last executing test programs: 7m46.949498216s ago: executing program 1 (id=414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "d9cb3d1c"}]}}, 0x0}, 0x0) 7m45.098809801s ago: executing program 1 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, r1, 0x601, 0x0, 0x8000, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 7m44.836169167s ago: executing program 1 (id=446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x4, 0xc, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) 7m44.639596078s ago: executing program 1 (id=451): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "1f9affad"}]}}, 0x0}, 0x0) 7m42.759158408s ago: executing program 1 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007"], 0x38}}, 0x0) 7m42.459464437s ago: executing program 1 (id=485): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) 7m42.209129736s ago: executing program 32 (id=485): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) 7m15.755631835s ago: executing program 2 (id=816): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x300}}, 0x26) 7m15.713345915s ago: executing program 2 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000002200995e", @ANYRESDEC=r0], 0x24}], 0x1}, 0x0) 7m15.678228514s ago: executing program 2 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f0000000080)={0x6}) 7m15.569885023s ago: executing program 2 (id=820): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='~', 0x1}, {&(0x7f0000000b00)="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", 0x1000}], 0x1f) 7m15.483133341s ago: executing program 2 (id=821): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 7m15.353142844s ago: executing program 2 (id=824): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f00000003c0)=""/69}, {&(0x7f00000006c0)=""/159}, {&(0x7f0000002a00)=""/4096}, {&(0x7f0000000a00)=""/150}, {&(0x7f0000000b40)=""/72}, {&(0x7f0000000d00)=""/253}, {&(0x7f0000000e00)=""/138}], 0x1000000000000046}, 0x0, 0x80002101, 0x0, {0x2}}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 7m0.068507502s ago: executing program 33 (id=824): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f00000003c0)=""/69}, {&(0x7f00000006c0)=""/159}, {&(0x7f0000002a00)=""/4096}, {&(0x7f0000000a00)=""/150}, {&(0x7f0000000b40)=""/72}, {&(0x7f0000000d00)=""/253}, {&(0x7f0000000e00)=""/138}], 0x1000000000000046}, 0x0, 0x80002101, 0x0, {0x2}}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 5m47.24366953s ago: executing program 5 (id=2182): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 5m46.493060291s ago: executing program 5 (id=2193): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 5m46.402827422s ago: executing program 5 (id=2196): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 5m46.280312876s ago: executing program 5 (id=2199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x0) 5m46.152926259s ago: executing program 5 (id=2201): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 5m46.056476368s ago: executing program 5 (id=2204): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffff7, @rand_addr=' \x01\x00', 0x101}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 5m31.022147418s ago: executing program 34 (id=2204): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffff7, @rand_addr=' \x01\x00', 0x101}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 2.657570455s ago: executing program 7 (id=8113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280), 0x14) 2.528433694s ago: executing program 7 (id=8115): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.13702593s ago: executing program 4 (id=8125): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e3bf1d1, 0x2, 0x11, 0x8000, 0x81, "4f1b50acd047e59fcef5394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0x6, 0x3, 0x4}) 2.012525793s ago: executing program 6 (id=8127): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000880080001"], 0x34}}, 0x0) 1.885725203s ago: executing program 6 (id=8130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x472d}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3df4, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801}, 0x34}}, 0x0) 1.635006141s ago: executing program 7 (id=8133): syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) io_setup(0xb0, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.495416746s ago: executing program 3 (id=8135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.489879145s ago: executing program 6 (id=8136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="a40000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050001000000840012800e00010069703665727370616e0000007000028014000e002001000000000000000000000000000206000f000500000008000d000300000014000700fc020000000000000000000000000000040012"], 0xa4}}, 0x0) 1.411272493s ago: executing program 7 (id=8137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500010000675304b70c457a1eef08000300", @ANYRES32=r2], 0x2c}}, 0x0) 1.392364919s ago: executing program 0 (id=8138): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote}}}}) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 1.324174771s ago: executing program 3 (id=8139): syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 1.257182656s ago: executing program 6 (id=8140): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000004280)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.211476026s ago: executing program 0 (id=8141): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r0 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.204193191s ago: executing program 7 (id=8142): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x6, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.161852859s ago: executing program 3 (id=8143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}}, 0x0) 1.127963256s ago: executing program 4 (id=8144): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 988.79642ms ago: executing program 0 (id=8145): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000d0400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="16020000010502001400030074756e6c300000000000000000000000080004007f"], 0x44}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 952.05568ms ago: executing program 6 (id=8146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setuid(0xffffffffffffffff) 951.307924ms ago: executing program 4 (id=8147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000009d3e1cc23220"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000000400)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 873.54273ms ago: executing program 3 (id=8148): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000340)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x4, 0x8}, {0x6, 0x0, 0xe0, 0x8}]}) write$ppp(r0, &(0x7f00000003c0)="1632", 0x2) 771.760393ms ago: executing program 4 (id=8149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0xfffbf038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 758.375636ms ago: executing program 0 (id=8150): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x2) 658.483037ms ago: executing program 3 (id=8151): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x38, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 657.919099ms ago: executing program 4 (id=8152): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200), 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000006c0), 0x4) 598.845797ms ago: executing program 3 (id=8153): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 585.733162ms ago: executing program 0 (id=8154): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x402c5342, &(0x7f00000000c0)) tkill(0x0, 0x7) 456.945506ms ago: executing program 0 (id=8155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @local}, 0x1c) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 434.352921ms ago: executing program 4 (id=8156): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 213.35844ms ago: executing program 7 (id=8157): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000002c0)=ANY=[]) 0s ago: executing program 6 (id=8158): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet6(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@hopopts_2292={{0x18}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x29}}}], 0x30}, 0x0) kernel console output (not intermixed with test programs): -executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 372.730087][ T30] audit: type=1326 audit(1729785609.014:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 372.752659][ T30] audit: type=1326 audit(1729785609.014:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16534 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 373.265694][ T5876] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 373.430167][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 373.438050][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.458968][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.495574][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.505569][ T5876] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 373.515273][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.615404][ T5876] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.627083][ T5876] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.635702][ T5876] usb 4-1: Manufacturer: syz [ 373.642561][ T5876] usb 4-1: config 0 descriptor?? [ 373.713421][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4446'. [ 373.916358][ T5876] rc_core: IR keymap rc-hauppauge not found [ 373.929208][ T5876] Registered IR keymap rc-empty [ 373.934953][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 373.971572][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.017232][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 374.050953][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 374.090190][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.126267][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.165617][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.186977][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.205662][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.227914][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.271869][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.325828][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.366145][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.393945][ T5876] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 374.427142][ T5876] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.454859][ T5876] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.506206][ T5876] usb 4-1: USB disconnect, device number 46 [ 375.077928][T16636] VFS: could not find a valid V7 on nullb0. [ 375.090321][T16636] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 375.126411][T16636] qnx6: wrong signature (magic) in superblock #1. [ 375.133007][T16636] qnx6: unable to read the first superblock [ 375.345359][T16648] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 376.085815][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4491'. [ 377.286541][T16722] "syz.6.4506" (16722) uses obsolete ecb(arc4) skcipher [ 377.516054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 377.682631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.700110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.724692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.749253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.798186][T16741] lo speed is unknown, defaulting to 1000 [ 377.833883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 378.231567][T16766] hub 9-0:1.0: USB hub found [ 378.262069][T16766] hub 9-0:1.0: 1 port detected [ 378.797899][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.894076][T16805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.925587][ T1201] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 379.075675][ T1201] usb 4-1: Using ep0 maxpacket: 32 [ 379.102031][ T1201] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 379.114474][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.125414][ T1201] usb 4-1: Product: syz [ 379.133702][ T1201] usb 4-1: Manufacturer: syz [ 379.139782][ T1201] usb 4-1: SerialNumber: syz [ 379.150212][ T1201] usb 4-1: config 0 descriptor?? [ 379.183492][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4547'. [ 379.347186][T16825] netlink: 'syz.0.4551': attribute type 13 has an invalid length. [ 379.355382][T16825] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4551'. [ 379.370797][T16825] syz_tun: refused to change device tx_queue_len [ 379.378019][T16825] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 379.600219][T16834] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4555'. [ 379.641961][T16836] netlink: 'syz.4.4556': attribute type 1 has an invalid length. [ 379.795963][ T1201] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 379.814701][ T1201] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 379.822859][ T1201] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 379.947185][ T1201] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 380.013066][ T1201] usb 4-1: USB disconnect, device number 47 [ 380.184683][T16858] syz.0.4567 (16858) used greatest stack depth: 17936 bytes left [ 380.681993][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4578'. [ 380.694599][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4578'. [ 382.109691][T16932] netlink: 'syz.4.4600': attribute type 1 has an invalid length. [ 382.144228][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4600'. [ 383.248613][T16986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4625'. [ 383.263524][T16986] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4625'. [ 383.920058][T17022] bridge0: port 3(vlan1) entered blocking state [ 383.976147][T17022] bridge0: port 3(vlan1) entered disabled state [ 384.023754][T17022] vlan1: entered allmulticast mode [ 384.045754][T17022] gretap0: entered allmulticast mode [ 384.061567][T17022] vlan1: entered promiscuous mode [ 384.085942][T17022] gretap0: entered promiscuous mode [ 385.098815][T17064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4660'. [ 385.905657][T17098] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 386.049542][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 386.049562][ T30] audit: type=1326 audit(1729785622.604:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.091160][T17111] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.4681'. [ 386.103605][ T30] audit: type=1326 audit(1729785622.604:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.126319][ T30] audit: type=1326 audit(1729785622.644:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.196057][ T30] audit: type=1326 audit(1729785622.684:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.232444][T17116] netlink: 4088 bytes leftover after parsing attributes in process `syz.6.4684'. [ 386.243139][T17116] openvswitch: netlink: Actions may not be safe on all matching packets [ 386.252097][ T30] audit: type=1326 audit(1729785622.684:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.290743][ T30] audit: type=1326 audit(1729785622.704:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.351580][ T30] audit: type=1326 audit(1729785622.704:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.374818][ T30] audit: type=1326 audit(1729785622.704:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03143756e7 code=0x7ffc0000 [ 386.407144][ T30] audit: type=1326 audit(1729785622.704:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f031431a099 code=0x7ffc0000 [ 386.429394][ T30] audit: type=1326 audit(1729785622.704:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17107 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 386.756515][T17140] nbd: device at index 4 is going down [ 386.915984][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4697'. [ 386.925239][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4697'. [ 387.479628][T17176] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 387.486237][T17176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 387.494096][T17176] vhci_hcd vhci_hcd.0: Device attached [ 387.675838][ T5913] vhci_hcd: vhci_device speed not set [ 387.735607][ T5913] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 387.984302][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 387.993620][T17202] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4724'. [ 388.028518][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4724'. [ 388.315129][T17220] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4732'. [ 388.325146][T17220] openvswitch: netlink: Multiple metadata blocks provided [ 388.602565][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4738'. [ 388.698481][T17237] ./bus: Can't lookup blockdev [ 390.126455][T17300] vlan3: entered allmulticast mode [ 390.131644][T17300] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 390.143411][T17300] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 390.404945][T17314] trusted_key: syz.3.4774 sent an empty control message without MSG_MORE. [ 390.463962][T17319] __nla_validate_parse: 2 callbacks suppressed [ 390.463979][T17319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4776'. [ 390.490195][T17319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4776'. [ 390.509822][T17177] vhci_hcd: connection reset by peer [ 390.529581][T15629] vhci_hcd: stop threads [ 390.555865][T15629] vhci_hcd: release socket [ 390.564625][T15629] vhci_hcd: disconnect device [ 390.626570][ T5919] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 390.797719][ T5919] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 390.807566][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.828349][ T5919] usb 5-1: config 0 descriptor?? [ 391.040093][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4786'. [ 391.270342][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 391.309816][ T5919] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 391.340367][ T5919] [drm] Initialized udl on minor 2 [ 391.354677][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.406307][ T5919] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 391.447972][ T5877] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.457265][ T5919] usb 5-1: USB disconnect, device number 38 [ 391.482763][ T5877] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 391.966623][T17375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.015056][T17379] netlink: 'syz.0.4802': attribute type 10 has an invalid length. [ 392.058162][T17379] bridge0: port 3(team0) entered disabled state [ 392.069696][T17379] team0: left allmulticast mode [ 392.074612][T17379] team_slave_0: left allmulticast mode [ 392.103660][T17379] team_slave_1: left allmulticast mode [ 392.115570][T17379] team0: left promiscuous mode [ 392.120440][T17379] team_slave_0: left promiscuous mode [ 392.143558][T17379] team_slave_1: left promiscuous mode [ 392.156415][T17379] bridge0: port 3(team0) entered disabled state [ 392.187784][T17379] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.216098][T17379] bond0: (slave team0): Enslaving as an active interface with an up link [ 392.254880][T17384] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:2478:cdff:fe84:77d3 error=-28 [ 392.299089][T17391] program syz.6.4806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.552152][T17384] infiniband syz1: set active [ 392.568734][T17384] infiniband syz1: added team_slave_0 [ 392.626931][T17384] RDS/IB: syz1: added [ 392.631133][T17384] smc: adding ib device syz1 with port count 1 [ 392.641236][T17384] smc: ib device syz1 port 1 has pnetid [ 392.865665][ T5913] vhci_hcd: vhci_device speed not set [ 394.953395][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4838'. [ 395.067884][T17470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.710604][T17490] lo speed is unknown, defaulting to 1000 [ 395.799838][T17492] 9p: Unknown access argument : -22 [ 396.196010][T17513] kvm: kvm [17512]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 396.921003][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4874'. [ 397.201532][T17556] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.354542][T17564] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 397.658165][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'. [ 397.797670][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 397.797688][ T30] audit: type=1326 audit(1729785634.354:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17578 comm="syz.4.4890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x0 [ 397.825026][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.985729][ T46] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 398.145552][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 398.154721][ T46] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 398.167820][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.185185][ T46] usb 4-1: Product: syz [ 398.194712][ T46] usb 4-1: Manufacturer: syz [ 398.205129][ T46] usb 4-1: SerialNumber: syz [ 398.219918][ T46] usb 4-1: config 0 descriptor?? [ 398.244122][ T46] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 398.440564][ T46] usb 4-1: USB disconnect, device number 48 [ 399.069999][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4909'. [ 399.081001][T17623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4909'. [ 399.094313][T17627] program syz.6.4911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.146679][T17671] delete_channel: no stack [ 400.151403][T17671] delete_channel: no stack [ 400.419757][T17686] program syz.0.4937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.897055][T17710] netlink: 'syz.4.4947': attribute type 49 has an invalid length. [ 401.816988][T17750] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4966'. [ 402.425981][T17783] netlink: 'syz.0.4981': attribute type 6 has an invalid length. [ 402.751065][T17804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.925748][ T5919] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 403.019287][T17820] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4998'. [ 403.028968][T17820] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4998'. [ 403.088708][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 403.100028][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.111602][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.129578][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.144019][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 403.156935][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.170278][ T5919] usb 4-1: config 0 descriptor?? [ 403.207795][T17827] lo speed is unknown, defaulting to 1000 [ 403.325544][ T46] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 403.384144][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 403.390546][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 403.402839][ T5919] usb 4-1: USB disconnect, device number 49 [ 403.475509][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 403.482964][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.495871][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 403.504974][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.522451][ T46] usb 5-1: config 0 descriptor?? [ 403.531396][ T46] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 404.373807][ T46] gspca_vc032x: reg_w err -71 [ 404.379081][ T46] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 404.400443][ T46] usb 5-1: USB disconnect, device number 39 [ 404.431190][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5021'. [ 404.448985][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5021'. [ 404.633009][T17887] netlink: 'syz.3.5027': attribute type 21 has an invalid length. [ 404.642383][T17887] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5027'. [ 404.653292][T17887] netlink: 'syz.3.5027': attribute type 4 has an invalid length. [ 404.661260][T17887] netlink: 'syz.3.5027': attribute type 5 has an invalid length. [ 404.669767][T17887] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5027'. [ 404.866416][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5033'. [ 405.326954][ T30] audit: type=1326 audit(1729785641.874:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.371035][T17928] dvmrp1: entered allmulticast mode [ 405.378853][ T30] audit: type=1326 audit(1729785641.874:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.411283][T17928] dvmrp5: entered allmulticast mode [ 405.452218][T17928] dvmrp1: left allmulticast mode [ 405.455556][ T30] audit: type=1326 audit(1729785641.884:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.465714][T17928] dvmrp5: left allmulticast mode [ 405.492027][ T30] audit: type=1326 audit(1729785641.884:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.515868][ T30] audit: type=1326 audit(1729785641.884:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.570203][ T30] audit: type=1326 audit(1729785641.884:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.598320][ T30] audit: type=1326 audit(1729785641.884:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.633095][ T30] audit: type=1326 audit(1729785641.884:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 405.711253][T17940] option changes via remount are deprecated (pid=17939 comm=syz.7.5053) [ 406.745635][ T5913] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 406.769093][T17990] netlink: 292 bytes leftover after parsing attributes in process `syz.6.5074'. [ 406.863850][T17994] tun0: tun_chr_ioctl cmd 1074025676 [ 406.869952][T17994] tun0: owner set to 0 [ 406.898517][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.909962][ T5913] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 406.920490][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.929683][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.950039][T17986] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 406.960409][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.191093][ T5913] usb 4-1: USB disconnect, device number 50 [ 407.380800][T18015] misc userio: Can't change port type on an already running userio instance [ 407.545825][ T970] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 407.700041][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 407.723990][ T970] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 407.734588][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.743432][ T970] usb 5-1: Product: syz [ 407.748461][ T970] usb 5-1: Manufacturer: syz [ 407.753872][ T970] usb 5-1: SerialNumber: syz [ 407.767822][ T970] usb 5-1: config 0 descriptor?? [ 407.784081][ T970] gspca_main: sq930x-2.14.0 probing 2770:930c [ 408.591547][ T970] gspca_sq930x: ucbus_write failed -71 [ 408.598100][ T970] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 408.607762][ T970] usb 5-1: USB disconnect, device number 40 [ 409.042721][T18068] delete_channel: no stack [ 409.246999][T18078] input: syz1 as /devices/virtual/input/input60 [ 409.412570][T18089] macsec2: entered allmulticast mode [ 409.547602][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5123'. [ 409.566056][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5123'. [ 410.798796][T18154] batman_adv: batadv0: Interface deactivated:  [ 410.895659][ T1201] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 411.066314][ T1201] usb 4-1: Using ep0 maxpacket: 16 [ 411.077925][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.092739][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.102983][ T1201] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 411.119326][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.130637][ T1201] usb 4-1: config 0 descriptor?? [ 411.554237][ T1201] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.004C/input/input61 [ 411.639052][ T1201] creative-sb0540 0003:041E:3100.004C: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 411.713501][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5161'. [ 411.786699][ T970] usb 4-1: USB disconnect, device number 51 [ 412.808374][T18215] input: syz0 as /devices/virtual/input/input62 [ 413.206800][T18239] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 414.393503][T18273] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5201'. [ 414.431463][T18275] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5202'. [ 415.254343][T18303] netlink: 'syz.3.5214': attribute type 1 has an invalid length. [ 415.278282][T18303] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5214'. [ 415.880975][T18327] lo speed is unknown, defaulting to 1000 [ 416.741176][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5232'. [ 416.875928][ T5913] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 417.036131][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 417.042737][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 417.067848][ T5913] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 417.077219][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.085349][ T5913] usb 4-1: Product: syz [ 417.089691][ T5913] usb 4-1: Manufacturer: syz [ 417.094404][ T5913] usb 4-1: SerialNumber: syz [ 417.104500][ T5913] usb 4-1: config 0 descriptor?? [ 417.114738][ T5913] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 417.126279][ T5913] usb 4-1: Detected FT232R [ 417.325376][ T5913] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 417.335143][T18370] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5241'. [ 417.392578][T18372] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5242'. [ 417.402543][T18372] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 417.550429][ T5913] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 417.780123][ T1201] usb 4-1: USB disconnect, device number 52 [ 417.799615][ T1201] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 417.816112][ T1201] ftdi_sio 4-1:0.0: device disconnected [ 417.926604][T18383] netlink: 'syz.4.5247': attribute type 11 has an invalid length. [ 417.934700][T18383] netlink: 203156 bytes leftover after parsing attributes in process `syz.4.5247'. [ 417.958256][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5249'. [ 418.554486][T18422] futex_wake_op: syz.0.5264 tries to shift op by -1; fix this program [ 418.767557][T18435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.907403][T18441] netlink: 'syz.3.5274': attribute type 3 has an invalid length. [ 418.942285][T18441] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5274'. [ 418.986440][T18444] infiniband syz1: set down [ 419.160851][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5283'. [ 419.482028][T18477] tap0: tun_chr_ioctl cmd 1074025681 [ 419.711249][T18487] netlink: 'syz.6.5297': attribute type 10 has an invalid length. [ 419.724292][T18487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.745541][T18487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.784588][T18487] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 419.984619][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5299'. [ 420.439718][T18521] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 420.675700][ T5877] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 420.794430][ T30] audit: type=1326 audit(1729785657.344:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18533 comm="syz.3.5317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x0 [ 420.835723][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 420.850262][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.862484][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.873722][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.885838][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 420.895875][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.910674][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.920378][ T5877] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.928640][ T5877] usb 5-1: Manufacturer: syz [ 420.936079][ T5877] usb 5-1: config 0 descriptor?? [ 421.245875][ T5877] rc_core: IR keymap rc-hauppauge not found [ 421.256453][ T5877] Registered IR keymap rc-empty [ 421.261463][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.285794][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.316625][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 421.329801][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input63 [ 421.349516][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.359340][T18519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.370613][T18519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.386073][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.427250][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.445772][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.465924][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.497144][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.518407][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.545749][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.572319][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.596285][ T5877] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 421.627879][ T5877] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 421.649605][ T5877] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 421.676126][ T5877] usb 5-1: USB disconnect, device number 41 [ 422.844966][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5354'. [ 422.890015][T18620] netlink: 'syz.0.5355': attribute type 3 has an invalid length. [ 422.905582][T18620] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5355'. [ 423.091979][T18634] misc userio: Begin command sent, but we're already running [ 423.310421][T18644] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5366'. [ 423.325671][T18644] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 423.752650][T18663] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 424.151181][ T970] IPVS: starting estimator thread 0... [ 424.256363][T18685] IPVS: using max 16 ests per chain, 38400 per kthread [ 424.561229][ T30] audit: type=1326 audit(1729785661.114:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18701 comm="syz.7.5392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x0 [ 424.674554][T18709] veth5: entered promiscuous mode [ 424.949748][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5401'. [ 425.637423][T18759] netlink: 'syz.3.5418': attribute type 16 has an invalid length. [ 425.655970][T18759] netlink: 'syz.3.5418': attribute type 3 has an invalid length. [ 425.663830][T18759] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.5418'. [ 426.029663][T18777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5426'. [ 426.276063][T18784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5429'. [ 426.313815][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.321548][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.396216][ T5877] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 426.565870][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 426.582606][ T5877] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 426.607263][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.640175][ T5877] usb 4-1: config 0 has no interface number 0 [ 426.660879][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 426.670902][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.683646][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5435'. [ 426.692841][ T5877] usb 4-1: Product: syz [ 426.698292][ T5877] usb 4-1: Manufacturer: syz [ 426.706869][ T5877] usb 4-1: SerialNumber: syz [ 426.752752][ T5877] usb 4-1: config 0 descriptor?? [ 426.974439][ T5877] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 426.998301][ T5877] usb 4-1: No valid video chain found. [ 427.027331][ T5877] usb 4-1: USB disconnect, device number 53 [ 427.611126][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5458'. [ 427.621204][T18847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.995841][ T46] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 428.165852][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 428.179057][ T46] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 428.189455][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.198580][ T46] usb 4-1: Product: syz [ 428.213317][ T46] usb 4-1: Manufacturer: syz [ 428.218688][ T46] usb 4-1: SerialNumber: syz [ 428.235075][ T46] usb 4-1: config 0 descriptor?? [ 428.257961][ T46] gspca_main: sq905-2.14.0 probing 2770:9120 [ 428.379578][T18875] netlink: 'syz.4.5474': attribute type 1 has an invalid length. [ 428.389450][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5474'. [ 428.562292][T18880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5476'. [ 428.644803][T18884] program syz.4.5478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.862808][ T46] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 428.879649][T18897] syz.7.5484: attempt to access beyond end of device [ 428.879649][T18897] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 428.880734][ T46] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 428.914304][T18897] FAT-fs (loop7): unable to read boot sector [ 428.948684][ T46] usb 4-1: USB disconnect, device number 54 [ 429.912811][T18940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5503'. [ 430.068701][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5507'. [ 430.528212][T18960] ip6gretap0: entered promiscuous mode [ 430.556658][T18960] ip6gretap0: left promiscuous mode [ 430.723677][T18968] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 430.733647][ T5913] IPVS: starting estimator thread 0... [ 430.826151][T18971] IPVS: using max 19 ests per chain, 45600 per kthread [ 430.856167][T18975] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.5521'. [ 431.870731][T19027] hsr0: entered promiscuous mode [ 431.878386][T19027] macvlan0: entered promiscuous mode [ 431.884044][T19027] macvlan0: entered allmulticast mode [ 431.898132][T19027] hsr0: entered allmulticast mode [ 431.903519][T19027] hsr_slave_0: entered allmulticast mode [ 431.923527][T19027] hsr_slave_1: entered allmulticast mode [ 431.960691][T19027] hsr0: left allmulticast mode [ 431.976773][T19027] hsr_slave_0: left allmulticast mode [ 431.982236][T19027] hsr_slave_1: left allmulticast mode [ 432.110656][T19036] tipc: Started in network mode [ 432.118298][T19036] tipc: Node identity :, cluster identity 4711 [ 432.124552][T19036] tipc: Enabling of bearer rejected, failed to enable media [ 432.432498][T19056] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.439860][T19056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.504096][T19061] hfsplus: unable to find HFS+ superblock [ 432.581678][T19065] netlink: 'syz.6.5561': attribute type 1 has an invalid length. [ 432.595368][T19065] netlink: 9328 bytes leftover after parsing attributes in process `syz.6.5561'. [ 432.611818][T19065] netlink: 'syz.6.5561': attribute type 2 has an invalid length. [ 432.632316][T19065] netlink: 'syz.6.5561': attribute type 1 has an invalid length. [ 433.157099][T19099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5579'. [ 433.171599][T19103] ALSA: mixer_oss: invalid OSS volume '' [ 433.178372][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5579'. [ 433.677427][T19128] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 433.683209][T19128] dvmrp1: linktype set to 512 [ 435.153384][T19205] Invalid/unusable pipe [ 435.176033][ T5913] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 435.283251][T19211] netlink: 'syz.7.5629': attribute type 1 has an invalid length. [ 435.291717][T19211] netlink: 3440 bytes leftover after parsing attributes in process `syz.7.5629'. [ 435.313762][T19211] netlink: 'syz.7.5629': attribute type 1 has an invalid length. [ 435.329726][T19211] netlink: 5888 bytes leftover after parsing attributes in process `syz.7.5629'. [ 435.349771][ T5913] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 435.372446][ T5913] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 435.392084][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 435.411455][ T5913] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 435.431117][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8293, setting to 8 [ 435.442851][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 435.465200][ T5913] usb 4-1: string descriptor 0 read error: -22 [ 435.471905][ T5913] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 435.486228][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.501465][ T5913] usb 4-1: config 0 descriptor?? [ 435.507820][T19193] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 435.517855][ T5913] hub 4-1:0.0: bad descriptor, ignoring hub [ 435.523838][ T5913] hub 4-1:0.0: probe with driver hub failed with error -5 [ 435.534235][ T5913] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input64 [ 435.761457][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 435.772622][ T5913] usb 4-1: USB disconnect, device number 55 [ 436.385840][T19245] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5646'. [ 436.396290][T19245] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5646'. [ 436.943815][T19271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5657'. [ 437.840799][T19319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.241293][T19336] lo speed is unknown, defaulting to 1000 [ 438.250979][T19338] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5689'. [ 438.355620][ T5877] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 438.378130][T19341] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 438.527857][T19343] netpci0: tun_chr_ioctl cmd 1074025677 [ 438.533680][T19343] netpci0: linktype set to 6 [ 438.595559][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 438.604801][ T5877] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 438.629819][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.633190][T19345] lo speed is unknown, defaulting to 1000 [ 438.655502][ T5877] usb 4-1: Product: syz [ 438.659946][ T5877] usb 4-1: Manufacturer: syz [ 438.664591][ T5877] usb 4-1: SerialNumber: syz [ 438.691069][ T5877] usb 4-1: config 0 descriptor?? [ 438.700882][ T5877] gspca_main: sq930x-2.14.0 probing 2770:930c [ 438.852316][T19336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.518246][ T5877] gspca_sq930x: ucbus_write failed -71 [ 439.735698][ T5877] gspca_sq930x: Sensor ov9630 not yet treated [ 439.742495][ T5877] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 439.751898][ T5877] usb 4-1: USB disconnect, device number 56 [ 439.865990][ T973] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 440.019741][ T973] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 440.028996][ T973] usb 5-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 440.040006][ T973] usb 5-1: Product: syz [ 440.044276][ T973] usb 5-1: Manufacturer: syz [ 440.049176][ T973] usb 5-1: SerialNumber: syz [ 440.063477][ T973] usb 5-1: config 0 descriptor?? [ 440.238763][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.247953][T19384] ax25_connect(): syz.3.5709 uses autobind, please contact jreuter@yaina.de [ 440.481925][ T973] usb 5-1: Firmware: major: 230, minor: 254, hardware type: HULUSB (4) [ 440.692467][ T973] usb 5-1: failed to fetch extended address, random address set [ 440.783586][ T973] usb 5-1: USB disconnect, device number 42 [ 441.349361][T19421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5725'. [ 441.362863][T19421] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5725'. [ 441.373416][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5725'. [ 441.386296][T19424] netlink: 203452 bytes leftover after parsing attributes in process `syz.4.5727'. [ 441.410485][T19424] netlink: 'syz.4.5727': attribute type 2 has an invalid length. [ 441.432069][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5727'. [ 441.553649][T19432] option changes via remount are deprecated (pid=19430 comm=syz.3.5731) [ 442.491589][ T30] audit: type=1400 audit(1729785679.044:246): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=19479 comm="syz.3.5754" name="1293" dev="tmpfs" ino=6542 [ 443.004107][T19514] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5769'. [ 443.155853][ T1201] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 443.325668][ T1201] usb 4-1: Using ep0 maxpacket: 8 [ 443.332544][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.351786][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.363065][ T1201] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 443.377022][ T1201] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 443.387462][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.398248][ T1201] usb 4-1: config 0 descriptor?? [ 443.733445][T19544] netlink: 'syz.7.5783': attribute type 1 has an invalid length. [ 443.820964][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.834183][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.842843][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.854864][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.862445][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.874332][ T1201] elecom 0003:056E:011C.004D: unknown main item tag 0x0 [ 443.881999][ T1201] elecom 0003:056E:011C.004D: item fetching failed at offset 20/41 [ 443.897383][ T1201] elecom 0003:056E:011C.004D: probe with driver elecom failed with error -22 [ 444.054276][ T1201] usb 4-1: USB disconnect, device number 57 [ 444.747783][T19591] netlink: 'syz.7.5806': attribute type 25 has an invalid length. [ 444.771774][T19597] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5808'. [ 444.816103][T19591] netlink: 'syz.7.5806': attribute type 8 has an invalid length. [ 445.275068][T19614] netlink: 'syz.3.5815': attribute type 12 has an invalid length. [ 445.302146][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5816'. [ 445.869878][T19646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 445.945719][T19648] can0: slcan on ttyS3. [ 445.997922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 446.037107][T19648] can0 (unregistered): slcan off ttyS3. [ 446.046362][T19648] Falling back ldisc for ttyS3. [ 446.458263][T19672] input: syz0 as /devices/virtual/input/input66 [ 446.976396][T19705] netlink: 'syz.7.5860': attribute type 64 has an invalid length. [ 446.984570][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5860'. [ 447.315666][T19723] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5869'. [ 447.325177][T19723] netlink: 'syz.3.5869': attribute type 2 has an invalid length. [ 447.377479][T19723] netlink: 'syz.3.5869': attribute type 1 has an invalid length. [ 448.208911][ T5877] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 448.214275][T19769] netlink: 340 bytes leftover after parsing attributes in process `syz.3.5889'. [ 448.388523][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 448.410731][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.423012][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.434688][ T5877] usb 5-1: Product: syz [ 448.441703][ T5877] usb 5-1: Manufacturer: syz [ 448.449294][ T5877] usb 5-1: SerialNumber: syz [ 448.457531][T19758] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 448.673565][ T5877] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 448.691551][ T5877] usb 5-1: USB disconnect, device number 43 [ 449.113545][T19792] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 449.121522][ T5877] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 449.130610][T19792] macvlan2: entered promiscuous mode [ 449.286615][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 449.299854][ T5877] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 449.310184][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.320729][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.331074][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 449.341875][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.353840][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 449.368852][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.382432][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 449.393530][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.406076][T19758] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 449.616309][ T5877] usb 5-1: usb_control_msg returned -32 [ 449.630281][ T5877] usbtmc 5-1:16.0: can't read capabilities [ 449.655288][ T5877] usb 5-1: USB disconnect, device number 44 [ 450.014294][T19810] loop0: detected capacity change from 0 to 7016 [ 450.279121][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5912'. [ 451.226891][T19845] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.616419][ T30] audit: type=1326 audit(1729785688.174:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.645280][ T30] audit: type=1326 audit(1729785688.174:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.671041][ T30] audit: type=1326 audit(1729785688.194:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.711909][ T30] audit: type=1326 audit(1729785688.194:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.734401][ T30] audit: type=1326 audit(1729785688.194:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.764080][ T30] audit: type=1326 audit(1729785688.194:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.798529][ T30] audit: type=1326 audit(1729785688.244:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.855213][ T30] audit: type=1326 audit(1729785688.244:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.878909][ T30] audit: type=1326 audit(1729785688.264:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.904181][ T30] audit: type=1326 audit(1729785688.264:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19867 comm="syz.7.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 451.940731][T19874] netlink: 'syz.3.5937': attribute type 11 has an invalid length. [ 452.205139][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5940'. [ 452.925597][ T973] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 453.095891][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 453.109696][ T973] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 453.122805][ T973] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 453.135992][ T973] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 453.145816][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.153970][ T973] usb 4-1: Product: syz [ 453.167259][ T973] usb 4-1: Manufacturer: syz [ 453.174313][ T973] usb 4-1: SerialNumber: syz [ 453.189822][ T973] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 453.206232][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 453.234837][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.246244][ T973] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 453.263408][ T973] usb 4-1: media controller created [ 453.283417][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.303270][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 453.309965][ T973] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 453.330792][ T973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 453.351895][ T973] dvb-usb: schedule remote query interval to 150 msecs. [ 453.371382][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 453.395937][ T973] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 453.536593][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 453.545722][ T5877] dvb-usb: error while querying for an remote control event. [ 453.648600][ T5877] usb 4-1: USB disconnect, device number 58 [ 453.694237][ T5877] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 454.383829][T19951] netlink: 'syz.0.5968': attribute type 5 has an invalid length. [ 455.341622][T20004] VFS: could not find a valid V7 on nullb0. [ 456.155764][ T5877] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 456.328061][ T5877] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 456.357938][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.384926][ T5877] usb 5-1: config 0 descriptor?? [ 456.615705][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'. [ 456.828161][ T5877] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 457.043068][ T5877] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 457.058927][ T5877] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 457.075756][T20077] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6019'. [ 457.085600][T20077] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6019'. [ 457.096610][T20077] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6019'. [ 457.177925][T20079] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6021'. [ 457.189145][T20079] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6021'. [ 457.249304][ T5877] usb 5-1: USB disconnect, device number 45 [ 457.483464][T20096] bpf: Bad value for 'gid' [ 457.996380][T20125] 9p: Unknown access argument 18446744073709551615: -34 [ 458.602550][T20151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.622408][T20151] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 458.628646][T20148] binder: 20147:20148 ioctl c0306201 20000480 returned -22 [ 459.008119][T20159] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 459.108072][T20134] syz.3.6043 (20134): drop_caches: 2 [ 459.396755][ T970] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 459.464867][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 459.492449][T20180] macsec0: entered promiscuous mode [ 459.590255][ T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.619990][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.640506][ T970] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.663836][ T970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.673637][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.689267][ T970] usb 5-1: Product: syz [ 459.693518][ T970] usb 5-1: Manufacturer: syz [ 459.708986][ T970] usb 5-1: SerialNumber: syz [ 459.737956][ T970] usb 5-1: selecting invalid altsetting 1 [ 459.984674][T20202] Bluetooth: MGMT ver 1.23 [ 460.427992][ T970] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 460.446885][ T970] usb 5-1: selecting invalid altsetting 1 [ 460.452727][ T970] cdc_ncm 5-1:1.0: bind() failure [ 460.465865][ T970] usb 5-1: USB disconnect, device number 46 [ 460.972673][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 461.865734][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6108'. [ 462.056971][T20281] Process accounting resumed [ 462.271339][T20293] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6118'. [ 462.283142][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6118'. [ 462.320472][T20295] netlink: 'syz.4.6119': attribute type 12 has an invalid length. [ 462.335909][T20295] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.6119'. [ 463.097083][T20335] netlink: 'syz.4.6137': attribute type 1 has an invalid length. [ 463.125630][T20335] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.6137'. [ 463.143580][T20335] netlink: 'syz.4.6137': attribute type 1 has an invalid length. [ 463.159887][T20335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6137'. [ 464.056289][ T5877] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 464.217602][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.242546][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 464.265319][T20395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6165'. [ 464.275877][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16349, setting to 64 [ 464.293096][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.326647][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 464.345763][ T5877] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 464.374331][ T5877] usb 4-1: Manufacturer: syz [ 464.387895][ T5877] usb 4-1: config 0 descriptor?? [ 464.393850][T20370] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 464.420473][ T5877] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 464.580759][T20411] rose0: tun_chr_ioctl cmd 1074025677 [ 464.587163][T20411] rose0: linktype set to 805 [ 464.627822][ T970] usb 4-1: USB disconnect, device number 59 [ 465.624184][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6187'. [ 465.904817][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6192'. [ 467.745690][ T1201] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 467.916337][ T1201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.923800][T20521] netlink: 'syz.7.6221': attribute type 10 has an invalid length. [ 467.927028][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.950076][ T1201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 467.961301][T20521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.969189][ T1201] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 467.972971][T20521] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 467.985072][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.020300][T20505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 468.038097][ T1201] hub 5-1:1.0: bad descriptor, ignoring hub [ 468.044093][ T1201] hub 5-1:1.0: probe with driver hub failed with error -5 [ 468.066052][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 468.071329][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 468.125650][ T1201] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 468.139728][ T1201] cdc_wdm 5-1:1.0: Unknown control protocol [ 468.141239][T20527] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 468.173107][T20529] bridge0: port 3(bond1) entered blocking state [ 468.179991][T20529] bridge0: port 3(bond1) entered disabled state [ 468.186913][T20529] bond1: entered allmulticast mode [ 468.195016][T20529] bond1: entered promiscuous mode [ 468.377613][ T973] usb 5-1: USB disconnect, device number 47 [ 469.474805][T20594] vxcan1: tx address claim with dest, not broadcast [ 469.537524][T20598] netlink: 'syz.3.6256': attribute type 5 has an invalid length. [ 469.941044][T20620] netlink: 'syz.6.6267': attribute type 4 has an invalid length. [ 470.835678][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 470.932106][ T5913] IPVS: starting estimator thread 0... [ 470.997231][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.011528][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.025353][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 471.034653][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.045119][ T46] usb 5-1: config 0 descriptor?? [ 471.045988][T20675] IPVS: using max 17 ests per chain, 40800 per kthread [ 471.438622][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 471.438679][ T30] audit: type=1400 audit(1729785707.994:267): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20696 comm="syz.7.6299" dest=20002 [ 471.488087][ T46] wacom 0003:056A:0101.004E: unknown main item tag 0x0 [ 471.498169][ T46] wacom 0003:056A:0101.004E: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.4-1/input0 [ 471.702279][ T46] usb 5-1: USB disconnect, device number 48 [ 472.122163][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6304'. [ 472.199124][T20710] netlink: 'syz.0.6305': attribute type 1 has an invalid length. [ 472.208188][T20710] netlink: 'syz.0.6305': attribute type 1 has an invalid length. [ 472.329301][T20718] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.705500][ T30] audit: type=1326 audit(1729785709.244:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 472.746239][ T30] audit: type=1326 audit(1729785709.244:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 472.794881][ T30] audit: type=1326 audit(1729785709.254:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 472.837802][ T30] audit: type=1326 audit(1729785709.254:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 472.920009][ T30] audit: type=1326 audit(1729785709.254:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 472.998212][ T30] audit: type=1326 audit(1729785709.254:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 473.025774][ T30] audit: type=1326 audit(1729785709.254:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 473.082496][ T30] audit: type=1326 audit(1729785709.254:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 473.114064][ T30] audit: type=1326 audit(1729785709.254:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20741 comm="syz.0.6320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f031437e719 code=0x7ffc0000 [ 473.141293][ T973] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 473.168365][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6328'. [ 473.219723][T20758] macsec1: entered promiscuous mode [ 473.230086][T20758] vlan0: entered promiscuous mode [ 473.242935][T20760] binder: 20759:20760 ioctl c018620c 200005c0 returned -1 [ 473.254271][T20758] vlan0: left promiscuous mode [ 473.308315][ T973] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 473.317936][ T973] usb 5-1: config 0 has no interface number 0 [ 473.328568][ T973] usb 5-1: config 0 interface 104 has no altsetting 0 [ 473.339816][ T973] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 473.352177][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.363643][ T973] usb 5-1: Product: syz [ 473.369273][ T973] usb 5-1: Manufacturer: syz [ 473.374379][ T973] usb 5-1: SerialNumber: syz [ 473.394575][ T973] usb 5-1: config 0 descriptor?? [ 473.403498][ T973] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 473.586038][ T1201] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 473.608040][ T973] gspca_vc032x: reg_r err -71 [ 473.613383][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.623551][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.634842][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.644152][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.652559][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.667945][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.673557][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.682899][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.688627][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.694085][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.704361][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.710467][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.720836][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.728837][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.734410][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.745016][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.750528][ T1201] usb 4-1: Using ep0 maxpacket: 16 [ 473.761930][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.771532][ T973] gspca_vc032x: I2c Bus Busy Wait 00 [ 473.784755][ T1201] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.793885][ T1201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.809331][ T973] gspca_vc032x: Unknown sensor... [ 473.814635][ T973] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 473.823069][ T1201] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.841086][ T1201] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.852456][ T973] usb 5-1: USB disconnect, device number 49 [ 473.862647][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.875150][ T1201] usb 4-1: Product: syz [ 473.881417][ T1201] usb 4-1: Manufacturer: syz [ 473.893474][ T1201] usb 4-1: SerialNumber: syz [ 473.918980][T20772] netlink: 142384 bytes leftover after parsing attributes in process `syz.6.6335'. [ 473.933127][T20772] netlink: zone id is out of range [ 473.938590][T20772] netlink: zone id is out of range [ 473.944178][T20772] netlink: zone id is out of range [ 473.950131][T20772] netlink: zone id is out of range [ 473.955689][T20772] netlink: zone id is out of range [ 473.960868][T20772] netlink: zone id is out of range [ 473.966352][T20772] netlink: zone id is out of range [ 473.971600][T20772] netlink: zone id is out of range [ 473.977623][T20772] netlink: zone id is out of range [ 473.982855][T20772] netlink: zone id is out of range [ 474.076682][T20774] netlink: 'syz.6.6336': attribute type 5 has an invalid length. [ 474.329917][ T1201] usb 4-1: 0:2 : does not exist [ 474.748295][ T1201] usb 4-1: USB disconnect, device number 60 [ 474.962095][T20814] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 475.535748][ T46] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 475.695590][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 475.709852][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.723824][ T46] usb 5-1: config 0 has no interface number 0 [ 475.736840][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.761530][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.782094][ T46] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 475.806242][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.825801][ T46] usb 5-1: config 0 descriptor?? [ 475.914735][T20864] mkiss: ax0: crc mode is auto. [ 476.003721][T20864] Falling back ldisc for ttyS3. [ 476.603167][ T46] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.004F/input/input71 [ 476.632977][ T46] uclogic 0003:28BD:0094.004F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 476.831410][ T1201] usb 5-1: USB disconnect, device number 50 [ 477.223092][T20896] netlink: 'syz.7.6394': attribute type 14 has an invalid length. [ 477.522033][T20904] program syz.3.6397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.920482][T20923] vcan0: entered allmulticast mode [ 478.032386][T20929] CUSE: info not properly terminated [ 478.244703][T20946] syz.7.6415[20946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.244820][T20946] syz.7.6415[20946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.258741][T20946] syz.7.6415[20946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.722765][T20971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.788639][T20974] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6428'. [ 479.033105][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6437'. [ 479.090880][T20991] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 479.797579][T21028] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6453'. [ 479.811510][T21028] 0X: renamed from caif0 [ 479.831019][T21028] 0X: entered allmulticast mode [ 479.841092][T21028] net_ratelimit: 154 callbacks suppressed [ 479.841131][T21028] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 481.117437][ T5835] Bluetooth: hci0: command tx timeout [ 481.372755][T21097] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6483'. [ 481.383020][T21097] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 481.810650][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6491'. [ 481.842299][T21117] bridge0: port 4(vlan2) entered blocking state [ 481.863450][T21117] bridge0: port 4(vlan2) entered disabled state [ 481.879663][T21117] vlan2: entered allmulticast mode [ 481.931276][T21117] vlan2: left allmulticast mode [ 482.335493][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 482.335513][ T30] audit: type=1326 audit(1729785718.884:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21142 comm="syz.6.6504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x0 [ 482.856889][T21173] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6518'. [ 483.265294][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6525'. [ 483.931969][T21218] hsr0: entered promiscuous mode [ 483.970242][T21218] hsr0: left promiscuous mode [ 484.371568][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6551'. [ 484.523095][T21254] netlink: 'syz.7.6555': attribute type 1 has an invalid length. [ 484.528815][T21260] ieee802154 phy1 wpan1: encryption failed: -90 [ 484.537795][T21254] netlink: 9312 bytes leftover after parsing attributes in process `syz.7.6555'. [ 484.561768][T21254] netlink: 'syz.7.6555': attribute type 1 has an invalid length. [ 484.954352][T21284] overlayfs: failed to clone lowerpath [ 485.071017][T21289] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 485.337817][T21299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.442333][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6583'. [ 485.570955][ T30] audit: type=1326 audit(1729785722.124:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21314 comm="syz.7.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 485.628722][ T30] audit: type=1326 audit(1729785722.124:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21314 comm="syz.7.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 485.650321][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.671843][ T30] audit: type=1326 audit(1729785722.124:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21314 comm="syz.7.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 485.714986][T21322] lo speed is unknown, defaulting to 1000 [ 485.722247][ T30] audit: type=1326 audit(1729785722.124:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21314 comm="syz.7.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 485.744306][ T30] audit: type=1326 audit(1729785722.124:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21314 comm="syz.7.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 485.765899][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.120372][T21343] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 486.135016][T21343] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 486.157220][T21343] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 486.165070][T21343] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 486.195979][T21344] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 486.215921][T21344] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 486.224288][T21344] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 486.242673][T21344] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 486.552399][T21358] netlink: 'syz.6.6603': attribute type 10 has an invalid length. [ 486.741779][T21358] team0: Port device wlan1 added [ 486.788405][T21356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.913295][ T30] audit: type=1326 audit(1729785723.464:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21369 comm="syz.7.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 486.989156][ T30] audit: type=1326 audit(1729785723.494:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21369 comm="syz.7.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 487.016011][ T30] audit: type=1326 audit(1729785723.494:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21369 comm="syz.7.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 487.038482][ T30] audit: type=1326 audit(1729785723.494:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21369 comm="syz.7.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x7ffc0000 [ 487.115706][ T1201] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 487.250030][T21377] ALSA: mixer_oss: invalid OSS volume '' [ 487.267622][ T1201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.289560][ T1201] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.300949][ T1201] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.313122][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.321931][ T1201] usb 4-1: SerialNumber: syz [ 487.542537][ T1201] usb 4-1: 0:2 : does not exist [ 487.564421][ T1201] usb 4-1: USB disconnect, device number 61 [ 487.830654][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6619'. [ 488.336032][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6630'. [ 488.776359][ T1201] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 488.859771][T21442] netlink: 'syz.3.6644': attribute type 1 has an invalid length. [ 488.874312][T21442] netlink: 9388 bytes leftover after parsing attributes in process `syz.3.6644'. [ 488.893264][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6644'. [ 488.927443][ T1201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.952932][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.989594][ T1201] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.016195][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 489.034559][ T1201] usb 5-1: SerialNumber: syz [ 489.194643][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6650'. [ 489.262750][ T1201] usb 5-1: 0:2 : does not exist [ 489.284075][ T1201] usb 5-1: unit 255 not found! [ 489.333751][ T1201] usb 5-1: USB disconnect, device number 51 [ 489.531027][T21478] netlink: 'syz.0.6658': attribute type 11 has an invalid length. [ 490.198429][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6665'. [ 490.198561][ T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 490.210385][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6665'. [ 490.423468][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 490.430580][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 490.449882][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.475978][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.505870][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 490.516089][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 490.532012][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 490.555479][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.576572][ T46] usb 5-1: config 0 descriptor?? [ 490.596831][ T5835] Bluetooth: hci1: urb ffff88805c6bbb00 submission failed (90) [ 490.841748][ T973] usb 5-1: USB disconnect, device number 52 [ 490.874600][T21514] netlink: 632 bytes leftover after parsing attributes in process `syz.6.6674'. [ 491.360896][T21533] lo speed is unknown, defaulting to 1000 [ 491.477545][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 491.477564][ T30] audit: type=1326 audit(1729785728.034:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.530847][ T30] audit: type=1326 audit(1729785728.064:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.556035][ T30] audit: type=1326 audit(1729785728.064:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.599232][ T30] audit: type=1326 audit(1729785728.064:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.641541][ T30] audit: type=1326 audit(1729785728.064:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.664811][ T30] audit: type=1326 audit(1729785728.064:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.688303][ T30] audit: type=1326 audit(1729785728.064:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 491.711250][ T30] audit: type=1326 audit(1729785728.064:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21538 comm="syz.4.6686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7ffc0000 [ 492.821019][T21592] program syz.3.6709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.129713][T21611] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 493.421987][T21629] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 493.467743][ T970] hid-generic 0083:0000:0000.0050: unknown main item tag 0x0 [ 493.475781][ T970] hid-generic 0083:0000:0000.0050: unknown main item tag 0x0 [ 493.484819][T21631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6726'. [ 493.494658][ T970] hid-generic 0083:0000:0000.0050: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 494.212978][T21668] lo speed is unknown, defaulting to 1000 [ 495.068488][T21694] overlayfs: missing 'workdir' [ 495.664852][T21716] can0: slcan on ttyS3. [ 495.800417][T21716] can0 (unregistered): slcan off ttyS3. [ 496.321295][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6781'. [ 496.633478][T21772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6789'. [ 496.688979][T21774] unknown channel width for channel at 907000KHz? [ 497.236707][T21781] bridge_slave_0: default FDB implementation only supports local addresses [ 497.570605][T21799] lo speed is unknown, defaulting to 1000 [ 497.835727][ T973] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 497.985518][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 497.992576][ T973] usb 5-1: config 0 has no interfaces? [ 498.002067][ T973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.025520][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.033780][ T973] usb 5-1: Product: syz [ 498.043377][ T973] usb 5-1: Manufacturer: syz [ 498.048307][ T973] usb 5-1: SerialNumber: syz [ 498.055075][ T973] usb 5-1: config 0 descriptor?? [ 498.287670][T21799] geneve0: entered promiscuous mode [ 498.292955][T21799] geneve0: entered allmulticast mode [ 498.308827][ T973] usb 5-1: USB disconnect, device number 53 [ 498.712454][T21839] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.743958][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.751289][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.899004][T21847] netlink: 'syz.6.6825': attribute type 1 has an invalid length. [ 498.921042][T21847] netlink: 9352 bytes leftover after parsing attributes in process `syz.6.6825'. [ 498.934494][T21847] netlink: 'syz.6.6825': attribute type 1 has an invalid length. [ 498.943415][T21847] netlink: 'syz.6.6825': attribute type 2 has an invalid length. [ 499.996207][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6844'. [ 500.052543][T21892] vlan3: entered allmulticast mode [ 500.122481][T21899] sctp: [Deprecated]: syz.6.6846 (pid 21899) Use of int in maxseg socket option. [ 500.122481][T21899] Use struct sctp_assoc_value instead [ 500.290287][T21909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.641373][T21926] netlink: 'syz.0.6859': attribute type 9 has an invalid length. [ 500.665523][T21926] netlink: 134688 bytes leftover after parsing attributes in process `syz.0.6859'. [ 500.786429][T21930] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6860'. [ 500.811981][T21930] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 501.029272][T21938] ntfs3(nullb0): Primary boot signature is not NTFS. [ 501.053598][T21938] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 501.142531][T21946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.226550][T21947] netlink: 'syz.7.6869': attribute type 1 has an invalid length. [ 501.234699][T21947] netlink: 9364 bytes leftover after parsing attributes in process `syz.7.6869'. [ 501.245793][T21947] netlink: 'syz.7.6869': attribute type 2 has an invalid length. [ 501.253665][T21947] netlink: 'syz.7.6869': attribute type 1 has an invalid length. [ 501.686835][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.346451][T21996] Failed to get privilege flags for destination (handle=0x2:0x0) [ 502.721277][T22021] loop6: detected capacity change from 0 to 524288000 [ 502.875071][T22026] syzkaller0: tun_chr_ioctl cmd 35108 [ 503.097908][T22038] input: syz1 as /devices/virtual/input/input74 [ 503.909895][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6928'. [ 504.015169][T22079] team_slave_1: mtu greater than device maximum [ 504.166362][T22079] team0: Device team_slave_1 failed to change mtu [ 504.915060][T22128] hsr0: entered promiscuous mode [ 504.954791][T22131] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.973546][T22128] hsr0: left promiscuous mode [ 504.985311][T22131] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 504.999588][T22131] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.013385][T22131] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 505.025030][T22136] IPVS: length: 193 != 8 [ 505.041166][T22131] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.056099][T22131] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 505.071909][T22131] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.092767][T22131] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 506.131060][T22202] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6987'. [ 506.147970][T22202] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 506.158235][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6988'. [ 506.202965][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6990'. [ 506.274964][T22212] netlink: 'syz.0.6993': attribute type 10 has an invalid length. [ 506.353062][T22212] team0: Port device wlan1 added [ 506.393057][T22211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.506607][T22222] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6997'. [ 506.924296][T22242] netlink: 'syz.4.7006': attribute type 1 has an invalid length. [ 506.946043][T22242] netlink: 'syz.4.7006': attribute type 1 has an invalid length. [ 506.956040][T22242] netlink: 9292 bytes leftover after parsing attributes in process `syz.4.7006'. [ 506.965493][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7006'. [ 506.974716][T22242] netlink: 'syz.4.7006': attribute type 1 has an invalid length. [ 508.112334][T22291] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7025'. [ 508.130642][T22291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7025'. [ 509.669604][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 509.737681][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7061'. [ 509.755273][T22369] (unnamed net_device) (uninitialized): peer notification delay (48896) is not a multiple of miimon (129), value rounded to 48891 ms [ 509.769563][T22369] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 509.788843][T22369] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 510.059680][T22383] netem: incorrect ge model size [ 510.066290][T22383] netem: change failed [ 510.225940][ T5876] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 510.386320][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 510.398596][ T5876] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.415069][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 510.433930][ T5876] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 510.462977][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.467899][T22405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7079'. [ 510.475080][ T5876] usb 4-1: config 0 descriptor?? [ 510.566121][ T970] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 510.673494][T22412] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7082'. [ 510.735506][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 510.742740][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.756598][ T970] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 510.775774][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.783870][ T970] usb 5-1: Product: syz [ 510.788189][ T970] usb 5-1: Manufacturer: syz [ 510.810315][ T970] usb 5-1: SerialNumber: syz [ 510.827467][ T970] usb 5-1: config 0 descriptor?? [ 510.904216][T22416] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 510.941574][ T5876] cougar 0003:060B:500A.0051: unexpected long global item [ 510.956623][ T5876] cougar 0003:060B:500A.0051: parse failed [ 510.962637][ T5876] cougar 0003:060B:500A.0051: probe with driver cougar failed with error -22 [ 511.075125][T22420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7086'. [ 511.120397][T22420] tipc: Started in network mode [ 511.133008][ T5876] usb 4-1: USB disconnect, device number 62 [ 511.146531][T22420] tipc: Node identity 40060020000000006e, cluster identity 8 [ 511.261459][ T970] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 511.268568][ T970] usb 5-1: No valid video chain found. [ 511.279048][ T970] usb 5-1: USB disconnect, device number 54 [ 513.077866][T22480] vlan5: entered promiscuous mode [ 513.093287][T22480] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 513.106987][T22480] vlan5: entered allmulticast mode [ 513.112187][T22480] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 513.322651][T22480] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 513.364233][T22480] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 513.782833][T22505] netlink: 277 bytes leftover after parsing attributes in process `syz.6.7122'. [ 513.814372][T22500] kvm: kvm [22499]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003b) = 0x0 [ 514.258415][T22530] openvswitch: netlink: Actions may not be safe on all matching packets [ 514.472338][T15633] tipc: Subscription rejected, illegal request [ 514.764701][T22527] iou-wrk-22525 (22527): drop_caches: 2 [ 515.346872][T22579] Falling back ldisc for ttyS3. [ 515.525606][ T970] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 515.678750][ T970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.690294][ T970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 515.700528][ T970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.710499][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.721704][T22577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 515.731448][ T970] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.874023][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7159'. [ 516.033061][ T970] usb 4-1: USB disconnect, device number 63 [ 516.101279][T22596] Invalid/unusable pipe [ 516.609823][T22621] bond0: entered promiscuous mode [ 516.614934][T22621] bond0: entered allmulticast mode [ 516.620914][T22621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.847469][T22621] bond0 (unregistering): Released all slaves [ 517.108335][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7181'. [ 517.765914][T22672] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7199'. [ 517.863926][T22677] loop8: detected capacity change from 0 to 6 [ 517.876642][T22677] Dev loop8: unable to read RDB block 6 [ 517.882796][T22677] loop8: unable to read partition table [ 517.889268][T22677] loop8: partition table beyond EOD, truncated [ 517.896584][T22677] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 517.896584][T22677] ) failed (rc=-5) [ 518.345962][ T5877] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 518.517601][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.554183][ T5877] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 518.574513][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.596295][ T5877] usb 4-1: config 0 descriptor?? [ 519.030589][ T5877] elecom 0003:056E:00E6.0052: unknown main item tag 0x0 [ 519.056218][ T5877] elecom 0003:056E:00E6.0052: unknown main item tag 0x0 [ 519.077296][ T5877] elecom 0003:056E:00E6.0052: unknown main item tag 0x1 [ 519.094780][ T5877] elecom 0003:056E:00E6.0052: unexpected long global item [ 519.106134][ T5877] elecom 0003:056E:00E6.0052: probe with driver elecom failed with error -22 [ 519.141444][T22717] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 519.160279][T22717] ALSA: mixer_oss: invalid OSS volume '' [ 519.169149][T22717] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 519.182891][T22717] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 519.202300][T22717] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 519.216870][ T5877] usb 4-1: USB disconnect, device number 64 [ 519.323846][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7222'. [ 519.347686][T22725] ipvlan2: entered allmulticast mode [ 519.353198][T22725] veth0_vlan: entered allmulticast mode [ 519.876905][T22754] program syz.3.7236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.202851][T22763] netlink: 'syz.3.7240': attribute type 32 has an invalid length. [ 521.915604][ T5877] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 522.087439][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.099991][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.175549][ T5877] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 522.194636][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.206212][ T5877] usb 4-1: config 0 descriptor?? [ 522.782404][ T5877] pyra 0003:1E7D:2CF6.0053: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 523.198222][T22866] netlink: 'syz.7.7283': attribute type 64 has an invalid length. [ 523.211822][ T5877] pyra 0003:1E7D:2CF6.0053: couldn't init struct pyra_device [ 523.225830][T22866] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 523.242047][ T5877] pyra 0003:1E7D:2CF6.0053: couldn't install mouse [ 523.252959][ T5877] pyra 0003:1E7D:2CF6.0053: probe with driver pyra failed with error -71 [ 523.289757][ T5877] usb 4-1: USB disconnect, device number 65 [ 523.544455][T22879] @: renamed from vlan0 (while UP) [ 523.916030][T22894] program syz.3.7297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.189984][T22909] netlink: 'syz.3.7303': attribute type 8 has an invalid length. [ 524.935538][ T30] audit: type=1400 audit(1729785761.474:605): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=22933 comm="syz.3.7314" key_serial=24135728 key_desc="_uid_ses.0" [ 526.735769][ T5877] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 526.886288][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 526.897734][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.915222][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.944197][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.970936][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 526.986896][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 526.999715][ T5877] usb 4-1: Product: syz [ 527.004053][ T5877] usb 4-1: Manufacturer: syz [ 527.010742][ T5877] usb 4-1: SerialNumber: syz [ 527.028175][ T5877] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input75 [ 527.212097][T23052] netlink: 'syz.6.7366': attribute type 4 has an invalid length. [ 527.233257][ T5877] usb 4-1: USB disconnect, device number 66 [ 527.249962][ T5877] appletouch 4-1:1.0: input: appletouch disconnected [ 528.558864][T23100] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 529.821886][T23168] Process accounting resumed [ 529.855963][T23168] kernel write not supported for file /asound/timers (pid: 23168 comm: syz.0.7416) [ 530.613383][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7428'. [ 531.674423][T23256] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7456'. [ 533.569226][T23330] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7490'. [ 533.622794][T23333] program syz.0.7491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.303981][T23367] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7507'. [ 534.725530][T23295] Bluetooth: hci2: command 0x0406 tx timeout [ 534.794832][T23389] binder: 23387:23389 ioctl c0306201 20000940 returned -14 [ 535.503958][T23410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.872975][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7532'. [ 535.884064][T23424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7532'. [ 535.905160][T23424] vlan5: entered allmulticast mode [ 535.906652][T23426] netlink: 'syz.7.7533': attribute type 1 has an invalid length. [ 535.914023][T23424] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 535.941970][T23426] netlink: 9332 bytes leftover after parsing attributes in process `syz.7.7533'. [ 535.956502][T23426] netlink: 'syz.7.7533': attribute type 1 has an invalid length. [ 536.577945][T23464] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7551'. [ 537.594579][T23520] netlink: 'syz.4.7578': attribute type 6 has an invalid length. [ 537.603496][T23520] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7578'. [ 537.646047][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7579'. [ 537.695824][ T970] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 537.855843][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 537.862871][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.881148][ T970] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 537.890791][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.899577][ T970] usb 4-1: Product: syz [ 537.903917][ T970] usb 4-1: Manufacturer: syz [ 537.908964][ T970] usb 4-1: SerialNumber: syz [ 537.924870][ T970] usb 4-1: config 0 descriptor?? [ 538.027958][T23540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7587'. [ 538.053444][T23540] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7587'. [ 538.078459][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7588'. [ 538.150264][ T970] usb 4-1: Not enough endpoints found in device, aborting! [ 538.339813][ T970] usb 4-1: USB disconnect, device number 67 [ 538.747921][ T970] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 539.018399][ T970] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.036051][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.060990][ T970] usb 5-1: config 0 descriptor?? [ 539.068898][ T970] cp210x 5-1:0.0: cp210x converter detected [ 539.230572][T23594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7613'. [ 539.441414][T23604] cifs: Unknown parameter 'mode' [ 539.472920][ T970] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 539.516238][ T970] usb 5-1: cp210x converter now attached to ttyUSB0 [ 539.691750][ T973] usb 5-1: USB disconnect, device number 55 [ 539.701024][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.723927][ T973] cp210x 5-1:0.0: device disconnected [ 540.425623][ T30] audit: type=1326 audit(1729785776.974:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.481604][ T30] audit: type=1326 audit(1729785776.974:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.575858][ T30] audit: type=1326 audit(1729785777.014:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f451637d0b0 code=0x7ffc0000 [ 540.682007][ T30] audit: type=1326 audit(1729785777.014:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f451637d0b0 code=0x7ffc0000 [ 540.778046][ T30] audit: type=1326 audit(1729785777.014:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.801016][ T30] audit: type=1326 audit(1729785777.014:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.822631][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.829815][ T30] audit: type=1326 audit(1729785777.014:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.852046][ T30] audit: type=1326 audit(1729785777.014:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.873661][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.880869][ T30] audit: type=1326 audit(1729785777.014:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23653 comm="syz.6.7641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451637e719 code=0x7ffc0000 [ 540.969067][T23671] netlink: 'syz.3.7649': attribute type 8 has an invalid length. [ 541.190168][T23684] netlink: 'syz.6.7655': attribute type 12 has an invalid length. [ 541.199577][T23684] netlink: 'syz.6.7655': attribute type 11 has an invalid length. [ 541.208669][T23684] __nla_validate_parse: 1 callbacks suppressed [ 541.208691][T23684] netlink: 190580 bytes leftover after parsing attributes in process `syz.6.7655'. [ 541.960488][T23719] sctp: [Deprecated]: syz.4.7670 (pid 23719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.960488][T23719] Use struct sctp_sack_info instead [ 543.311493][T23775] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.7696'. [ 543.334145][T23775] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 543.364000][T23783] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 543.474441][T23787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7700'. [ 544.928582][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7725'. [ 545.145858][ T973] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 545.314620][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 545.327422][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.349789][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.373189][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 545.392464][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.403430][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.429862][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.443414][ T973] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.451982][ T973] usb 5-1: Manufacturer: syz [ 545.498848][ T973] usb 5-1: config 0 descriptor?? [ 545.568830][T23867] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.7738'. [ 545.599255][T23867] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 545.810840][ T973] rc_core: IR keymap rc-hauppauge not found [ 545.817811][ T973] Registered IR keymap rc-empty [ 545.822848][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 545.846499][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 545.873908][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 545.910657][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input76 [ 545.956766][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 545.996207][T23887] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7745'. [ 546.008561][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.036944][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.086075][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.121458][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.156959][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.186422][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.238686][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.276332][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.295562][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 546.324170][ T973] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 546.332834][ T973] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 546.350379][ T973] usb 5-1: USB disconnect, device number 56 [ 546.382887][ T30] audit: type=1326 audit(1729785782.934:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.418810][ T30] audit: type=1326 audit(1729785782.934:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.449164][ T30] audit: type=1326 audit(1729785782.934:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.491478][ T30] audit: type=1326 audit(1729785782.964:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.522197][ T30] audit: type=1326 audit(1729785782.964:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.552433][ T30] audit: type=1326 audit(1729785782.964:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.589188][ T30] audit: type=1326 audit(1729785782.964:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.612638][ T30] audit: type=1326 audit(1729785782.974:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.643625][ T30] audit: type=1326 audit(1729785782.974:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.683847][ T30] audit: type=1326 audit(1729785782.974:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.3.7752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d49d7e719 code=0x7ffc0000 [ 546.820581][T23917] sctp: [Deprecated]: syz.3.7756 (pid 23917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.820581][T23917] Use struct sctp_sack_info instead [ 547.630718][T23934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7765'. [ 547.754752][T23938] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 549.424615][T23981] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7786'. [ 549.815500][ T5913] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 549.923190][T24007] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7797'. [ 549.934881][T24007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7797'. [ 549.987326][ T5913] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 550.018583][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.045453][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.079897][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.104085][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.133961][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.164429][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.187808][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.216770][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.252600][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.266954][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.282286][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.303862][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.327447][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.349783][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.361285][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.370442][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.370748][T24021] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 550.422024][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.451938][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.461481][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.494338][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.521478][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.530382][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.550011][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.581942][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.604618][ T5913] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 550.624875][ T5913] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 550.633967][T24035] netlink: 'syz.0.7809': attribute type 25 has an invalid length. [ 550.636559][ T5913] usb 5-1: Product: syz [ 550.651725][T24035] netlink: 'syz.0.7809': attribute type 7 has an invalid length. [ 550.653632][ T5913] usb 5-1: Manufacturer: syz [ 550.688933][ T5913] usb 5-1: SerialNumber: syz [ 550.696578][ T5913] usb 5-1: config 0 descriptor?? [ 550.710190][ T5913] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 550.948215][ T970] usb 5-1: USB disconnect, device number 57 [ 550.956983][ T970] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 551.071108][T24052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.186679][T24059] xt_hashlimit: overflow, try lower: 3/0 [ 551.482729][T24073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.842397][T24092] binder: 24091:24092 ioctl 40046205 0 returned -22 [ 552.266719][T24112] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.7844'. [ 552.288739][T24112] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 552.322915][T24115] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.330551][T24115] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.366217][T24115] bridge0: entered promiscuous mode [ 553.078328][T24138] netlink: 'syz.3.7854': attribute type 11 has an invalid length. [ 554.245254][T24192] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7880'. [ 554.686270][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 554.686291][ T30] audit: type=1326 audit(1729785791.234:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.727947][ T30] audit: type=1326 audit(1729785791.234:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.757700][ T30] audit: type=1326 audit(1729785791.234:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.807279][ T30] audit: type=1326 audit(1729785791.234:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.853333][ T30] audit: type=1326 audit(1729785791.234:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.905978][ T30] audit: type=1326 audit(1729785791.234:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.945080][ T30] audit: type=1326 audit(1729785791.234:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 554.990563][ T30] audit: type=1326 audit(1729785791.234:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 555.039049][ T30] audit: type=1326 audit(1729785791.234:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 555.116790][ T30] audit: type=1326 audit(1729785791.234:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24210 comm="syz.4.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3c6f7e719 code=0x7fc00000 [ 555.490248][T24254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7909'. [ 555.759175][T24265] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 555.962371][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7920'. [ 557.713685][T24366] sctp: [Deprecated]: syz.7.7956 (pid 24366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.713685][T24366] Use struct sctp_sack_info instead [ 557.769135][T24368] netlink: 'syz.6.7959': attribute type 1 has an invalid length. [ 557.922067][T24374] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 557.936384][ T5877] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 558.098505][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.109885][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.120551][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 558.129722][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.140041][ T5877] usb 4-1: config 0 descriptor?? [ 558.145654][ T5913] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 558.158151][ T5877] hub 4-1:0.0: USB hub found [ 558.315472][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 558.323483][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.341208][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.351262][ T5913] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 558.365477][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.370729][ T5877] hub 4-1:0.0: 1 port detected [ 558.377266][ T5913] usb 5-1: config 0 descriptor?? [ 558.772306][T24388] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7969'. [ 558.811049][ T5877] usb 4-1: USB disconnect, device number 68 [ 558.833804][ T5913] corsair 0003:1B1C:1B02.0054: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 558.910814][T24395] misc userio: Invalid payload size [ 559.241352][ T5878] usb 5-1: USB disconnect, device number 58 [ 559.432628][T24414] lo speed is unknown, defaulting to 1000 [ 560.407415][T24433] netlink: 'syz.3.7988': attribute type 1 has an invalid length. [ 560.425607][T24433] netlink: 'syz.3.7988': attribute type 4 has an invalid length. [ 560.446901][T24433] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7988'. [ 561.018788][T24453] Process accounting resumed [ 561.466051][ T5877] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 561.615815][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 561.622589][ T5877] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 561.631619][ T5877] usb 5-1: config 0 has no interface number 0 [ 561.638054][ T5877] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 561.648683][ T5877] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 561.659036][ T5877] usb 5-1: config 0 interface 126 has no altsetting 0 [ 561.668532][ T5877] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 561.678122][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.687552][ T5877] usb 5-1: Product: syz [ 561.691760][ T5877] usb 5-1: Manufacturer: syz [ 561.703083][ T5877] usb 5-1: SerialNumber: syz [ 561.710833][ T5877] usb 5-1: config 0 descriptor?? [ 561.716746][T24463] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 561.724090][T24463] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 561.799241][ T970] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 561.919601][T24495] program syz.0.8017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.965920][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 561.972867][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.983984][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.993912][ T970] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 562.004717][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.020079][T24497] sctp: [Deprecated]: syz.0.8018 (pid 24497) Use of int in maxseg socket option. [ 562.020079][T24497] Use struct sctp_assoc_value instead [ 562.036076][ T970] usb 4-1: config 0 descriptor?? [ 562.152799][ T5877] ir_usb 5-1:0.126: IR Dongle converter detected [ 562.365297][ T5877] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 562.461188][ T970] apple 0003:05AC:0247.0055: unknown main item tag 0x0 [ 562.468440][ T970] apple 0003:05AC:0247.0055: unknown main item tag 0x0 [ 562.481650][ T970] apple 0003:05AC:0247.0055: item fetching failed at offset 2/160 [ 562.518630][ T970] apple 0003:05AC:0247.0055: parse failed [ 562.555147][ T970] apple 0003:05AC:0247.0055: probe with driver apple failed with error -22 [ 562.606094][ T5877] usb 5-1: USB disconnect, device number 59 [ 562.657090][ T5877] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 562.686906][ T5877] ir_usb 5-1:0.126: device disconnected [ 562.694900][ T5878] usb 4-1: USB disconnect, device number 69 [ 563.119285][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.193706][T24531] vlan0: entered promiscuous mode [ 563.203490][T24531] vlan0: entered allmulticast mode [ 563.215893][T24531] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 563.223360][T24531] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 563.234805][T24531] team0: Port device vlan0 added [ 563.390971][T24540] pimreg3: entered allmulticast mode [ 564.192847][T24580] netem: change failed [ 565.385705][T24624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8074'. [ 565.419733][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8075'. [ 565.586351][T24636] tun0: tun_chr_ioctl cmd 1074025675 [ 565.591743][T24636] tun0: persist disabled [ 565.910886][T24653] usb usb8: usbfs: process 24653 (syz.4.8088) did not claim interface 0 before use [ 566.363040][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8100'. [ 566.665478][ T5878] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 566.825554][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 566.842125][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.862242][ T5878] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 566.872297][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.883548][ T5878] usb 4-1: Product: syz [ 566.887942][ T5878] usb 4-1: Manufacturer: syz [ 566.892593][ T5878] usb 4-1: SerialNumber: syz [ 566.901417][ T5878] usb 4-1: config 0 descriptor?? [ 566.910717][ T5878] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 566.919024][ T5878] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 567.125251][ T5878] usb 4-1: USB disconnect, device number 70 [ 567.131905][ T5878] ftdi_sio 4-1:0.0: device disconnected [ 567.723930][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 567.723949][ T30] audit: type=1326 audit(1729785804.274:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24709 comm="syz.7.8115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a1357e719 code=0x0 [ 567.779966][T24714] overlayfs: missing 'workdir' [ 568.532191][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8130'. [ 568.856820][T24762] netlink: 'syz.6.8136': attribute type 14 has an invalid length. [ 568.876492][T24762] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8136'. [ 568.910796][T24764] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8137'. [ 569.322577][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8145'. [ 569.360216][T24788] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 674.855327][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 674.862405][ C1] rcu: 0-...!: (0 ticks this GP) idle=372c/1/0x4000000000000000 softirq=91054/91054 fqs=8 [ 674.874283][ C1] rcu: (detected by 1, t=10502 jiffies, g=100481, q=301 ncpus=2) [ 674.882140][ C1] Sending NMI from CPU 1 to CPUs 0: [ 674.882190][ C0] NMI backtrace for cpu 0 [ 674.882210][ C0] CPU: 0 UID: 0 PID: 18685 Comm: ipvs-e:14:0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 674.882230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 674.882245][ C0] RIP: 0010:__lock_acquire+0xce0/0x2050 [ 674.882280][ C0] Code: 60 80 3c 38 00 74 12 48 89 df e8 8b 20 8b 00 48 bf 00 00 00 00 00 fc ff df 45 31 e4 48 89 5c 24 08 4c 8b 33 48 83 7c 24 28 00 <75> 30 48 c7 c0 40 a9 39 9a 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 8b [ 674.882295][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00000046 [ 674.882311][ C0] RAX: 1ffff11004dd8c9a RBX: ffff888026ec64d0 RCX: ffffffff8170588b [ 674.882325][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 674.882336][ C0] RBP: ffff888026ec64e0 R08: ffffffff94293807 R09: 1ffffffff2852700 [ 674.882349][ C0] R10: dffffc0000000000 R11: fffffbfff2852701 R12: 0000000000000000 [ 674.882361][ C0] R13: ffff888026ec64d8 R14: ffffffffffffffff R15: ffff888026ec6500 [ 674.882375][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 674.882389][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.882402][ C0] CR2: 0000000020000040 CR3: 000000007e8e6000 CR4: 00000000003526f0 [ 674.882417][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 674.882428][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 674.882439][ C0] Call Trace: [ 674.882448][ C0] [ 674.882457][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 674.882482][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 674.882534][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.882564][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 674.882588][ C0] ? nmi_handle+0x14f/0x5a0 [ 674.882607][ C0] ? nmi_handle+0x2a/0x5a0 [ 674.882625][ C0] ? __lock_acquire+0xce0/0x2050 [ 674.882651][ C0] ? default_do_nmi+0x63/0x160 [ 674.882674][ C0] ? exc_nmi+0x123/0x1f0 [ 674.882697][ C0] ? end_repeat_nmi+0xf/0x53 [ 674.882717][ C0] ? __lock_acquire+0xc8b/0x2050 [ 674.882743][ C0] ? __lock_acquire+0xce0/0x2050 [ 674.882769][ C0] ? __lock_acquire+0xce0/0x2050 [ 674.882797][ C0] ? __lock_acquire+0xce0/0x2050 [ 674.882823][ C0] [ 674.882829][ C0] [ 674.882843][ C0] lock_acquire+0x1ed/0x550 [ 674.882868][ C0] ? advance_sched+0xa02/0xca0 [ 674.882891][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 674.882917][ C0] ? advance_sched+0x9b4/0xca0 [ 674.882935][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 674.882958][ C0] ? __pfx_lock_release+0x10/0x10 [ 674.882987][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 674.883008][ C0] ? taprio_set_budgets+0x333/0x370 [ 674.883029][ C0] ? advance_sched+0xa02/0xca0 [ 674.883049][ C0] advance_sched+0xa1e/0xca0 [ 674.883068][ C0] ? advance_sched+0xa02/0xca0 [ 674.883088][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 674.883115][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.883145][ C0] ? __pfx_advance_sched+0x10/0x10 [ 674.883164][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 674.883183][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 674.883215][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 674.883234][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 674.883261][ C0] hrtimer_interrupt+0x396/0x990 [ 674.883288][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 674.883309][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 674.883337][ C0] [ 674.883343][ C0] [ 674.883349][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.883368][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 674.883396][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ce e8 33 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 9d 9b f5 65 8b 05 e4 46 3c 74 85 c0 74 43 48 c7 04 24 0e 36 [ 674.883409][ C0] RSP: 0018:ffffc9000b597920 EFLAGS: 00000206 [ 674.883425][ C0] RAX: 7089fa1b39e66d00 RBX: 1ffff920016b2f28 RCX: ffffffff9a39a903 [ 674.883439][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acb40 RDI: 0000000000000001 [ 674.883451][ C0] RBP: ffffc9000b5979b0 R08: ffffffff901bd2af R09: 1ffffffff2037a55 [ 674.883465][ C0] R10: dffffc0000000000 R11: fffffbfff2037a56 R12: dffffc0000000000 [ 674.883479][ C0] R13: 1ffff920016b2f24 R14: ffffc9000b597940 R15: 0000000000000246 [ 674.883500][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.883533][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.883552][ C0] ? enqueue_timer+0x21b/0x570 [ 674.883580][ C0] __mod_timer+0xb89/0xeb0 [ 674.883603][ C0] ? __asan_memset+0x23/0x50 [ 674.883626][ C0] ? __pfx___mod_timer+0x10/0x10 [ 674.883647][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 674.883676][ C0] ? schedule+0x90/0x320 [ 674.883702][ C0] schedule_timeout+0x1b9/0x310 [ 674.883725][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 674.883748][ C0] ? __pfx_process_timeout+0x10/0x10 [ 674.883779][ C0] ip_vs_estimation_kthread+0x2af3/0x3a10 [ 674.883805][ C0] ? ip_vs_estimation_kthread+0x2920/0x3a10 [ 674.883839][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 674.883867][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 674.883895][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.883935][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 674.883962][ C0] ? __kthread_parkme+0x169/0x1d0 [ 674.883989][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 674.884012][ C0] kthread+0x2f0/0x390 [ 674.884028][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 674.884051][ C0] ? __pfx_kthread+0x10/0x10 [ 674.884067][ C0] ret_from_fork+0x4b/0x80 [ 674.884092][ C0] ? __pfx_kthread+0x10/0x10 [ 674.884108][ C0] ret_from_fork_asm+0x1a/0x30 [ 674.884138][ C0] [ 674.884183][ C1] rcu: rcu_preempt kthread starved for 10460 jiffies! g100481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 675.445585][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 675.455595][ C1] rcu: RCU grace-period kthread stack dump: [ 675.461517][ C1] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 675.473333][ C1] Call Trace: [ 675.476636][ C1] [ 675.479603][ C1] __schedule+0x185a/0x4b70 [ 675.484186][ C1] ? __pfx___schedule+0x10/0x10 [ 675.489105][ C1] ? __pfx_lock_release+0x10/0x10 [ 675.494166][ C1] ? __asan_memset+0x23/0x50 [ 675.498794][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 675.504643][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 675.511016][ C1] ? schedule+0x90/0x320 [ 675.515294][ C1] schedule+0x14b/0x320 [ 675.519488][ C1] schedule_timeout+0x1be/0x310 [ 675.524412][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 675.529826][ C1] ? __pfx_process_timeout+0x10/0x10 [ 675.535152][ C1] ? prepare_to_swait_event+0x330/0x350 [ 675.540750][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 675.545631][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 675.550876][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 675.557062][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 675.562385][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.568327][ C1] ? finish_swait+0xd4/0x1e0 [ 675.572956][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 675.577579][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.582805][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 675.588741][ C1] ? __kthread_parkme+0x169/0x1d0 [ 675.593811][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.599036][ C1] kthread+0x2f0/0x390 [ 675.603153][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.608377][ C1] ? __pfx_kthread+0x10/0x10 [ 675.612999][ C1] ret_from_fork+0x4b/0x80 [ 675.617490][ C1] ? __pfx_kthread+0x10/0x10 [ 675.622111][ C1] ret_from_fork_asm+0x1a/0x30 [ 675.626930][ C1] [ 675.629974][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 675.636314][ C1] CPU: 1 UID: 0 PID: 24809 Comm: syz.4.8156 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 675.647100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 675.657181][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 675.663972][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 ee [ 675.683623][ C1] RSP: 0018:ffffc9000ea6f400 EFLAGS: 00000293 [ 675.689750][ C1] RAX: ffffffff8188e8ab RBX: 1ffff110170c8ca5 RCX: ffff88807dba5a00 [ 675.697753][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 675.705748][ C1] RBP: ffffc9000ea6f600 R08: ffffffff8188e87a R09: 1ffffffff2037a55 [ 675.713744][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 675.721734][ C1] R13: ffff8880b8646528 R14: ffff8880b873fc40 R15: 0000000000000000 [ 675.729731][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 675.738683][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.745290][ C1] CR2: 000000110c281910 CR3: 0000000063abc000 CR4: 00000000003526f0 [ 675.753288][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 675.761279][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 675.769270][ C1] Call Trace: [ 675.772604][ C1] [ 675.775488][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 675.781878][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 675.787560][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 675.792915][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 675.798767][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 675.804176][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 675.810454][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 675.815860][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 675.821525][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 675.826754][ C1] ? acct_account_cputime+0x207/0x210 [ 675.832185][ C1] ? update_process_times+0x1ce/0x230 [ 675.837594][ C1] ? tick_nohz_handler+0x37c/0x500 [ 675.842746][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 675.848271][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 675.853669][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 675.859723][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 675.865474][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 675.871575][ C1] ? hrtimer_interrupt+0x396/0x990 [ 675.876748][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 675.882933][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 675.888776][ C1] [ 675.891724][ C1] [ 675.894689][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.900875][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 675.907054][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 675.913242][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 675.919432][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 675.924697][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 675.931052][ C1] ? __pfx_free_pgd_range+0x10/0x10 [ 675.936291][ C1] ? rcu_is_watching+0x15/0xb0 [ 675.941081][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 675.946309][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 675.951469][ C1] flush_tlb_mm_range+0x329/0x5c0 [ 675.956527][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 675.962105][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 675.967251][ C1] tlb_flush_mmu+0x1aa/0x680 [ 675.971878][ C1] ? __pfx_down_write+0x10/0x10 [ 675.976759][ C1] tlb_finish_mmu+0xd4/0x200 [ 675.981390][ C1] exit_mmap+0x496/0xc40 [ 675.985695][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 675.990502][ C1] ? __pfx_exit_aio+0x10/0x10 [ 675.995219][ C1] ? uprobe_clear_state+0x271/0x290 [ 676.000442][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 676.005758][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 676.011027][ C1] __mmput+0x115/0x380 [ 676.015132][ C1] exit_mm+0x220/0x310 [ 676.019241][ C1] ? __pfx_exit_mm+0x10/0x10 [ 676.023861][ C1] ? taskstats_exit+0x326/0xa60 [ 676.028753][ C1] do_exit+0x9b2/0x28e0 [ 676.032949][ C1] ? __pfx_do_exit+0x10/0x10 [ 676.037572][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 676.042990][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.049023][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.055391][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 676.060543][ C1] do_group_exit+0x207/0x2c0 [ 676.065166][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.070401][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 676.075633][ C1] get_signal+0x16a3/0x1740 [ 676.080186][ C1] ? __pfx_get_signal+0x10/0x10 [ 676.085078][ C1] arch_do_signal_or_restart+0x96/0x860 [ 676.090663][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 676.096863][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.102899][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 676.108653][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 676.114242][ C1] do_syscall_64+0x100/0x230 [ 676.118867][ C1] ? clear_bhb_loop+0x35/0x90 [ 676.123574][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.129509][ C1] RIP: 0033:0x7fb3c6f7e719 [ 676.133948][ C1] Code: Unable to access opcode bytes at 0x7fb3c6f7e6ef. [ 676.140982][ C1] RSP: 002b:00007fb3c7d3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 676.149430][ C1] RAX: fffffffffffffe00 RBX: 00007fb3c7135f88 RCX: 00007fb3c6f7e719 [ 676.157440][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3c7135f88 [ 676.165443][ C1] RBP: 00007fb3c7135f80 R08: 0000000000000000 R09: 0000000000000000 [ 676.173438][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3c7135f8c [ 676.181434][ C1] R13: 0000000000000000 R14: 00007ffe10c41940 R15: 00007ffe10c41a28 [ 676.189457][ C1]