17cba21d92d3fd7a0bc7fdfbeb0f783013241811c3929d241f839cd430efc9d45f3845bce2594d4a7fd0e7"}}, 0x0}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8a280) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0x2) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0xc05c6104, &(0x7f00000000c0)) 2.102772597s ago: executing program 2 (id=4569): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 2.078206566s ago: executing program 0 (id=4570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x493e0}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_setup(0x728e, &(0x7f0000000300)={0x0, 0x0, 0x4000, 0x0, 0x330, 0x0, r6}, &(0x7f0000000000)=0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) syz_pidfd_open(r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x40}, 0x18) 1.252254918s ago: executing program 2 (id=4571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5", 0x6a}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 1.185325558s ago: executing program 5 (id=4572): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e1b500963ff7fc6e5539b9b3b098b9b711b4552101b080d29308f0e1ac6e7049b346c959b189a242a9b64f3988f7ef319520100ffe8d178708c523c921b1b5d360a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) 1.122504998s ago: executing program 0 (id=4573): ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f0000000080)={0x0, 0x6, 0x8, '\x00', 0x0}) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) 1.029049928s ago: executing program 2 (id=4574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 869.983898ms ago: executing program 0 (id=4575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006970766c616e0000", @ANYRES32=r1, @ANYBLOB="08000a009c"], 0x44}}, 0x20008040) 727.849529ms ago: executing program 0 (id=4576): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 493.353679ms ago: executing program 0 (id=4577): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) epoll_create(0x1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x4}) 445.387269ms ago: executing program 4 (id=4578): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 442.136489ms ago: executing program 2 (id=4579): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000400)=[{r0, 0x2500}, {r0, 0x400b}], 0x2, 0x0, 0x0, 0x0) 305.148339ms ago: executing program 5 (id=4580): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007912d80000000000c6000000000008009500000c000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x2808b28, 0x0, 0x1, 0x6, 0xfffffffe, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r3, r0, 0xffffffffffffffff, r1]}}], 0x48, 0x81}}, {{&(0x7f00000004c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="7f28747bf131a1e47b8713f1f6e5264ec7d9957688bc02da9479d45c5498bb388cac75bc086f63a0d00d907bbf62de2701bf0c5e0a928bfa61c0434166bb5d585b933c685887331f4bf5612a41c3d192b77c6c135be7f1c10358ca094a04f710c07178c3d36309ca783551ed", 0x6c}, {&(0x7f00000005c0)}, {0x0}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}], 0x40}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) 236.019609ms ago: executing program 2 (id=4581): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 0s ago: executing program 5 (id=4582): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x82, {0x82, 0x23, "40976b56093ba861c3319ef42dd5a06983f9ad74f829834f36977d33ad1aff8cdfade23f48efa10c1a4fe1d07d9ce55ffb331aa06a3086d5a6a2bf8a2146c8a97175cb9650ece5e45ccb15fb47119ba68a0e0d762a17cba21d92d3fd7a0bc7fdfbeb0f783013241811c3929d241f839cd430efc9d45f3845bce2594d4a7fd0e7"}}, 0x0}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8a280) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0x2) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0xc05c6104, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 945.434654][ T126] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 945.475569][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.494138][ T126] usb 6-1: Product: syz [ 945.506555][ T126] usb 6-1: Manufacturer: syz [ 945.534079][ T126] usb 6-1: SerialNumber: syz [ 945.949773][ T126] usb 6-1: config 0 descriptor?? [ 946.339969][ T126] usb 6-1: can't set config #0, error -71 [ 946.359145][ T126] usb 6-1: USB disconnect, device number 11 [ 946.448138][T14669] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3068'. [ 946.481413][T14668] fuse: Bad value for 'fd' [ 946.628753][T14673] SET target dimension over the limit! [ 950.298103][T14726] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3088'. [ 950.801334][T14728] Cannot find add_set index 0 as target [ 952.971885][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 954.082194][T14769] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3101'. [ 954.228330][T14773] Cannot find add_set index 0 as target [ 956.301862][ T26] audit: type=1326 audit(1737258589.499:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.418871][ T26] audit: type=1326 audit(1737258589.529:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.465033][ T26] audit: type=1326 audit(1737258589.529:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.492304][ T26] audit: type=1326 audit(1737258589.529:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.573352][ T26] audit: type=1326 audit(1737258589.529:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.597514][ T4304] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 956.671618][T11784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.681687][T11784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.689620][ T26] audit: type=1326 audit(1737258589.529:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.714898][T11784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.724286][T11784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.733518][T11784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 956.740976][T11784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.748218][ T26] audit: type=1326 audit(1737258589.529:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 956.773652][ T26] audit: type=1326 audit(1737258589.529:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14791 comm="syz.1.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 957.417201][ T4304] usb 1-1: Using ep0 maxpacket: 16 [ 957.435500][ T4304] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 957.454629][ T4304] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.464331][ T4304] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.493495][T14808] device batadv_slave_1 entered promiscuous mode [ 957.504586][ T4304] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.537193][T14807] device batadv_slave_1 left promiscuous mode [ 957.584095][T14811] Cannot find add_set index 0 as target [ 957.666432][ T4304] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.722901][ T4304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.769166][ T4304] usb 1-1: Product: syz [ 957.795752][ T4304] usb 1-1: Manufacturer: syz [ 957.822435][ T4304] usb 1-1: SerialNumber: syz [ 958.103514][ T4304] usb 1-1: USB disconnect, device number 4 [ 958.176837][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 958.316667][T14817] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3119'. [ 958.330445][T14798] chnl_net:caif_netlink_parms(): no params data found [ 958.395188][T12559] udevd[12559]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.124678][ T4256] Bluetooth: hci2: command 0x0409 tx timeout [ 959.465143][T14798] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.494674][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.600518][T14798] device bridge_slave_0 entered promiscuous mode [ 959.637074][T14798] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.661094][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.690087][T14798] device bridge_slave_1 entered promiscuous mode [ 960.546052][T14798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.583216][T14847] device batadv_slave_1 entered promiscuous mode [ 960.595310][T14844] device batadv_slave_1 left promiscuous mode [ 960.619852][T14798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.700201][T14850] Cannot find add_set index 0 as target [ 961.172129][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 961.205136][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 961.223583][T14798] team0: Port device team_slave_0 added [ 961.231986][T14855] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3132'. [ 961.250138][T14798] team0: Port device team_slave_1 added [ 961.547181][T14798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.554171][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.685216][T14798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.734689][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 961.745150][T14798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.753109][T14798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.795606][T14798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.858628][T14798] device hsr_slave_0 entered promiscuous mode [ 961.875830][T14798] device hsr_slave_1 entered promiscuous mode [ 961.885678][T14798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.903661][T14798] Cannot create hsr debugfs directory [ 961.924792][ T4304] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 961.955472][ T126] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 961.975623][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.995068][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.012714][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.033553][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.049181][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.718152][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.740533][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.755918][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.769662][ T4304] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 962.788027][ T4304] usb 2-1: config 0 has no interface number 0 [ 962.807992][ T4304] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 962.856223][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.882786][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 962.902056][ T4304] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 962.914139][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 962.932289][ T4304] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 962.952084][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.959168][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.969974][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 963.002895][ T4304] usb 2-1: config 0 descriptor?? [ 963.018430][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 963.030598][T14864] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 963.070167][ T4304] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 963.083174][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.138894][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 963.150619][T14874] delete_channel: no stack [ 963.176450][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 963.212715][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.250844][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 963.308042][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 963.354728][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.368081][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 963.386335][ T4304] usb 2-1: USB disconnect, device number 2 [ 963.393897][ T126] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 963.443126][ T126] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 963.488214][ T126] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.519445][ T126] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 963.529590][ T126] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 963.538515][ T126] usb 1-1: Product: syz [ 963.542869][ T126] usb 1-1: Manufacturer: syz [ 963.550462][ T126] usb 1-1: SerialNumber: syz [ 963.557516][ T126] usb 1-1: config 0 descriptor?? [ 963.574299][ T126] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 963.581640][T14798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.595368][T14798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 963.746722][T14798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.772627][T14798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 963.786039][ T126] usb 1-1: USB disconnect, device number 5 [ 963.800288][ T126] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 963.897783][T14798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.925383][T14798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 964.050767][T14798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.072526][T14798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 964.372229][T14798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.410295][T14798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.430458][T14798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 964.464161][T14798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 964.817913][T14798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.895644][T14798] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.594761][T11784] Bluetooth: hci2: command 0x0419 tx timeout [ 965.650442][T14909] delete_channel: no stack [ 965.891985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 966.006289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 966.285834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 966.294980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 966.316254][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.323407][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.386994][T14920] ip6t_rpfilter: unknown options [ 966.410901][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 966.423837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 966.439544][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 966.453829][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.461015][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.687694][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 966.716511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 966.749102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 966.793625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 966.820530][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 966.840865][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 966.866506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 966.949728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 967.131724][T14924] vivid-007: ================= START STATUS ================= [ 967.140809][T14924] vivid-007: Generate PTS: true [ 967.147311][T14924] vivid-007: Generate SCR: true [ 967.156312][T14924] tpg source WxH: 640x360 (Y'CbCr) [ 967.168172][T14924] tpg field: 1 [ 967.172645][T14924] tpg crop: 640x360@0x0 [ 967.180967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 967.190305][T14924] tpg compose: 640x360@0x0 [ 967.197001][T14924] tpg colorspace: 8 [ 967.205307][T14924] tpg transfer function: 0/0 [ 967.214045][T14924] tpg Y'CbCr encoding: 0/0 [ 967.219678][T14924] tpg quantization: 0/0 [ 967.223871][T14924] tpg RGB range: 0/2 [ 967.228790][T14924] vivid-007: ================== END STATUS ================== [ 967.355880][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 967.508680][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 967.566058][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 967.578354][T14922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.264096][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 969.365148][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 969.368606][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3161'. [ 969.387734][T14798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.555354][T14973] ip6t_rpfilter: unknown options [ 971.533234][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 971.554833][T14994] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3169'. [ 971.565603][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 971.699867][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 971.715385][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 971.734235][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 971.746872][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 971.773453][T14798] device veth0_vlan entered promiscuous mode [ 971.819607][T14798] device veth1_vlan entered promiscuous mode [ 971.891499][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 971.907054][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 972.594882][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 972.871344][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 972.914009][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 972.957642][T14798] device veth0_macvtap entered promiscuous mode [ 973.792506][T14798] device veth1_macvtap entered promiscuous mode [ 973.879775][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.900943][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.049264][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.970647][T15008] vivid-007: ================= START STATUS ================= [ 974.979275][T15008] vivid-007: Generate PTS: true [ 974.984379][T15008] vivid-007: Generate SCR: true [ 974.989442][T15008] tpg source WxH: 640x360 (Y'CbCr) [ 974.995798][T15008] tpg field: 1 [ 975.000335][T15008] tpg crop: 640x360@0x0 [ 975.004695][T15008] tpg compose: 640x360@0x0 [ 975.009242][T15008] tpg colorspace: 8 [ 975.013094][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.023046][T15008] tpg transfer function: 0/0 [ 975.027785][T15008] tpg Y'CbCr encoding: 0/0 [ 975.032307][T15008] tpg quantization: 0/0 [ 975.033246][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.162789][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.195678][T15008] tpg RGB range: 0/2 [ 975.199726][T15008] vivid-007: ================== END STATUS ================== [ 975.209509][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.294630][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.324921][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.362198][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.383208][T14998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.392574][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.449861][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.459893][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.461760][T15023] ip6t_rpfilter: unknown options [ 975.483373][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.815342][T14798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.841882][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 975.868857][ T7386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 975.903910][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.922047][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.977884][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.027395][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.077633][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.106387][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.148115][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.234604][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.244472][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.337839][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.460007][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.482217][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.544142][T14798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.656965][T15035] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3182'. [ 976.947265][T14798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.984047][T14798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.066886][T14798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.111254][T14798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.144658][T14798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.171334][T14798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.264841][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 977.290741][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.467224][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.493043][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.547197][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 977.571151][ T7386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.586978][ T7386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.003017][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 978.556790][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 979.782217][T15073] ip6t_rpfilter: unknown options [ 980.855375][T15079] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3193'. [ 980.978919][T15085] Cannot find add_set index 0 as target [ 982.666588][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 984.792399][T15120] vivid-007: ================= START STATUS ================= [ 984.897003][T15120] vivid-007: Generate PTS: true [ 984.933233][T15120] vivid-007: Generate SCR: true [ 984.955025][T15120] tpg source WxH: 640x360 (Y'CbCr) [ 984.960260][T15120] tpg field: 1 [ 985.056314][T15128] Cannot find add_set index 0 as target [ 985.138101][T15124] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3209'. [ 985.146879][T15120] tpg crop: 640x360@0x0 [ 985.197064][T15120] tpg compose: 640x360@0x0 [ 985.197088][T15120] tpg colorspace: 8 [ 985.197096][T15120] tpg transfer function: 0/0 [ 985.197106][T15120] tpg Y'CbCr encoding: 0/0 [ 985.331689][T15120] tpg quantization: 0/0 [ 985.455896][T15120] tpg RGB range: 0/2 [ 985.473976][T15120] vivid-007: ================== END STATUS ================== [ 985.551668][T15112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.628289][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 989.387000][T15170] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3220'. [ 989.450238][T15171] device batadv_slave_1 entered promiscuous mode [ 989.451100][T15169] device batadv_slave_1 left promiscuous mode [ 989.643971][T15178] vivid-007: ================= START STATUS ================= [ 989.683023][T15178] vivid-007: Generate PTS: true [ 989.728431][T15178] vivid-007: Generate SCR: true [ 989.765683][T15178] tpg source WxH: 640x360 (Y'CbCr) [ 989.847274][T15178] tpg field: 1 [ 989.854353][T15178] tpg crop: 640x360@0x0 [ 989.946556][T15178] tpg compose: 640x360@0x0 [ 990.025985][T15178] tpg colorspace: 8 [ 990.318091][T15178] tpg transfer function: 0/0 [ 990.375105][T15178] tpg Y'CbCr encoding: 0/0 [ 990.525010][T15178] tpg quantization: 0/0 [ 990.529293][T15178] tpg RGB range: 0/2 [ 990.538669][T15178] vivid-007: ================== END STATUS ================== [ 990.625508][T15175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.783883][T15196] ip6t_rpfilter: unknown options [ 993.214874][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.221209][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.252145][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 993.442806][T15220] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3236'. [ 993.595335][T15225] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.595580][T15225] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.595805][T15225] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 993.596028][T15225] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 995.314827][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 995.690385][T15242] SET target dimension over the limit! [ 1000.112205][T15274] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1000.382743][T15282] ip6t_rpfilter: unknown options [ 1001.066871][T15289] Cannot find add_set index 0 as target [ 1002.175368][T15297] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1002.184285][T15297] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1002.193223][T15297] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1002.202107][T15297] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1004.589809][T15321] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3262'. [ 1005.147251][T15334] ip6t_rpfilter: unknown options [ 1005.407190][T15340] Cannot find add_set index 0 as target [ 1008.825804][T15364] delete_channel: no stack [ 1009.500657][T15377] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3278'. [ 1009.569269][T15380] ip6t_rpfilter: unknown options [ 1011.066013][T15386] Cannot find add_set index 0 as target [ 1013.720166][T15420] ip6t_rpfilter: unknown options [ 1014.975700][T15430] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1015.229008][T15441] Cannot find add_set index 0 as target [ 1018.300902][T15472] ip6t_rpfilter: unknown options [ 1019.706896][T15490] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1019.828488][T15492] Cannot find add_set index 0 as target [ 1020.884784][T11784] Bluetooth: hci5: command 0x0406 tx timeout [ 1021.656179][T15511] ip6t_rpfilter: unknown options [ 1022.587400][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 1023.406893][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.664833][T15530] ptrace attach of "./syz-executor exec"[14181] was attempted by "./syz-executor exec"[15530] [ 1023.672709][T15529] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1023.799364][T15534] Cannot find add_set index 0 as target [ 1025.979992][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1027.528899][T15574] Cannot find add_set index 0 as target [ 1028.541020][T15582] vivid-007: ================= START STATUS ================= [ 1028.549009][T15582] vivid-007: Generate PTS: true [ 1028.554260][T15582] vivid-007: Generate SCR: true [ 1028.559525][T15582] tpg source WxH: 640x360 (Y'CbCr) [ 1028.584738][T15582] tpg field: 1 [ 1028.599409][T15582] tpg crop: 640x360@0x0 [ 1028.707469][T15582] tpg compose: 640x360@0x0 [ 1028.755893][T15582] tpg colorspace: 8 [ 1028.760919][T15582] tpg transfer function: 0/0 [ 1028.765740][T15582] tpg Y'CbCr encoding: 0/0 [ 1028.770511][T15582] tpg quantization: 0/0 [ 1028.774906][T15582] tpg RGB range: 0/2 [ 1028.778904][T15582] vivid-007: ================== END STATUS ================== [ 1029.095119][T15575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.161570][T15589] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1031.686090][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 1032.671152][T15616] Cannot find add_set index 0 as target [ 1033.552427][T15631] ptrace attach of "./syz-executor exec"[13955] was attempted by "./syz-executor exec"[15631] [ 1035.539509][T15647] vivid-007: ================= START STATUS ================= [ 1035.547411][T15647] vivid-007: Generate PTS: true [ 1035.553858][T15647] vivid-007: Generate SCR: true [ 1035.562099][T15647] tpg source WxH: 640x360 (Y'CbCr) [ 1035.570176][T15647] tpg field: 1 [ 1035.584696][T15647] tpg crop: 640x360@0x0 [ 1035.591346][T15647] tpg compose: 640x360@0x0 [ 1035.596858][T15647] tpg colorspace: 8 [ 1035.601087][T15647] tpg transfer function: 0/0 [ 1035.607063][T15647] tpg Y'CbCr encoding: 0/0 [ 1035.611596][T15647] tpg quantization: 0/0 [ 1035.615926][T15647] tpg RGB range: 0/2 [ 1035.619939][T15647] vivid-007: ================== END STATUS ================== [ 1035.740962][T15642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.808597][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.154798][T15702] vivid-007: ================= START STATUS ================= [ 1042.171087][T15702] vivid-007: Generate PTS: true [ 1042.182297][T15702] vivid-007: Generate SCR: [ 1042.224397][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1042.254687][T15702] true [ 1042.257488][T15702] tpg source WxH: 640x360 (Y'CbCr) [ 1042.272903][T15702] tpg field: 1 [ 1042.278294][T15702] tpg crop: 640x360@0x0 [ 1042.283001][T15702] tpg compose: 640x360@0x0 [ 1042.289995][T15702] tpg colorspace: 8 [ 1042.296996][T15702] tpg transfer function: 0/0 [ 1042.303202][T15702] tpg Y'CbCr encoding: 0/0 [ 1042.308269][T15702] tpg quantization: 0/0 [ 1042.313538][T15702] tpg RGB range: 0/2 [ 1042.318263][T15702] vivid-007: ================== END STATUS ================== [ 1042.459987][T15708] ptrace attach of "./syz-executor exec"[13955] was attempted by "./syz-executor exec"[15708] [ 1042.587908][T15695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.015226][T15717] device batadv_slave_1 entered promiscuous mode [ 1043.035788][T15716] device batadv_slave_1 left promiscuous mode [ 1046.763108][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1047.092322][T15756] device batadv_slave_1 entered promiscuous mode [ 1047.115927][T15754] device batadv_slave_1 left promiscuous mode [ 1047.676761][T15765] vivid-007: ================= START STATUS ================= [ 1047.686280][T15765] vivid-007: Generate PTS: true [ 1047.694011][T15765] vivid-007: Generate SCR: true [ 1047.700628][T15765] tpg source WxH: 640x360 (Y'CbCr) [ 1047.709243][T15765] tpg field: 1 [ 1047.712747][T15765] tpg crop: 640x360@0x0 [ 1047.719622][T15765] tpg compose: 640x360@0x0 [ 1047.769752][T15765] tpg colorspace: 8 [ 1047.773974][T15765] tpg transfer function: 0/0 [ 1047.955468][T15765] tpg Y'CbCr encoding: 0/0 [ 1047.961893][T15765] tpg quantization: 0/0 [ 1047.976655][T15765] tpg RGB range: 0/2 [ 1047.987416][T15765] vivid-007: ================== END STATUS ================== [ 1048.156032][T15771] ptrace attach of "./syz-executor exec"[14798] was attempted by "./syz-executor exec"[15771] [ 1048.169016][T15761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.282763][T15780] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1051.007874][T15800] device batadv_slave_1 entered promiscuous mode [ 1051.029002][T15799] device batadv_slave_1 left promiscuous mode [ 1051.196079][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3405'. [ 1052.339981][T15824] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3414'. [ 1054.647268][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.653652][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.960168][T15856] device batadv_slave_1 entered promiscuous mode [ 1054.995750][T15855] device batadv_slave_1 left promiscuous mode [ 1055.240347][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1055.433240][T15866] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1058.951861][T15895] device batadv_slave_1 entered promiscuous mode [ 1058.982992][T15894] device batadv_slave_1 left promiscuous mode [ 1059.189160][T15900] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3440'. [ 1059.366153][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1060.714936][ T9695] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1060.954754][ T9695] usb 5-1: Using ep0 maxpacket: 8 [ 1060.967986][ T9695] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1060.993786][ T9695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.008884][ T9695] usb 5-1: Product: syz [ 1061.015139][ T9695] usb 5-1: Manufacturer: syz [ 1061.020147][ T9695] usb 5-1: SerialNumber: syz [ 1061.038407][ T9695] usb 5-1: config 0 descriptor?? [ 1061.067940][ T9695] gspca_main: se401-2.14.0 probing 047d:5003 [ 1061.444406][T15941] device batadv_slave_1 entered promiscuous mode [ 1061.634630][T15940] device batadv_slave_1 left promiscuous mode [ 1061.746933][ T9695] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 1062.089575][ T9695] usb 5-1: USB disconnect, device number 28 [ 1062.355876][T15949] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3452'. [ 1062.380017][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1063.550972][T15975] device batadv_slave_1 entered promiscuous mode [ 1063.558448][T15974] device batadv_slave_1 left promiscuous mode [ 1064.783663][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1064.808139][T15988] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3466'. [ 1065.009323][T15991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1066.886882][T16022] device batadv_slave_1 entered promiscuous mode [ 1066.927816][T16021] device batadv_slave_1 left promiscuous mode [ 1067.864643][T15229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1067.906313][T16030] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1068.148505][T15229] usb 3-1: Using ep0 maxpacket: 8 [ 1068.161065][T15229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1068.174650][T15229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.193312][T15229] usb 3-1: Product: syz [ 1068.955273][T15229] usb 3-1: Manufacturer: syz [ 1068.959918][T15229] usb 3-1: SerialNumber: syz [ 1068.966943][T15229] usb 3-1: config 0 descriptor?? [ 1069.157362][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1069.180561][T15229] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1071.155795][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3488'. [ 1071.545894][T15229] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1071.563033][T15229] usb 3-1: USB disconnect, device number 7 [ 1072.174511][T16069] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3493'. [ 1072.577174][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1074.657141][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1076.475410][T16116] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1076.802126][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1079.352069][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1080.965662][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'. [ 1080.995705][T16175] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1082.112943][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 1082.325047][ T4256] Bluetooth: hci2: command 0x0406 tx timeout [ 1084.814624][ T5267] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1085.064825][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 1085.073048][ T5267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.118200][ T5267] usb 3-1: config 0 has no interfaces? [ 1085.157321][ T5267] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1085.176607][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.204421][ T5267] usb 3-1: Product: syz [ 1085.209681][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1085.219337][ T5267] usb 3-1: Manufacturer: syz [ 1085.223983][ T5267] usb 3-1: SerialNumber: syz [ 1085.261710][ T5267] usb 3-1: config 0 descriptor?? [ 1085.473875][T15229] usb 3-1: USB disconnect, device number 8 [ 1085.803623][T16222] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1086.730513][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1086.979301][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1089.255341][T16257] trusted_key: encrypted_key: insufficient parameters specified [ 1089.363329][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1090.004942][T16273] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1091.874995][ T5267] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1092.085874][ T5267] usb 6-1: Using ep0 maxpacket: 32 [ 1092.098028][ T5267] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1092.142559][ T5267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.196451][ T5267] usb 6-1: config 0 descriptor?? [ 1092.239957][ T5267] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1092.639166][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1093.385669][T16310] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1093.656965][ T5267] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1093.662880][ T5267] sq930x: probe of 6-1:0.0 failed with error -71 [ 1093.923325][ T5267] usb 6-1: USB disconnect, device number 12 [ 1095.024416][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1095.803232][T16346] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1099.031228][T11784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1099.084072][T11784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1099.099135][T11784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1099.107419][T11784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1099.115243][T11784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1099.123679][T11784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1099.731071][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1099.746544][T16367] chnl_net:caif_netlink_parms(): no params data found [ 1100.369456][ T4293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.413360][ T4293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1100.664022][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1100.956716][T16394] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1100.977675][ T4293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.998367][ T4293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1101.234872][ T4256] Bluetooth: hci4: command 0x0409 tx timeout [ 1101.463540][ T4293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.574744][ T4293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1101.655350][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.662481][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.694756][T16367] device bridge_slave_0 entered promiscuous mode [ 1101.723785][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1101.725566][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.770955][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.789846][T16367] device bridge_slave_1 entered promiscuous mode [ 1101.987604][ T4293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.015846][ T4293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1102.252772][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.358320][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.158512][T16367] team0: Port device team_slave_0 added [ 1103.250902][T16367] team0: Port device team_slave_1 added [ 1103.289336][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 1103.549034][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.577344][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.669187][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.691577][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.698678][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.724784][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.076149][T16445] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3605'. [ 1104.393533][T16367] device hsr_slave_0 entered promiscuous mode [ 1104.497636][T16367] device hsr_slave_1 entered promiscuous mode [ 1104.558748][T16367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1104.597037][T16367] Cannot create hsr debugfs directory [ 1105.196408][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 1105.394727][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 1105.476498][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 1106.203235][T16491] delete_channel: no stack [ 1106.793722][T16499] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1107.574976][T11784] Bluetooth: hci4: command 0x0419 tx timeout [ 1107.678133][ T26] audit: type=1326 audit(1737258740.879:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16516 comm="syz.2.3621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e6e585d29 code=0x0 [ 1107.794200][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 1107.866931][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1109.579994][T16367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1109.846673][T16367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1109.867105][T16367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1109.979766][ T4293] device hsr_slave_0 left promiscuous mode [ 1110.015757][ T4293] device hsr_slave_1 left promiscuous mode [ 1110.036637][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.049502][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.095357][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.119699][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.190341][ T4293] device bridge_slave_1 left promiscuous mode [ 1110.202050][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.240419][ T4293] device bridge_slave_0 left promiscuous mode [ 1110.267038][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.389896][ T4293] device veth0_macvtap left promiscuous mode [ 1110.641749][ T4293] device veth1_vlan left promiscuous mode [ 1110.679193][ T4293] device veth0_vlan left promiscuous mode [ 1110.978099][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1111.364628][ T4337] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1111.554760][ T4337] usb 2-1: Using ep0 maxpacket: 8 [ 1111.566616][ T4337] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1111.597155][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.621931][ T4337] usb 2-1: Product: syz [ 1111.646224][ T4337] usb 2-1: Manufacturer: syz [ 1111.661059][ T4337] usb 2-1: SerialNumber: syz [ 1111.689517][ T4337] usb 2-1: config 0 descriptor?? [ 1111.709550][ T4337] gspca_main: se401-2.14.0 probing 047d:5003 [ 1112.317578][ T4337] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 1112.529176][ T4295] usb 2-1: USB disconnect, device number 3 [ 1112.563348][ T4293] bond1 (unregistering): Released all slaves [ 1114.096132][ T4293] team0 (unregistering): Port device team_slave_1 removed [ 1114.187104][ T4293] team0 (unregistering): Port device team_slave_0 removed [ 1114.259234][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.312753][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.546409][ T4293] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1114.778199][ T4293] bond0 (unregistering): Released all slaves [ 1114.861832][T16367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1115.374506][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.469138][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1115.489458][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1115.558401][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.589908][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1115.625321][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1115.633777][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.640944][ T7396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.648745][ T4297] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1115.735764][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1115.757988][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1115.780278][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1115.801090][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.808270][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.833179][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1115.834719][ T4297] usb 3-1: Using ep0 maxpacket: 8 [ 1115.863483][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1115.878345][ T4297] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1115.905860][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1115.917923][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.949639][ T4297] usb 3-1: Product: syz [ 1115.952155][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1115.953820][ T4297] usb 3-1: Manufacturer: syz [ 1115.953844][ T4297] usb 3-1: SerialNumber: syz [ 1115.987385][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1116.012149][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1116.020729][ T4297] usb 3-1: config 0 descriptor?? [ 1116.040046][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.052343][ T4297] gspca_main: se401-2.14.0 probing 047d:5003 [ 1116.083245][T16367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.096474][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.096597][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.202741][T16367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.237579][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.251569][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1116.295817][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1116.321757][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1116.351878][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1116.453685][ T4297] gspca_se401: Wrong descriptor type [ 1116.565603][ T4337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1116.661638][ T4297] usb 3-1: USB disconnect, device number 9 [ 1116.761848][ T4337] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1116.788228][ T4337] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1116.797071][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1116.807583][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.810185][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1116.838765][ T4337] usb 2-1: config 0 descriptor?? [ 1116.863047][ T4337] usb 2-1: bad CDC descriptors [ 1116.867502][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.870670][ T4337] usb 2-1: bad CDC descriptors [ 1117.105673][T15521] usb 2-1: USB disconnect, device number 4 [ 1117.628855][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3656'. [ 1117.672250][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1117.705786][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1117.807234][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1117.843660][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.876752][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.885073][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.896622][T16367] device veth0_vlan entered promiscuous mode [ 1117.918483][T16367] device veth1_vlan entered promiscuous mode [ 1118.201609][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1118.230244][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1118.281908][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1118.354277][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1118.410173][T16367] device veth0_macvtap entered promiscuous mode [ 1118.449467][T16367] device veth1_macvtap entered promiscuous mode [ 1118.879006][T16694] delete_channel: no stack [ 1119.147294][T16690] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1119.156289][T16690] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1119.165201][T16690] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1119.174015][T16690] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1119.184677][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1119.207680][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1119.231428][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.246505][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.275398][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.361999][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.385137][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.412948][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.441693][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.464615][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.474489][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.507585][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.534664][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.554650][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.564516][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.594618][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.625831][T16367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.655454][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1119.682605][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1119.697519][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.824885][T16711] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3666'. [ 1119.852820][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.874608][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.894705][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.925099][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.957548][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.978255][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1119.990139][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.010836][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.028315][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.046856][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.066714][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.083646][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.098955][T16367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.118530][T16367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.137244][T16367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.164857][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1120.195588][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1120.229879][T16367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.245205][T16367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.274698][T16367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.283450][T16367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.640777][ T7383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.684835][ T7383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.767071][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1120.802949][ T7396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.843696][ T7396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.902596][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1121.228763][T16729] delete_channel: no stack [ 1121.486531][T16732] netlink: 'syz.5.3576': attribute type 19 has an invalid length. [ 1121.544728][T16732] netlink: 'syz.5.3576': attribute type 19 has an invalid length. [ 1121.911479][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1124.622663][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1125.606715][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1129.254763][T16830] ip6t_rpfilter: unknown options [ 1130.788884][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3714'. [ 1132.118192][T16863] Cannot find add_set index 0 as target [ 1132.565038][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 1133.114981][T16866] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1133.370815][T16866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.385846][T16866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.396470][T16866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1133.424671][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'. [ 1133.452107][T16866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1133.493631][T16866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.537490][T16866] usb 3-1: config 0 descriptor?? [ 1133.967237][T16866] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1133.991767][T16866] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1135.291528][T16911] Cannot find add_set index 0 as target [ 1135.941803][T16919] ip6t_rpfilter: unknown options [ 1136.383965][T16913] delete_channel: no stack [ 1136.604650][ T4337] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 1136.885874][T16938] Cannot find set identified by id 0 to match [ 1136.972060][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3743'. [ 1137.260273][T16951] Cannot find add_set index 0 as target [ 1137.758019][T16952] delete_channel: no stack [ 1137.783916][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 1137.883165][T16953] device gretap1 entered promiscuous mode [ 1138.026240][T16956] device bond_slave_0 entered promiscuous mode [ 1138.032933][T16956] device bond_slave_1 entered promiscuous mode [ 1138.041769][T16956] device macvtap1 entered promiscuous mode [ 1138.047644][T16956] device bond0 entered promiscuous mode [ 1138.054684][T16956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1138.074834][T16956] device bond0 left promiscuous mode [ 1138.080638][T16956] device bond_slave_0 left promiscuous mode [ 1138.086669][T16956] device bond_slave_1 left promiscuous mode [ 1138.147658][T16964] ip6t_rpfilter: unknown options [ 1138.802160][ T7] usb 3-1: USB disconnect, device number 10 [ 1139.707776][T16992] delete_channel: no stack [ 1140.289129][T17009] ip6t_rpfilter: unknown options [ 1141.414859][T15632] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1141.454824][ T7] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1141.762551][T15632] usb 5-1: Using ep0 maxpacket: 32 [ 1141.767780][T16866] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1141.777168][T15632] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1141.793338][T15632] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1141.804299][ T7] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1141.804324][ T7] usb 6-1: config 0 has no interface number 0 [ 1141.804355][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1141.804380][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1141.804413][ T7] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1141.804434][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.817697][ T7] usb 6-1: config 0 descriptor?? [ 1141.841355][T15632] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1141.940965][T17031] delete_channel: no stack [ 1141.953591][T15632] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1141.992489][T15632] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1141.999469][T16866] usb 2-1: Using ep0 maxpacket: 32 [ 1142.007683][T16866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.033318][T15632] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1142.048547][T16866] usb 2-1: config 0 has no interfaces? [ 1142.067177][T16866] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1142.078999][T15632] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1142.103249][T16866] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1142.113384][T15632] usb 5-1: Product: syz [ 1142.126143][T15632] usb 5-1: Manufacturer: syz [ 1142.138857][T16866] usb 2-1: Product: syz [ 1142.145742][T15632] usb 5-1: SerialNumber: syz [ 1142.160470][T16866] usb 2-1: Manufacturer: syz [ 1142.216521][T17015] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1142.226669][ T7] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1142.303916][T15632] usb 5-1: config 0 descriptor?? [ 1142.315608][T16866] usb 2-1: config 0 descriptor?? [ 1142.327072][T15632] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1142.371286][T15632] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1142.433941][ T4337] usb 6-1: USB disconnect, device number 13 [ 1142.542463][T17021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.573447][T17036] vivid-007: ================= START STATUS ================= [ 1142.581188][T17036] vivid-007: Generate PTS: true [ 1142.586071][T17036] vivid-007: Generate SCR: true [ 1142.590928][T17036] tpg source WxH: 640x360 (Y'CbCr) [ 1142.596034][T17036] tpg field: 1 [ 1142.599382][T17036] tpg crop: 640x360@0x0 [ 1142.603536][T17036] tpg compose: 640x360@0x0 [ 1142.607975][T17036] tpg colorspace: 8 [ 1142.611775][T17036] tpg transfer function: 0/0 [ 1142.616379][T17036] tpg Y'CbCr encoding: 0/0 [ 1142.620783][T17036] tpg quantization: 0/0 [ 1142.624966][T17036] tpg RGB range: 0/2 [ 1142.628844][T17036] vivid-007: ================== END STATUS ================== [ 1142.637017][T17021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.661553][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1142.790240][T15521] usb 2-1: USB disconnect, device number 5 [ 1143.077709][ T41] usb 5-1: USB disconnect, device number 29 [ 1143.090222][ T41] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 1144.409600][T17049] ip6t_rpfilter: unknown options [ 1144.903597][T17069] ptrace attach of "./syz-executor exec"[13955] was attempted by "./syz-executor exec"[17069] [ 1145.192982][T17070] delete_channel: no stack [ 1145.786123][T17077] vivid-007: ================= START STATUS ================= [ 1145.793804][T17077] vivid-007: Generate PTS: true [ 1145.798724][T17077] vivid-007: Generate SCR: true [ 1145.803565][T17077] tpg source WxH: 640x360 (Y'CbCr) [ 1145.808717][T17077] tpg field: 1 [ 1145.812066][T17077] tpg crop: 640x360@0x0 [ 1145.816285][T17077] tpg compose: 640x360@0x0 [ 1145.820689][T17077] tpg colorspace: 8 [ 1145.824925][T17077] tpg transfer function: 0/0 [ 1145.829499][T17077] tpg Y'CbCr encoding: 0/0 [ 1145.833890][T17077] tpg quantization: 0/0 [ 1145.838273][T17077] tpg RGB range: 0/2 [ 1145.842236][T17077] vivid-007: ================== END STATUS ================== [ 1145.870017][T17076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.871315][T17075] input: syz0 as /devices/virtual/input/input10 [ 1147.018082][T17091] ip6t_rpfilter: unknown options [ 1148.430270][T17103] program syz.5.3798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1148.758220][T17103] netlink: 'syz.5.3798': attribute type 1 has an invalid length. [ 1149.312747][T17136] ip6t_rpfilter: unknown options [ 1152.974183][T17188] ip6t_rpfilter: unknown options [ 1155.284263][T17214] program syz.2.3831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1156.374607][ T26] audit: type=1326 audit(1737258789.569:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1156.442905][ T26] audit: type=1326 audit(1737258789.579:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1156.479353][ T26] audit: type=1326 audit(1737258789.579:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1156.545603][T17232] ip6t_rpfilter: unknown options [ 1157.112329][ T26] audit: type=1326 audit(1737258789.579:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.187225][ T26] audit: type=1326 audit(1737258789.579:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.225499][ T26] audit: type=1326 audit(1737258789.579:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.344960][ T26] audit: type=1326 audit(1737258789.579:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.465397][ T26] audit: type=1326 audit(1737258789.579:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.535743][ T26] audit: type=1326 audit(1737258789.579:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1157.759562][ T26] audit: type=1326 audit(1737258789.579:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17224 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1158.648808][T17266] program syz.1.3847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.704667][ T4295] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1159.014757][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 1159.023186][ T4295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1159.033162][T17276] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3852'. [ 1159.050363][ T4295] usb 3-1: no configurations [ 1159.065692][ T4295] usb 3-1: can't read configurations, error -22 [ 1159.251289][T15632] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1159.481498][T15632] usb 2-1: Using ep0 maxpacket: 8 [ 1159.495381][T15632] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1159.585860][T15632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1159.642670][T15632] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1159.744503][T15632] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.826030][T15632] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1159.882998][T15632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.964994][T17290] delete_channel: no stack [ 1160.171153][T15632] usb 2-1: GET_CAPABILITIES returned 0 [ 1160.176971][T15632] usbtmc 2-1:16.0: can't read capabilities [ 1160.429328][T15521] usb 2-1: USB disconnect, device number 6 [ 1160.485295][ T4295] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1160.681728][ T4295] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1160.692517][ T4295] usb 3-1: config 0 has no interface number 0 [ 1160.709639][ T4295] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1160.737305][ T4295] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1160.764681][ T4295] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1160.789752][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.816697][ T4295] usb 3-1: config 0 descriptor?? [ 1160.833271][T17289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1160.860215][ T4295] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1161.060595][T15632] usb 3-1: USB disconnect, device number 13 [ 1163.550070][T17329] delete_channel: no stack [ 1165.623264][T17379] input: syz1 as /devices/virtual/input/input11 [ 1168.031087][T17432] delete_channel: no stack [ 1168.664797][ T7] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1168.902913][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.912543][ T7] usb 2-1: config 0 has no interface number 0 [ 1169.114792][T16866] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1169.359830][T16866] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 1169.400487][T16866] usb 3-1: config 2 has no interface number 0 [ 1169.454226][T16866] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1169.568890][ T7] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1169.576500][T16866] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1169.579946][ T7] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1169.600113][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1169.609323][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.623630][T16866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.625698][ T7] usb 2-1: config 0 descriptor?? [ 1169.644624][T16866] usb 3-1: Product: syz [ 1169.645236][T17426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1169.655004][T16866] usb 3-1: Manufacturer: syz [ 1169.665863][T16866] usb 3-1: SerialNumber: syz [ 1169.671687][ T7] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1169.703600][T16866] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 1169.724367][T16866] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1169.901744][ T4337] usb 2-1: USB disconnect, device number 7 [ 1169.948774][ T4298] usb 3-1: USB disconnect, device number 14 [ 1169.986373][ T4298] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1170.019331][ T4298] kobil_sct 3-1:2.45: device disconnected [ 1170.947074][T17478] fuse: Bad value for 'fd' [ 1170.964211][T17473] delete_channel: no stack [ 1171.321714][T17468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.590125][T17490] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1172.197504][T17513] delete_channel: no stack [ 1172.225044][ T41] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 1172.426338][T17522] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1172.440560][ T41] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1172.568930][ T41] usb 5-1: config 0 has no interface number 0 [ 1172.586726][ T41] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1172.603251][ T41] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1172.620776][ T41] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1172.630251][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.646646][ T41] usb 5-1: config 0 descriptor?? [ 1172.653671][T17507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1172.684268][ T41] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1172.876815][T17413] usb 5-1: USB disconnect, device number 30 [ 1173.416889][T17547] ptrace attach of "./syz-executor exec"[16367] was attempted by "./syz-executor exec"[17547] [ 1173.748836][T17538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.017356][T17561] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1174.314045][T17565] delete_channel: no stack [ 1175.051810][T17590] Cannot find add_set index 0 as target [ 1176.459416][T17602] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1176.468389][T17602] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1176.477310][T17602] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1176.486203][T17602] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1177.883831][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3962'. [ 1177.898393][T17596] delete_channel: no stack [ 1180.103263][T11784] Bluetooth: hci4: command 0x0409 tx timeout [ 1180.190563][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.197384][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.361748][T17615] ptrace attach of "./syz-executor exec"[13683] was attempted by "./syz-executor exec"[17615] [ 1180.918153][T17631] Cannot find add_set index 0 as target [ 1181.618066][T17636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1949602702 (31193643232 ns) > initial count (10949176224 ns). Using initial count to start timer. [ 1181.854770][ T4337] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1181.974334][T17651] device macvlan2 entered promiscuous mode [ 1181.980876][T17651] device bond_slave_0 entered promiscuous mode [ 1181.987647][T17651] device bond_slave_1 entered promiscuous mode [ 1181.994012][T17651] device bond0 entered promiscuous mode [ 1182.016114][T17651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1182.044450][T17651] team0: Port device macvlan2 added [ 1182.050005][ T4337] usb 5-1: Using ep0 maxpacket: 16 [ 1182.057187][ T4337] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 1182.096178][ T4337] usb 5-1: config 8 has no interface number 0 [ 1182.137193][ T4337] usb 5-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 1182.174804][ T4337] usb 5-1: config 8 interface 39 has no altsetting 0 [ 1182.201831][ T4337] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1182.222719][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.222747][ T4337] usb 5-1: Product: syz [ 1182.222761][ T4337] usb 5-1: Manufacturer: syz [ 1182.222776][ T4337] usb 5-1: SerialNumber: syz [ 1182.446311][ T4337] ipheth 5-1:8.39: Unable to find endpoints [ 1182.696718][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3989'. [ 1182.827648][T17674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1949602702 (31193643232 ns) > initial count (10949176224 ns). Using initial count to start timer. [ 1184.106159][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1184.605212][T15463] usb 5-1: USB disconnect, device number 31 [ 1186.827495][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4014'. [ 1187.023785][T17749] device macvlan2 entered promiscuous mode [ 1187.195309][ T4297] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 1187.247975][T17758] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1187.395713][ T4297] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1187.416827][ T4297] usb 2-1: config 0 has no interface number 0 [ 1187.422956][ T4297] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1187.454687][ T4297] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1187.473677][ T4297] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1187.483752][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.515357][T15463] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1187.785330][T15463] usb 3-1: Using ep0 maxpacket: 8 [ 1187.806759][T15463] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1187.890293][T15463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1188.008585][T15463] usb 3-1: Product: syz [ 1188.067536][T15463] usb 3-1: Manufacturer: syz [ 1188.128430][T15463] usb 3-1: SerialNumber: syz [ 1188.230921][ T4297] usb 2-1: config 0 descriptor?? [ 1188.232794][T15463] usb 3-1: config 0 descriptor?? [ 1188.240548][T17744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1188.270305][T15463] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1188.274951][ T4297] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1188.477259][ T4297] usb 2-1: USB disconnect, device number 8 [ 1188.610863][T17787] device macvlan3 entered promiscuous mode [ 1189.277793][T15463] gspca_sq905: bulk read fail (-22) len 0/4 [ 1189.283951][T15463] sq905: probe of 3-1:0.0 failed with error -5 [ 1190.134867][T11014] usb 3-1: USB disconnect, device number 15 [ 1190.464846][T17828] device macvlan2 entered promiscuous mode [ 1190.752056][T17841] Cannot find add_set index 0 as target [ 1191.541032][T17861] vivid-007: ================= START STATUS ================= [ 1191.550133][T17861] vivid-007: Generate PTS: true [ 1191.556591][T17861] vivid-007: Generate SCR: true [ 1191.564490][T17861] tpg source WxH: 640x360 (Y'CbCr) [ 1191.570397][T17861] tpg field: 1 [ 1191.575288][T17861] tpg crop: 640x360@0x0 [ 1191.580415][T17861] tpg compose: 640x360@0x0 [ 1191.655596][T17861] tpg colorspace: 8 [ 1191.659498][T17861] tpg transfer function: 0/0 [ 1191.679999][T17861] tpg Y'CbCr encoding: 0/0 [ 1191.698888][T17861] tpg quantization: 0/0 [ 1191.704996][T17861] tpg RGB range: 0/2 [ 1191.719716][T17861] vivid-007: ================== END STATUS ================== [ 1192.128400][T17857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.249933][T17874] device macvlan2 entered promiscuous mode [ 1192.493593][T17883] Cannot find add_set index 0 as target [ 1192.814813][T11014] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1193.024646][T11014] usb 2-1: Using ep0 maxpacket: 16 [ 1193.033026][T11014] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.053568][T11014] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1193.068335][T11014] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1193.082310][T11014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.111867][T11014] usb 2-1: Product: syz [ 1193.136491][T11014] usb 2-1: Manufacturer: syz [ 1193.141134][T11014] usb 2-1: SerialNumber: syz [ 1193.407421][T11014] usb 2-1: 0:2 : does not exist [ 1193.424503][T11014] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1193.522572][T11014] usb 2-1: USB disconnect, device number 9 [ 1193.644871][T17906] ip6t_rpfilter: unknown options [ 1194.700349][T17923] Cannot find add_set index 0 as target [ 1195.444882][ T4297] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1195.670071][ T4297] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.693971][ T4297] usb 3-1: config 0 has no interface number 0 [ 1195.717086][ T4297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1195.752349][ T4297] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1195.808560][T17947] ip6t_rpfilter: unknown options [ 1196.553785][ T4297] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1196.589873][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.628000][ T4297] usb 3-1: config 0 descriptor?? [ 1196.631966][T17954] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4089'. [ 1196.633568][T17927] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1196.671201][ T4297] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1196.837800][T17957] Cannot find add_set index 0 as target [ 1197.257002][ T41] usb 3-1: USB disconnect, device number 16 [ 1197.574635][ T4297] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1197.764884][ T4297] usb 1-1: Using ep0 maxpacket: 8 [ 1197.778889][ T4297] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1197.786949][ T4297] usb 1-1: no configurations [ 1197.793752][ T4297] usb 1-1: can't read configurations, error -22 [ 1198.277002][T17998] ip6t_rpfilter: unknown options [ 1198.301739][T17995] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1199.633517][T18015] vivid-007: ================= START STATUS ================= [ 1199.641450][T18015] vivid-007: Generate PTS: true [ 1199.646738][T18015] vivid-007: Generate SCR: true [ 1199.652593][T18015] tpg source WxH: 640x360 (Y'CbCr) [ 1199.658237][T18015] tpg field: 1 [ 1199.661687][T18015] tpg crop: 640x360@0x0 [ 1199.665993][T18015] tpg compose: 640x360@0x0 [ 1199.670512][T18015] tpg colorspace: 8 [ 1199.674509][T18015] tpg transfer function: 0/0 [ 1199.679311][T18015] tpg Y'CbCr encoding: 0/0 [ 1199.683861][T18015] tpg quantization: 0/0 [ 1199.688373][T18015] tpg RGB range: 0/2 [ 1199.692441][T18015] vivid-007: ================== END STATUS ================== [ 1200.189401][T18007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.722872][T18054] ip6t_rpfilter: unknown options [ 1202.367252][T18070] device macvlan3 entered promiscuous mode [ 1202.887100][T18092] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4130'. [ 1203.179286][T18098] ptrace attach of "./syz-executor exec"[14798] was attempted by "./syz-executor exec"[18098] [ 1204.060513][ T126] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1204.946110][ T126] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1204.954409][ T126] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1204.991595][ T126] usb 5-1: config 0 has no interface number 0 [ 1205.008063][ T126] usb 5-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1205.055360][ T126] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1205.084507][ T126] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1205.093173][ T126] usb 5-1: Product: syz [ 1205.097652][ T126] usb 5-1: Manufacturer: syz [ 1205.139396][ T126] usb 5-1: config 0 descriptor?? [ 1205.166893][T18115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1205.208004][T18139] ptrace attach of "./syz-executor exec"[13683] was attempted by "./syz-executor exec"[18139] [ 1208.495305][T18017] usb 5-1: USB disconnect, device number 32 [ 1208.704706][T18175] Cannot find add_set index 0 as target [ 1209.285347][T18186] ptrace attach of "./syz-executor exec"[13955] was attempted by "./syz-executor exec"[18186] [ 1209.464870][T11014] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1209.666711][T11014] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1209.695049][T11014] usb 2-1: config 0 has no interface number 0 [ 1209.722373][T11014] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1209.743018][T11014] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1209.756902][T11014] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1209.766556][T11014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.782757][T11014] usb 2-1: config 0 descriptor?? [ 1209.788960][T18181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1209.842963][T11014] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1210.046183][T11014] usb 2-1: USB disconnect, device number 10 [ 1211.542722][T18215] ip6t_rpfilter: unknown options [ 1213.037817][T18232] ptrace attach of "./syz-executor exec"[13683] was attempted by "./syz-executor exec"[18232] [ 1214.874673][T18017] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1215.224676][T18017] usb 5-1: Using ep0 maxpacket: 16 [ 1215.249783][T18017] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1215.307366][T18017] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 1215.367024][T18017] usb 5-1: config 4 has no interface number 0 [ 1215.385420][T18017] usb 5-1: config 4 interface 111 has no altsetting 0 [ 1215.415690][T18017] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 1215.447690][T18017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.552294][T18017] usb 5-1: Product: syz [ 1215.589505][T18017] usb 5-1: Manufacturer: syz [ 1215.594157][T18017] usb 5-1: SerialNumber: syz [ 1215.999730][T18017] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1216.064631][T18017] pvrusb2: ********** [ 1216.324824][T18017] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1216.346628][T18017] pvrusb2: Important functionality might not be entirely working. [ 1216.354784][T18017] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1216.366516][T18017] pvrusb2: ********** [ 1216.371860][T18017] usb 5-1: selecting invalid altsetting 0 [ 1216.380798][ T2304] pvrusb2: Invalid write control endpoint [ 1216.393597][T18017] usb 5-1: USB disconnect, device number 33 [ 1217.389192][T18291] ip6t_rpfilter: unknown options [ 1218.156223][ T2304] pvrusb2: Invalid write control endpoint [ 1218.162697][T18293] ptrace attach of "./syz-executor exec"[14181] was attempted by "./syz-executor exec"[18293] [ 1218.221423][ T2304] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1218.272558][ T2304] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1218.316470][ T2304] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1218.379031][ T2304] pvrusb2: Device being rendered inoperable [ 1218.419793][ T2304] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1218.427916][ T2304] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1218.442563][ T2304] pvrusb2: Attached sub-driver cx25840 [ 1218.448545][ T2304] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1218.459332][ T2304] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1220.352137][T18331] ip6t_rpfilter: unknown options [ 1220.753803][T18333] delete_channel: no stack [ 1221.090573][ T4298] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1221.354683][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 1221.367978][ T4298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.413315][ T4298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1221.465627][ T4298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.547680][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.626400][ T4298] usb 5-1: Product: syz [ 1221.670177][ T4298] usb 5-1: Manufacturer: syz [ 1221.718621][ T4298] usb 5-1: SerialNumber: syz [ 1221.816156][ T4249] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1222.904689][ T4249] usb 2-1: Using ep0 maxpacket: 8 [ 1222.912098][ T4249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1222.979117][ T4249] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1222.999442][ T4249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.070137][ T4249] usb 2-1: config 0 descriptor?? [ 1223.487108][ T4249] maltron 0003:058F:9410.000C: item fetching failed at offset 5/7 [ 1223.508954][ T4249] maltron: probe of 0003:058F:9410.000C failed with error -22 [ 1223.521055][ T4298] usb 5-1: 0:2 : does not exist [ 1223.539138][ T4298] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1223.622768][ T4298] usb 5-1: USB disconnect, device number 34 [ 1223.687177][ T4249] usb 2-1: USB disconnect, device number 11 [ 1223.857188][T17657] udevd[17657]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1224.586846][T18374] delete_channel: no stack [ 1224.901270][T18378] ip6t_rpfilter: unknown options [ 1225.313561][ T4298] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1225.555514][ T4298] usb 2-1: Using ep0 maxpacket: 32 [ 1225.564136][ T4298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1225.611643][T18388] tipc: Started in network mode [ 1225.616718][T18388] tipc: Node identity ac1414aa, cluster identity 4711 [ 1225.624151][T18388] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1225.626448][ T4298] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 1225.632866][T18388] tipc: Enabled bearer , priority 10 [ 1225.714783][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 1225.755618][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1225.894800][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.034688][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.175457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.314711][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.414093][ T4298] usb 2-1: config 127 has no interface number 0 [ 1226.420472][ T4298] usb 2-1: config 127 interface 25 has no altsetting 0 [ 1226.447497][ T4298] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1226.454848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.465265][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.473320][ T4298] usb 2-1: Product: syz [ 1226.497995][ T4298] usb 2-1: Manufacturer: syz [ 1226.502633][ T4298] usb 2-1: SerialNumber: syz [ 1226.594742][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1226.822441][ T4298] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1227.088152][T18402] Cannot find add_set index 0 as target [ 1227.725901][ T7] tipc: Node number set to 2886997162 [ 1227.731856][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1228.004684][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1228.019885][T18412] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1228.029414][T18412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1228.134626][T11014] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1228.331506][T11014] usb 3-1: Using ep0 maxpacket: 16 [ 1228.339648][T11014] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.370388][T11014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.403275][T18419] delete_channel: no stack [ 1228.423994][T11014] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1228.462714][T11014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.499552][T11014] usb 3-1: Product: syz [ 1228.521983][T11014] usb 3-1: Manufacturer: syz [ 1228.543746][T11014] usb 3-1: SerialNumber: syz [ 1228.765621][ T4298] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1228.847394][ T4298] usb 2-1: USB disconnect, device number 12 [ 1228.885101][T11014] usb 3-1: 0:2 : does not exist [ 1228.926684][T11014] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1228.995424][T18432] Cannot find add_set index 0 as target [ 1229.209272][T11014] usb 3-1: USB disconnect, device number 17 [ 1229.585075][T17657] udevd[17657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.445303][ T26] audit: type=1326 audit(1737258863.619:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18461 comm="syz.2.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e585d29 code=0x7ffc0000 [ 1230.468336][T18460] delete_channel: no stack [ 1230.564870][ T26] audit: type=1326 audit(1737258863.629:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18461 comm="syz.2.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f9e6e585d29 code=0x7ffc0000 [ 1230.587301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.644748][ C0] net_ratelimit: 2 callbacks suppressed [ 1230.644766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1230.720459][ T26] audit: type=1326 audit(1737258863.629:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18461 comm="syz.2.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e585d29 code=0x7ffc0000 [ 1230.825137][ T26] audit: type=1326 audit(1737258863.629:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18461 comm="syz.2.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e585d29 code=0x7ffc0000 [ 1230.941018][T18471] Cannot find add_set index 0 as target [ 1231.134673][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1231.336159][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1231.345581][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.380880][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.403491][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1231.422380][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.450631][ T7] usb 3-1: config 0 descriptor?? [ 1231.684696][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1232.547339][ T7] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000D/input/input12 [ 1232.630770][ T7] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1232.705609][ T4337] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1232.724719][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1232.805022][T18494] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1232.894811][ T4337] usb 5-1: Using ep0 maxpacket: 16 [ 1232.906560][ T4337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.939080][ T4337] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1232.961784][ T4337] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.984427][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.007608][ T4337] usb 5-1: Product: syz [ 1233.016282][ T4337] usb 5-1: Manufacturer: syz [ 1233.026486][ T4337] usb 5-1: SerialNumber: syz [ 1233.186338][T18500] delete_channel: no stack [ 1233.255508][ T4337] usb 5-1: 0:2 : does not exist [ 1233.285708][ T4337] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1233.304292][ T26] audit: type=1326 audit(1737258866.499:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.371083][ T4337] usb 5-1: USB disconnect, device number 35 [ 1233.403741][ T26] audit: type=1326 audit(1737258866.529:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.602776][ T26] audit: type=1326 audit(1737258866.529:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.669712][ T26] audit: type=1326 audit(1737258866.529:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.699193][ T26] audit: type=1326 audit(1737258866.529:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.732219][ T26] audit: type=1326 audit(1737258866.529:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18501 comm="syz.0.4270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bb5d85d29 code=0x7ffc0000 [ 1233.762909][T18507] SET target dimension over the limit! [ 1233.769913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1233.803755][ T7] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 1234.289583][T18511] device macvlan2 entered promiscuous mode [ 1234.715820][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1234.804691][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1235.628253][T18544] Cannot find add_set index 0 as target [ 1235.855204][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1236.089211][ T4249] usb 3-1: USB disconnect, device number 18 [ 1236.444700][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1236.713302][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 1236.960780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1237.056166][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.135179][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.160955][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1237.191871][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.278859][ T7] usb 1-1: Product: syz [ 1237.978237][ T7] usb 1-1: Manufacturer: syz [ 1237.982888][ T7] usb 1-1: SerialNumber: syz [ 1238.004680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1238.200057][ T7] usb 1-1: 0:2 : does not exist [ 1238.220008][ T7] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1238.269079][ T7] usb 1-1: USB disconnect, device number 8 [ 1238.407259][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1238.526456][T17657] udevd[17657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.945093][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1239.000597][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1239.044680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1240.059863][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1240.059878][ T26] audit: type=1326 audit(1737258873.259:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.088578][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1240.162535][ T26] audit: type=1326 audit(1737258873.259:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.245063][ T26] audit: type=1326 audit(1737258873.259:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.283863][ T26] audit: type=1326 audit(1737258873.259:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.314941][T16866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1240.385818][ T26] audit: type=1326 audit(1737258873.259:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.445717][ T26] audit: type=1326 audit(1737258873.259:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.514737][ T26] audit: type=1326 audit(1737258873.259:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.514874][T16866] usb 1-1: Using ep0 maxpacket: 16 [ 1240.537118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.578013][ T26] audit: type=1326 audit(1737258873.259:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.631317][T16866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1240.662985][T16866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1240.681795][ T26] audit: type=1326 audit(1737258873.269:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.706817][T16866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1240.744674][ T26] audit: type=1326 audit(1737258873.309:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18614 comm="syz.1.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c2585d29 code=0x7ffc0000 [ 1240.744801][T16866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.855562][T16866] usb 1-1: config 0 descriptor?? [ 1241.124694][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1241.462801][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1241.604929][T16866] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1241.994864][ T7] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 1242.164785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1242.307064][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.338682][ T7] usb 3-1: config 0 has no interface number 0 [ 1242.394056][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1242.497023][ T7] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1242.615079][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1242.644715][T16866] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device [ 1242.652933][T16866] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse [ 1242.669420][T16866] kovaplus: probe of 0003:1E7D:2D50.000E failed with error -71 [ 1242.679750][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.683350][T16866] usb 1-1: USB disconnect, device number 9 [ 1242.749135][ T7] usb 3-1: config 0 descriptor?? [ 1242.761781][T18656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1242.811820][ T7] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1243.018097][ T7] usb 3-1: USB disconnect, device number 19 [ 1243.204692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1243.342376][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1244.095302][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.101714][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.244702][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1244.266735][T18705] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1245.349517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1245.580113][T18737] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4362'. [ 1245.592356][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1245.592398][ T26] audit: type=1800 audit(1737258878.799:133): pid=18739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4363" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1245.785695][T18741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1245.793665][T18741] IPv6: NLM_F_CREATE should be set when creating new route [ 1246.317485][T18756] device macvlan3 entered promiscuous mode [ 1246.404714][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1247.268907][T18770] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1247.444680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1247.874241][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1248.484687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1249.524709][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1249.974859][ T4249] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1250.165157][ T4249] usb 2-1: Using ep0 maxpacket: 8 [ 1250.173608][ T4249] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1250.212291][ T4249] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1250.285726][ T4249] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1250.293900][ T4249] usb 2-1: Product: syz [ 1250.308794][ T4249] usb 2-1: Manufacturer: syz [ 1250.313425][ T4249] usb 2-1: SerialNumber: syz [ 1250.393878][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1250.564699][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1250.564714][T17413] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1250.568370][ T4249] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1250.604839][ T4249] usb 2-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1250.621671][ T4249] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1250.638557][ T4249] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1250.767657][T17413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.782637][T17413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.791792][ T4249] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1250.809438][T17413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1250.814103][ T4249] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1250.837545][T17413] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1250.854866][ T4249] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1250.861654][T17413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.889083][T17413] usb 1-1: config 0 descriptor?? [ 1250.893395][ T4249] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1250.946827][ T4249] usb 2-1: USB disconnect, device number 13 [ 1250.973567][ T4249] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1251.011471][ T4249] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1251.035604][ T4249] visor 2-1:1.0: device disconnected [ 1251.311067][T17413] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1251.331243][T17413] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1251.361107][T17413] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1251.604708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1252.194755][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'. [ 1252.644720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1252.645157][ T4298] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1252.950289][ T4298] usb 5-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 1252.987153][ T4298] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1253.059130][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.209479][ T4298] usb 5-1: Product: syz [ 1253.246681][ T4298] usb 5-1: Manufacturer: syz [ 1253.283658][ T4298] usb 5-1: SerialNumber: syz [ 1253.544314][ T4249] usb 1-1: USB disconnect, device number 10 [ 1253.684739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1253.742835][ T4298] usb 5-1: USB disconnect, device number 36 [ 1253.816728][T18876] can: request_module (can-proto-3) failed. [ 1254.724692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1255.250381][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'. [ 1255.764710][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1256.504804][T15632] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1256.696425][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.719830][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.754593][T15632] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1256.784648][T15632] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1256.804084][T15632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.804713][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1256.832493][T15632] usb 3-1: config 0 descriptor?? [ 1257.844682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1257.936754][T15632] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1257.948694][T15632] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1257.962741][T15632] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1257.966122][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1257.977100][T15632] usb 3-1: USB disconnect, device number 20 [ 1258.045281][T18959] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1258.669161][T18973] netlink: 'syz.5.4445': attribute type 3 has an invalid length. [ 1258.677249][T18973] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4445'. [ 1258.884680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1259.045546][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1259.184839][T15632] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1259.376802][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1259.402590][T15632] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1259.427050][T15632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1259.449222][T15632] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1259.481010][T15632] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1259.527668][T15632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.559978][T15632] usb 3-1: Product: syz [ 1259.576461][T15632] usb 3-1: Manufacturer: syz [ 1259.596235][T15632] usb 3-1: SerialNumber: syz [ 1259.655350][T15632] usb 3-1: config 0 descriptor?? [ 1259.677548][T15632] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1259.711322][T15632] kvaser_usb 3-1:0.0: Failed to initialize card, error -90 [ 1259.741096][T15632] kvaser_usb: probe of 3-1:0.0 failed with error -90 [ 1259.892735][ T4249] usb 3-1: USB disconnect, device number 21 [ 1259.924679][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1260.964681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1261.074696][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1261.314735][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 1261.321733][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.346912][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.357453][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 1261.367408][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.379698][ T7] usb 6-1: config 0 descriptor?? [ 1261.396202][T19016] netlink: set zone limit has 8 unknown bytes [ 1261.774912][ T4337] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1261.797155][ T7] logitech 0003:046D:C704.0011: unknown main item tag 0x0 [ 1261.808610][ T7] logitech 0003:046D:C704.0011: unknown main item tag 0x0 [ 1261.824416][ T7] logitech 0003:046D:C704.0011: unknown main item tag 0x0 [ 1261.841344][ T7] logitech 0003:046D:C704.0011: unknown main item tag 0x0 [ 1261.860466][ T7] logitech 0003:046D:C704.0011: unknown main item tag 0x0 [ 1261.883152][ T7] logitech 0003:046D:C704.0011: hidraw0: USB HID v0.00 Device [HID 046d:c704] on usb-dummy_hcd.5-1/input0 [ 1261.964708][ T4337] usb 3-1: Using ep0 maxpacket: 8 [ 1261.980190][ T4337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1261.994374][ T4337] usb 3-1: no configurations [ 1262.004867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1262.023427][ T4337] usb 3-1: can't read configurations, error -22 [ 1262.038305][ T7] usb 6-1: USB disconnect, device number 14 [ 1263.213952][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1263.378197][T19051] binder: 19050:19051 ioctl 4018620d 0 returned -22 [ 1264.244674][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1264.554685][T11014] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1264.774642][T11014] usb 6-1: Using ep0 maxpacket: 8 [ 1264.789305][T11014] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1264.803777][T11014] usb 6-1: no configurations [ 1264.814736][T11014] usb 6-1: can't read configurations, error -22 [ 1265.284728][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1265.628400][T19104] netlink: 'syz.5.4495': attribute type 10 has an invalid length. [ 1265.674668][T19104] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4495'. [ 1265.734793][ T7] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1265.934793][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 1265.946321][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1266.001421][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1266.021498][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.033526][ T7] usb 5-1: Product: syz [ 1266.049478][ T7] usb 5-1: Manufacturer: syz [ 1266.054295][ T7] usb 5-1: SerialNumber: syz [ 1266.105137][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 1266.324697][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1266.378346][ T3607] bcm5974 5-1:1.0: could not read from device [ 1266.397509][ T7] usb 5-1: USB disconnect, device number 37 [ 1266.404015][ T3607] bcm5974 5-1:1.0: could not read from device [ 1266.474778][ T4249] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1266.664699][ T4249] usb 1-1: Using ep0 maxpacket: 8 [ 1266.680870][ T4249] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1266.709163][ T4249] usb 1-1: no configurations [ 1266.724077][ T4249] usb 1-1: can't read configurations, error -22 [ 1267.364785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1267.734486][T19143] tmpfs: Unknown parameter 'fd' [ 1267.875015][T11784] Bluetooth: hci4: unexpected subevent 0x22 length: 11 < 19 [ 1268.278437][T19167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4520'. [ 1268.288108][T19169] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4521'. [ 1268.404816][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1268.688777][ T4249] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1268.994942][ T4249] usb 1-1: Using ep0 maxpacket: 16 [ 1269.031857][ T4249] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.201772][ T4249] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1269.280591][ T4249] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.305418][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.313641][ T4249] usb 1-1: Product: syz [ 1269.320475][ T4249] usb 1-1: Manufacturer: syz [ 1269.325579][ T4249] usb 1-1: SerialNumber: syz [ 1269.451551][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1269.525678][T13951] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1269.553826][ T4249] usb 1-1: 0:2 : does not exist [ 1269.568397][ T4249] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1269.618819][ T4249] usb 1-1: USB disconnect, device number 13 [ 1269.646535][T17657] udevd[17657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.744646][T13951] usb 6-1: Using ep0 maxpacket: 16 [ 1269.752282][T13951] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1269.786249][T13951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.841271][T13951] usb 6-1: config 0 descriptor?? [ 1269.851996][T13951] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1270.254317][T19201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1270.294817][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1270.484684][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1270.564767][ T4330] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1270.754651][ T4330] usb 3-1: Using ep0 maxpacket: 8 [ 1270.761573][ T4330] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1270.784604][ T4330] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1270.804725][ T4330] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.824669][ T4330] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.853930][ T4330] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1270.884707][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.912407][T11014] usb 6-1: USB disconnect, device number 17 [ 1271.116983][ T4330] usb 3-1: GET_CAPABILITIES returned 0 [ 1271.122758][ T4330] usbtmc 3-1:16.0: can't read capabilities [ 1271.314826][T19226] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1271.326098][T11014] usb 3-1: USB disconnect, device number 24 [ 1271.524740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1271.595939][T19230] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1271.711092][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1271.735988][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1272.564747][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1273.471798][T19275] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1273.604732][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1273.633049][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1273.644946][ T7] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1273.673160][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1273.864830][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 1273.872340][ T7] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1273.890394][ T7] usb 5-1: config 0 has no interface number 0 [ 1273.901366][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4565'. [ 1273.910627][ T7] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1273.928722][ T7] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1273.957322][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.978806][ T7] usb 5-1: Product: syz [ 1273.991122][ T7] usb 5-1: Manufacturer: syz [ 1274.019165][ T7] usb 5-1: SerialNumber: syz [ 1274.043559][ T7] usb 5-1: config 0 descriptor?? [ 1274.061753][T19276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1274.077668][ T7] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1274.110295][ T7] em28xx 5-1:0.132: Video interface 132 found: bulk [ 1274.434924][ T4330] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1274.511757][ T7] em28xx 5-1:0.132: chip ID is em28174 [ 1274.644978][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1275.216406][ T4330] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 1275.265100][ T4330] usb 2-1: config 0 has no interface number 0 [ 1275.287597][ T4330] usb 2-1: New USB device found, idVendor=e748, idProduct=7698, bcdDevice=38.cc [ 1275.348672][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.365268][ T4330] usb 2-1: Product: syz [ 1275.374667][ T4330] usb 2-1: Manufacturer: syz [ 1275.379298][ T4330] usb 2-1: SerialNumber: syz [ 1275.402173][ T7] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1275.405051][ T4330] usb 2-1: config 0 descriptor?? [ 1275.427558][ T7] em28xx 5-1:0.132: board has no eeprom [ 1275.474784][ T4330] usb 2-1: bad CDC descriptors [ 1275.488112][ T4330] usb 2-1: bad CDC descriptors [ 1275.524880][ T7] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1275.546336][ T7] em28xx 5-1:0.132: analog set to bulk mode. [ 1275.586180][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1275.589584][ T7] usb 5-1: USB disconnect, device number 38 [ 1275.599908][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1275.621989][ T7] em28xx 5-1:0.132: Disconnecting em28xx [ 1275.636658][ T4249] em28xx 5-1:0.132: Registering V4L2 extension [ 1275.684788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1275.720212][T19313] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1275.822957][T19321] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4576'. [ 1275.862934][T19290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1275.908731][ T41] usb 2-1: USB disconnect, device number 14 [ 1276.121311][ T4249] usb 5-1: Decoder not found [ 1276.197033][ T4249] em28xx 5-1:0.132: failed to create media graph [ 1276.251876][ T4249] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1276.385205][ T4249] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1276.395994][ T7] em28xx 5-1:0.132: Closing input extension [ 1276.455406][ T7] ================================================================== [ 1276.463511][ T7] BUG: KASAN: use-after-free in media_device_unregister+0x132/0x3f0 [ 1276.471514][ T7] Read of size 8 at addr ffff8880589fc210 by task kworker/0:0/7 [ 1276.479133][ T7] [ 1276.481447][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.1.125-syzkaller #0 [ 1276.489320][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1276.499366][ T7] Workqueue: usb_hub_wq hub_event [ 1276.504392][ T7] Call Trace: [ 1276.507671][ T7] [ 1276.510587][ T7] dump_stack_lvl+0x1e3/0x2cb [ 1276.515273][ T7] ? nf_tcp_handle_invalid+0x642/0x642 [ 1276.520769][ T7] ? panic+0x764/0x764 [ 1276.524854][ T7] ? _printk+0xd1/0x111 [ 1276.529026][ T7] ? __virt_addr_valid+0x17f/0x530 [ 1276.534160][ T7] ? __virt_addr_valid+0x17f/0x530 [ 1276.539300][ T7] print_report+0x15f/0x4f0 [ 1276.543816][ T7] ? __virt_addr_valid+0x17f/0x530 [ 1276.548944][ T7] ? __virt_addr_valid+0x17f/0x530 [ 1276.554046][ T7] ? __virt_addr_valid+0x45b/0x530 [ 1276.559158][ T7] ? __phys_addr+0xb6/0x170 [ 1276.563668][ T7] ? media_device_unregister+0x132/0x3f0 [ 1276.569304][ T7] kasan_report+0x136/0x160 [ 1276.573821][ T7] ? media_device_unregister+0x132/0x3f0 [ 1276.579479][ T7] media_device_unregister+0x132/0x3f0 [ 1276.584933][ T7] em28xx_release_resources+0xa6/0x230 [ 1276.590385][ T7] em28xx_usb_disconnect+0x1c4/0x520 [ 1276.595658][ T7] usb_unbind_interface+0x1cd/0x840 [ 1276.600849][ T7] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 1276.606571][ T7] ? usb_driver_release_interface+0x1c0/0x1c0 [ 1276.612652][ T7] device_release_driver_internal+0x59e/0x880 [ 1276.618725][ T7] bus_remove_device+0x2e5/0x400 [ 1276.623668][ T7] device_del+0x6e2/0xbd0 [ 1276.628007][ T7] ? kill_device+0x160/0x160 [ 1276.632586][ T7] ? kobject_put+0x429/0x460 [ 1276.637165][ T7] usb_disable_device+0x3b8/0x840 [ 1276.642201][ T7] usb_disconnect+0x33c/0x8c0 [ 1276.646866][ T7] hub_event+0x1f78/0x5730 [ 1276.651278][ T7] ? led_work+0x700/0x700 [ 1276.655595][ T7] ? read_lock_is_recursive+0x10/0x10 [ 1276.660951][ T7] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1276.666942][ T7] ? print_irqtrace_events+0x210/0x210 [ 1276.672409][ T7] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1276.678294][ T7] ? do_raw_spin_unlock+0x137/0x8a0 [ 1276.683482][ T7] ? process_one_work+0x7a9/0x11d0 [ 1276.688579][ T7] process_one_work+0x8a9/0x11d0 [ 1276.693520][ T7] ? worker_detach_from_pool+0x260/0x260 [ 1276.699150][ T7] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1276.704691][ T7] ? kthread_data+0x4e/0xc0 [ 1276.709190][ T7] ? wq_worker_running+0x97/0x190 [ 1276.714202][ T7] worker_thread+0xd04/0x1200 [ 1276.718907][ T7] kthread+0x28d/0x320 [ 1276.722966][ T7] ? worker_clr_flags+0x190/0x190 [ 1276.727980][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1276.732559][ T7] ret_from_fork+0x1f/0x30 [ 1276.736973][ T7] [ 1276.739976][ T7] [ 1276.742308][ T7] Allocated by task 4249: [ 1276.746618][ T7] kasan_set_track+0x4b/0x70 [ 1276.751195][ T7] __kasan_kmalloc+0x97/0xb0 [ 1276.755787][ T7] em28xx_v4l2_init+0x103/0x2db0 [ 1276.760720][ T7] em28xx_init_extension+0x11b/0x1c0 [ 1276.766011][ T7] process_one_work+0x8a9/0x11d0 [ 1276.770956][ T7] worker_thread+0xcb2/0x1200 [ 1276.775624][ T7] kthread+0x28d/0x320 [ 1276.779686][ T7] ret_from_fork+0x1f/0x30 [ 1276.784099][ T7] [ 1276.786409][ T7] Freed by task 4249: [ 1276.790368][ T7] kasan_set_track+0x4b/0x70 [ 1276.794969][ T7] kasan_save_free_info+0x27/0x40 [ 1276.799985][ T7] ____kasan_slab_free+0xd6/0x120 [ 1276.804998][ T7] __kmem_cache_free+0x25c/0x3c0 [ 1276.809927][ T7] em28xx_v4l2_init+0x1604/0x2db0 [ 1276.814948][ T7] em28xx_init_extension+0x11b/0x1c0 [ 1276.820220][ T7] process_one_work+0x8a9/0x11d0 [ 1276.825149][ T7] worker_thread+0xcb2/0x1200 [ 1276.829813][ T7] kthread+0x28d/0x320 [ 1276.833867][ T7] ret_from_fork+0x1f/0x30 [ 1276.838277][ T7] [ 1276.840587][ T7] The buggy address belongs to the object at ffff8880589fc000 [ 1276.840587][ T7] which belongs to the cache kmalloc-8k of size 8192 [ 1276.854629][ T7] The buggy address is located 528 bytes inside of [ 1276.854629][ T7] 8192-byte region [ffff8880589fc000, ffff8880589fe000) [ 1276.867976][ T7] [ 1276.870290][ T7] The buggy address belongs to the physical page: [ 1276.876694][ T7] page:ffffea0001627e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x589f8 [ 1276.886837][ T7] head:ffffea0001627e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1276.895144][ T7] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1276.903123][ T7] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c42280 [ 1276.911693][ T7] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1276.920264][ T7] page dumped because: kasan: bad access detected [ 1276.926669][ T7] page_owner tracks the page as allocated [ 1276.932368][ T7] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 19303, tgid 19300 (syz.0.4570), ts 1274614985504, free_ts 1274545020997 [ 1276.954685][ T7] post_alloc_hook+0x18d/0x1b0 [ 1276.959444][ T7] get_page_from_freelist+0x3731/0x38d0 [ 1276.964976][ T7] __alloc_pages+0x28d/0x770 [ 1276.969560][ T7] alloc_slab_page+0x6a/0x150 [ 1276.974229][ T7] new_slab+0x84/0x2d0 [ 1276.978309][ T7] ___slab_alloc+0xc20/0x1270 [ 1276.982977][ T7] __kmem_cache_alloc_node+0x19f/0x260 [ 1276.988421][ T7] __kmalloc+0xa1/0x230 [ 1276.992564][ T7] tomoyo_encode+0x26b/0x530 [ 1276.997152][ T7] tomoyo_realpath_from_path+0x594/0x5d0 [ 1277.002772][ T7] tomoyo_path_number_perm+0x21f/0x7f0 [ 1277.008229][ T7] tomoyo_path_mknod+0x172/0x1b0 [ 1277.013154][ T7] security_path_mknod+0xf1/0x150 [ 1277.018168][ T7] path_openat+0xc29/0x2e60 [ 1277.022662][ T7] do_filp_open+0x230/0x480 [ 1277.027154][ T7] do_sys_openat2+0x13b/0x4f0 [ 1277.031820][ T7] page last free stack trace: [ 1277.036498][ T7] free_unref_page_prepare+0x12a6/0x15b0 [ 1277.042129][ T7] free_unref_page+0x33/0x3e0 [ 1277.046788][ T7] __unfreeze_partials+0x1b7/0x210 [ 1277.051891][ T7] put_cpu_partial+0x17b/0x250 [ 1277.056646][ T7] qlist_free_all+0x76/0xe0 [ 1277.061141][ T7] kasan_quarantine_reduce+0x156/0x170 [ 1277.066588][ T7] __kasan_slab_alloc+0x1f/0x70 [ 1277.071419][ T7] slab_post_alloc_hook+0x52/0x3a0 [ 1277.076519][ T7] kmem_cache_alloc+0x10c/0x2d0 [ 1277.081379][ T7] jbd2__journal_start+0x144/0x5c0 [ 1277.086480][ T7] __ext4_journal_start_sb+0x19b/0x410 [ 1277.091928][ T7] ext4_dirty_inode+0x8b/0x100 [ 1277.096679][ T7] __mark_inode_dirty+0x331/0xf80 [ 1277.101694][ T7] __file_update_time+0x221/0x240 [ 1277.106706][ T7] file_update_time+0x34c/0x3c0 [ 1277.111546][ T7] ext4_page_mkwrite+0x1c4/0x10d0 [ 1277.116562][ T7] [ 1277.118870][ T7] Memory state around the buggy address: [ 1277.124480][ T7] ffff8880589fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.132545][ T7] ffff8880589fc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.140605][ T7] >ffff8880589fc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.148645][ T7] ^ [ 1277.153215][ T7] ffff8880589fc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.161259][ T7] ffff8880589fc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.169301][ T7] ================================================================== [ 1277.177393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1277.183846][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1277.204334][ T7] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1277.211551][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.1.125-syzkaller #0 [ 1277.219423][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1277.229461][ T7] Workqueue: usb_hub_wq hub_event [ 1277.234474][ T7] Call Trace: [ 1277.237736][ T7] [ 1277.240645][ T7] dump_stack_lvl+0x1e3/0x2cb [ 1277.245320][ T7] ? nf_tcp_handle_invalid+0x642/0x642 [ 1277.250761][ T7] ? panic+0x764/0x764 [ 1277.254816][ T7] ? vscnprintf+0x59/0x80 [ 1277.259140][ T7] panic+0x318/0x764 [ 1277.263017][ T7] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1277.269158][ T7] ? check_panic_on_warn+0x1d/0xa0 [ 1277.274253][ T7] ? memcpy_page_flushcache+0xfc/0xfc [ 1277.279606][ T7] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1277.285567][ T7] ? _raw_spin_unlock+0x40/0x40 [ 1277.290394][ T7] check_panic_on_warn+0x7e/0xa0 [ 1277.295313][ T7] ? media_device_unregister+0x132/0x3f0 [ 1277.300926][ T7] end_report+0x66/0x110 [ 1277.305163][ T7] kasan_report+0x143/0x160 [ 1277.309669][ T7] ? media_device_unregister+0x132/0x3f0 [ 1277.315290][ T7] media_device_unregister+0x132/0x3f0 [ 1277.320733][ T7] em28xx_release_resources+0xa6/0x230 [ 1277.326191][ T7] em28xx_usb_disconnect+0x1c4/0x520 [ 1277.331569][ T7] usb_unbind_interface+0x1cd/0x840 [ 1277.336761][ T7] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 1277.342468][ T7] ? usb_driver_release_interface+0x1c0/0x1c0 [ 1277.348524][ T7] device_release_driver_internal+0x59e/0x880 [ 1277.354583][ T7] bus_remove_device+0x2e5/0x400 [ 1277.359520][ T7] device_del+0x6e2/0xbd0 [ 1277.363837][ T7] ? kill_device+0x160/0x160 [ 1277.368405][ T7] ? kobject_put+0x429/0x460 [ 1277.372975][ T7] usb_disable_device+0x3b8/0x840 [ 1277.377983][ T7] usb_disconnect+0x33c/0x8c0 [ 1277.382638][ T7] hub_event+0x1f78/0x5730 [ 1277.387041][ T7] ? led_work+0x700/0x700 [ 1277.391349][ T7] ? read_lock_is_recursive+0x10/0x10 [ 1277.396715][ T7] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1277.402690][ T7] ? print_irqtrace_events+0x210/0x210 [ 1277.408150][ T7] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1277.414046][ T7] ? do_raw_spin_unlock+0x137/0x8a0 [ 1277.419230][ T7] ? process_one_work+0x7a9/0x11d0 [ 1277.424328][ T7] process_one_work+0x8a9/0x11d0 [ 1277.429258][ T7] ? worker_detach_from_pool+0x260/0x260 [ 1277.434873][ T7] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1277.440398][ T7] ? kthread_data+0x4e/0xc0 [ 1277.444883][ T7] ? wq_worker_running+0x97/0x190 [ 1277.449886][ T7] worker_thread+0xd04/0x1200 [ 1277.454551][ T7] kthread+0x28d/0x320 [ 1277.458619][ T7] ? worker_clr_flags+0x190/0x190 [ 1277.463626][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1277.468191][ T7] ret_from_fork+0x1f/0x30 [ 1277.472590][ T7] [ 1277.475838][ T7] Kernel Offset: disabled [ 1277.480146][ T7] Rebooting in 86400 seconds..