last executing test programs: 1m28.860147437s ago: executing program 2 (id=2361): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="5800000015", 0x5}], 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x0, 0x0, 'queue1\x00', 0x1000049}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result={0x4100}}], 0x1c) 1m28.748659501s ago: executing program 2 (id=2363): socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000680)=""/212, 0xd4}], 0x2) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m27.843188222s ago: executing program 2 (id=2375): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x3) 1m27.754461231s ago: executing program 2 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m27.61571905s ago: executing program 2 (id=2382): openat$kvm(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x64, 0xeaff, 0xb, 0x32, 0x0, @loopback, @multicast1}, "3297"}}, 0x24) 1m26.842384359s ago: executing program 2 (id=2397): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="c15467d8cb504b"], 0x4) 1m26.53556358s ago: executing program 32 (id=2397): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="c15467d8cb504b"], 0x4) 994.939894ms ago: executing program 3 (id=3619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043554d00000000000001090224000100005000090400fefd0300010009210480e501220800090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @broadcast, 0x4e23, 0x1, 'dh\x00', 0x3b, 0x619, 0xf}, 0x2c) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() epoll_create1(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 752.201381ms ago: executing program 0 (id=3625): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 752.044811ms ago: executing program 0 (id=3627): listen(0xffffffffffffffff, 0x8) syz_usb_connect(0x3, 0x36, &(0x7f00000012c0)=ANY=[@ANYBLOB="12011003dd71c44051045f505fa50102030a09022400010009f00109046b8c02ff5d810b09050c0410000a2b080905041a"], &(0x7f00000031c0)={0x0, 0x0, 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB]}) 490.05567ms ago: executing program 1 (id=3635): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0xeb12, 0x7, 0x8, 0x1, 0x4, 0x4, "b277af65cde288182033f6bd81f7afc0", 0xa, 0x7e, 0x8, 0x80, 0x4, 0x0, 0x3}) 426.212759ms ago: executing program 1 (id=3637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 407.039761ms ago: executing program 1 (id=3639): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 349.003086ms ago: executing program 3 (id=3640): r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000003680)={'batadv_slave_1\x00', 0x2}) 284.090887ms ago: executing program 4 (id=3641): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x3, 0x5, 0x9, 0x80, 0x2f, 0x0, 0x5, 0xd, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0x40ffff, 0xffff, 0xefffffa8, 0x40000007, 0x40a00000, 0x3, 0x426afed8, 0x920e, 0xffff, 0xe2dd, 0x2, 0x18, 0x7f, 0x3, 0x9, 0x4, 0x4ffca555]}) 284.005713ms ago: executing program 1 (id=3642): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 283.89215ms ago: executing program 3 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000012c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x5}, 0x8, 0x0, 0x6, 0x9, 0x22, 'syz1\x00', "6e7ada19cc9441a4a4fe9a394a40626ccb2ded0f86226b0579775a15021036fb", "3e46f868335865404ccba0a8c41b598c5193492775d4fb71b188e35c1a08b71e", [{0x5, 0x2, {0x0, 0xfff}}, {0x1, 0x7ff, {0x3, 0xd}}, {0x9, 0xe18, {0x1, 0xb0}}, {0x8, 0x9, {0x2, 0x7ff}}, {0x8000, 0x6, {0x1, 0x1}}, {0x8, 0x1800, {0x0, 0x3}}, {0xace8, 0xfffb, {0x0, 0x9}}, {0x8000, 0xe7, {0x0, 0x7}}, {0xfc7, 0x8, {0x3, 0x7}}, {0xf, 0x3ff, {0x2, 0x400}}, {0x1, 0x8, {0x2, 0xc5da}}, {0x8, 0xa, {0x2, 0xfffffffb}}, {0x2, 0xfff7, {0x2, 0x10000}}, {0x9, 0x7, {0x2}}, {0x8, 0x6, {0x2, 0x6}}, {0x6, 0x7, {0x2}}, {0x5, 0x0, {0x3, 0x7}}, {0x0, 0x7, {0x0, 0xa}}, {0x6, 0x1, {0x3}}, {0x6, 0x9, {0x3, 0x785d}}, {0x5, 0x8001, {0x1, 0x4}}, {0x4, 0x1, {0x3, 0x81}}, {0x7, 0x1ff, {0x2, 0x7}}, {0x8, 0x2, {0x0, 0x3}}, {0x223, 0x0, {0x3, 0xfffffe88}}, {0x0, 0x7, {0x2, 0xe}}, {0x1, 0x7, {0x0, 0x8}}, {0xba, 0x6, {0x2, 0xc}}, {0x1fe4, 0x7, {0x1, 0x400}}, {0x7, 0x0, {0x3, 0xfffff000}}, {0x3d9, 0x3, {0x2, 0x480}}, {0x32, 0x0, {0x1, 0x6}}, {0xccf, 0x8, {0x2, 0x2}}, {0x2, 0x1, {0x2, 0x4}}, {0xf195, 0x8, {0x0, 0x6}}, {0x5f, 0xa, {0x0, 0x2}}, {0x89, 0x7, {0x0, 0x7}}, {0xb, 0xdf0, {0x3, 0x5}}, {0x7f, 0x2, {0x3, 0x4}}, {0x1, 0x7, {0x2, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 275.677683ms ago: executing program 4 (id=3644): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) 266.49717ms ago: executing program 1 (id=3645): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0xa, 0x0, 0x3, 0xfffffffc, 0x8, 0x4, 0x8, 0x6}}) 176.142887ms ago: executing program 0 (id=3646): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x21d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x10000000, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 176.053604ms ago: executing program 4 (id=3647): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) close(r0) 175.872116ms ago: executing program 1 (id=3648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043554d00000000000001090224000100005000090400fefd0300010009210480e501220800090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @broadcast, 0x4e23, 0x1, 'dh\x00', 0x3b, 0x619, 0xf}, 0x2c) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() epoll_create1(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 175.782044ms ago: executing program 3 (id=3649): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x10f6ff, 0x0) 116.247642ms ago: executing program 0 (id=3650): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x1400, 0x107fe}}) 116.161161ms ago: executing program 4 (id=3651): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 104.306018ms ago: executing program 0 (id=3652): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x1000000, 0x59455247, 0x640, 0xf0, 0x0, @discrete={0x7fff, 0xfff}}) 86.417284ms ago: executing program 3 (id=3653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {}, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 86.343825ms ago: executing program 4 (id=3654): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 135.877µs ago: executing program 3 (id=3655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@empty, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0xfffffffffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x4}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x10) 53.541µs ago: executing program 0 (id=3656): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 0s ago: executing program 4 (id=3657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) kernel console output (not intermixed with test programs): 64, interface 0, class 0) [ 137.988820][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 138.112916][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 138.130888][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.142753][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.160050][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.181020][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.206931][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.216702][ T43] usb 1-1: Product: syz [ 138.221154][ T43] usb 1-1: Manufacturer: syz [ 138.225783][ T43] usb 1-1: SerialNumber: syz [ 138.455014][ T43] usb 1-1: skipping empty audio interface (v1) [ 138.469090][ T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 138.482759][ T43] usb 1-1: USB disconnect, device number 12 [ 138.491887][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 138.509014][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.580383][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 138.669601][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 138.676446][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.692104][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.701968][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.714876][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.724204][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.737067][ T10] usb 3-1: config 0 descriptor?? [ 138.749509][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.998343][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 139.006626][ T9] em28xx 2-1:0.0: board has no eeprom [ 139.153357][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 139.170816][ T10] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 139.180678][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 139.201025][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input12 [ 139.222451][ T10] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 139.367549][ T5926] usb 3-1: USB disconnect, device number 16 [ 139.589911][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.739550][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 139.746122][ T43] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 139.755536][ T43] usb 1-1: config 0 has no interface number 0 [ 139.762523][ T43] usb 1-1: config 0 interface 89 has no altsetting 0 [ 139.774632][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 139.783927][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.791274][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.799301][ T43] usb 1-1: Product: syz [ 139.803644][ T43] usb 1-1: Manufacturer: syz [ 139.808261][ T43] usb 1-1: SerialNumber: syz [ 139.814485][ T43] usb 1-1: config 0 descriptor?? [ 139.821757][ T43] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 139.831315][ T43] em28xx 1-1:0.89: Video interface 89 found: bulk [ 140.100369][ T8256] em28xx 2-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 140.159864][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 140.167900][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 140.173827][ T2155] em28xx 2-1:0.0: Binding DVB extension [ 140.186806][ T9] usb 2-1: USB disconnect, device number 17 [ 140.204762][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 140.221321][ T2155] em28xx 2-1:0.0: Registering input extension [ 140.228010][ T9] em28xx 2-1:0.0: Closing input extension [ 140.238807][ T9] em28xx 2-1:0.0: Freeing device [ 140.428987][ T43] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 140.819541][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.649242][ T8359] overlayfs: failed to clone upperpath [ 141.818889][ T8370] tipc: Enabling of bearer rejected, already enabled [ 141.832638][ T8370] tipc: Bearer : already 2 bearers with priority 10 [ 141.840740][ T8370] tipc: Bearer : trying with adjusted priority [ 141.848026][ T8370] tipc: Enabling of bearer rejected, failed to enable media [ 141.859641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.860215][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 141.866821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.029972][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 142.036543][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.045693][ T9] usb 2-1: config 0 has no interface number 0 [ 142.048405][ T43] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 142.058970][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.060102][ T43] em28xx 1-1:0.89: board has no eeprom [ 142.077955][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.084304][ T5185] Bluetooth: Unexpected continuation frame (len 30) [ 142.086442][ T9] usb 2-1: Product: syz [ 142.096942][ T9] usb 2-1: Manufacturer: syz [ 142.105560][ T9] usb 2-1: SerialNumber: syz [ 142.119211][ T9] usb 2-1: config 0 descriptor?? [ 142.129750][ T43] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 142.137040][ T43] em28xx 1-1:0.89: analog set to bulk mode. [ 142.143601][ T5926] em28xx 1-1:0.89: Registering V4L2 extension [ 142.147752][ T9] smsc95xx v2.0.0 [ 142.158445][ T43] usb 1-1: USB disconnect, device number 13 [ 142.175132][ T43] em28xx 1-1:0.89: Disconnecting em28xx [ 142.192936][ T5926] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 142.200067][ T5926] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 142.207507][ T5926] em28xx 1-1:0.89: No AC97 audio processor [ 142.216155][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 142.218084][ T5926] usb 1-1: Decoder not found [ 142.230034][ T5926] em28xx 1-1:0.89: failed to create media graph [ 142.236341][ T5926] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 142.244113][ T5926] em28xx 1-1:0.89: Registering snapshot button... [ 142.252260][ T5926] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14 [ 142.264779][ T5926] em28xx 1-1:0.89: Remote control support is not available for this card. [ 142.274086][ T43] em28xx 1-1:0.89: Closing input extension [ 142.280973][ T43] em28xx 1-1:0.89: Deregistering snapshot button [ 142.293475][ T43] em28xx 1-1:0.89: Freeing device [ 142.552672][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 142.598175][ T8399] serio: Serial port ptm0 [ 142.663361][ T8406] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 142.881735][ T8417] syzkaller0: entered promiscuous mode [ 142.887241][ T8417] syzkaller0: entered allmulticast mode [ 142.899579][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.906697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.134312][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 143.152286][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.162887][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.174746][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.186427][ T9] usb 2-1: USB disconnect, device number 18 [ 143.234498][ T30] audit: type=1326 audit(1756517478.747:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.0.996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc4378ebe9 code=0x0 [ 143.256251][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.483898][ T8438] overlayfs: failed to clone upperpath [ 143.533714][ T8444] tipc: Enabled bearer , priority 10 [ 143.548635][ T8444] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 143.557927][ T8444] tipc: Enabled bearer , priority 10 [ 143.939634][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.946794][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.959739][ T8463] @ÿ: renamed from veth0_vlan (while UP) [ 144.238126][ T8476] NILFS (rnullb0): couldn't find nilfs on the device [ 144.301402][ T8476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.307692][ T8476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.315449][ T8476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 144.324997][ T8476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.331169][ T8476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.360814][ T8476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.380107][ T8476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.649869][ T2155] tipc: Node number set to 2636305537 [ 144.686218][ T8488] netdevsim netdevsim2: Direct firmware load for I failed with error -2 [ 144.698091][ T8488] netdevsim netdevsim2: Falling back to sysfs fallback for: I [ 144.979604][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.986787][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.298117][ T8501] Set syz0 is full, maxelem 0 reached [ 145.540264][ T30] audit: type=1326 audit(1756517481.047:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.581036][ T30] audit: type=1326 audit(1756517481.047:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.603361][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.608359][ T8519] overlayfs: failed to clone upperpath [ 145.614236][ T8517] pimreg: entered allmulticast mode [ 145.683460][ T30] audit: type=1326 audit(1756517481.047:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.705749][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.752373][ T30] audit: type=1326 audit(1756517481.047:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.772513][ T8524] syzkaller0: entered promiscuous mode [ 145.781374][ T8524] syzkaller0: entered allmulticast mode [ 145.788345][ T64] syzkaller0: tun_net_xmit 48 [ 145.803616][ T8527] syzkaller0: create flow: hash 1699225611 index 1 [ 145.810271][ T30] audit: type=1326 audit(1756517481.047:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.834190][ T30] audit: type=1326 audit(1756517481.047:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.861228][ T30] audit: type=1326 audit(1756517481.047:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.885410][ T30] audit: type=1326 audit(1756517481.047:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 145.912239][ T8524] syzkaller0: delete flow: hash 1699225611 index 1 [ 145.922450][ T30] audit: type=1326 audit(1756517481.087:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8298ebe9 code=0x7ff00000 [ 146.019573][ C1] net_ratelimit: 1 callbacks suppressed [ 146.019591][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.032327][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.127976][ T8535] binder_alloc: 8534: pid 8534 spamming oneway? 1 buffers allocated for a total size of 4096 [ 146.357763][ T5185] Bluetooth: hci2: command 0x0405 tx timeout [ 146.358058][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.865386][ T8563] syzkaller0: entered promiscuous mode [ 146.871290][ T8563] syzkaller0: entered allmulticast mode [ 147.049606][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 147.059633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.066898][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.202711][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.211900][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.220641][ T10] usb 3-1: Product: syz [ 147.224803][ T10] usb 3-1: Manufacturer: syz [ 147.229402][ T10] usb 3-1: SerialNumber: syz [ 147.235293][ T10] usb 3-1: config 0 descriptor?? [ 147.439586][ T5926] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.447401][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.589843][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 147.600335][ T5926] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.608632][ T5926] usb 1-1: config 0 has no interface number 0 [ 147.615089][ T5926] usb 1-1: config 0 interface 184 has no altsetting 0 [ 147.624563][ T5926] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.637401][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.648854][ T5926] usb 1-1: Product: syz [ 147.653798][ T5926] usb 1-1: Manufacturer: syz [ 147.659005][ T5926] usb 1-1: SerialNumber: syz [ 147.670320][ T5926] usb 1-1: config 0 descriptor?? [ 147.678220][ T5926] smsc75xx v1.0.0 [ 148.099596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.106823][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.282205][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 148.301377][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.420202][ T5185] Bluetooth: hci2: command 0x0405 tx timeout [ 148.426341][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.861234][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 148.890319][ T10] usb 3-1: USB disconnect, device number 17 [ 148.914772][ T8598] overlayfs: failed to clone upperpath [ 149.139606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.146970][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.220932][ T8613] syz_tun: entered allmulticast mode [ 149.919546][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.933294][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 149.947528][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 149.957653][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 149.969397][ T5926] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.980745][ T5926] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 149.998300][ T5926] usb 1-1: USB disconnect, device number 14 [ 150.080279][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 150.087704][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 150.105280][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.114843][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.136283][ T10] usb 3-1: Product: syz [ 150.140784][ T10] usb 3-1: Manufacturer: syz [ 150.145682][ T10] usb 3-1: SerialNumber: syz [ 150.159821][ T10] usb 3-1: config 0 descriptor?? [ 150.174802][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.179681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.185784][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 150.191157][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.499804][ T5185] Bluetooth: hci2: command 0x0405 tx timeout [ 150.506441][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.781808][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 151.192473][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 151.200574][ T10] em28xx 3-1:0.0: board has no eeprom [ 151.219665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.226821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.239735][ T5926] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.389582][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 151.397597][ T5926] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 151.407060][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.415128][ T5926] usb 1-1: Product: syz [ 151.419312][ T5926] usb 1-1: Manufacturer: syz [ 151.424069][ T5926] usb 1-1: SerialNumber: syz [ 151.430673][ T5926] usb 1-1: config 0 descriptor?? [ 151.671726][ T5926] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 151.679002][ T5926] gspca_sunplus: reg_w_riv err -71 [ 151.684580][ T5926] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 151.701719][ T5926] usb 1-1: USB disconnect, device number 15 [ 151.716010][ T8668] kvm: pic: non byte write [ 151.805242][ T8677] tipc: Enabled bearer , priority 0 [ 152.259596][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.261679][ T8628] em28xx 3-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 152.266755][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.295539][ T8697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.319576][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 152.332397][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 152.345618][ T9] em28xx 3-1:0.0: Binding DVB extension [ 152.352189][ T8697] kvm: pic: level sensitive irq not supported [ 152.352265][ T8697] kvm: pic: non byte read [ 152.364684][ T8697] kvm: pic: level sensitive irq not supported [ 152.364741][ T8697] kvm: pic: non byte read [ 152.375640][ T10] usb 3-1: USB disconnect, device number 18 [ 152.402282][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 152.416881][ T8697] kvm: pic: level sensitive irq not supported [ 152.416995][ T8697] kvm: pic: non byte read [ 152.423893][ T8707] tipc: Enabled bearer , priority 0 [ 152.440793][ T8697] kvm: pic: level sensitive irq not supported [ 152.440854][ T8697] kvm: pic: non byte read [ 152.468808][ T9] em28xx 3-1:0.0: Registering input extension [ 152.480238][ T8707] syzkaller0: entered promiscuous mode [ 152.489680][ T10] em28xx 3-1:0.0: Closing input extension [ 152.495741][ T8707] syzkaller0: entered allmulticast mode [ 152.518542][ T8707] tipc: Resetting bearer [ 152.527059][ T8705] tipc: Resetting bearer [ 152.560003][ T10] em28xx 3-1:0.0: Freeing device [ 152.568435][ T8705] tipc: Disabling bearer [ 152.581059][ T5867] Bluetooth: hci2: command 0x0405 tx timeout [ 152.743237][ T8709] kvm: pic: non byte write [ 152.986863][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 152.986882][ T30] audit: type=1804 audit(1756517488.497:151): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1107" name="/newroot/200/file1" dev="fuse" ino=1 res=1 errno=0 [ 153.049233][ T8729] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 153.057754][ T30] audit: type=1800 audit(1756517488.497:152): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1107" name="/" dev="fuse" ino=1 res=0 errno=0 [ 153.282735][ T8743] netlink: 'syz.2.1115': attribute type 4 has an invalid length. [ 153.299590][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.306698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.669851][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.830085][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 153.915814][ T10] usb 2-1: config 0 has no interfaces? [ 153.937887][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 153.956649][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.967368][ T10] usb 2-1: config 0 descriptor?? [ 154.189804][ T9] usb 2-1: USB disconnect, device number 19 [ 154.291033][ T2155] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.339600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.346705][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.543396][ T2155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.556961][ T2155] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.567517][ T2155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.584581][ T2155] usb 1-1: config 0 descriptor?? [ 154.596307][ T2155] pwc: Askey VC010 type 2 USB webcam detected. [ 154.749609][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 154.899562][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 154.906080][ T9] usb 2-1: config 0 has no interfaces? [ 154.911708][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.920885][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.930961][ T9] usb 2-1: config 0 descriptor?? [ 154.995826][ T2155] pwc: recv_control_msg error -32 req 02 val 2b00 [ 155.003034][ T2155] pwc: recv_control_msg error -32 req 02 val 2700 [ 155.010684][ T2155] pwc: recv_control_msg error -32 req 02 val 2c00 [ 155.017840][ T2155] pwc: recv_control_msg error -32 req 04 val 1000 [ 155.025224][ T2155] pwc: recv_control_msg error -32 req 04 val 1300 [ 155.033851][ T2155] pwc: recv_control_msg error -32 req 04 val 1400 [ 155.040913][ T2155] pwc: recv_control_msg error -32 req 02 val 2000 [ 155.048294][ T2155] pwc: recv_control_msg error -32 req 02 val 2100 [ 155.055590][ T2155] pwc: recv_control_msg error -32 req 04 val 1500 [ 155.062948][ T2155] pwc: recv_control_msg error -32 req 02 val 2500 [ 155.095556][ T8783] netlink: 'syz.3.1130': attribute type 27 has an invalid length. [ 155.120312][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.147832][ T8752] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 155.166748][ T10] usb 2-1: USB disconnect, device number 20 [ 155.194222][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.205602][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.264164][ T24] syz1: Port: 1 Link DOWN [ 155.270829][ T8784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.284840][ T2155] pwc: recv_control_msg error -71 req 02 val 2600 [ 155.291805][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.302249][ T2155] pwc: recv_control_msg error -71 req 02 val 2900 [ 155.308904][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.318122][ T2155] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.326247][ T2155] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.328938][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.333840][ T2155] pwc: recv_control_msg error -71 req 04 val 1200 [ 155.348885][ T2155] pwc: Registered as video103. [ 155.354964][ T2155] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 155.373929][ T2155] usb 1-1: USB disconnect, device number 16 [ 155.389633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.396748][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.429710][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.436891][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.179591][ T2155] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 157.332246][ T2155] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 157.341630][ T2155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.351871][ T2155] usb 2-1: config 0 descriptor?? [ 157.359306][ T2155] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 157.459664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.466771][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.524085][ T8845] fuse: Bad value for 'fd' [ 157.716151][ T8855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 157.729349][ T8855] kvm: pic: non byte read [ 157.734814][ T8855] kvm: pic: level sensitive irq not supported [ 157.734936][ T8855] kvm: pic: non byte read [ 157.971819][ T8871] overlayfs: failed to clone upperpath [ 157.979410][ T8871] fuse: Bad value for 'fd' [ 158.499598][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.506779][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.104259][ T8902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.371131][ T2155] usb 2-1: USB disconnect, device number 21 [ 159.539594][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.546677][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.665050][ T8906] overlayfs: failed to clone upperpath [ 160.105862][ T8928] could not allocate digest TFM handle cryptd(streebog512-generic) [ 160.266515][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.579594][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.586744][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.687094][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 160.782842][ T8962] overlayfs: failed to clone upperpath [ 160.791667][ T8962] fuse: Bad value for 'fd' [ 161.319618][ T981] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 161.471848][ T981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.482718][ T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.493254][ T981] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.502421][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.511354][ T981] usb 3-1: Product: syz [ 161.515527][ T981] usb 3-1: Manufacturer: syz [ 161.520150][ T981] usb 3-1: SerialNumber: syz [ 161.629870][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.637146][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.691897][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.725827][ T9017] overlayfs: failed to clone upperpath [ 161.734973][ T981] usb 3-1: 0:2 : does not exist [ 161.744360][ T981] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 161.780831][ T981] usb 3-1: USB disconnect, device number 19 [ 161.808601][ T7408] udevd[7408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.858424][ T9022] tipc: Enabling of bearer rejected, failed to enable media [ 162.326234][ T9043] binder: 9042:9043 ioctl c0306201 200000000480 returned -14 [ 162.589549][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 162.659612][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.666735][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.740851][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.751892][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.761034][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.771157][ T9] usb 3-1: config 0 descriptor?? [ 162.778624][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 162.858850][ T9050] overlayfs: failed to clone upperpath [ 163.295792][ T30] audit: type=1326 audit(1756517498.807:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.1.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63878ebe9 code=0x7fc00000 [ 163.372508][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.399830][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.407107][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 163.427297][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 163.437570][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 163.445470][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 163.460144][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 163.467150][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 163.475509][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 163.483523][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 163.491363][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 163.699187][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.706150][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.709615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.713197][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.719751][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.726934][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.741504][ T9] pwc: Registered as video103. [ 163.747369][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 163.760908][ T9] usb 3-1: USB disconnect, device number 20 [ 164.609305][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 164.728289][ T9096] fuse: Bad value for 'fd' [ 164.739585][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.746724][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.766928][ T9099] overlayfs: failed to clone upperpath [ 164.816771][ T9100] kvm: pic: non byte write [ 165.200269][ T5926] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 165.359598][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 165.366685][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.376955][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.387878][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.397685][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.411371][ T5926] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.420599][ T5926] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.428651][ T5926] usb 3-1: Manufacturer: syz [ 165.434764][ T5926] usb 3-1: config 0 descriptor?? [ 165.663422][ T10] usb 3-1: USB disconnect, device number 21 [ 165.779590][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.786772][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.079044][ T9163] bond0: (slave wlan1): Releasing backup interface [ 166.452487][ T5926] IPVS: starting estimator thread 0... [ 166.454610][ T9175] autofs: Bad value for 'fd' [ 166.466117][ T9175] tipc: Enabled bearer , priority 10 [ 166.529700][ T981] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 166.549571][ T9176] IPVS: using max 43 ests per chain, 103200 per kthread [ 166.562278][ T9184] vxcan1: entered allmulticast mode [ 166.691883][ T981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.702799][ T981] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.713513][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.724201][ T981] usb 3-1: config 0 descriptor?? [ 166.736380][ T981] pwc: Askey VC010 type 2 USB webcam detected. [ 166.819658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.826862][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.143085][ T981] pwc: recv_control_msg error -32 req 02 val 2b00 [ 167.150113][ T981] pwc: recv_control_msg error -32 req 02 val 2700 [ 167.156935][ T981] pwc: recv_control_msg error -32 req 02 val 2c00 [ 167.164541][ T981] pwc: recv_control_msg error -32 req 04 val 1000 [ 167.171505][ T981] pwc: recv_control_msg error -32 req 04 val 1300 [ 167.178391][ T981] pwc: recv_control_msg error -32 req 04 val 1400 [ 167.185544][ T981] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.192464][ T981] pwc: recv_control_msg error -32 req 02 val 2100 [ 167.199639][ T981] pwc: recv_control_msg error -32 req 04 val 1500 [ 167.206528][ T981] pwc: recv_control_msg error -32 req 02 val 2500 [ 167.213508][ T981] pwc: recv_control_msg error -32 req 02 val 2400 [ 167.220438][ T981] pwc: recv_control_msg error -32 req 02 val 2600 [ 167.227274][ T981] pwc: recv_control_msg error -32 req 02 val 2900 [ 167.441406][ T981] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.448157][ T981] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.457410][ T981] pwc: Registered as video103. [ 167.463316][ T981] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 167.481929][ T981] usb 3-1: USB disconnect, device number 22 [ 167.603397][ T5926] tipc: Node number set to 2547971344 [ 167.859628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.866824][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.105194][ T9226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.419606][ T5926] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 168.569599][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 168.578021][ T5926] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 168.587268][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.595325][ T5926] usb 3-1: Product: syz [ 168.599590][ T5926] usb 3-1: Manufacturer: syz [ 168.604287][ T5926] usb 3-1: SerialNumber: syz [ 168.610185][ T5926] usb 3-1: config 0 descriptor?? [ 168.616808][ T5926] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 168.899621][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.906684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.065353][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 169.949654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.956786][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.809140][ T5926] gspca_stk1135: reg_w 0x200 err -71 [ 170.818625][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.826635][ T5926] gspca_stk1135: Sensor write failed [ 170.832654][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.839161][ T5926] gspca_stk1135: Sensor write failed [ 170.844958][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.852166][ T5926] gspca_stk1135: Sensor read failed [ 170.857639][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.864502][ T5926] gspca_stk1135: Sensor read failed [ 170.866425][ T9336] sctp: [Deprecated]: syz.3.1340 (pid 9336) Use of int in max_burst socket option. [ 170.866425][ T9336] Use struct sctp_assoc_value instead [ 170.870096][ T5926] gspca_stk1135: Detected sensor type unknown (0x0) [ 170.891606][ T9336] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 170.891879][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.907014][ T5926] gspca_stk1135: Sensor read failed [ 170.912839][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.920418][ T5926] gspca_stk1135: Sensor read failed [ 170.925664][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.932505][ T5926] gspca_stk1135: Sensor write failed [ 170.937819][ T5926] gspca_stk1135: serial bus timeout: status=0x00 [ 170.944595][ T5926] gspca_stk1135: Sensor write failed [ 170.950591][ T5926] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 170.961890][ T5926] usb 3-1: USB disconnect, device number 23 [ 170.989595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.996769][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.008009][ T9342] afs: Unknown parameter 'd' [ 171.013655][ T9342] afs: Unknown parameter 'd' [ 171.113008][ T9346] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 171.123614][ T9346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.659650][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 171.811534][ T10] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 171.821187][ T10] usb 3-1: config 0 has no interface number 0 [ 171.828970][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 171.839408][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.847608][ T10] usb 3-1: Product: syz [ 171.851839][ T10] usb 3-1: Manufacturer: syz [ 171.856663][ T10] usb 3-1: SerialNumber: syz [ 171.863106][ T10] usb 3-1: config 0 descriptor?? [ 172.019658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.026941][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.099278][ T10] pl2303 3-1:0.161: required endpoints missing [ 172.113764][ T10] usb 3-1: USB disconnect, device number 24 [ 172.868963][ T9423] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 173.059656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.066883][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.147417][ T5867] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 173.239559][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 173.402892][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 173.412157][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.420492][ T10] usb 3-1: Product: syz [ 173.424679][ T10] usb 3-1: Manufacturer: syz [ 173.429307][ T10] usb 3-1: SerialNumber: syz [ 173.955057][ T9461] netlink: 'syz.1.1391': attribute type 11 has an invalid length. [ 173.996430][ T5867] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 174.004216][ T5867] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 174.099666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.106928][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.633910][ T24] libceph: connect (1)[c::]:6789 error -97 [ 174.644711][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 174.685545][ T24] libceph: connect (1)[c::]:6789 error -97 [ 174.693336][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 174.919988][ T24] libceph: connect (1)[c::]:6789 error -97 [ 174.926184][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 174.967138][ T24] libceph: connect (1)[c::]:6789 error -97 [ 174.988636][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 175.149640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.156958][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.408639][ T9471] ceph: No mds server is up or the cluster is laggy [ 175.416733][ T9474] ceph: No mds server is up or the cluster is laggy [ 175.500592][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 175.507228][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 175.514565][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 175.656232][ T9504] /dev/rnullb0: Can't lookup blockdev [ 175.690989][ T9503] infiniband syz0: set active [ 175.691734][ T9] wlan1 speed is unknown, defaulting to 1000 [ 175.703012][ T9503] infiniband syz0: added wlan1 [ 175.729830][ T9503] RDS/IB: syz0: added [ 175.735125][ T9503] smc: adding ib device syz0 with port count 1 [ 175.741907][ T9503] smc: ib device syz0 port 1 has pnetid [ 175.748279][ T9] wlan1 speed is unknown, defaulting to 1000 [ 175.754721][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 175.870317][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 175.878094][ T5867] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 175.921896][ T5867] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 175.981009][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 176.084373][ T5867] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 176.105157][ T9503] wlan1 speed is unknown, defaulting to 1000 [ 176.117463][ T5867] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 176.179658][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.186998][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.293019][ T5867] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 177.008353][ T5867] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 177.098111][ T5867] Bluetooth: hci1: unexpected event for opcode 0x080b [ 177.219617][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.226894][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.245037][ T5867] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 177.375300][ T9631] IPVS: Error connecting to the multicast addr [ 177.496965][ T5867] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 177.863368][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 177.881222][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 177.895980][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.923087][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 177.935549][ T10] usb 3-1: USB disconnect, device number 25 [ 177.994858][ T5867] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 178.134798][ T9681] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 178.159668][ T5867] Bluetooth: hci1: Malformed LE Event: 0x0b [ 178.259645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.266877][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.344250][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 178.401726][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 178.532730][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 178.733469][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1510'. [ 178.744384][ T9735] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 179.299684][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.307079][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.422268][ T5867] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 179.658175][ T9747] syz.2.1515 (9747): drop_caches: 2 [ 179.731031][ T5867] Bluetooth: hci2: ACL packet too small [ 179.750565][ T9802] netlink: 'syz.2.1542': attribute type 6 has an invalid length. [ 180.146797][ T9842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1561'. [ 180.186740][ T9842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 180.266196][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1565'. [ 180.339629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.346798][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.459595][ T9872] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 180.490231][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.507885][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.515178][ T9872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.532229][ T9872] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 180.909381][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1598'. [ 181.038365][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 181.973793][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 182.062240][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 182.268394][T10060] xt_socket: unknown flags 0xe4 [ 182.419613][ C1] net_ratelimit: 4 callbacks suppressed [ 182.419633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.432748][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.749520][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 182.901164][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.921339][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.939711][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 182.948866][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.969920][ T10] usb 3-1: config 0 descriptor?? [ 183.345875][ T5867] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 183.459631][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.466884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.594667][ T10] usb 3-1: string descriptor 0 read error: -71 [ 183.611591][ T10] uclogic 0003:256C:006E.000A: failed retrieving string descriptor #200: -71 [ 183.620645][ T10] uclogic 0003:256C:006E.000A: failed retrieving pen parameters: -71 [ 183.629165][ T10] uclogic 0003:256C:006E.000A: failed probing pen v2 parameters: -71 [ 183.637352][ T10] uclogic 0003:256C:006E.000A: failed probing parameters: -71 [ 183.645393][ T10] uclogic 0003:256C:006E.000A: probe with driver uclogic failed with error -71 [ 183.663394][ T10] usb 3-1: USB disconnect, device number 26 [ 183.855114][T10131] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 184.509635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.516867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.658199][T10191] tipc: Enabling of bearer rejected, already enabled [ 185.445591][ T5867] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 185.539634][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.554098][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.968310][T10282] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.000412][ T5867] Bluetooth: hci1: Unable to find connection for big 0x00 [ 186.197471][T10303] tipc: Started in network mode [ 186.210358][T10303] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 186.237725][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 186.579640][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.586894][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.722632][T10350] __nla_validate_parse: 2 callbacks suppressed [ 186.722657][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 186.852104][T10360] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1802'. [ 187.219906][ T981] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 187.379522][ T5867] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 187.387852][ T5867] Bluetooth: hci1: Injecting HCI hardware error event [ 187.395013][ T5867] Bluetooth: hci1: hardware error 0x00 [ 187.402412][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.411998][ T981] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 187.423460][ T981] usb 3-1: config 1 interface 0 has no altsetting 0 [ 187.433249][ T981] usb 3-1: string descriptor 0 read error: -22 [ 187.441676][ T981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 187.451873][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.463246][T10372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.474164][ T981] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 187.619647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.626940][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.044085][ T5185] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 188.077366][ T5219] bcm5974 3-1:1.0: could not read from device [ 188.087305][ T5219] bcm5974 3-1:1.0: could not read from device [ 188.093911][ T981] usb 3-1: USB disconnect, device number 27 [ 188.102917][ T9959] bcm5974 3-1:1.0: could not read from device [ 188.109225][ T5219] bcm5974 3-1:1.0: could not read from device [ 188.122845][ T5219] bcm5974 3-1:1.0: could not read from device [ 188.659638][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.667007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.459546][ T5867] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 189.699659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.706862][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.869516][ T981] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 190.029923][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 190.058977][ T981] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.069660][ T981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.080937][ T981] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 190.100823][ T981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.119587][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.127843][ T981] usb 3-1: SerialNumber: syz [ 190.149064][ T981] hub 3-1:1.0: bad descriptor, ignoring hub [ 190.155856][ T981] hub 3-1:1.0: probe with driver hub failed with error -5 [ 190.170405][ T981] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 190.449773][ T9] usb 3-1: USB disconnect, device number 28 [ 190.749606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.756794][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.500489][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 191.669523][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 191.675957][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.682809][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 191.692027][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.703731][ T10] usb 3-1: config 0 descriptor?? [ 191.779762][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.786995][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.125409][ T10] hid (null): global environment stack underflow [ 192.133638][ T10] hid (null): report_id 0 is invalid [ 192.140707][ T10] hid (null): global environment stack underflow [ 192.147381][ T10] hid (null): unknown global tag 0xc [ 192.154852][ T10] hid (null): report_id 25068 is invalid [ 192.160940][ T10] hid (null): report_id 0 is invalid [ 192.166284][ T10] hid (null): global environment stack overflow [ 192.175470][ T10] hid (null): unknown global tag 0xc [ 192.183715][ T10] hid (null): unknown global tag 0x58 [ 192.329854][ T10] usb 3-1: USB disconnect, device number 29 [ 192.819627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.826868][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.189525][ T981] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 193.219657][ T5867] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 193.228054][ T5867] Bluetooth: hci2: Injecting HCI hardware error event [ 193.236862][ T5185] Bluetooth: hci2: hardware error 0x00 [ 193.341056][ T981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.352975][ T981] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.363785][ T981] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.381499][ T981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 193.395744][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.413047][ T981] usb 3-1: Product: syz [ 193.420255][ T981] usb 3-1: Manufacturer: syz [ 193.424876][ T981] usb 3-1: SerialNumber: syz [ 193.457329][ T981] hub 3-1:1.0: bad descriptor, ignoring hub [ 193.466499][ T981] hub 3-1:1.0: probe with driver hub failed with error -5 [ 193.661032][ T981] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 193.859624][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.866864][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.959978][ T24] usb 3-1: USB disconnect, device number 30 [ 193.968624][ T24] usblp0: removed [ 194.350602][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.356939][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759614][ T981] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 194.899632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.906850][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.914339][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 194.920843][ T981] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.929037][ T981] usb 3-1: config 0 has no interface number 0 [ 194.947329][ T981] usb 3-1: config 0 interface 184 has no altsetting 0 [ 194.956197][ T981] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.975247][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.985684][ T981] usb 3-1: Product: syz [ 194.989948][ T981] usb 3-1: Manufacturer: syz [ 194.994547][ T981] usb 3-1: SerialNumber: syz [ 195.010113][ T981] usb 3-1: config 0 descriptor?? [ 195.019688][ T981] smsc75xx v1.0.0 [ 195.302223][ T5185] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 195.831830][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 195.844603][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.854470][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 195.866682][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 195.876646][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 195.887323][ T981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.897512][ T981] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.913128][ T981] usb 3-1: USB disconnect, device number 31 [ 195.939615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.946699][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.979629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.986888][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.589622][ T5926] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 197.739635][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 197.747209][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.758638][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.780173][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.789309][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.812292][ T5926] usb 3-1: config 0 descriptor?? [ 197.818976][ T5926] hub 3-1:0.0: USB hub found [ 198.019627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.026876][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.042060][ T5926] hub 3-1:0.0: 1 port detected [ 198.245338][ T5926] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 198.257871][ T5926] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 198.269546][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 198.275550][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 198.310227][ T5926] usb 3-1: USB disconnect, device number 32 [ 198.655652][T10904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.726239][T10904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.790993][T10904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.852067][T10904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.971894][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.998118][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.036799][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.053161][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.061589][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.061794][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.477662][ T1159] tipc: Subscription rejected, illegal request [ 200.099625][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.106949][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.287501][T10959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2075'. [ 200.449610][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 200.616622][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.630508][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 200.644565][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.657595][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 200.673113][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.682823][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.692920][ T9] usb 3-1: Manufacturer: syz [ 200.703604][ T9] usb 3-1: config 0 descriptor?? [ 200.736842][T10988] sctp: [Deprecated]: syz.0.2089 (pid 10988) Use of int in max_burst socket option deprecated. [ 200.736842][T10988] Use struct sctp_assoc_value instead [ 200.960263][ T9] rc_core: IR keymap rc-hauppauge not found [ 200.967514][ T9] Registered IR keymap rc-empty [ 200.975156][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.999649][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.021550][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.034799][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 201.054367][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.080709][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.100726][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.120624][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.139633][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.139627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.139820][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.169641][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.189853][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.220738][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.239667][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.269633][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 201.300673][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 201.327683][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 201.346852][ T9] usb 3-1: USB disconnect, device number 33 [ 201.899570][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 202.059585][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 202.069667][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.081140][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.096561][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.111440][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.131235][ T9] usb 3-1: config 0 descriptor?? [ 202.179705][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.186956][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.572357][ T9] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 202.579440][ T9] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 202.597973][ T9] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 202.627946][ T9] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 202.635140][ T9] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 202.643381][ T9] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 202.776725][ T9] usb 3-1: USB disconnect, device number 34 [ 203.205434][T11000] net_ratelimit: 2 callbacks suppressed [ 203.205453][T11000] Set syz1 is full, maxelem 65536 reached [ 203.219657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.226826][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.939512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.259615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.266997][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.979512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.049541][ T981] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 205.210151][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 205.216925][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.269589][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.279382][ T981] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 205.297298][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.305528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.305751][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.350897][ T981] usb 3-1: config 0 descriptor?? [ 205.771362][ T981] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 205.778511][ T981] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 205.799644][ T981] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 205.822865][ T981] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 205.839596][ T981] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 205.857368][ T981] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 205.985994][ T981] usb 3-1: USB disconnect, device number 35 [ 206.019543][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.058513][T11189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2172'. [ 206.214282][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 206.525688][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2184'. [ 206.592757][T11218] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2186'. [ 206.875582][T11235] Bluetooth: MGMT ver 1.23 [ 207.032128][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2195'. [ 208.199634][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 208.349549][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 208.365748][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.379686][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.395636][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.409397][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.429628][ C1] net_ratelimit: 6 callbacks suppressed [ 208.429645][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.444559][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.469502][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.490283][ T5895] usb 3-1: config 0 descriptor?? [ 208.721011][T11318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.924489][ T5895] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 208.939845][ T5895] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 208.965105][ T5895] HID 045e:07da: Invalid code 65791 type 1 [ 209.016503][ T5895] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input21 [ 209.051345][ T5895] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 209.139511][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.147680][ T5895] usb 3-1: USB disconnect, device number 36 [ 209.177879][T11329] fido_id[11329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 209.221036][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 209.230905][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 209.266478][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 209.469624][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.476887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.179522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.303445][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 210.509617][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.516865][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.603267][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 210.643423][T11409] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 210.643423][T11409] The task syz.0.2257 (11409) triggered the difference, watch for misbehavior. [ 211.219506][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.449549][ T981] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 211.549606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.600705][ T981] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.611734][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.623391][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.633205][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.647208][ T981] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.656530][ T981] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.664732][ T981] usb 3-1: Manufacturer: syz [ 211.674172][ T981] usb 3-1: config 0 descriptor?? [ 212.100575][ T981] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 212.128388][ T981] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 212.361770][ T10] usb 3-1: USB disconnect, device number 37 [ 213.288567][T11523] overlayfs: failed to clone upperpath [ 213.519586][ T981] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 213.619616][ C1] net_ratelimit: 5 callbacks suppressed [ 213.619632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.632550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.669618][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 213.678430][ T981] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 213.696944][ T981] usb 3-1: config 1 has no interface number 0 [ 213.707097][ T981] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 213.732696][ T981] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 213.775675][ T981] usb 3-1: config 1 interface 105 has no altsetting 0 [ 213.809012][ T981] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 213.819176][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.847775][ T981] usb 3-1: Product: syz [ 213.857883][ T981] usb 3-1: Manufacturer: syz [ 213.867983][ T981] usb 3-1: SerialNumber: syz [ 213.882513][T11522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.890485][T11522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.308503][T11522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.316708][T11522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.349519][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.669609][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.676807][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.727020][ T981] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 214.947983][T11603] __nla_validate_parse: 1 callbacks suppressed [ 214.948018][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 214.974655][ T981] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 214.991837][ T981] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:9b:78:31:7b:6d [ 215.033919][ T981] usb 3-1: USB disconnect, device number 38 [ 215.047019][ T981] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 215.122233][ T981] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 215.146977][ T981] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 215.169559][ T981] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 215.379503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.699668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.706981][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.865118][T11642] loop6: detected capacity change from 0 to 7 [ 215.906420][T11642] Dev loop6: unable to read RDB block 7 [ 215.945812][T11642] loop6: AHDI p1 [ 215.962828][T11642] loop6: partition table partially beyond EOD, truncated [ 216.419515][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.749642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.172017][T11693] wlan1 speed is unknown, defaulting to 1000 [ 218.158447][T11740] wlan1 speed is unknown, defaulting to 1000 [ 218.819636][ C1] net_ratelimit: 5 callbacks suppressed [ 218.819655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.832452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.941405][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.948983][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.956256][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.964066][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.983818][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.091398][T11773] wlan1 speed is unknown, defaulting to 1000 [ 219.335756][T11773] chnl_net:caif_netlink_parms(): no params data found [ 219.479980][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.497396][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.518538][T11773] bridge_slave_0: entered allmulticast mode [ 219.526938][T11773] bridge_slave_0: entered promiscuous mode [ 219.539514][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.549705][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.556869][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.569669][T11773] bridge_slave_1: entered allmulticast mode [ 219.578592][T11807] overlayfs: failed to clone upperpath [ 219.586817][T11773] bridge_slave_1: entered promiscuous mode [ 219.620071][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.636393][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.665704][T11773] team0: Port device team_slave_0 added [ 219.673417][T11773] team0: Port device team_slave_1 added [ 219.698764][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.706021][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.732419][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.744605][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.751838][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.778041][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.816740][T11773] hsr_slave_0: entered promiscuous mode [ 219.823185][T11773] hsr_slave_1: entered promiscuous mode [ 219.829288][T11773] debugfs: 'hsr0' already exists in 'hsr' [ 219.835804][T11773] Cannot create hsr debugfs directory [ 219.859651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.866886][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.011133][T11773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.022042][T11773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.066859][T11773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.093491][T11773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.161942][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.169108][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.176678][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.183899][T11773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.292847][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.316542][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.327667][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.353544][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.392759][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.399901][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.424136][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.431287][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.579533][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.606324][T11840] fuse: Bad value for 'fd' [ 220.658031][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.899671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.906893][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.945604][T11773] veth0_vlan: entered promiscuous mode [ 220.966587][T11773] veth1_vlan: entered promiscuous mode [ 221.003224][T11773] veth0_macvtap: entered promiscuous mode [ 221.022261][T11773] veth1_macvtap: entered promiscuous mode [ 221.051835][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.059703][ T5867] Bluetooth: hci0: command tx timeout [ 221.082162][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.113908][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.123192][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.133128][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.150819][T11868] overlayfs: failed to clone upperpath [ 221.157914][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.253389][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.273739][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.311452][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.329864][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.619530][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.781586][T11891] syzkaller1: entered promiscuous mode [ 221.787102][T11891] syzkaller1: entered allmulticast mode [ 221.809548][ T30] audit: type=1326 audit(1756517557.317:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.0.2444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc4378ebe9 code=0x0 [ 221.949664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.037821][T11903] tipc: Enabling of bearer rejected, already enabled [ 222.409591][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 222.570796][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.589872][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.603802][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.618049][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.628668][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.651950][ T43] usb 5-1: config 0 descriptor?? [ 222.671222][T11915] fuse: Bad value for 'fd' [ 222.714362][T11917] fuse: Bad value for 'fd' [ 223.073879][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.081668][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.094595][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.107738][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.121076][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.135230][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.143295][ T5867] Bluetooth: hci0: command tx timeout [ 223.154159][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.166785][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.178878][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.187092][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 223.206133][ T43] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 223.343104][ T9] usb 5-1: USB disconnect, device number 2 [ 224.019607][ C1] net_ratelimit: 5 callbacks suppressed [ 224.019624][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.032394][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.678205][ T30] audit: type=1326 audit(1756517560.187:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11973 comm="syz.0.2478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc4378ebe9 code=0x0 [ 224.739523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.059623][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.066897][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.074661][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.229586][ T5867] Bluetooth: hci0: command tx timeout [ 225.262026][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.279566][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.296927][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.309261][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.327685][ T43] usb 5-1: SerialNumber: syz [ 225.344438][T11984] wlan1 speed is unknown, defaulting to 1000 [ 225.546880][ T43] usb 5-1: 0:2 : does not exist [ 225.564856][ T43] usb 5-1: USB disconnect, device number 3 [ 225.602028][T10801] udevd[10801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.779516][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.099618][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.106887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.186188][ T30] audit: type=1326 audit(1756517561.697:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11997 comm="syz.3.2486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85fed8ebe9 code=0x0 [ 226.819508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.850790][T12043] wlan1 speed is unknown, defaulting to 1000 [ 227.149668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.307376][ T30] audit: type=1326 audit(1756517562.817:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.0.2507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc4378ebe9 code=0x0 [ 227.516650][T12060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.958840][T12069] kvm: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 227.968053][T12069] kvm: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 227.984310][T12069] kvm: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 228.015311][T12069] kvm: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 228.029037][T12069] kvm: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 228.046435][T12069] kvm_intel: kvm [12068]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 228.929598][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.093216][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.106372][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.116755][ T43] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.127523][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.139018][ T43] usb 5-1: config 0 descriptor?? [ 229.219645][ C1] net_ratelimit: 5 callbacks suppressed [ 229.219666][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.232491][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.432273][T12121] overlayfs: failed to clone upperpath [ 229.705039][T12135] bond0: (slave syz_tun): Releasing backup interface [ 229.713024][ T30] audit: type=1326 audit(1756517565.227:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.1.2545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63878ebe9 code=0x0 [ 229.757541][T12134] wlan1 speed is unknown, defaulting to 1000 [ 229.939525][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.127644][T12147] overlayfs: failed to clone upperpath [ 230.174227][ T43] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 230.259642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.267005][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.386745][ T24] usb 5-1: USB disconnect, device number 4 [ 230.544755][T12162] netlink: 'syz.0.2558': attribute type 11 has an invalid length. [ 230.979512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.219571][ T5867] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 231.228042][ T5867] Bluetooth: hci0: Injecting HCI hardware error event [ 231.237164][ T5867] Bluetooth: hci0: hardware error 0x00 [ 231.299663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.306907][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.392691][T12207] overlayfs: failed to clone upperpath [ 231.957086][T12226] overlayfs: failed to clone upperpath [ 232.019523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.034749][T12232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.053767][T12235] overlayfs: failed to clone upperpath [ 232.225583][T12243] overlayfs: failed to clone upperpath [ 232.339647][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.414624][T12257] overlayfs: failed to clone upperpath [ 232.505850][ T10] IPVS: starting estimator thread 0... [ 232.600264][T12261] IPVS: using max 43 ests per chain, 103200 per kthread [ 232.947042][T12269] wlan1 speed is unknown, defaulting to 1000 [ 233.304034][ T5867] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 234.277953][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 234.419605][ C1] net_ratelimit: 6 callbacks suppressed [ 234.419627][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.432379][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.579114][T12332] overlayfs: failed to clone upperpath [ 234.773983][T12344] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 235.139521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.409103][T12366] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.459678][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.466920][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.179580][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.270512][T12388] wlan1 speed is unknown, defaulting to 1000 [ 236.395253][T12395] overlayfs: failed to clone upperpath [ 236.412307][T12397] overlayfs: failed to clone upperpath [ 236.499615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.506821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.569593][ T981] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.720153][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 237.728428][ T981] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 237.751366][ T981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.765569][ T981] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 237.776308][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.790241][ T981] usb 5-1: config 0 descriptor?? [ 238.256267][ T981] hid_parser_main: 5 callbacks suppressed [ 238.256288][ T981] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 238.289556][ T981] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 238.296752][ T981] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 238.349294][ T981] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 238.377299][ T981] logitech 0003:046D:C24F.0012: unknown main item tag 0x0 [ 238.408541][ T981] logitech 0003:046D:C24F.0012: hidraw0: USB HID v0.05 Device [HID 046d:c24f] on usb-dummy_hcd.4-1/input0 [ 238.441011][ T981] logitech 0003:046D:C24F.0012: no inputs found [ 238.467737][ T981] usb 5-1: USB disconnect, device number 5 [ 239.352259][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.408552][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.619631][ C1] net_ratelimit: 7 callbacks suppressed [ 239.619651][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.632606][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.772275][T12515] netlink: 'syz.4.2701': attribute type 4 has an invalid length. [ 239.809255][T12516] netlink: 'syz.4.2701': attribute type 4 has an invalid length. [ 240.321360][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.339508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 240.393824][T12536] wlan1 speed is unknown, defaulting to 1000 [ 240.499570][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 240.507732][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 240.517397][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.527609][ T10] usb 5-1: Product: syz [ 240.538165][ T10] usb 5-1: Manufacturer: syz [ 240.550297][ T10] usb 5-1: SerialNumber: syz [ 240.564647][ T10] usb 5-1: config 0 descriptor?? [ 240.576496][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 240.659618][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.667022][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.015117][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.056006][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.247266][T12475] overlayfs: failed to clone upperpath [ 241.379507][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.699636][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.706867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.172306][T12589] overlayfs: failed to clone upperpath [ 242.182878][ T10] gspca_stk1135: reg_w 0x200 err -71 [ 242.189224][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.209539][ T10] gspca_stk1135: Sensor write failed [ 242.215458][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.222714][ T10] gspca_stk1135: Sensor write failed [ 242.228399][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.241019][ T10] gspca_stk1135: Sensor read failed [ 242.246271][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.249408][T12593] fuse: Bad value for 'fd' [ 242.269550][ T10] gspca_stk1135: Sensor read failed [ 242.274776][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 242.289094][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.299192][ T10] gspca_stk1135: Sensor read failed [ 242.315784][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.337143][ T10] gspca_stk1135: Sensor read failed [ 242.345099][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.355905][ T10] gspca_stk1135: Sensor write failed [ 242.375956][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 242.406795][ T10] gspca_stk1135: Sensor write failed [ 242.416920][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 242.419515][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.442073][ T10] usb 5-1: USB disconnect, device number 6 [ 242.619296][T12622] fuse: Bad value for 'fd' [ 242.739613][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.066974][T12641] wlan1 speed is unknown, defaulting to 1000 [ 243.331682][ T5895] IPVS: starting estimator thread 0... [ 243.441030][T12650] IPVS: using max 45 ests per chain, 108000 per kthread [ 244.055079][T12681] vxcan0: entered promiscuous mode [ 244.169795][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.305201][T12689] wlan1 speed is unknown, defaulting to 1000 [ 244.319522][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 244.330999][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.349510][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.369519][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.379203][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.419546][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.436902][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.448446][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.463356][ T43] usb 5-1: Manufacturer: syz [ 244.473437][ T43] usb 5-1: config 0 descriptor?? [ 244.663373][T12704] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 244.809542][ T43] rc_core: IR keymap rc-hauppauge not found [ 244.815521][ T43] Registered IR keymap rc-empty [ 244.820612][ C1] net_ratelimit: 6 callbacks suppressed [ 244.820628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.820909][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.883179][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.930294][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.960129][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 244.975853][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 245.001178][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.019723][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.039600][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.059760][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.079602][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.109367][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.129688][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.159587][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.198231][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.219624][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.241963][ T43] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 245.271622][ T43] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 245.298766][ T43] usb 5-1: USB disconnect, device number 7 [ 245.452626][T12749] overlayfs: failed to clone upperpath [ 245.539674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.859655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.866906][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.049645][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.219535][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 246.226110][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 246.235569][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.250871][ T10] usb 5-1: config 0 descriptor?? [ 246.265065][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 246.579522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.899617][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.906818][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 247.067522][T12783] overlayfs: failed to clone upperpath [ 247.619520][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.679682][ T10] gspca_sonixj: i2c_w8 err -71 [ 247.699900][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 247.715888][ T10] usb 5-1: USB disconnect, device number 8 [ 247.939611][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.477464][T12834] overlayfs: failed to clone upperpath [ 249.122395][T12867] overlayfs: failed to clone upperpath [ 250.020111][ C1] net_ratelimit: 5 callbacks suppressed [ 250.020129][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.032938][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.142936][T12897] overlayfs: failed to clone upperpath [ 250.417451][T12919] overlayfs: failed to clone upperpath [ 250.549740][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 250.732486][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.741645][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.750766][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.758920][ T43] usb 5-1: Product: syz [ 250.766199][ T43] usb 5-1: Manufacturer: syz [ 250.770893][ T43] usb 5-1: SerialNumber: syz [ 251.069717][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.076940][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.434222][T12970] overlayfs: failed to clone upperpath [ 251.513356][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2899'. [ 251.779614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 252.099629][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.106898][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.190834][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 252.240380][ T30] audit: type=1800 audit(1756517587.747:159): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2908" name="bus" dev="tmpfs" ino=3749 res=0 errno=0 [ 252.363410][T13002] overlayfs: failed to clone upperpath [ 252.412013][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 252.442308][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.457306][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.471842][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 252.493077][ T43] usb 5-1: USB disconnect, device number 9 [ 252.994954][T13017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.016847][T13017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.196483][T13022] wlan1 speed is unknown, defaulting to 1000 [ 253.845798][T13061] overlayfs: failed to clone upperpath [ 254.732659][T13105] overlayfs: failed to clone upperpath [ 255.219642][ C1] net_ratelimit: 8 callbacks suppressed [ 255.219663][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.232718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.750701][T13143] sd 0:0:1:0: PR command failed: 1026 [ 255.756164][T13143] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 255.763218][T13143] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 255.781500][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.939526][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.219792][ T43] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 256.259642][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 256.266874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 256.370916][ T43] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.387364][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.399939][ T43] usb 5-1: config 0 descriptor?? [ 256.979524][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.299685][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.307107][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.478849][T13190] overlayfs: failed to clone upperpath [ 258.019517][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.090542][T13216] overlayfs: failed to clone upperpath [ 258.218772][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 258.234799][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 258.249197][ T43] asix 5-1:0.0: probe with driver asix failed with error -71 [ 258.267325][ T43] usb 5-1: USB disconnect, device number 10 [ 258.451017][T13228] overlayfs: failed to clone upperpath [ 258.856335][T13245] syzkaller1: entered promiscuous mode [ 258.870771][T13245] syzkaller1: entered allmulticast mode [ 259.069515][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 259.664652][T13289] overlayfs: failed to clone upperpath [ 259.703476][T13292] overlayfs: failed to clone upperpath [ 259.834673][T13301] tipc: Enabled bearer , priority 0 [ 259.937694][T13309] tipc: Enabled bearer , priority 10 [ 260.009677][T13312] netlink: 'syz.0.3042': attribute type 10 has an invalid length. [ 260.080334][T13316] overlayfs: failed to clone upperpath [ 260.099080][T13318] tipc: Enabling of bearer rejected, already enabled [ 260.157175][T13322] overlayfs: failed to clone upperpath [ 260.337556][T13330] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 260.347145][T13330] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.358106][T13330] bond0: (slave team0): Enslaving as an active interface with an up link [ 260.368638][T13330] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 260.382405][T13330] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 260.391483][ T2155] syz1: Port: 1 Link ACTIVE [ 260.396971][T13330] siw: device registration error -23 [ 260.496384][T13338] overlayfs: failed to clone upperpath [ 261.139533][ C1] net_ratelimit: 1 callbacks suppressed [ 261.139552][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 261.202920][T13358] overlayfs: failed to clone upperpath [ 261.657449][T13383] overlayfs: failed to clone upperpath [ 262.178616][T13416] overlayfs: failed to clone upperpath [ 262.189519][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.261730][T13425] overlayfs: failed to clone upperpath [ 262.878953][T13450] overlayfs: failed to clone upperpath [ 263.051049][T13456] netlink: 'syz.0.3116': attribute type 10 has an invalid length. [ 263.075957][T13456] netlink: 'syz.0.3116': attribute type 10 has an invalid length. [ 263.087182][T13456] siw: device registration error -23 [ 263.216676][T13465] overlayfs: failed to clone upperpath [ 263.222273][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.387055][T13481] overlayfs: failed to clone upperpath [ 263.910010][T13492] overlayfs: failed to clone upperpath [ 264.071276][T13502] overlayfs: failed to clone upperpath [ 264.130346][T13507] netlink: 'syz.1.3131': attribute type 10 has an invalid length. [ 264.156566][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.173281][T13507] bond0: (slave team0): Enslaving as an active interface with an up link [ 264.196746][T13507] netlink: 'syz.1.3131': attribute type 10 has an invalid length. [ 264.240940][T13507] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 264.250667][T13513] siw: device registration error -23 [ 264.259569][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 264.934839][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3149'. [ 265.141583][T13555] wlan1 speed is unknown, defaulting to 1000 [ 265.299701][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.205291][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.339655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.349075][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.373368][T13604] binder: 13599:13604 ioctl 4008662c 0 returned -22 [ 266.526143][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.593700][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.698702][ T1106] bridge_slave_1: left allmulticast mode [ 266.706131][ T1106] bridge_slave_1: left promiscuous mode [ 266.713187][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.721691][ T1106] bridge_slave_0: left allmulticast mode [ 266.727446][ T1106] bridge_slave_0: left promiscuous mode [ 266.734313][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.808132][ T1106] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 266.887928][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.898910][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.912443][ T1106] bond0 (unregistering): Released all slaves [ 266.953110][ T1106] tipc: Disabling bearer [ 266.969689][ T1106] tipc: Disabling bearer [ 266.975411][ T1106] tipc: Left network mode [ 267.379560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.579271][ T1106] hsr_slave_0: left promiscuous mode [ 267.599955][ T1106] hsr_slave_1: left promiscuous mode [ 267.605845][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.627241][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.651931][T13659] binder: 13658:13659 ioctl c0306201 200000000680 returned -14 [ 267.660423][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.678813][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.708413][ T1106] veth1_macvtap: left promiscuous mode [ 267.724291][ T1106] veth0_macvtap: left promiscuous mode [ 267.743478][ T1106] veth1_vlan: left promiscuous mode [ 267.756546][ T1106] veth0_vlan: left promiscuous mode [ 267.976199][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 268.002053][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 268.102842][T13651] vxcan0: entered promiscuous mode [ 268.139606][T13673] md2: using deprecated bitmap file support [ 268.155741][T13673] md2: error: bitmap file must be a regular file [ 268.403528][T13688] overlayfs: failed to clone upperpath [ 268.419513][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.741627][T13709] kvm: pic: non byte read [ 268.746303][T13709] kvm: pic: non byte read [ 269.339562][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.469529][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.518025][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 269.526233][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 269.540557][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.549142][ T43] usb 5-1: Product: syz [ 269.598203][ T43] usb 5-1: Manufacturer: syz [ 269.604743][ T43] usb 5-1: SerialNumber: syz [ 269.631702][ T43] usb 5-1: config 0 descriptor?? [ 269.751722][T13769] overlayfs: failed to clone upperpath [ 269.818234][T13775] overlayfs: failed to clone upperpath [ 269.861457][ T43] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 270.499586][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.013628][T13808] overlayfs: failed to clone upperpath [ 271.042965][T13810] overlayfs: failed to clone upperpath [ 271.549503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.599407][T13831] netlink: 'syz.1.3239': attribute type 10 has an invalid length. [ 271.613776][T13831] team0: Device 1@ÿ failed to register rx_handler [ 271.678471][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.692651][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 271.699424][ T43] usb 5-1: media controller created [ 271.772853][ T43] usb 5-1: dvb_usb_v2: MAC address: 30:af:a8:e8:fa:00 [ 271.793530][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.835205][ T43] DVB: Unable to find symbol drxk_attach() [ 271.864734][ T43] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 271.985854][ T43] usb 5-1: USB disconnect, device number 11 [ 272.579572][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.865722][T13855] 9p: Bad value for 'rfdno' [ 273.549695][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 273.619521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.711473][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.733288][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 273.754073][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 273.755020][T13889] overlayfs: failed to clone upperpath [ 273.774312][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.798760][ T10] usb 5-1: config 0 descriptor?? [ 273.811570][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 273.825961][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 273.844169][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 273.853267][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 273.862007][ T10] usb 5-1: media controller created [ 273.868811][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.886450][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 273.903293][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 273.922169][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 273.941949][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 273.958883][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 274.014817][ T10] usb 5-1: USB disconnect, device number 12 [ 274.044439][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 274.659517][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.799559][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 274.959049][ T24] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 274.968591][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.980711][ T24] usb 5-1: config 0 descriptor?? [ 275.215888][ T24] kaweth 5-1:0.0: Firmware present in device. [ 275.398552][ T24] kaweth 5-1:0.0: Statistics collection: 0 [ 275.409533][ T24] kaweth 5-1:0.0: Multicast filter limit: 0 [ 275.415478][ T24] kaweth 5-1:0.0: MTU: 0 [ 275.435709][ T24] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 275.451564][T13937] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 275.460063][T13937] veth0_vlan: left promiscuous mode [ 275.466109][T13937] veth0_vlan: entered promiscuous mode [ 275.472432][T13937] team0: Device veth0_vlan failed to register rx_handler [ 275.601757][ T24] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 275.633574][ T24] usb 5-1: USB disconnect, device number 13 [ 275.699538][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.723385][T13949] overlayfs: failed to clone upperpath [ 276.739510][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.522591][T14000] overlayfs: failed to clone upperpath [ 277.789509][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.086889][T14031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.097819][T14031] block device autoloading is deprecated and will be removed. [ 278.819563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.684002][T14063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3329'. [ 279.703429][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3329'. [ 279.712592][T14063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3329'. [ 279.722502][T14063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3329'. [ 279.789665][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 279.859518][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.859780][T14074] overlayfs: failed to clone upperpath [ 279.954255][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 279.979585][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.992745][ T24] usb 5-1: Product: syz [ 279.996983][ T24] usb 5-1: Manufacturer: syz [ 280.012203][ T24] usb 5-1: SerialNumber: syz [ 280.087245][T14082] overlayfs: missing 'lowerdir' [ 280.331392][T14088] wlan1 speed is unknown, defaulting to 1000 [ 280.639911][ T24] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:a5:4c:ee:46:7d [ 280.706234][ T24] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 280.899517][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.939520][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.347498][ C1] usb 5-1: Rx status -71 [ 282.351860][ C1] usb 5-1: eth5: intr status -71 [ 282.359585][ C1] usb 5-1: Rx status -71 [ 282.363931][ C1] usb 5-1: eth5: intr status -71 [ 282.369535][ C1] usb 5-1: Rx status -71 [ 282.373847][ C1] usb 5-1: eth5: intr status -71 [ 282.379143][ T43] usb 5-1: USB disconnect, device number 14 [ 282.385164][ C1] usb 5-1: Rx status -71 [ 282.385201][ C1] usb 5-1: eth5: intr status -71 [ 282.979525][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.129635][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 283.302627][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 283.315242][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.326314][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.349501][ T43] usb 5-1: Product: syz [ 283.360232][ T43] usb 5-1: Manufacturer: syz [ 283.366470][ T43] usb 5-1: SerialNumber: syz [ 283.385198][ T43] usb 5-1: config 0 descriptor?? [ 283.608010][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.857406][T14219] netlink: 'syz.3.3374': attribute type 10 has an invalid length. [ 284.019513][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.059527][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.070600][ T43] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 285.090393][ T43] usb 5-1: USB disconnect, device number 15 [ 285.944382][T14277] overlayfs: failed to clone upperpath [ 286.099529][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.536870][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3394'. [ 286.762213][T14318] overlayfs: failed to clone upperpath [ 287.139545][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.346956][ T30] audit: type=1326 audit(1756517622.857:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.3410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63878ebe9 code=0x0 [ 287.424114][T14344] netlink: 'syz.4.3411': attribute type 4 has an invalid length. [ 287.699683][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 287.859692][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 287.870058][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.881748][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.893226][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.904565][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.914785][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.930338][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.941052][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.949306][ T10] usb 5-1: Manufacturer: syz [ 287.963424][ T10] usb 5-1: config 0 descriptor?? [ 288.027385][T14351] overlayfs: failed to clone upperpath [ 288.179507][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.273058][T14361] overlayfs: failed to clone upperpath [ 288.791360][ T10] rc_core: IR keymap rc-hauppauge not found [ 288.801702][ T10] Registered IR keymap rc-empty [ 288.808249][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 288.830637][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 288.861166][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 288.887962][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 288.910253][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 288.941090][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 288.969624][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 288.999672][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.029589][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.060072][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.099647][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.119595][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.150306][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.179608][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 289.203042][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 289.212955][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 289.219549][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.236480][ T10] usb 5-1: USB disconnect, device number 16 [ 289.929768][ T30] audit: type=1326 audit(1756517625.437:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14385 comm="syz.1.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63878ebe9 code=0x7fc00000 [ 290.072555][T14413] fuse: Bad value for 'fd' [ 290.259582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.037891][T14450] overlayfs: failed to clone upperpath [ 291.299559][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.246224][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 292.275986][T14481] overlayfs: failed to clone upperpath [ 292.339518][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.402651][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 292.420658][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 292.439741][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.468015][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.479571][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.487576][ T43] usb 5-1: Product: syz [ 292.494337][ T43] usb 5-1: Manufacturer: syz [ 292.498965][ T43] usb 5-1: SerialNumber: syz [ 292.521332][ T43] usb 5-1: config 0 descriptor?? [ 292.531776][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.541824][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 292.699709][T14505] overlayfs: failed to clone upperpath [ 293.145538][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 293.152244][ T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 293.379543][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.858407][ T43] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 293.903372][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 293.931023][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 293.937875][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 294.184948][ T30] audit: type=1326 audit(1756517629.697:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14532 comm="syz.1.3487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc63878ebe9 code=0x0 [ 294.337765][T14536] overlayfs: failed to clone upperpath [ 294.419523][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.546301][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 294.567465][ T43] usb 5-1: USB disconnect, device number 17 [ 295.459562][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.559588][ T5925] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 295.727625][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 295.740313][ T5925] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 295.756464][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 295.789572][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.797751][ T5925] usb 5-1: Product: syz [ 295.807904][ T5925] usb 5-1: Manufacturer: syz [ 295.818034][ T5925] usb 5-1: SerialNumber: syz [ 295.835819][ T5925] usb 5-1: config 0 descriptor?? [ 295.866422][ T5925] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 296.486651][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 296.499510][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.539516][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.579524][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.671790][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3530'. [ 299.291451][ T5925] gspca_zc3xx: reg_w_i err -71 [ 299.330252][ T5925] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 299.366808][ T5925] usb 5-1: USB disconnect, device number 18 [ 299.605620][T14659] autofs: Unknown parameter '' [ 299.619512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.343788][T14671] could not allocate digest TFM handle cryptd(streebog512-generic) [ 300.659510][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.042307][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 301.245810][T14696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3551'. [ 301.363820][T14693] wlan1 speed is unknown, defaulting to 1000 [ 301.699509][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.419649][ T981] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 302.591176][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 302.599516][T14748] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 302.602542][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.630971][ T981] usb 5-1: config 255 has an invalid interface number: 243 but max is 0 [ 302.647168][ T981] usb 5-1: config 255 has no interface number 0 [ 302.648179][T14750] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 302.656178][ T981] usb 5-1: config 255 interface 243 has no altsetting 0 [ 302.673064][ T981] usb 5-1: New USB device found, idVendor=5050, idProduct=8004, bcdDevice=80.4a [ 302.688344][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.697825][ T981] usb 5-1: Product: syz [ 302.703435][ T981] usb 5-1: Manufacturer: syz [ 302.708118][ T981] usb 5-1: SerialNumber: syz [ 302.739505][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.925393][ T981] ftdi_sio 5-1:255.243: FTDI USB Serial Device converter detected [ 302.948402][ T981] ftdi_sio ttyUSB0: unknown device type: 0x804a [ 303.019856][ T981] usb 5-1: USB disconnect, device number 19 [ 303.048567][ T981] ftdi_sio 5-1:255.243: device disconnected [ 303.366589][T14782] could not allocate digest TFM handle cryptd(streebog512-generic) [ 303.419331][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 303.770529][T14808] netlink: 'syz.1.3607': attribute type 6 has an invalid length. [ 303.779509][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.875898][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3603'. [ 304.058607][T14810] could not allocate digest TFM handle cryptd(streebog512-generic) [ 304.425826][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3623'. [ 304.735359][T14882] comedi comedi1: rti800: I/O port conflict (0x5,16) [ 304.819527][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.956649][T14898] comedi comedi0: s526: I/O port conflict (0x3,64) [ 305.243182][T14926] ================================================================== [ 305.251464][T14926] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 305.259659][T14926] Read of size 1 at addr ffff88805ace0770 by task syz.3.3655/14926 [ 305.267565][T14926] [ 305.269910][T14926] CPU: 0 UID: 0 PID: 14926 Comm: syz.3.3655 Not tainted syzkaller #0 PREEMPT(full) [ 305.269932][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.269950][T14926] Call Trace: [ 305.269957][T14926] [ 305.269964][T14926] dump_stack_lvl+0x189/0x250 [ 305.269993][T14926] ? __virt_addr_valid+0x1c8/0x5c0 [ 305.270015][T14926] ? rcu_is_watching+0x15/0xb0 [ 305.270035][T14926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.270058][T14926] ? rcu_is_watching+0x15/0xb0 [ 305.270076][T14926] ? lock_release+0x4b/0x3e0 [ 305.270091][T14926] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 305.270113][T14926] ? __virt_addr_valid+0x1c8/0x5c0 [ 305.270134][T14926] ? __virt_addr_valid+0x4a5/0x5c0 [ 305.270156][T14926] print_report+0xca/0x240 [ 305.270173][T14926] ? __xfrm_state_insert+0x8af/0x1450 [ 305.270195][T14926] kasan_report+0x118/0x150 [ 305.270213][T14926] ? __xfrm_state_insert+0x8af/0x1450 [ 305.270238][T14926] __xfrm_state_insert+0x8af/0x1450 [ 305.270263][T14926] ? xfrm_state_insert+0x44/0x60 [ 305.270285][T14926] xfrm_state_insert+0x54/0x60 [ 305.270307][T14926] ipcomp6_init_state+0x655/0x900 [ 305.270332][T14926] __xfrm_init_state+0xa73/0x13f0 [ 305.270349][T14926] ? __xfrm_init_state+0x7ef/0x13f0 [ 305.270368][T14926] xfrm_add_sa+0x3066/0x41d0 [ 305.270388][T14926] ? __pfx_xfrm_add_sa+0x10/0x10 [ 305.270404][T14926] ? apparmor_capable+0x137/0x1b0 [ 305.270422][T14926] ? __nla_parse+0x40/0x60 [ 305.270441][T14926] xfrm_user_rcv_msg+0x7a3/0xab0 [ 305.270459][T14926] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 305.270491][T14926] ? __pfx___mutex_trylock_common+0x10/0x10 [ 305.270511][T14926] ? kasan_save_track+0x4f/0x80 [ 305.270533][T14926] ? rcu_is_watching+0x15/0xb0 [ 305.270551][T14926] ? trace_contention_end+0x39/0x120 [ 305.270570][T14926] ? __mutex_lock+0x335/0x1350 [ 305.270593][T14926] netlink_rcv_skb+0x205/0x470 [ 305.270614][T14926] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 305.270631][T14926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.270656][T14926] ? lock_release+0x4b/0x3e0 [ 305.270670][T14926] ? net_generic+0x1e/0x240 [ 305.270686][T14926] ? net_generic+0x1e/0x240 [ 305.270703][T14926] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.270730][T14926] xfrm_netlink_rcv+0x79/0x90 [ 305.270746][T14926] netlink_unicast+0x82f/0x9e0 [ 305.270768][T14926] ? __pfx_netlink_unicast+0x10/0x10 [ 305.270787][T14926] ? netlink_sendmsg+0x642/0xb30 [ 305.270807][T14926] ? skb_put+0x11b/0x210 [ 305.270830][T14926] netlink_sendmsg+0x805/0xb30 [ 305.270854][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.270875][T14926] ? futex_unqueue+0x22/0x240 [ 305.270894][T14926] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.270915][T14926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.270934][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.270955][T14926] __sock_sendmsg+0x21c/0x270 [ 305.270974][T14926] ____sys_sendmsg+0x505/0x830 [ 305.270999][T14926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.271024][T14926] ? import_iovec+0x74/0xa0 [ 305.271044][T14926] ___sys_sendmsg+0x21f/0x2a0 [ 305.271066][T14926] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.271090][T14926] ? futex_wait+0x285/0x360 [ 305.271116][T14926] ? __fget_files+0x2a/0x420 [ 305.271135][T14926] ? __fget_files+0x3a0/0x420 [ 305.271157][T14926] __x64_sys_sendmsg+0x19b/0x260 [ 305.271180][T14926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.271209][T14926] ? rcu_is_watching+0x15/0xb0 [ 305.271228][T14926] do_syscall_64+0xfa/0xfa0 [ 305.271250][T14926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.271266][T14926] ? clear_bhb_loop+0x60/0xb0 [ 305.271285][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.271301][T14926] RIP: 0033:0x7f85fed8ebe9 [ 305.271325][T14926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.271341][T14926] RSP: 002b:00007f85ffb68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.271361][T14926] RAX: ffffffffffffffda RBX: 00007f85fefc5fa0 RCX: 00007f85fed8ebe9 [ 305.271374][T14926] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003 [ 305.271385][T14926] RBP: 00007f85fee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 305.271397][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.271408][T14926] R13: 00007f85fefc6038 R14: 00007f85fefc5fa0 R15: 00007ffe0aae4748 [ 305.271427][T14926] [ 305.271434][T14926] [ 305.691446][T14926] Allocated by task 9138: [ 305.695767][T14926] kasan_save_track+0x3e/0x80 [ 305.700451][T14926] __kasan_slab_alloc+0x6c/0x80 [ 305.705398][T14926] kmem_cache_alloc_noprof+0x1ad/0x390 [ 305.710858][T14926] xfrm_state_alloc+0x24/0x2f0 [ 305.715629][T14926] xfrm_add_sa+0x17d1/0x41d0 [ 305.720223][T14926] xfrm_user_rcv_msg+0x7a3/0xab0 [ 305.725166][T14926] netlink_rcv_skb+0x205/0x470 [ 305.729928][T14926] xfrm_netlink_rcv+0x79/0x90 [ 305.734638][T14926] netlink_unicast+0x82f/0x9e0 [ 305.739399][T14926] netlink_sendmsg+0x805/0xb30 [ 305.744162][T14926] __sock_sendmsg+0x21c/0x270 [ 305.748932][T14926] ____sys_sendmsg+0x505/0x830 [ 305.753699][T14926] ___sys_sendmsg+0x21f/0x2a0 [ 305.758382][T14926] __x64_sys_sendmsg+0x19b/0x260 [ 305.763318][T14926] do_syscall_64+0xfa/0xfa0 [ 305.767831][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.773726][T14926] [ 305.776048][T14926] Freed by task 10: [ 305.779844][T14926] kasan_save_track+0x3e/0x80 [ 305.784610][T14926] __kasan_save_free_info+0x46/0x50 [ 305.789811][T14926] __kasan_slab_free+0x5b/0x80 [ 305.794665][T14926] kmem_cache_free+0x18f/0x400 [ 305.799433][T14926] xfrm_state_gc_task+0x52d/0x6b0 [ 305.804528][T14926] process_scheduled_works+0xae1/0x17b0 [ 305.810088][T14926] worker_thread+0x8a0/0xda0 [ 305.814698][T14926] kthread+0x711/0x8a0 [ 305.818777][T14926] ret_from_fork+0x47c/0x820 [ 305.823361][T14926] ret_from_fork_asm+0x1a/0x30 [ 305.828119][T14926] [ 305.830436][T14926] The buggy address belongs to the object at ffff88805ace0440 [ 305.830436][T14926] which belongs to the cache xfrm_state of size 928 [ 305.844397][T14926] The buggy address is located 816 bytes inside of [ 305.844397][T14926] freed 928-byte region [ffff88805ace0440, ffff88805ace07e0) [ 305.858190][T14926] [ 305.860509][T14926] The buggy address belongs to the physical page: [ 305.866923][T14926] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ace1100 pfn:0x5ace0 [ 305.876996][T14926] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 305.885489][T14926] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 305.893028][T14926] page_type: f5(slab) [ 305.897010][T14926] raw: 00fff00000000040 ffff888144af4500 dead000000000122 0000000000000000 [ 305.899512][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.905582][T14926] raw: ffff88805ace1100 00000000800f000a 00000000f5000000 0000000000000000 [ 305.905599][T14926] head: 00fff00000000040 ffff888144af4500 dead000000000122 0000000000000000 [ 305.929853][T14926] head: ffff88805ace1100 00000000800f000a 00000000f5000000 0000000000000000 [ 305.938527][T14926] head: 00fff00000000002 ffffea00016b3801 00000000ffffffff 00000000ffffffff [ 305.947196][T14926] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 305.955861][T14926] page dumped because: kasan: bad access detected [ 305.962279][T14926] page_owner tracks the page as allocated [ 305.967980][T14926] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7493, tgid 7492 (syz.3.627), ts 110694710976, free_ts 110602033645 [ 305.987180][T14926] post_alloc_hook+0x240/0x2a0 [ 305.991947][T14926] get_page_from_freelist+0x21e4/0x22c0 [ 305.997499][T14926] __alloc_frozen_pages_noprof+0x181/0x370 [ 306.003313][T14926] alloc_pages_mpol+0x232/0x4a0 [ 306.008213][T14926] allocate_slab+0x8a/0x330 [ 306.012734][T14926] ___slab_alloc+0xbd1/0x13e0 [ 306.017407][T14926] kmem_cache_alloc_noprof+0x26f/0x390 [ 306.022867][T14926] xfrm_state_alloc+0x24/0x2f0 [ 306.027720][T14926] xfrm_state_find+0x37d4/0x5400 [ 306.032654][T14926] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 306.038812][T14926] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 306.044183][T14926] xfrm_lookup_route+0x3c/0x1c0 [ 306.049033][T14926] ip6_datagram_dst_update+0x75c/0xcb0 [ 306.054499][T14926] __ip6_datagram_connect+0xbd1/0x1150 [ 306.059959][T14926] ip6_datagram_connect_v6_only+0x63/0xa0 [ 306.065705][T14926] __sys_connect+0x316/0x440 [ 306.070298][T14926] page last free pid 7408 tgid 7408 stack trace: [ 306.076634][T14926] __free_frozen_pages+0xbc4/0xd30 [ 306.081752][T14926] __slab_free+0x2e7/0x390 [ 306.086184][T14926] qlist_free_all+0x97/0x140 [ 306.090798][T14926] kasan_quarantine_reduce+0x148/0x160 [ 306.096302][T14926] __kasan_slab_alloc+0x22/0x80 [ 306.101177][T14926] __kmalloc_noprof+0x210/0x4b0 [ 306.106206][T14926] tomoyo_realpath_from_path+0xe3/0x5d0 [ 306.111745][T14926] tomoyo_path2_perm+0x288/0x680 [ 306.116788][T14926] tomoyo_path_rename+0x141/0x190 [ 306.121821][T14926] security_path_rename+0x250/0x490 [ 306.127018][T14926] do_renameat2+0x52b/0xa80 [ 306.131513][T14926] __x64_sys_rename+0x82/0x90 [ 306.136177][T14926] do_syscall_64+0xfa/0xfa0 [ 306.140675][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.146553][T14926] [ 306.148862][T14926] Memory state around the buggy address: [ 306.154490][T14926] ffff88805ace0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.162570][T14926] ffff88805ace0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.170612][T14926] >ffff88805ace0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.178839][T14926] ^ [ 306.186534][T14926] ffff88805ace0780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 306.194591][T14926] ffff88805ace0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.202643][T14926] ================================================================== [ 306.210868][T14926] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.218059][T14926] CPU: 0 UID: 0 PID: 14926 Comm: syz.3.3655 Not tainted syzkaller #0 PREEMPT(full) [ 306.227448][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.237492][T14926] Call Trace: [ 306.240780][T14926] [ 306.243697][T14926] dump_stack_lvl+0x99/0x250 [ 306.248314][T14926] ? __asan_memcpy+0x40/0x70 [ 306.252914][T14926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.258109][T14926] ? __pfx__printk+0x10/0x10 [ 306.262692][T14926] vpanic+0x281/0x750 [ 306.266662][T14926] ? __pfx_vpanic+0x10/0x10 [ 306.271240][T14926] ? rcu_is_watching+0x15/0xb0 [ 306.276023][T14926] panic+0xb9/0xc0 [ 306.279747][T14926] ? __pfx_panic+0x10/0x10 [ 306.284152][T14926] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 306.290119][T14926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 306.295999][T14926] ? is_module_address+0x17/0xf0 [ 306.300940][T14926] ? __xfrm_state_insert+0x8af/0x1450 [ 306.306306][T14926] check_panic_on_warn+0x89/0xb0 [ 306.311242][T14926] ? __xfrm_state_insert+0x8af/0x1450 [ 306.316606][T14926] end_report+0x78/0x160 [ 306.320829][T14926] kasan_report+0x129/0x150 [ 306.325314][T14926] ? __xfrm_state_insert+0x8af/0x1450 [ 306.330676][T14926] __xfrm_state_insert+0x8af/0x1450 [ 306.335948][T14926] ? xfrm_state_insert+0x44/0x60 [ 306.340874][T14926] xfrm_state_insert+0x54/0x60 [ 306.345625][T14926] ipcomp6_init_state+0x655/0x900 [ 306.350738][T14926] __xfrm_init_state+0xa73/0x13f0 [ 306.355769][T14926] ? __xfrm_init_state+0x7ef/0x13f0 [ 306.360950][T14926] xfrm_add_sa+0x3066/0x41d0 [ 306.365529][T14926] ? __pfx_xfrm_add_sa+0x10/0x10 [ 306.370477][T14926] ? apparmor_capable+0x137/0x1b0 [ 306.375490][T14926] ? __nla_parse+0x40/0x60 [ 306.379893][T14926] xfrm_user_rcv_msg+0x7a3/0xab0 [ 306.384830][T14926] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 306.390293][T14926] ? __pfx___mutex_trylock_common+0x10/0x10 [ 306.396176][T14926] ? kasan_save_track+0x4f/0x80 [ 306.401031][T14926] ? rcu_is_watching+0x15/0xb0 [ 306.405787][T14926] ? trace_contention_end+0x39/0x120 [ 306.411060][T14926] ? __mutex_lock+0x335/0x1350 [ 306.415829][T14926] netlink_rcv_skb+0x205/0x470 [ 306.420590][T14926] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 306.426038][T14926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.431322][T14926] ? lock_release+0x4b/0x3e0 [ 306.435894][T14926] ? net_generic+0x1e/0x240 [ 306.440401][T14926] ? net_generic+0x1e/0x240 [ 306.444888][T14926] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.450334][T14926] xfrm_netlink_rcv+0x79/0x90 [ 306.454997][T14926] netlink_unicast+0x82f/0x9e0 [ 306.459833][T14926] ? __pfx_netlink_unicast+0x10/0x10 [ 306.465106][T14926] ? netlink_sendmsg+0x642/0xb30 [ 306.470039][T14926] ? skb_put+0x11b/0x210 [ 306.474291][T14926] netlink_sendmsg+0x805/0xb30 [ 306.479048][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.484323][T14926] ? futex_unqueue+0x22/0x240 [ 306.488984][T14926] ? aa_sock_msg_perm+0xf1/0x1d0 [ 306.493911][T14926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.499184][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.504488][T14926] __sock_sendmsg+0x21c/0x270 [ 306.509174][T14926] ____sys_sendmsg+0x505/0x830 [ 306.513947][T14926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.519332][T14926] ? import_iovec+0x74/0xa0 [ 306.523837][T14926] ___sys_sendmsg+0x21f/0x2a0 [ 306.528510][T14926] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.533730][T14926] ? futex_wait+0x285/0x360 [ 306.538275][T14926] ? __fget_files+0x2a/0x420 [ 306.542851][T14926] ? __fget_files+0x3a0/0x420 [ 306.547519][T14926] __x64_sys_sendmsg+0x19b/0x260 [ 306.552542][T14926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.558015][T14926] ? rcu_is_watching+0x15/0xb0 [ 306.562787][T14926] do_syscall_64+0xfa/0xfa0 [ 306.567292][T14926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.573352][T14926] ? clear_bhb_loop+0x60/0xb0 [ 306.578013][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.583887][T14926] RIP: 0033:0x7f85fed8ebe9 [ 306.588288][T14926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.607965][T14926] RSP: 002b:00007f85ffb68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.616459][T14926] RAX: ffffffffffffffda RBX: 00007f85fefc5fa0 RCX: 00007f85fed8ebe9 [ 306.624870][T14926] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003 [ 306.632840][T14926] RBP: 00007f85fee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 306.640814][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.648803][T14926] R13: 00007f85fefc6038 R14: 00007f85fefc5fa0 R15: 00007ffe0aae4748 [ 306.656774][T14926] [ 306.660073][T14926] Kernel Offset: disabled [ 306.664399][T14926] Rebooting in 86400 seconds..