last executing test programs: 10m0.862676639s ago: executing program 2 (id=3708): mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="1000"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m0.454279437s ago: executing program 2 (id=3713): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 10m0.310565825s ago: executing program 2 (id=3716): process_vm_readv(0x0, 0x0, 0xffffffffffffff42, 0x0, 0xfffffffffffffdcb, 0x0) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2242, 0x1c9) pipe2(0x0, 0x0) splice(r0, &(0x7f0000000040)=0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0xa) 10m0.121088728s ago: executing program 2 (id=3718): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) 9m59.969550998s ago: executing program 2 (id=3722): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9m59.634838378s ago: executing program 2 (id=3727): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 9m59.490781616s ago: executing program 32 (id=3727): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m22.430471561s ago: executing program 0 (id=8717): r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x6c4b5000) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x10000, {{0x2, 0x4e24, @multicast1}}}, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m22.408182601s ago: executing program 0 (id=8718): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="4800feff1400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3m22.374416491s ago: executing program 0 (id=8719): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback={0x200000000000000}}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) 3m22.298948049s ago: executing program 0 (id=8720): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040)=0x6400, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setreuid(r1, r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0) 3m19.080859224s ago: executing program 0 (id=8769): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xba, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4, 0xe}, 0xc) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="f5c815cd16", 0x5}], 0x1, &(0x7f00000000c0)=[@prinfo={0x0, 0x84, 0x5, {0x0, 0x2}}, @init={0x0, 0x84, 0x0, {0xd, 0x7, 0xa, 0x4}}, @init={0x18, 0x84, 0x0, {0x479, 0x6, 0x4, 0x3}}, @prinfo={0x0, 0x84, 0x5, {0x0, 0x7}}], 0xfffffffffffffe66, 0x44800}, 0x48040) 3m18.976506783s ago: executing program 0 (id=8770): gettid() r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000050018000100000008000300fd0f0000080004000000000008000d000600000008000e"], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43) clock_gettime(0x0, &(0x7f0000000000)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r7) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) write(r8, &(0x7f00000002c0)="56467ea7eb451e953aadfdd5ab184d22", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x18c415, 0x3e2809}) 3m12.008651583s ago: executing program 1 (id=8875): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x20004044) 3m11.886842174s ago: executing program 1 (id=8878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001f000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003"], 0x68}}, 0x0) 3m11.865735384s ago: executing program 1 (id=8880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 3m11.758949835s ago: executing program 1 (id=8882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000400)={0x4, 0x0, [{0xc5756f31ed714444, 0x405, 0x3, 0x200, 0x7, 0x3}, {0x6, 0x5, 0x5, 0x745, 0xfa1e, 0xa, 0x3}, {0x40000000, 0x2, 0x4, 0x0, 0xa7, 0x3}, {0x2, 0x4, 0x2, 0x4, 0x53b, 0x2, 0xb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1afb640cf24e459220900000001090212ad8c000000000904210000080650"], 0x0) 3m11.170882957s ago: executing program 1 (id=8886): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x2000000}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) 3m10.808445375s ago: executing program 1 (id=8892): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3f000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 3m10.583495479s ago: executing program 33 (id=8892): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3f000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 3m2.537332858s ago: executing program 34 (id=8770): gettid() r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000050018000100000008000300fd0f0000080004000000000008000d000600000008000e"], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43) clock_gettime(0x0, &(0x7f0000000000)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r5, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r5, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r7) r8 = socket(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) write(r8, &(0x7f00000002c0)="56467ea7eb451e953aadfdd5ab184d22", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x18c415, 0x3e2809}) 14.73180809s ago: executing program 4 (id=10252): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507fd19c00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000870) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x8, 0x516c, 0x4a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8000, 0x8000, 0xffffffff, 0x9fed}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000140)={0xfffffffffffffff4, r2, 'id0\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000001c0)={0x8000000007, 0x7f, 0x401, 0x605a8ab3}) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x8, r3, 0x800b}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001280), r0) 10.845575532s ago: executing program 4 (id=10253): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f00000000c0)={0x1, 0x40, 0x2, 0x9, 0xffffffff, 0x2, 0x0, 0xfffdfff8, 0x40, 0x0, 0x4, 0xffffff92, &(0x7f0000000000)=[0x101], 0x1, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000640), 0x200000, &(0x7f0000000780)={[{@favordynmods}, {@name={'name', 0x3d, '/dev/v4l-subdev#\x00'}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) getsockopt(r3, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7) write$tun(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r3, @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES8=r1]) 10.050940878s ago: executing program 4 (id=10263): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 9.454114056s ago: executing program 4 (id=10267): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x2, {0xffffffff, 0xbdb, 0xb, 0x10000}}) 9.403016052s ago: executing program 4 (id=10268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) 6.29022764s ago: executing program 3 (id=10291): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, 0x0) 6.190593095s ago: executing program 3 (id=10293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) 5.798764984s ago: executing program 3 (id=10297): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d260f0100000000000000000006241a000000090581030002ff00000904ec0000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 4.926816098s ago: executing program 5 (id=10301): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0xadf, @local, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)="86e8", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000002900000032000000ff0100000000", @ANYRESDEC=0x0], 0x128}}], 0x2, 0x44) 4.84963122s ago: executing program 5 (id=10302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) 4.750815796s ago: executing program 5 (id=10303): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 4.623332036s ago: executing program 5 (id=10305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 4.434744496s ago: executing program 5 (id=10307): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 4.355895722s ago: executing program 6 (id=10309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)="af8d195ac29a2a", 0x7}], 0x1}}], 0x1, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 4.256866274s ago: executing program 6 (id=10310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 4.242635403s ago: executing program 6 (id=10311): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 4.17431186s ago: executing program 6 (id=10312): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x10, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.012451604s ago: executing program 3 (id=10313): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = shmget(0x2, 0x2000, 0x780002e0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 3.890984143s ago: executing program 3 (id=10314): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @empty}, 0xc) 3.803594797s ago: executing program 3 (id=10315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.478593768s ago: executing program 6 (id=10316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}]]}, 0x30}}, 0x0) 2.526105331s ago: executing program 5 (id=10317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0007000000028000001294", 0x2e}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x1, 0xfeffffff, 0xfffffffd, 0x8b, "ff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xffffef03, 0x6, 0x1e1, 0xada4, 0x4, "65abe401feff800000000000006564db6600", 0x41, 0x1ff}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xd) syz_usb_connect(0x1, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="727b12d88e3c1cd7823a0fd0fc7cf45d44f013fa8824e893bbea52d0a620275a95348dba821de71b40746b4186d6638ebfe2728c68bc6341fb08afa4aa87bcedd310a07a08ecc41852cf90a891dacf28d26eaace89b0eb3a1d16c5b27d849b45bd3a644d731162be101a7ff16ec76ea1414cf6518cfa9cb06bc476452c8ae8c06c41d740417befcb91902ce141644e1f", @ANYRES8, @ANYRES8, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES32=0x0], 0x0) 5.910486ms ago: executing program 6 (id=10318): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0xc0fe, 0xfe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x28}}], 0x1, 0x0) 0s ago: executing program 4 (id=10269): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7, 0x2], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0006:0004:0009.0035: unknown main item tag 0x0 [ 925.505983][ T43] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 925.541836][ T43] hid-generic 0006:0004:0009.0035: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 925.696368][ T5920] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 925.714539][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 925.766214][ T5920] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 925.806101][T29171] netlink: 'syz.3.9194': attribute type 10 has an invalid length. [ 925.827263][T29165] fido_id[29165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 925.840279][ T5920] usb 6-1: USB disconnect, device number 12 [ 925.869314][T29171] netlink: 'syz.3.9194': attribute type 10 has an invalid length. [ 925.934318][T29171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9194'. [ 926.127490][T29183] 9pnet_fd: Insufficient options for proto=fd [ 926.322585][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 926.479789][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 926.487784][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 926.498737][ T43] usb 7-1: config 3 has an invalid interface number: 216 but max is 0 [ 926.507981][ T43] usb 7-1: config 3 has no interface number 0 [ 926.521769][ T43] usb 7-1: config 3 interface 216 has no altsetting 0 [ 926.541465][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 926.559753][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.573276][ T43] usb 7-1: Product: syz [ 926.579034][ T43] usb 7-1: Manufacturer: syz [ 926.584089][ T43] usb 7-1: SerialNumber: syz [ 926.622634][T29202] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 926.724158][T29207] netlink: 'syz.3.9210': attribute type 21 has an invalid length. [ 926.771062][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9211'. [ 926.842891][ T43] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.216/input/input39 [ 926.860634][ T5216] bcm5974 7-1:3.216: could not read from device [ 926.877904][ T5216] bcm5974 7-1:3.216: could not read from device [ 926.889472][ T5216] bcm5974 7-1:3.216: could not read from device [ 926.898640][ T43] usb 7-1: USB disconnect, device number 15 [ 926.932414][T29215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9213'. [ 927.157299][ C0] net_ratelimit: 4 callbacks suppressed [ 927.157322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 927.511021][ T43] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 927.680341][ T43] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 927.690542][ T43] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 927.701358][ T43] usb 6-1: config 1 interface 0 has no altsetting 0 [ 927.712441][ T43] usb 6-1: string descriptor 0 read error: -22 [ 927.718767][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.727868][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.739387][T29223] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 927.752218][T29223] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 927.765755][ T43] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 927.827799][ T5920] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 927.923474][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.930642][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 927.987163][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 928.002607][ T5920] usb 7-1: unable to get BOS descriptor or descriptor too short [ 928.003629][ T43] usb 6-1: USB disconnect, device number 13 [ 928.014915][ T5920] usb 7-1: config 1 has an invalid interface number: 26 but max is 1 [ 928.032015][ T5920] usb 7-1: config 1 has an invalid interface number: 89 but max is 1 [ 928.040156][ T5920] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 928.054283][ T5920] usb 7-1: config 1 has no interface number 0 [ 928.060379][ T5920] usb 7-1: config 1 has no interface number 1 [ 928.066814][ T5920] usb 7-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 928.080279][ T5920] usb 7-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.093389][ T5920] usb 7-1: config 1 interface 26 has no altsetting 0 [ 928.100336][ T5920] usb 7-1: config 1 interface 89 has no altsetting 0 [ 928.110293][ T5920] usb 7-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 928.119452][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.127614][ T5920] usb 7-1: Product: syz [ 928.131822][ T5920] usb 7-1: Manufacturer: syz [ 928.137241][ T5920] usb 7-1: SerialNumber: syz [ 928.264827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 928.373749][ T5920] usb 7-1: unknown interface protocol 0x7d, assuming v1 [ 928.380847][ T5920] usb 7-1: 26:2 : does not exist [ 928.389362][ T5920] usb 7-1: unknown interface protocol 0x13, assuming v1 [ 928.397098][ T5920] usb 7-1: 89:48 : does not exist [ 928.414187][ T5920] usb 7-1: USB disconnect, device number 16 [ 928.454794][T28685] udevd[28685]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.841401][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9226'. [ 929.023663][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 929.023922][T29251] netlink: 'syz.4.9229': attribute type 10 has an invalid length. [ 929.030853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 929.373123][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 929.478726][T29273] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 929.530650][T29273] netlink: 'syz.4.9237': attribute type 37 has an invalid length. [ 930.127389][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 930.134548][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 930.154321][ T5920] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 930.308751][T19278] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 930.329942][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 930.337694][ T5920] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 930.346681][ T5920] usb 6-1: config 0 has no interface number 0 [ 930.353495][ T5920] usb 6-1: config 0 interface 227 has no altsetting 0 [ 930.364310][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 930.375097][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.387350][ T5920] usb 6-1: Product: syz [ 930.391687][ T5920] usb 6-1: Manufacturer: syz [ 930.397068][ T5920] usb 6-1: SerialNumber: syz [ 930.411809][ T5920] usb 6-1: config 0 descriptor?? [ 930.429841][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.227/input/input40 [ 930.468849][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 930.479036][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 930.496642][T19278] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 930.513576][T19278] usb 7-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 930.535971][T19278] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 930.550336][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.563367][T19278] usb 7-1: Product: syz [ 930.572463][T19278] usb 7-1: Manufacturer: syz [ 930.578483][T19278] usb 7-1: SerialNumber: syz [ 930.638272][ T5216] bcm5974 6-1:0.227: could not read from device [ 930.672962][ T5216] bcm5974 6-1:0.227: could not read from device [ 930.718478][ T5920] usb 6-1: USB disconnect, device number 14 [ 930.721945][ T5216] bcm5974 6-1:0.227: could not read from device [ 930.820838][T29300] netlink: 'syz.6.9249': attribute type 10 has an invalid length. [ 930.833553][T29300] netlink: 'syz.6.9249': attribute type 10 has an invalid length. [ 930.852561][T29086] udevd[29086]: Error opening device "/dev/input/event4": No such file or directory [ 930.883346][T29086] udevd[29086]: Unable to EVIOCGABS device "/dev/input/event4" [ 930.923473][T29086] udevd[29086]: Unable to EVIOCGABS device "/dev/input/event4" [ 930.937358][T19278] usb 7-1: interface 1 not found [ 930.943673][T29086] udevd[29086]: Unable to EVIOCGABS device "/dev/input/event4" [ 930.951800][T29315] netlink: 'syz.4.9252': attribute type 10 has an invalid length. [ 930.975106][T29086] udevd[29086]: Unable to EVIOCGABS device "/dev/input/event4" [ 930.981959][T19278] usb 7-1: USB disconnect, device number 17 [ 931.597821][T29331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.618651][T29345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9264'. [ 931.629130][T29331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.644370][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 931.760537][T29350] netlink: 'syz.6.9265': attribute type 10 has an invalid length. [ 931.768688][T29351] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9266'. [ 931.797533][T29350] team0: Device bond0 is already an upper device of the team interface [ 932.168110][ T5920] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 932.332352][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 932.344095][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.354404][ T5920] usb 7-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 932.365116][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.376631][ T5920] usb 7-1: config 0 descriptor?? [ 932.440588][T29361] netlink: 'syz.4.9271': attribute type 10 has an invalid length. [ 932.452596][T29361] netlink: 'syz.4.9271': attribute type 10 has an invalid length. [ 932.679782][ C0] net_ratelimit: 5 callbacks suppressed [ 932.679803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 933.043609][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 933.050803][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 933.080404][ T5920] usb 7-1: USB disconnect, device number 18 [ 933.187489][T29374] comedi comedi4: bad chanlist[0]=0x00080002 chan=2 range length=2 [ 933.196980][T29371] 9pnet_fd: Insufficient options for proto=fd [ 933.436656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.443878][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 933.604077][T29393] netlink: 'syz.4.9283': attribute type 10 has an invalid length. [ 933.613629][T29393] netlink: 'syz.4.9283': attribute type 10 has an invalid length. [ 933.783345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 933.825648][ T5952] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 933.995720][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 934.006999][ T5952] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 934.020038][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 934.026238][T19278] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 934.026827][ T5952] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 934.044069][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.056804][ T5952] usb 6-1: config 0 descriptor?? [ 934.062838][T29391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 934.195675][T19278] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 934.208030][T19278] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 934.220282][T19278] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 934.236670][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9288'. [ 934.245809][T19278] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 934.255471][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.263994][T19278] usb 7-1: Product: syz [ 934.268607][T19278] usb 7-1: Manufacturer: syz [ 934.273233][T19278] usb 7-1: SerialNumber: syz [ 934.283525][T19278] usb 7-1: config 0 descriptor?? [ 934.303203][T19278] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 934.504978][ T5952] kye 0003:0458:5015.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 934.511896][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9287'. [ 934.516921][ T5952] hid_parser_main: 9 callbacks suppressed [ 934.516941][ T5952] kye 0003:0458:5015.0036: unknown main item tag 0x0 [ 934.531921][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 934.532240][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 934.554666][ T5952] kye 0003:0458:5015.0036: unknown main item tag 0x0 [ 934.565040][ T5952] kye 0003:0458:5015.0036: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 934.576327][ T5952] kye 0003:0458:5015.0036: tablet-enabling feature report not found [ 934.584712][ T5952] kye 0003:0458:5015.0036: tablet enabling failed [ 934.727162][T29391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.738940][T29391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.755685][T19278] usb 6-1: USB disconnect, device number 16 [ 934.808297][T29414] 9pnet_fd: p9_fd_create_tcp (29414): problem connecting socket to 127.0.0.1 [ 934.876931][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 934.999422][T29423] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 935.008669][T29423] overlayfs: missing 'lowerdir' [ 935.053356][T29426] netlink: 'syz.4.9296': attribute type 10 has an invalid length. [ 935.062164][T29426] netlink: 'syz.4.9296': attribute type 10 has an invalid length. [ 935.419290][T29430] netlink: 'syz.5.9298': attribute type 10 has an invalid length. [ 935.431473][T29430] team0: Device bond0 is already an upper device of the team interface [ 935.473640][T29432] netlink: 'syz.3.9299': attribute type 4 has an invalid length. [ 935.625823][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 935.633518][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 935.859643][T29450] netlink: 'syz.4.9308': attribute type 10 has an invalid length. [ 935.964612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 935.993908][T29456] sp0: Synchronizing with TNC [ 936.006843][T29455] [U] è [ 936.112354][T29460] netlink: 'syz.4.9313': attribute type 10 has an invalid length. [ 936.122293][T29460] netlink: 'syz.4.9313': attribute type 10 has an invalid length. [ 936.273093][T29466] tmpfs: Bad value for 'mpol' [ 936.438999][T29472] netlink: 'syz.3.9319': attribute type 10 has an invalid length. [ 936.637718][T19278] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 936.799603][T19278] usb 6-1: not running at top speed; connect to a high speed hub [ 936.820691][T19278] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.835557][T19278] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 936.850597][T19278] usb 6-1: config 1 interface 0 has no altsetting 0 [ 936.864030][T19278] usb 6-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 936.873482][T19278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.881920][T19278] usb 6-1: Product: syz [ 936.887486][T19278] usb 6-1: Manufacturer: syz [ 936.892612][T19278] usb 6-1: SerialNumber: syz [ 936.931946][T29470] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 936.934509][T29486] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9325'. [ 936.944358][ T5920] usb 7-1: USB disconnect, device number 19 [ 937.170146][T29492] netlink: 'syz.3.9328': attribute type 1 has an invalid length. [ 937.207430][T19278] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input41 [ 937.229673][ T5216] bcm5974 6-1:1.0: could not read from device [ 937.259289][ T5216] bcm5974 6-1:1.0: could not read from device [ 937.271423][T19278] usb 6-1: USB disconnect, device number 17 [ 937.401221][T29499] netlink: 'syz.3.9330': attribute type 10 has an invalid length. [ 937.492757][ T5920] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 937.650088][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 937.663226][ T5920] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 937.673254][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.681328][ T5920] usb 7-1: Product: syz [ 937.685685][ T5920] usb 7-1: Manufacturer: syz [ 937.690318][ T5920] usb 7-1: SerialNumber: syz [ 937.697389][ T5920] usb 7-1: config 0 descriptor?? [ 937.706331][ T5920] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 937.715055][ T5920] usb 7-1: Detected FT-X [ 937.931261][T29490] syzkaller1: entered promiscuous mode [ 937.942558][T29490] syzkaller1: entered allmulticast mode [ 937.962798][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9339'. [ 938.165139][ C0] net_ratelimit: 5 callbacks suppressed [ 938.165169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 938.180050][T29524] sg_write: process 172 (syz.5.9339) changed security contexts after opening file descriptor, this is not allowed. [ 938.273878][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 938.290104][ T5920] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 938.298678][ T5920] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 938.332051][ T5920] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 938.363315][ T5920] usb 7-1: USB disconnect, device number 20 [ 938.393498][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 938.411950][ T5920] ftdi_sio 7-1:0.0: device disconnected [ 938.458217][T29536] lo speed is unknown, defaulting to 1000 [ 938.738232][T29536] netlink: 'syz.3.9344': attribute type 11 has an invalid length. [ 938.746411][T29536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9344'. [ 938.922609][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 938.929782][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 939.261542][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 939.717268][T29584] netlink: 324 bytes leftover after parsing attributes in process `syz.5.9360'. [ 939.719951][T29586] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 940.030822][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.038036][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.272467][T19278] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 940.325416][ T43] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 940.366997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 940.433082][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 940.442221][T19278] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 940.453235][T19278] usb 7-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 940.466122][T19278] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 940.475301][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.482633][ T43] usb 6-1: device descriptor read/64, error -71 [ 940.483497][T19278] usb 7-1: Product: syz [ 940.494792][T19278] usb 7-1: Manufacturer: syz [ 940.499448][T19278] usb 7-1: SerialNumber: syz [ 940.722497][T29601] validate_nla: 4 callbacks suppressed [ 940.722517][T29601] netlink: 'syz.6.9367': attribute type 10 has an invalid length. [ 940.738167][T29601] netlink: 'syz.6.9367': attribute type 10 has an invalid length. [ 940.747569][ T43] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 940.803175][T19278] usb 7-1: interface 1 not found [ 940.816352][T19278] usb 7-1: USB disconnect, device number 21 [ 940.894164][ T43] usb 6-1: device descriptor read/64, error -71 [ 941.010029][ T43] usb usb6-port1: attempt power cycle [ 941.123957][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.131011][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.377974][ T43] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 941.408454][ T43] usb 6-1: device descriptor read/8, error -71 [ 941.460242][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 941.670731][ T5933] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 941.672922][ T43] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 941.724662][ T43] usb 6-1: device descriptor read/8, error -71 [ 941.742035][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9380'. [ 941.838837][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 941.847699][ T5933] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 941.850063][ T43] usb usb6-port1: unable to enumerate USB device [ 941.863336][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.872909][ T5933] usb 7-1: Product: syz [ 941.877140][ T5933] usb 7-1: Manufacturer: syz [ 941.881837][ T5933] usb 7-1: SerialNumber: syz [ 941.889495][ T5933] usb 7-1: config 0 descriptor?? [ 942.110374][ T5933] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.337485][T29649] siw: device registration error -23 [ 942.402157][T29654] netlink: 42496 bytes leftover after parsing attributes in process `syz.3.9384'. [ 942.536440][ T5933] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 942.552621][ T5933] usb 7-1: USB disconnect, device number 22 [ 942.817631][T29658] netlink: 'syz.4.9386': attribute type 10 has an invalid length. [ 942.826241][T29658] netlink: 'syz.4.9386': attribute type 10 has an invalid length. [ 943.387424][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9391'. [ 943.648234][ C0] net_ratelimit: 5 callbacks suppressed [ 943.648255][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 943.763647][T29695] binder_alloc: binder_alloc_mmap_handler: 29694 200000735000-200000736000 already mapped failed -16 [ 944.048331][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 944.231180][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.241513][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 944.250779][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.261702][ T43] usb 6-1: config 0 descriptor?? [ 944.275928][ T43] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 944.283466][ T43] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 944.406376][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.413613][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.481420][T29695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.490943][T29695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.500802][ T43] usb 6-1: USB disconnect, device number 22 [ 944.654046][T29708] netlink: 'syz.4.9402': attribute type 10 has an invalid length. [ 944.665224][T29708] netlink: 'syz.4.9402': attribute type 10 has an invalid length. [ 944.743104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 944.778916][T29716] netlink: 'syz.3.9406': attribute type 5 has an invalid length. [ 944.812461][T29718] netdevsim netdevsim6: Direct firmware load for I failed with error -2 [ 944.821402][T29718] netdevsim netdevsim6: Falling back to sysfs fallback for: I [ 945.135330][T29732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.152364][T29734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.162393][T29732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.173461][T29734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.385570][ T5863] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 945.501961][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 945.509056][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 945.533053][ T5863] usb 6-1: device descriptor read/64, error -71 [ 945.796120][T29748] FAULT_INJECTION: forcing a failure. [ 945.796120][T29748] name failslab, interval 1, probability 0, space 0, times 1 [ 945.809485][ T5863] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 945.817209][T29748] CPU: 1 UID: 0 PID: 29748 Comm: syz.6.9416 Not tainted syzkaller #0 PREEMPT(full) [ 945.817234][T29748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.817245][T29748] Call Trace: [ 945.817253][T29748] [ 945.817261][T29748] dump_stack_lvl+0x189/0x250 [ 945.817300][T29748] ? __pfx____ratelimit+0x10/0x10 [ 945.817329][T29748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.817363][T29748] ? __pfx__printk+0x10/0x10 [ 945.817395][T29748] ? __pfx___might_resched+0x10/0x10 [ 945.817416][T29748] ? fs_reclaim_acquire+0x7d/0x100 [ 945.817443][T29748] should_fail_ex+0x414/0x560 [ 945.817468][T29748] should_failslab+0xa8/0x100 [ 945.817491][T29748] kmem_cache_alloc_node_noprof+0x77/0x710 [ 945.817510][T29748] ? __alloc_skb+0x112/0x2d0 [ 945.817536][T29748] ? netlink_autobind+0xdb/0x300 [ 945.817567][T29748] __alloc_skb+0x112/0x2d0 [ 945.817598][T29748] netlink_sendmsg+0x5c6/0xb30 [ 945.817632][T29748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.817660][T29748] ? aa_sock_msg_perm+0xf1/0x1d0 [ 945.817687][T29748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 945.817711][T29748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.817737][T29748] __sock_sendmsg+0x21c/0x270 [ 945.817765][T29748] ____sys_sendmsg+0x505/0x830 [ 945.817781][T29748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.817798][T29748] ? import_iovec+0x74/0xa0 [ 945.817817][T29748] ___sys_sendmsg+0x21f/0x2a0 [ 945.817829][T29748] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.817862][T29748] ? __fget_files+0x2a/0x420 [ 945.817876][T29748] ? __fget_files+0x3a0/0x420 [ 945.817897][T29748] __x64_sys_sendmsg+0x19b/0x260 [ 945.817910][T29748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.817927][T29748] ? __pfx_ksys_write+0x10/0x10 [ 945.817942][T29748] ? do_syscall_64+0xbe/0xfa0 [ 945.817960][T29748] do_syscall_64+0xfa/0xfa0 [ 945.817974][T29748] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.817989][T29748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.818000][T29748] ? clear_bhb_loop+0x60/0xb0 [ 945.818014][T29748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.818025][T29748] RIP: 0033:0x7fb09c58ebe9 [ 945.818038][T29748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.818048][T29748] RSP: 002b:00007fb09d38b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.818062][T29748] RAX: ffffffffffffffda RBX: 00007fb09c7c5fa0 RCX: 00007fb09c58ebe9 [ 945.818073][T29748] RDX: 0000000024044884 RSI: 0000200000000180 RDI: 0000000000000003 [ 945.818081][T29748] RBP: 00007fb09d38b090 R08: 0000000000000000 R09: 0000000000000000 [ 945.818088][T29748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.818096][T29748] R13: 00007fb09c7c6038 R14: 00007fb09c7c5fa0 R15: 00007ffc6fb7e0d8 [ 945.818115][T29748] [ 945.838465][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 945.985957][ T5863] usb 6-1: device descriptor read/64, error -71 [ 946.213794][T29760] netlink: 'syz.4.9421': attribute type 10 has an invalid length. [ 946.222116][T29759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.232636][ T5863] usb usb6-port1: attempt power cycle [ 946.396919][T19278] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 946.557784][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 946.567061][T19278] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 946.577563][T19278] usb 7-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 946.590393][T19278] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 946.599767][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.607742][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.608120][T19278] usb 7-1: Product: syz [ 946.615169][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.619225][T19278] usb 7-1: Manufacturer: syz [ 946.631760][T19278] usb 7-1: SerialNumber: syz [ 946.633882][ T5863] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 946.663356][ T5863] usb 6-1: device descriptor read/8, error -71 [ 946.854459][T29769] netlink: 'syz.4.9425': attribute type 1 has an invalid length. [ 946.863541][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9425'. [ 946.867632][T29758] netlink: 'syz.6.9420': attribute type 10 has an invalid length. [ 946.887544][T29758] netlink: 'syz.6.9420': attribute type 10 has an invalid length. [ 946.897215][T29758] siw: device registration error -23 [ 946.934348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 946.937421][ T5863] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 946.977396][ T5863] usb 6-1: device descriptor read/8, error -71 [ 946.984524][T19278] usb 7-1: interface 1 not found [ 947.005711][T19278] usb 7-1: USB disconnect, device number 23 [ 947.107585][ T5863] usb usb6-port1: unable to enumerate USB device [ 947.565028][T29785] overlayfs: missing 'workdir' [ 947.572490][T29785] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9428'. [ 947.786374][T29785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.800133][T29785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.815342][T29785] bond0 (unregistering): (slave team0): Releasing backup interface [ 947.825711][T29785] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 947.839464][T29785] bond0 (unregistering): Released all slaves [ 948.310632][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 948.333676][T29811] netlink: 17223 bytes leftover after parsing attributes in process `syz.5.9438'. [ 948.476262][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 948.483869][ T43] usb 7-1: config 5 has an invalid interface number: 143 but max is 2 [ 948.492132][ T43] usb 7-1: config 5 has an invalid interface number: 6 but max is 2 [ 948.500323][ T43] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 948.509395][ T43] usb 7-1: config 5 has an invalid descriptor of length 108, skipping remainder of the config [ 948.519866][ T43] usb 7-1: config 5 has no interface number 1 [ 948.526021][ T43] usb 7-1: config 5 has no interface number 2 [ 948.532352][ T43] usb 7-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 948.545738][ T43] usb 7-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 948.556935][ T43] usb 7-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 948.570180][ T43] usb 7-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 948.582370][ T43] usb 7-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 948.596303][ T43] usb 7-1: config 5 interface 143 has no altsetting 0 [ 948.603285][ T43] usb 7-1: config 5 interface 6 has no altsetting 0 [ 948.609929][ T43] usb 7-1: config 5 interface 0 has no altsetting 0 [ 948.618862][ T43] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 948.628061][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.636436][ T43] usb 7-1: Product: syz [ 948.640703][ T43] usb 7-1: Manufacturer: syz [ 948.645587][ T43] usb 7-1: SerialNumber: syz [ 948.696916][ T5933] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 948.813132][T29813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9439'. [ 948.844154][ T5933] usb 6-1: device descriptor read/64, error -71 [ 949.104858][ T5933] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 949.132116][ C0] net_ratelimit: 5 callbacks suppressed [ 949.132137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 949.251668][ T5933] usb 6-1: device descriptor read/64, error -71 [ 949.367713][ T5933] usb usb6-port1: attempt power cycle [ 949.439657][T29840] netlink: 'syz.4.9446': attribute type 10 has an invalid length. [ 949.555323][ T30] audit: type=1326 audit(1757049236.049:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29843 comm="syz.4.9448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa889b8ebe9 code=0x0 [ 949.639489][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9450'. [ 949.727031][ T5933] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 949.759832][ T5933] usb 6-1: device descriptor read/8, error -71 [ 949.897459][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.904905][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.015881][ T5933] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 950.048407][ T5933] usb 6-1: device descriptor read/8, error -71 [ 950.164712][ T5933] usb usb6-port1: unable to enumerate USB device [ 950.238972][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 950.918729][ T30] audit: type=1326 audit(1757054393.326:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29899 comm="syz.3.9473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f444ff8ebe9 code=0x0 [ 950.953147][T29902] netlink: 'syz.4.9481': attribute type 10 has an invalid length. [ 951.008418][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.015143][T29905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9474'. [ 951.015705][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 951.024712][T29905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9474'. [ 951.280866][ T43] uvcvideo 7-1:5.143: probe with driver uvcvideo failed with error -22 [ 951.305773][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 951.319590][ T43] usb 7-1: MIDIStreaming interface descriptor not found [ 951.350193][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 951.387286][ T43] usb 7-1: USB disconnect, device number 24 [ 951.492990][T28679] udevd[28679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.817489][ T43] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 951.825290][T29923] sctp: [Deprecated]: syz.4.9483 (pid 29923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 951.825290][T29923] Use struct sctp_sack_info instead [ 951.985617][ T43] usb 7-1: device descriptor read/64, error -71 [ 952.111981][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 952.119149][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 952.237714][ T43] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 952.374246][ T43] usb 7-1: device descriptor read/64, error -71 [ 952.447737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 952.490156][ T43] usb usb7-port1: attempt power cycle [ 952.847296][ T43] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 952.893388][T29946] netlink: 'syz.3.9495': attribute type 10 has an invalid length. [ 952.911780][ T43] usb 7-1: device descriptor read/8, error -71 [ 952.934829][ T30] audit: type=1326 audit(1757054395.237:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29948 comm="syz.5.9493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcba6b8ebe9 code=0x0 [ 953.183895][ T43] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 953.221401][ T43] usb 7-1: device descriptor read/8, error -71 [ 953.341891][ T43] usb usb7-port1: unable to enumerate USB device [ 953.597832][T29975] netlink: 'syz.3.9505': attribute type 10 has an invalid length. [ 953.890031][T29989] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9510'. [ 954.345797][T30007] netlink: 'syz.3.9516': attribute type 10 has an invalid length. [ 954.637465][ C0] net_ratelimit: 5 callbacks suppressed [ 954.637486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 954.673325][ T5933] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 954.762184][T30030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9526'. [ 954.850508][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 954.859341][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.875211][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.885685][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 954.901747][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.914171][ T5933] usb 6-1: config 0 descriptor?? [ 954.924795][ T5933] hub 6-1:0.0: USB hub found [ 955.132883][ T5933] hub 6-1:0.0: 1 port detected [ 955.228923][ T5949] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 955.396719][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 955.398932][ T5949] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 955.403871][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 955.438714][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.451286][ T5949] usb 7-1: config 0 descriptor?? [ 955.460102][ T5949] cp210x 7-1:0.0: cp210x converter detected [ 955.491570][T30052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9535'. [ 955.670647][ T5949] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 955.685945][ T5949] cp210x 7-1:0.0: querying part number failed [ 955.702434][ T5949] usb 7-1: cp210x converter now attached to ttyUSB0 [ 955.728547][ T5949] usb 7-1: USB disconnect, device number 29 [ 955.734934][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 955.748879][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 955.762088][ T5949] cp210x 7-1:0.0: device disconnected [ 955.767858][T30057] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9536'. [ 955.781437][T19278] hub 6-1:0.0: activate --> -90 [ 955.789902][T30057] netlink: 'syz.6.9536': attribute type 10 has an invalid length. [ 955.798931][T30057] macvlan1: entered allmulticast mode [ 955.813581][T30057] veth1_vlan: entered allmulticast mode [ 955.823738][T30057] team0: Port device macvlan1 added [ 956.064037][T30063] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9539'. [ 956.343027][ T5933] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 956.445509][T30084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9549'. [ 956.490528][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.497842][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.511003][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 956.518497][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short [ 956.530563][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 956.542275][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 956.553651][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 956.563642][ T5933] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 956.573416][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 956.583430][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 956.596954][ T5933] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 956.606813][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.615171][ T5933] usb 7-1: Product: syz [ 956.619464][ T5933] usb 7-1: Manufacturer: syz [ 956.624105][ T5933] usb 7-1: SerialNumber: syz [ 956.632666][ T5933] usb 7-1: config 0 descriptor?? [ 956.639476][T30063] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 956.650909][ T5933] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 956.755862][T28679] udevd[28679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 956.826378][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 956.863731][ T43] usb 7-1: USB disconnect, device number 30 [ 957.220801][T30102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9555'. [ 957.332948][T19278] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 957.342055][T19278] usb 6-1-port1: cannot reset (err = -32) [ 957.349342][T19278] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad? [ 957.357551][T19278] usb 6-1-port1: cannot disable (err = -32) [ 957.367244][T19278] usb 6-1-port1: cannot reset (err = -32) [ 957.376139][T19278] usb 6-1-port1: cannot reset (err = -32) [ 957.377752][T30113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9559'. [ 957.381914][T19278] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad? [ 957.385273][T19278] usb 6-1-port1: cannot disable (err = -32) [ 957.405465][T19278] usb 6-1-port1: attempt power cycle [ 957.584658][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.591847][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.630537][ T43] usb 6-1: USB disconnect, device number 31 [ 957.937078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 957.987245][T30143] program syz.5.9573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.070748][T30148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9575'. [ 958.087784][T30148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9575'. [ 958.385828][T30157] lo speed is unknown, defaulting to 1000 [ 958.560393][ T30] audit: type=1800 audit(1757064712.566:2667): pid=30171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9583" name="nullb0" dev="tmpfs" ino=14110 res=0 errno=0 [ 959.046521][T19278] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 959.229354][T19278] usb 7-1: config 7 has an invalid interface number: 249 but max is 0 [ 959.243671][T19278] usb 7-1: config 7 has no interface number 0 [ 959.253472][T19278] usb 7-1: config 7 interface 249 has no altsetting 0 [ 959.266507][T19278] usb 7-1: string descriptor 0 read error: -22 [ 959.281074][T19278] usb 7-1: New USB device found, idVendor=1110, idProduct=9010, bcdDevice=18.af [ 959.301580][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.334057][T19278] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9010) Rev (0X18AF): Eagle I [ 959.400399][T30191] netlink: 'syz.3.9592': attribute type 10 has an invalid length. [ 959.410128][T30191] netlink: 'syz.3.9592': attribute type 10 has an invalid length. [ 960.098456][T30199] netlink: 'syz.4.9595': attribute type 10 has an invalid length. [ 960.142342][ C0] net_ratelimit: 5 callbacks suppressed [ 960.142365][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 960.327575][T19278] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 960.346434][T19278] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 960.356448][ T5920] usb 7-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 960.387131][ T5920] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 960.415894][T19278] usb 7-1: USB disconnect, device number 31 [ 960.654725][T30214] netlink: 'syz.3.9602': attribute type 10 has an invalid length. [ 960.664575][T30214] netlink: 'syz.3.9602': attribute type 10 has an invalid length. [ 960.794036][T19278] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 960.899351][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 960.906486][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 960.962631][T19278] usb 7-1: Using ep0 maxpacket: 16 [ 960.992095][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 961.003764][T19278] usb 7-1: config 5 has an invalid interface number: 151 but max is 0 [ 961.026727][T19278] usb 7-1: config 5 has no interface number 0 [ 961.033025][T19278] usb 7-1: config 5 interface 151 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 961.050028][T19278] usb 7-1: config 5 interface 151 altsetting 7 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 961.116852][T19278] usb 7-1: config 5 interface 151 altsetting 7 endpoint 0x8F has invalid maxpacket 12805, setting to 1024 [ 961.156307][T19278] usb 7-1: config 5 interface 151 altsetting 7 bulk endpoint 0x8F has invalid maxpacket 1024 [ 961.176370][T19278] usb 7-1: config 5 interface 151 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.225105][T19278] usb 7-1: config 5 interface 151 has no altsetting 0 [ 961.235368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 961.263433][T19278] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=5e.14 [ 961.281700][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.298713][T19278] usb 7-1: Product: syz [ 961.302945][T19278] usb 7-1: Manufacturer: syz [ 961.307564][T19278] usb 7-1: SerialNumber: syz [ 961.381921][T30212] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 961.523900][T30228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9607'. [ 961.686126][T19278] hdpvr 7-1:5.151: unexpected answer of status request, len -71 [ 961.714687][T19278] hdpvr 7-1:5.151: device init failed [ 961.720651][T19278] hdpvr 7-1:5.151: probe with driver hdpvr failed with error -12 [ 961.777211][T19278] usb 7-1: USB disconnect, device number 32 [ 961.903739][T30240] netlink: 'syz.3.9613': attribute type 10 has an invalid length. [ 961.916409][T30240] netlink: 'syz.3.9613': attribute type 10 has an invalid length. [ 962.003261][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 962.010391][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 962.099376][ T5949] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 962.259104][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 962.277707][ T5949] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 962.292260][ T5949] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 962.302710][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.310836][ T5949] usb 6-1: Product: syz [ 962.315257][ T5949] usb 6-1: Manufacturer: syz [ 962.319876][ T5949] usb 6-1: SerialNumber: syz [ 962.328177][ T5949] usb 6-1: config 0 descriptor?? [ 962.335860][ T5949] ipw 6-1:0.0: IPWireless converter converter detected [ 962.342960][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 962.511015][ T43] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 962.550423][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9612'. [ 962.568117][ T5949] usb 6-1: USB disconnect, device number 36 [ 962.584095][ T5949] ipw 6-1:0.0: device disconnected [ 962.611072][T30259] netlink: 'syz.3.9622': attribute type 10 has an invalid length. [ 962.692907][ T43] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 962.703885][ T43] usb 7-1: config 0 has no interface number 0 [ 962.710223][ T43] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.722550][ T43] usb 7-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.735049][ T43] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 962.744392][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.757225][ T43] usb 7-1: config 0 descriptor?? [ 963.099708][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 963.106964][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 963.296369][T30282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9631'. [ 963.435670][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 963.538881][ T43] uclogic 0003:256C:006D.0037: interface is invalid, ignoring [ 963.871146][ T43] usb 7-1: USB disconnect, device number 33 [ 963.921503][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9639'. [ 964.101415][T30303] netlink: 'syz.5.9640': attribute type 10 has an invalid length. [ 964.112655][T30303] team0: Device bond0 is already an upper device of the team interface [ 964.649065][T30319] IPVS: set_ctl: invalid protocol: 58 172.20.20.29:20000 [ 964.753424][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9648'. [ 964.810064][T30328] netlink: 'syz.3.9649': attribute type 21 has an invalid length. [ 964.820855][T30328] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9649'. [ 965.341195][T30341] Attempt to restore checkpoint with obsolete wellknown handles [ 965.350098][T30341] netlink: 'syz.6.9654': attribute type 12 has an invalid length. [ 965.631405][ C0] net_ratelimit: 5 callbacks suppressed [ 965.631428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 965.736603][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 965.896123][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.907077][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 965.920127][ T10] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 965.929496][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.937642][ T10] usb 6-1: Product: syz [ 965.941941][ T10] usb 6-1: Manufacturer: syz [ 965.946587][ T10] usb 6-1: SerialNumber: syz [ 965.955325][ T10] usb 6-1: config 0 descriptor?? [ 965.964698][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 965.976103][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 965.986395][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 965.995136][ T10] usb 6-1: media controller created [ 966.030673][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.107063][ T10] DVB: Unable to find symbol tda10046_attach() [ 966.113390][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 966.123576][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 966.388337][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 966.395471][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 966.601784][T30369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9665'. [ 966.725586][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 966.984903][ T43] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 967.077096][ T10] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 967.097184][ T10] usb 6-1: USB disconnect, device number 37 [ 967.161801][ T43] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 967.178128][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.210034][ T43] usb 7-1: config 0 descriptor?? [ 967.295060][T30377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9669'. [ 967.505793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 967.513061][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 967.831028][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 967.838248][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 968.309379][T30409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9680'. [ 968.352786][T30411] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9681'. [ 968.364384][T30411] openvswitch: netlink: Flow key attr not present in new flow. [ 968.587989][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 968.595159][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 968.991565][T30426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9687'. [ 969.085239][T30432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.098188][T30432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.302977][T19278] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 969.460826][T19278] usb 6-1: Using ep0 maxpacket: 8 [ 969.469259][T19278] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 969.478699][T19278] usb 6-1: config 0 has no interface number 0 [ 969.487987][T19278] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 969.497343][T19278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.505670][T19278] usb 6-1: Product: syz [ 969.509953][T19278] usb 6-1: Manufacturer: syz [ 969.515218][T19278] usb 6-1: SerialNumber: syz [ 969.528586][T19278] usb 6-1: config 0 descriptor?? [ 969.751836][T30426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.790298][T30426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.824164][T19278] pegasus 6-1:0.24: probe with driver pegasus failed with error -71 [ 969.854498][T19278] usb 6-1: USB disconnect, device number 38 [ 970.014711][T30458] netlink: 'syz.3.9697': attribute type 6 has an invalid length. [ 970.227560][T30468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9702'. [ 970.787271][T30492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.815023][T30492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.052103][T30503] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 971.117193][ C0] net_ratelimit: 6 callbacks suppressed [ 971.117213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 971.521509][T30524] tmpfs: Bad value for 'mpol' [ 971.536611][T30527] netlink: 'syz.5.9727': attribute type 10 has an invalid length. [ 971.621320][ T1165] tipc: Subscription rejected, illegal request [ 971.885424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 971.889285][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 971.893221][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 971.904257][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.091730][T19278] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 972.130765][T30558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.140083][T30558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.219777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 972.236620][T30561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9738'. [ 972.265200][T19278] usb 6-1: unable to get BOS descriptor or descriptor too short [ 972.278986][T19278] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 972.290607][T19278] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 972.304185][T19278] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 972.314211][T19278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.324495][T19278] usb 6-1: Product: syz [ 972.329215][T19278] usb 6-1: Manufacturer: syz [ 972.333909][T19278] usb 6-1: SerialNumber: syz [ 972.568996][T30539] netlink: 'syz.5.9731': attribute type 10 has an invalid length. [ 972.578778][T30539] netlink: 'syz.5.9731': attribute type 10 has an invalid length. [ 972.587700][T30539] siw: device registration error -23 [ 972.678235][T19278] usb 6-1: interface 1 not found [ 972.697023][T19278] usb 6-1: USB disconnect, device number 39 [ 972.836655][T30576] overlayfs: failed to clone upperpath [ 972.842673][T30578] netlink: 'syz.6.9744': attribute type 1 has an invalid length. [ 972.853006][T30578] netlink: 'syz.6.9744': attribute type 1 has an invalid length. [ 972.855704][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9743'. [ 972.873123][T30576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9743'. [ 972.985473][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 972.992648][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 973.237943][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 973.271191][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffff92 [ 973.301317][ T43] asix 7-1:0.0: probe with driver asix failed with error -110 [ 973.321544][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 973.656315][T30607] netlink: 'syz.3.9758': attribute type 10 has an invalid length. [ 973.672616][T30607] netlink: 'syz.3.9758': attribute type 10 has an invalid length. [ 973.739251][T30610] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 973.967433][T30618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9762'. [ 974.058461][T30622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.067288][T30622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.076510][T30622] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9764'. [ 974.086118][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 974.086230][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 974.093801][T18807] Bluetooth: hci0: command 0x0406 tx timeout [ 974.107976][T30623] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9763'. [ 974.164499][T30624] netlink: 92 bytes leftover after parsing attributes in process `syz.5.9763'. [ 974.417782][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 974.737295][T30648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.746669][T30648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.758625][T30648] netlink: 'syz.6.9773': attribute type 10 has an invalid length. [ 974.768894][T30648] netlink: 'syz.6.9773': attribute type 10 has an invalid length. [ 974.903318][T30655] IPVS: set_ctl: invalid protocol: 8 127.150.84.214:13995 [ 975.202517][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 975.360242][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 975.390619][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 975.410591][ T10] usb 6-1: config 0 has no interface number 0 [ 975.417326][ T10] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 243 [ 975.432759][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 975.443933][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 975.467772][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.487516][ T10] usb 6-1: Product: syz [ 975.488861][T30664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9781'. [ 975.491768][ T10] usb 6-1: Manufacturer: syz [ 975.516820][ T10] usb 6-1: SerialNumber: syz [ 975.539287][ T10] usb 6-1: config 0 descriptor?? [ 975.547956][T30657] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 975.567752][ T10] smsc75xx v1.0.0 [ 975.672016][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9784'. [ 975.774759][T30657] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 975.931285][T30685] netlink: 'syz.3.9788': attribute type 10 has an invalid length. [ 976.007280][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 976.018446][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 976.028373][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 976.038975][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 976.612598][ C0] net_ratelimit: 5 callbacks suppressed [ 976.612618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 977.028171][T30712] validate_nla: 1 callbacks suppressed [ 977.028186][T30712] netlink: 'syz.4.9799': attribute type 10 has an invalid length. [ 977.043185][T30712] netlink: 'syz.4.9799': attribute type 10 has an invalid length. [ 977.309949][T30722] netlink: 'syz.3.9802': attribute type 20 has an invalid length. [ 977.369534][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 977.376765][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 977.436246][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9804'. [ 977.705827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 978.029444][T30752] trusted_key: encrypted_key: master key parameter is missing [ 978.136596][ T5952] usb 6-1: USB disconnect, device number 40 [ 978.256151][T30758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.272241][T30758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.291038][T30758] netlink: 'syz.6.9814': attribute type 10 has an invalid length. [ 978.331920][T30758] netlink: 'syz.6.9814': attribute type 10 has an invalid length. [ 978.478027][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 978.483409][T30772] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9819'. [ 978.485320][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 978.581548][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 978.752350][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 978.759092][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 978.768181][ T10] usb 6-1: config 0 has no interface number 0 [ 978.775050][ T10] usb 6-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 978.786673][ T10] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x83 has invalid maxpacket 15813, setting to 1024 [ 978.798159][ T10] usb 6-1: config 0 interface 2 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1024 [ 978.808338][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 978.815326][ T10] usb 6-1: config 0 interface 2 has no altsetting 0 [ 978.824428][ T10] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 978.833913][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.842033][ T10] usb 6-1: Product: syz [ 978.846276][ T10] usb 6-1: Manufacturer: syz [ 978.851224][ T10] usb 6-1: SerialNumber: syz [ 978.858241][ T10] usb 6-1: config 0 descriptor?? [ 978.865208][T30762] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 979.039818][T30790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.057581][T30790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.066286][T30789] trusted_key: encrypted_key: insufficient parameters specified [ 979.074180][T30791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.077072][T30791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.096085][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.172833][ T10] usb 6-1: USB disconnect, device number 41 [ 979.238591][T28679] udevd[28679]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.567306][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 979.574442][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 979.903276][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 979.927615][T30829] netlink: 'syz.5.9842': attribute type 5 has an invalid length. [ 979.969660][T30833] 9pnet_fd: Insufficient options for proto=fd [ 980.324091][ T5952] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 980.495136][ T5952] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 980.504685][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.515951][ T5952] usb 6-1: config 0 descriptor?? [ 981.182157][T30862] 9pnet_fd: Insufficient options for proto=fd [ 981.598350][ T5952] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 981.688023][T30886] 9pnet_fd: Insufficient options for proto=fd [ 981.689450][T30885] block nbd6: Attempted send on invalid socket [ 981.722679][T30885] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.741575][T30885] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32 [ 981.764612][T30889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.775656][T30889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.906160][T30896] 9pnet_fd: Insufficient options for proto=fd [ 982.090701][ C0] net_ratelimit: 5 callbacks suppressed [ 982.090723][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 982.138365][T30911] 9pnet_fd: Insufficient options for proto=fd [ 982.848905][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 982.856023][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 982.874292][T30931] 9pnet_fd: Insufficient options for proto=fd [ 982.955859][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9888'. [ 983.185637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 983.212967][ T5952] usb 6-1: USB disconnect, device number 42 [ 983.253517][T30949] IPVS: Unknown mcast interface: pimreg0 [ 983.337588][T30955] 9pnet_fd: Insufficient options for proto=fd [ 983.496649][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9898'. [ 983.728844][T30977] cgroup: subsys name conflicts with all [ 983.757727][T30981] 9pnet_fd: Insufficient options for proto=fd [ 983.953030][T30990] input: syz1 as /devices/virtual/input/input42 [ 983.954030][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 983.966558][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 983.976565][T30990] netlink: 763 bytes leftover after parsing attributes in process `syz.6.9910'. [ 984.205612][T31006] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9916'. [ 984.280301][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 984.341522][T30977] Process accounting resumed [ 984.557015][T31026] netlink: 'syz.4.9923': attribute type 5 has an invalid length. [ 984.571750][T31015] gfs2: path_lookup on c::: returned error -2 [ 984.589017][T31015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.604010][T31015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.706421][T31035] syz.4.9926 (31035): attempted to duplicate a private mapping with mremap. This is not supported. [ 984.870756][T18807] Bluetooth: hci4: command 0x0405 tx timeout [ 985.023868][T31042] IPVS: Unknown mcast interface: pimreg0 [ 985.039289][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 985.046347][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 985.310842][T31052] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9932'. [ 985.375899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 985.387087][T31056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.396163][T31056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.749711][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9941'. [ 985.921216][T31086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.932065][T31086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.945662][T31086] netlink: 'syz.6.9944': attribute type 10 has an invalid length. [ 985.955045][T31086] netlink: 'syz.6.9944': attribute type 10 has an invalid length. [ 986.625256][T31106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.634154][T31106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.648431][T31106] overlayfs: missing 'lowerdir' [ 986.654513][T31106] overlayfs: missing 'lowerdir' [ 986.663370][T31106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.672536][T31106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.008052][ T30] audit: type=1326 audit(1757095675.516:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.031454][ T30] audit: type=1326 audit(1757095675.516:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.054326][ T30] audit: type=1326 audit(1757095675.535:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09c58d550 code=0x7ffc0000 [ 987.078108][ T30] audit: type=1326 audit(1757095675.535:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.120320][ T30] audit: type=1326 audit(1757095675.535:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.143027][ T30] audit: type=1326 audit(1757095675.535:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.166960][ T30] audit: type=1326 audit(1757095675.535:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.191024][ T30] audit: type=1326 audit(1757095675.535:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.216518][ T30] audit: type=1326 audit(1757095675.535:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.239047][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.246271][ T30] audit: type=1326 audit(1757095675.535:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31121 comm="syz.6.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09c58ebe9 code=0x7ffc0000 [ 987.547652][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 987.568649][ C0] net_ratelimit: 5 callbacks suppressed [ 987.568674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 987.705978][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 987.719531][ T10] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 987.733231][ T10] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 987.741697][T31129] netlink: 'syz.4.9959': attribute type 10 has an invalid length. [ 987.744222][ T10] usb 6-1: config 0 has no interface number 0 [ 987.755988][T31129] netlink: 'syz.4.9959': attribute type 10 has an invalid length. [ 987.761948][ T10] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 987.787857][ T10] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 987.808703][ T10] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 987.833633][ T10] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 987.851079][ T10] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 987.862329][ T10] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 987.881299][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 987.890953][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.913058][ T10] usb 6-1: config 0 descriptor?? [ 987.930260][T31125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 987.940752][T31125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 987.953171][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 987.969170][T31133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.003654][T31133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.090735][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9960'. [ 988.172906][ T43] usb 6-1: USB disconnect, device number 43 [ 988.329047][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 988.336264][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 988.668952][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 988.833987][T31159] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9969'. [ 988.847786][T31159] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9969'. [ 988.996270][T31168] netlink: 'syz.3.9972': attribute type 10 has an invalid length. [ 989.005127][T31168] netlink: 'syz.3.9972': attribute type 10 has an invalid length. [ 989.167634][ T5952] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 989.182384][T31178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.201772][T31178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.268448][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9975'. [ 989.338067][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 989.349551][T31163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.358506][T31163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.392165][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 989.400088][ T5952] usb 6-1: too many configurations: 26, using maximum allowed: 8 [ 989.411281][ T5952] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 989.419790][ T5952] usb 6-1: can't read configurations, error -71 [ 989.433935][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 989.440982][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 989.773104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 989.898447][T31194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.907343][T31194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.965478][T31196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9982'. [ 989.974754][T31196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9982'. [ 990.540473][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 990.547674][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 990.557358][ T5952] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 990.569235][T31220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9988'. [ 990.576848][T31217] 9pnet: Could not find request transport: fd0x0000000000000003 [ 990.718710][T31225] tipc: Resetting bearer [ 990.735777][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.746326][ T5952] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 990.757985][ T5952] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 990.773737][ T5952] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 990.795320][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.804710][ T5952] usb 6-1: Product: syz [ 990.809179][ T5952] usb 6-1: Manufacturer: syz [ 990.814393][ T5952] usb 6-1: SerialNumber: syz [ 990.866346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 991.049745][T31203] netlink: 'syz.5.9985': attribute type 10 has an invalid length. [ 991.064297][T31203] netlink: 'syz.5.9985': attribute type 10 has an invalid length. [ 991.075902][T31203] siw: device registration error -23 [ 991.117901][ T5952] usb 6-1: interface 1 not found [ 991.132025][ T5952] usb 6-1: USB disconnect, device number 45 [ 991.224392][T31240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.250323][T31240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.322683][T31247] syz.3.9999 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 991.347454][T31244] 9pnet: Could not find request transport: fd0x0000000000000003 [ 991.997268][ T5952] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 992.009400][T31276] 9pnet: Could not find request transport: fd0x0000000000000003 [ 992.175802][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 992.183527][ T5952] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 992.192047][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.202240][ T5952] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.214040][ T5952] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 992.223721][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.231839][ T5952] usb 6-1: Product: syz [ 992.236041][ T5952] usb 6-1: Manufacturer: syz [ 992.241998][ T5952] usb 6-1: SerialNumber: syz [ 992.249033][ T5952] usb 6-1: config 0 descriptor?? [ 992.469295][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10006'. [ 992.551466][ T10] usb 6-1: USB disconnect, device number 46 [ 992.807110][T31295] nfs: Unknown parameter 'deTcontext' [ 992.954949][T31300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10018'. [ 992.968055][T31300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10018'. [ 993.058263][ C0] net_ratelimit: 5 callbacks suppressed [ 993.058302][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 993.142193][T31303] 9pnet_fd: Insufficient options for proto=fd [ 993.540318][T31326] 9pnet_fd: Insufficient options for proto=fd [ 993.597397][ T43] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 993.772665][ T43] usb 6-1: config 0 has an invalid interface number: 135 but max is 0 [ 993.782305][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.792976][ T43] usb 6-1: config 0 has no interface number 0 [ 993.799186][ T43] usb 6-1: config 0 interface 135 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 993.809235][ T43] usb 6-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.822863][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 993.823061][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 993.839479][ T43] usb 6-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00 [ 993.848635][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.856837][ T43] usb 6-1: Product: syz [ 993.861085][ T43] usb 6-1: Manufacturer: syz [ 993.865973][ T43] usb 6-1: SerialNumber: syz [ 993.873098][ T43] usb 6-1: config 0 descriptor?? [ 993.882045][ T43] usb-storage 6-1:0.135: USB Mass Storage device detected [ 993.899165][ T43] usb-storage 6-1:0.135: Quirks match for vid 0482 pid 0101: 8 [ 994.158408][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 994.300124][ T5949] usb 6-1: USB disconnect, device number 47 [ 994.399613][T31348] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10034'. [ 994.604374][T31357] 9pnet_fd: Insufficient options for proto=fd [ 994.921155][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 994.928488][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 994.999462][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10043'. [ 995.040553][ T43] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 995.071579][ T43] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 995.196700][T31384] 9pnet_fd: Insufficient options for proto=fd [ 995.257333][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 995.312533][ T5949] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 995.481414][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 995.491689][ T5949] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 995.505485][ T5949] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 995.518158][ T5949] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 995.528691][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.537960][ T5949] usb 6-1: Product: syz [ 995.545974][ T5949] usb 6-1: Manufacturer: syz [ 995.550607][ T5949] usb 6-1: SerialNumber: syz [ 995.778991][T31379] netlink: 'syz.5.10046': attribute type 10 has an invalid length. [ 995.788117][T31379] netlink: 'syz.5.10046': attribute type 10 has an invalid length. [ 995.798593][T31379] siw: device registration error -23 [ 995.920041][ T5949] usb 6-1: interface 1 not found [ 995.978773][ T5949] usb 6-1: USB disconnect, device number 48 [ 996.014482][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 996.021732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 996.093363][T31412] 9pnet_fd: Insufficient options for proto=fd [ 996.099336][T31414] overlayfs: failed to clone lowerpath [ 996.350562][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 996.781859][ T43] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 996.958694][T31436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.968015][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 996.972495][T31436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.976279][ T43] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 996.990006][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.001076][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 997.019625][ T43] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 997.033437][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.042722][ T43] usb 6-1: Product: syz [ 997.047071][ T43] usb 6-1: Manufacturer: syz [ 997.051762][ T43] usb 6-1: SerialNumber: syz [ 997.059961][ T43] usb 6-1: config 0 descriptor?? [ 997.138045][T31441] 9pnet_fd: Insufficient options for proto=fd [ 997.250303][T31446] netlink: 'syz.3.10068': attribute type 10 has an invalid length. [ 997.262710][T31446] netlink: 'syz.3.10068': attribute type 10 has an invalid length. [ 997.346142][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10060'. [ 997.405921][ T5949] usb 6-1: USB disconnect, device number 49 [ 997.434394][T31456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10070'. [ 997.450395][T31456] netlink: 'syz.4.10070': attribute type 2 has an invalid length. [ 997.459218][T31456] netlink: 'syz.4.10070': attribute type 1 has an invalid length. [ 997.467440][T31456] netlink: 'syz.4.10070': attribute type 1 has an invalid length. [ 997.604437][T31459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.614698][T31459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.328159][ T5949] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 998.488572][ T5949] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 998.497119][ T5949] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 998.507539][ T5949] usb 6-1: config 220 has no interface number 2 [ 998.513843][ T5949] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 998.523927][ T5949] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 998.534075][ T5949] usb 6-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 998.548588][ C0] net_ratelimit: 5 callbacks suppressed [ 998.548606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 998.551057][T31483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 998.554642][ T5949] usb 6-1: config 220 interface 0 has no altsetting 0 [ 998.577535][ T5949] usb 6-1: config 220 interface 76 has no altsetting 0 [ 998.584908][ T5949] usb 6-1: config 220 interface 1 has no altsetting 0 [ 998.597841][ T5949] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 998.607673][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.617674][ T5949] usb 6-1: Product: syz [ 998.621884][ T5949] usb 6-1: Manufacturer: syz [ 998.627006][ T5949] usb 6-1: SerialNumber: syz [ 998.766082][T31490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.778105][T31490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.791956][T31490] netlink: 'syz.6.10082': attribute type 10 has an invalid length. [ 998.801482][T31490] netlink: 'syz.6.10082': attribute type 10 has an invalid length. [ 998.890831][ T5949] usb 6-1: selecting invalid altsetting 0 [ 998.898433][ T5949] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 998.904832][ T5949] usb 6-1: No valid video chain found. [ 998.917842][ T5949] usb 6-1: selecting invalid altsetting 0 [ 998.923799][ T5949] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 998.936729][ T5949] usb 6-1: USB disconnect, device number 50 [ 999.292904][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10084'. [ 999.302510][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 999.302748][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 999.524165][T31512] block nbd6: Attempted send on invalid socket [ 999.534816][T31512] I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 999.546732][T31512] gfs2: error -5 reading superblock [ 999.643991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 999.658730][T31512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.671237][T31512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.301267][T31538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.315041][T31538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.326404][T31538] netlink: 'syz.6.10095': attribute type 10 has an invalid length. [ 1000.335269][T31538] netlink: 'syz.6.10095': attribute type 10 has an invalid length. [ 1000.402676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1000.409833][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1000.728836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1000.883949][ T43] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1001.007363][T31560] netlink: 'syz.3.10101': attribute type 17 has an invalid length. [ 1001.057219][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1001.082250][ T43] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 1001.082655][T31562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.096929][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.131296][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1001.135338][T31562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.157713][ T43] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 1001.167710][T31562] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1001.176126][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.184794][ T43] usb 6-1: Product: syz [ 1001.189070][ T43] usb 6-1: Manufacturer: syz [ 1001.194322][ T43] usb 6-1: SerialNumber: syz [ 1001.218914][ T43] usb 6-1: config 0 descriptor?? [ 1001.325784][T31575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10107'. [ 1001.487598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1001.494951][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1001.505342][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10098'. [ 1001.552566][ T43] usb 6-1: USB disconnect, device number 51 [ 1001.851606][T31587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.860932][T31587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.524223][T31617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.538344][T31617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.575569][T31617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.598545][T31617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.467155][T31643] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1003.636662][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1003.801058][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10138'. [ 1003.820697][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1003.833918][ T10] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.844884][ T10] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 1003.861625][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 1003.871031][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.880550][ T10] usb 6-1: Product: syz [ 1003.885249][ T10] usb 6-1: Manufacturer: syz [ 1003.889854][ T10] usb 6-1: SerialNumber: syz [ 1004.031959][ C0] net_ratelimit: 6 callbacks suppressed [ 1004.031981][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1004.118377][T31640] validate_nla: 3 callbacks suppressed [ 1004.118401][T31640] netlink: 'syz.5.10131': attribute type 10 has an invalid length. [ 1004.133594][T31640] netlink: 'syz.5.10131': attribute type 10 has an invalid length. [ 1004.143032][T31640] siw: device registration error -23 [ 1004.188092][ T10] usb 6-1: interface 1 not found [ 1004.202285][ T10] usb 6-1: USB disconnect, device number 52 [ 1004.576982][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10143'. [ 1004.805701][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1004.812863][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1005.131079][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1005.141894][ T5949] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1005.299471][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 1005.308450][ T5949] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 1005.319537][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.329994][ T5949] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1005.343920][ T5949] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 1005.353446][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.361450][ T5949] usb 6-1: Product: syz [ 1005.366128][ T5949] usb 6-1: Manufacturer: syz [ 1005.370769][ T5949] usb 6-1: SerialNumber: syz [ 1005.378602][ T5949] usb 6-1: config 0 descriptor?? [ 1005.655350][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10146'. [ 1005.684624][ T43] usb 6-1: USB disconnect, device number 53 [ 1005.898662][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1005.905743][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1005.972157][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.981760][T31668] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1006.224492][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1006.451158][T31719] netlink: 'syz.4.10152': attribute type 10 has an invalid length. [ 1006.461679][T31719] netlink: 'syz.4.10152': attribute type 10 has an invalid length. [ 1006.603507][ T43] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1006.771491][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1006.779939][ T43] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1006.788377][ T43] usb 6-1: config 0 has no interface number 0 [ 1006.794614][ T43] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.805653][ T43] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1006.815544][ T43] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1006.825441][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1006.834775][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.842814][ T43] usb 6-1: Product: syz [ 1006.847146][ T43] usb 6-1: Manufacturer: syz [ 1006.851949][ T43] usb 6-1: SerialNumber: syz [ 1006.858902][ T43] usb 6-1: config 0 descriptor?? [ 1006.992596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1006.999657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1007.082800][ T43] appletouch 6-1:0.85: Failed to read mode from device. [ 1007.108780][ T43] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1007.140149][ T43] usb 6-1: USB disconnect, device number 54 [ 1007.318398][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1007.381924][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10156'. [ 1007.582082][T31671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1007.626925][T31747] usb usb8: usbfs: process 31747 (syz.6.10160) did not claim interface 0 before use [ 1007.852406][T31755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.861449][T31755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.939504][ T5949] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1008.099599][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1008.109319][ T5949] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.120025][ T5949] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 1008.131984][ T5949] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 1008.141389][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.149415][ T5949] usb 6-1: Product: syz [ 1008.153718][ T5949] usb 6-1: Manufacturer: syz [ 1008.158326][ T5949] usb 6-1: SerialNumber: syz [ 1008.171085][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 1008.385612][T31749] netlink: 'syz.5.10161': attribute type 10 has an invalid length. [ 1008.385865][T31761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10166'. [ 1008.417634][T31749] netlink: 'syz.5.10161': attribute type 10 has an invalid length. [ 1008.447216][T31749] siw: device registration error -23 [ 1008.531892][ T5949] usb 6-1: interface 1 not found [ 1008.558743][ T5949] usb 6-1: USB disconnect, device number 55 [ 1008.639945][T31771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.670086][T31771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.898844][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10173'. [ 1009.507921][ C0] net_ratelimit: 5 callbacks suppressed [ 1009.507943][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1009.546931][T31805] netlink: 'syz.4.10178': attribute type 14 has an invalid length. [ 1009.692249][T31811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.704123][T31811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.715261][T31811] netlink: 'syz.6.10182': attribute type 10 has an invalid length. [ 1009.726455][T31811] netlink: 'syz.6.10182': attribute type 10 has an invalid length. [ 1009.922766][T31823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10185'. [ 1009.937616][T31823] sctp: [Deprecated]: syz.4.10185 (pid 31823) Use of int in max_burst socket option deprecated. [ 1009.937616][T31823] Use struct sctp_assoc_value instead [ 1010.102687][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10186'. [ 1010.220863][T31834] pim6reg1: entered promiscuous mode [ 1010.226592][T31834] pim6reg1: entered allmulticast mode [ 1010.277053][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1010.284162][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1010.603503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1010.739230][T31854] netlink: 'syz.4.10196': attribute type 10 has an invalid length. [ 1010.750050][T31854] netlink: 'syz.4.10196': attribute type 10 has an invalid length. [ 1011.328475][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1011.362681][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1011.369981][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1011.491725][T31866] tmpfs: Bad value for 'mpol' [ 1011.699612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1011.768604][T31883] netlink: 'syz.6.10205': attribute type 4 has an invalid length. [ 1011.798377][T31883] netlink: 'syz.6.10205': attribute type 4 has an invalid length. [ 1011.963391][ T5949] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1011.982723][T31886] overlayfs: failed to clone upperpath [ 1012.141684][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 1012.173577][ T5949] usb 6-1: config index 0 descriptor too short (expected 3090, got 18) [ 1012.198005][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.221844][ T5949] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1012.240070][ T5949] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 1012.255379][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.267603][ T5949] usb 6-1: Product: syz [ 1012.277843][ T5949] usb 6-1: Manufacturer: syz [ 1012.287399][ T5949] usb 6-1: SerialNumber: syz [ 1012.301186][ T5949] usb 6-1: config 0 descriptor?? [ 1012.464935][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1012.469366][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1012.479633][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1012.487931][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1012.499302][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1012.509068][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1012.518303][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1012.628174][T31881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10204'. [ 1012.667147][T31895] lo speed is unknown, defaulting to 1000 [ 1012.796065][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1012.838928][ T5949] usb 6-1: USB disconnect, device number 56 [ 1013.257473][T31895] chnl_net:caif_netlink_parms(): no params data found [ 1013.616968][T31895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.646845][T31895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.660069][T31895] bridge_slave_0: entered allmulticast mode [ 1013.681853][T31895] bridge_slave_0: entered promiscuous mode [ 1013.703959][T31928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10219'. [ 1013.717601][T31895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.741226][T31895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.755017][T31895] bridge_slave_1: entered allmulticast mode [ 1013.782714][T31895] bridge_slave_1: entered promiscuous mode [ 1013.804870][T31934] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10219'. [ 1014.022091][T31895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.044841][T31895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.195768][T31945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.236210][T31945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.242404][T31895] team0: Port device team_slave_0 added [ 1014.295731][T31895] team0: Port device team_slave_1 added [ 1014.373162][ T8137] syz_tun (unregistering): left allmulticast mode [ 1014.515998][T31963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.536140][T31963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.624538][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10226'. [ 1014.741096][T18807] Bluetooth: hci5: command tx timeout [ 1014.752632][T31895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.770346][T31895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.797318][T31895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.814388][T31895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.821553][T31895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.848349][T31895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.990564][ C0] net_ratelimit: 3 callbacks suppressed [ 1014.990584][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1015.005972][T31895] hsr_slave_0: entered promiscuous mode [ 1015.013789][T31895] hsr_slave_1: entered promiscuous mode [ 1015.021099][T31895] debugfs: 'hsr0' already exists in 'hsr' [ 1015.030189][T31895] Cannot create hsr debugfs directory [ 1015.211242][T31983] binder: 31982:31983 ioctl c018620b 0 returned -14 [ 1015.411953][ T1007] bridge_slave_1: left allmulticast mode [ 1015.445485][ T1007] bridge_slave_1: left promiscuous mode [ 1015.460005][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.494047][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.537073][ T43] IPVS: starting estimator thread 0... [ 1015.545111][T31994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10235'. [ 1015.668674][T31995] IPVS: using max 24 ests per chain, 57600 per kthread [ 1015.876657][T32007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.886257][T32007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.906662][T32007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.926086][T32007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.014877][ T43] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1016.038222][ T1007] team0: Port device geneve0 removed [ 1016.064018][ T1007] bridge0 (unregistering): left allmulticast mode [ 1016.088558][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1016.173530][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1016.182121][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1016.204231][ T43] usb 6-1: config 9 has an invalid interface number: 164 but max is 0 [ 1016.219728][ T43] usb 6-1: config 9 has no interface number 0 [ 1016.227452][ T43] usb 6-1: config 9 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1016.242822][ T43] usb 6-1: config 9 interface 164 has no altsetting 0 [ 1016.260608][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 4.9a [ 1016.271541][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.297850][ T43] usb 6-1: Product: syz [ 1016.306836][ T43] usb 6-1: Manufacturer: syz [ 1016.317543][ T43] usb 6-1: SerialNumber: syz [ 1016.409636][T32022] netlink: 'syz.4.10244': attribute type 10 has an invalid length. [ 1016.935137][T18807] Bluetooth: hci5: command tx timeout [ 1017.186905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1017.266589][T32022] team0 (unregistering): Port device team_slave_0 removed [ 1017.300756][T32022] team0 (unregistering): Port device team_slave_1 removed [ 1017.643477][ T43] appletouch 6-1:9.164: Could not find int-in endpoint [ 1017.672947][ T43] appletouch 6-1:9.164: probe with driver appletouch failed with error -5 [ 1017.693217][ T43] usbhid 6-1:9.164: couldn't find an input interrupt endpoint [ 1017.744688][ T43] usb 6-1: USB disconnect, device number 57 [ 1017.827704][ T1007] tipc: Disabling bearer [ 1017.838127][ T1007] tipc: Disabling bearer [ 1017.854567][ T1007] tipc: Left network mode [ 1017.882899][T31895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1017.899410][T31895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1017.913926][T31895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1017.953283][T31895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1018.110684][ T1007] hsr_slave_0: left promiscuous mode [ 1018.156832][ T1007] hsr_slave_1: left promiscuous mode [ 1018.171167][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.194810][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.227910][T32057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.254549][T32057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.284742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1019.136148][T18807] Bluetooth: hci5: command tx timeout [ 1019.377867][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1019.501766][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 1019.572056][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 1020.234372][T32078] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1020.476058][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1021.314373][T18807] Bluetooth: hci5: command tx timeout [ 1021.565834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1022.660620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1023.352563][T31895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.388507][T32100] cgroup: Invalid name [ 1023.471482][T31895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.510953][T31658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.518312][T31658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.571270][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.579117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.754054][T32112] tipc: Enabling of bearer rejected, media not registered [ 1023.762202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1024.188129][T31895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.291698][T31895] veth0_vlan: entered promiscuous mode [ 1024.310319][T31895] veth1_vlan: entered promiscuous mode [ 1024.360549][T31895] veth0_macvtap: entered promiscuous mode [ 1024.373635][T31895] veth1_macvtap: entered promiscuous mode [ 1024.396342][T31895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.409980][T31895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.425053][T22910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.437259][T22910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.455256][T22910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.464062][T22910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.582848][T19278] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1024.590966][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.608934][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.652233][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.671301][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.761827][T19278] usb 6-1: Using ep0 maxpacket: 8 [ 1024.790291][T19278] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1024.813190][T19278] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1024.845128][T19278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.853190][T19278] usb 6-1: Product: syz [ 1024.865143][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1024.932020][T19278] usb 6-1: Manufacturer: syz [ 1024.936696][T19278] usb 6-1: SerialNumber: syz [ 1024.981796][T19278] usb 6-1: config 0 descriptor?? [ 1025.006845][T19278] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1025.044503][T19278] usb 6-1: setting power ON [ 1025.053304][T19278] dvb-usb: bulk message failed: -22 (2/0) [ 1025.081219][T19278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1025.099694][T19278] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1025.126973][T19278] usb 6-1: media controller created [ 1025.188512][T19278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1025.296255][T19278] usb 6-1: selecting invalid altsetting 6 [ 1025.306934][T19278] usb 6-1: digital interface selection failed (-22) [ 1025.313730][T19278] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1025.350525][T19278] usb 6-1: setting power OFF [ 1025.355746][T19278] dvb-usb: bulk message failed: -22 (2/0) [ 1025.389826][T19278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1025.411596][T19278] (NULL device *): no alternate interface [ 1025.519583][T19278] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1025.592277][T19278] usb 6-1: USB disconnect, device number 58 [ 1025.911713][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1025.913038][ T5920] usb 7-1: [UEAGLE-ATM] firmware is not available [ 1025.923877][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1025.936732][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1025.953665][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1025.958448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1025.965010][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.127436][T32153] lo speed is unknown, defaulting to 1000 [ 1026.326662][T19278] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1026.359366][T32167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10277'. [ 1026.421908][T32167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10277'. [ 1026.516630][T19278] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.531165][T19278] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1026.547566][T19278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.566478][T19278] usb 4-1: Product: syz [ 1026.570839][T19278] usb 4-1: Manufacturer: syz [ 1026.575476][T19278] usb 4-1: SerialNumber: syz [ 1026.611638][T19278] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1026.673147][T18807] Bluetooth: hci0: unexpected event for opcode 0x080c [ 1026.724450][T32153] chnl_net:caif_netlink_parms(): no params data found [ 1026.774280][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10281'. [ 1027.039467][T19278] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1027.052109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1027.102154][T19278] usb 4-1: USB disconnect, device number 25 [ 1027.150917][T32153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.161992][T32191] netlink: 544 bytes leftover after parsing attributes in process `syz.6.10285'. [ 1027.174676][T32153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.194967][T32153] bridge_slave_0: entered allmulticast mode [ 1027.214223][T32153] bridge_slave_0: entered promiscuous mode [ 1027.224440][T32153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.239669][T32153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.247704][T32153] bridge_slave_1: entered allmulticast mode [ 1027.256976][T32153] bridge_slave_1: entered promiscuous mode [ 1027.263492][ T981] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1027.319576][T32153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.334676][T32153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.375418][T32153] team0: Port device team_slave_0 added [ 1027.383568][T32153] team0: Port device team_slave_1 added [ 1027.417285][T32153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.425152][T32153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.451957][T32153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.459719][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.466608][T32153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.474196][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1027.481476][T32153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.500334][ T981] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 1027.531619][T32153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.537075][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.569298][ T981] usb 6-1: config 0 descriptor?? [ 1027.697123][T32153] hsr_slave_0: entered promiscuous mode [ 1027.712974][T32153] hsr_slave_1: entered promiscuous mode [ 1027.730508][T32153] debugfs: 'hsr0' already exists in 'hsr' [ 1027.736723][T32153] Cannot create hsr debugfs directory [ 1028.056224][ T981] corsair-psu 0003:1B1C:1C07.0039: unknown main item tag 0x2 [ 1028.082608][ T981] corsair-psu 0003:1B1C:1C07.0039: item fetching failed at offset 2/5 [ 1028.111225][ T981] corsair-psu 0003:1B1C:1C07.0039: probe with driver corsair-psu failed with error -22 [ 1028.146440][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1028.153797][T18807] Bluetooth: hci1: command tx timeout [ 1028.338839][T30238] usb 6-1: USB disconnect, device number 59 [ 1028.622428][T32153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1028.633745][T32153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1028.648318][T32153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.651771][ T981] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1028.669679][T32153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1028.755695][T32153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.780949][T32153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.796559][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.803775][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.818383][T22910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.825619][T22910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.844622][ T981] usb 4-1: config 1 has an invalid interface number: 236 but max is 1 [ 1028.853535][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.868795][ T981] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1028.878681][ T981] usb 4-1: config 1 has no interface number 2 [ 1028.891084][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1028.918118][ T981] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1028.945239][ T981] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.982974][ T981] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1029.004422][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1029.014980][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.024325][ T981] usb 4-1: Product: syz [ 1029.028834][ T981] usb 4-1: Manufacturer: syz [ 1029.034557][ T981] usb 4-1: SerialNumber: syz [ 1029.050407][T32222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.063144][ T981] cdc_ncm 4-1:1.0: skipping garbage [ 1029.068413][ T981] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 1029.077465][ T981] cdc_ncm 4-1:1.0: bind() failure [ 1029.091905][ T981] cdc_ncm 4-1:1.236: CDC Union missing and no IAD found [ 1029.100298][ T981] cdc_ncm 4-1:1.236: bind() failure [ 1029.201546][T32153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.241394][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1029.427423][T32249] macvtap0: refused to change device tx_queue_len [ 1029.509326][T19278] usb 4-1: USB disconnect, device number 26 [ 1029.825853][T32153] veth0_vlan: entered promiscuous mode [ 1029.852617][T32153] veth1_vlan: entered promiscuous mode [ 1029.915871][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1029.919406][T32153] veth0_macvtap: entered promiscuous mode [ 1029.950494][T32153] veth1_macvtap: entered promiscuous mode [ 1029.988086][T32153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.016384][T32153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.045490][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.060574][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.069651][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.075572][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.093119][T22910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.096176][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1030.111617][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.154522][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 1030.154543][ T30] audit: type=1326 audit(1757121496.439:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.185419][ T10] usb 6-1: config 0 descriptor?? [ 1030.211554][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1030.259874][ T30] audit: type=1326 audit(1757121496.439:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.311733][T22910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.315529][ T30] audit: type=1326 audit(1757121496.439:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.333169][T22910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.342993][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1030.344266][T18807] Bluetooth: hci1: command tx timeout [ 1030.383609][ T30] audit: type=1326 audit(1757121496.439:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.408138][ T30] audit: type=1326 audit(1757121496.439:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.438706][ T30] audit: type=1326 audit(1757121496.439:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.462628][ T30] audit: type=1326 audit(1757121496.439:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.485575][ T30] audit: type=1326 audit(1757121496.439:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32271 comm="syz.3.10313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7958ebe9 code=0x7ffc0000 [ 1030.488804][T32276] tipc: Started in network mode [ 1030.518270][T32276] tipc: Node identity d67cf7b2a291, cluster identity 4711 [ 1030.525781][T32276] tipc: Enabled bearer , priority 0 [ 1030.583976][T32276] syzkaller0: entered promiscuous mode [ 1030.592202][T32276] syzkaller0: entered allmulticast mode [ 1030.600209][T32276] tipc: Resetting bearer [ 1030.611891][T31658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.621596][T31658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.637260][T32275] tipc: Resetting bearer [ 1030.650361][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.658188][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.675827][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1030.685312][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1030.693885][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1030.702293][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1030.709897][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1030.718264][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1030.732621][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1030.928574][T18807] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1030.954526][T18807] Bluetooth: hci0: Injecting HCI hardware error event [ 1030.966002][T18807] Bluetooth: hci0: hardware error 0x00 [ 1030.984704][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1031.001176][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1031.034745][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1031.043003][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1031.053041][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1031.061031][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1031.070236][ T10] pwc: Registered as video103. [ 1031.102815][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 1031.167634][ T10] usb 6-1: USB disconnect, device number 60 [ 1031.433099][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1031.580610][T32283] netlink: 'syz.5.10317': attribute type 10 has an invalid length. [ 1031.698163][ T981] tipc: Node number set to 1961752498 [ 1031.951140][ T5863] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 1032.107392][ T5863] usb 6-1: device descriptor read/64, error -71 [ 1032.385168][ T5863] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 1032.529095][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1032.537523][ T5873] Bluetooth: hci1: command tx timeout [ 1032.557253][ T5863] usb 6-1: device descriptor read/64, error -71 [ 1032.680977][ T5863] usb usb6-port1: attempt power cycle [ 1033.048681][ T5863] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 1033.093125][ T5863] usb 6-1: device descriptor read/8, error -71 [ 1033.217461][T18807] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1033.371243][ T5863] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1033.434381][ T5863] usb 6-1: device descriptor read/8, error -71 [ 1033.564435][ T5863] usb usb6-port1: unable to enumerate USB device [ 1033.625985][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1034.030356][T32275] tipc: Disabling bearer [ 1034.189834][T32288] ================================================================== [ 1034.197963][T32288] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1034.206441][T32288] Read of size 8 at addr ffff88805a226408 by task syz.4.10269/32288 [ 1034.214535][T32288] [ 1034.216895][T32288] CPU: 1 UID: 0 PID: 32288 Comm: syz.4.10269 Not tainted syzkaller #0 PREEMPT(full) [ 1034.216922][T32288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1034.216934][T32288] Call Trace: [ 1034.216942][T32288] [ 1034.216951][T32288] dump_stack_lvl+0x189/0x250 [ 1034.216997][T32288] ? __kasan_check_byte+0x12/0x40 [ 1034.217019][T32288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1034.217046][T32288] ? lock_release+0x4b/0x3e0 [ 1034.217070][T32288] ? __virt_addr_valid+0x4a5/0x5c0 [ 1034.217102][T32288] print_report+0xca/0x240 [ 1034.217123][T32288] ? change_page_attr_set_clr+0x625/0xfc0 [ 1034.217144][T32288] kasan_report+0x118/0x150 [ 1034.217168][T32288] ? change_page_attr_set_clr+0x625/0xfc0 [ 1034.217194][T32288] change_page_attr_set_clr+0x625/0xfc0 [ 1034.217227][T32288] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1034.217249][T32288] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1034.217278][T32288] ? memtype_reserve+0x874/0xb30 [ 1034.217315][T32288] _set_pages_array+0x145/0x270 [ 1034.217341][T32288] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1034.217373][T32288] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1034.217406][T32288] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1034.217434][T32288] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1034.217462][T32288] ? ww_mutex_lock+0x3f/0x1c0 [ 1034.217493][T32288] drm_gem_map_attach+0x19c/0x1f0 [ 1034.217522][T32288] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1034.217548][T32288] ? __fget_files+0x3a0/0x420 [ 1034.217574][T32288] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1034.217603][T32288] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1034.217632][T32288] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1034.217659][T32288] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1034.217688][T32288] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1034.217802][T32288] drm_ioctl_kernel+0x2cc/0x390 [ 1034.217835][T32288] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1034.217865][T32288] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1034.217893][T32288] drm_ioctl+0x67f/0xb10 [ 1034.217915][T32288] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1034.217943][T32288] ? __pfx_drm_ioctl+0x10/0x10 [ 1034.217971][T32288] ? __fget_files+0x3a0/0x420 [ 1034.217996][T32288] ? __fget_files+0x2a/0x420 [ 1034.218023][T32288] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1034.218052][T32288] ? __pfx_drm_ioctl+0x10/0x10 [ 1034.218085][T32288] __se_sys_ioctl+0xfc/0x170 [ 1034.218112][T32288] do_syscall_64+0xfa/0xfa0 [ 1034.218140][T32288] ? lockdep_hardirqs_on+0x9c/0x150 [ 1034.218167][T32288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.218188][T32288] ? clear_bhb_loop+0x60/0xb0 [ 1034.218211][T32288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.218231][T32288] RIP: 0033:0x7f3cd198ebe9 [ 1034.218252][T32288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.218270][T32288] RSP: 002b:00007f3cd2731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.218292][T32288] RAX: ffffffffffffffda RBX: 00007f3cd1bc5fa0 RCX: 00007f3cd198ebe9 [ 1034.218308][T32288] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000005 [ 1034.218322][T32288] RBP: 00007f3cd1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1034.218335][T32288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.218347][T32288] R13: 00007f3cd1bc6038 R14: 00007f3cd1bc5fa0 R15: 00007fffe8f80b38 [ 1034.218371][T32288] [ 1034.218380][T32288] [ 1034.555519][T32288] Allocated by task 32288: [ 1034.559947][T32288] kasan_save_track+0x3e/0x80 [ 1034.564638][T32288] __kasan_kmalloc+0x93/0xb0 [ 1034.569245][T32288] __kvmalloc_node_noprof+0x5cd/0x910 [ 1034.574722][T32288] drm_gem_get_pages+0x166/0xa20 [ 1034.579853][T32288] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1034.585934][T32288] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1034.591494][T32288] drm_gem_map_attach+0x19c/0x1f0 [ 1034.596538][T32288] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1034.601916][T32288] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1034.608169][T32288] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1034.613935][T32288] drm_ioctl_kernel+0x2cc/0x390 [ 1034.618795][T32288] drm_ioctl+0x67f/0xb10 [ 1034.623126][T32288] __se_sys_ioctl+0xfc/0x170 [ 1034.627737][T32288] do_syscall_64+0xfa/0xfa0 [ 1034.632244][T32288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.638177][T32288] [ 1034.640591][T32288] The buggy address belongs to the object at ffff88805a226000 [ 1034.640591][T32288] which belongs to the cache kmalloc-2k of size 2048 [ 1034.654641][T32288] The buggy address is located 0 bytes to the right of [ 1034.654641][T32288] allocated 1032-byte region [ffff88805a226000, ffff88805a226408) [ 1034.669230][T32288] [ 1034.671554][T32288] The buggy address belongs to the physical page: [ 1034.677976][T32288] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a220 [ 1034.686766][T32288] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1034.695279][T32288] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1034.702841][T32288] page_type: f5(slab) [ 1034.706827][T32288] raw: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 1034.715581][T32288] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1034.723302][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1034.724174][T32288] head: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 1034.739783][T32288] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1034.748463][T32288] head: 00fff00000000003 ffffea0001688801 00000000ffffffff 00000000ffffffff [ 1034.757133][T32288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1034.766142][T32288] page dumped because: kasan: bad access detected [ 1034.772634][T32288] page_owner tracks the page as allocated [ 1034.778433][T32288] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 92936964835, free_ts 27643443108 [ 1034.799888][T32288] post_alloc_hook+0x240/0x2a0 [ 1034.804651][T32288] get_page_from_freelist+0x21e4/0x22c0 [ 1034.810197][T32288] __alloc_frozen_pages_noprof+0x181/0x370 [ 1034.816010][T32288] alloc_pages_mpol+0x232/0x4a0 [ 1034.820862][T32288] allocate_slab+0x8a/0x330 [ 1034.825632][T32288] ___slab_alloc+0xbd1/0x13f0 [ 1034.830309][T32288] __slab_alloc+0x55/0xa0 [ 1034.834641][T32288] __kmalloc_cache_noprof+0x411/0x6f0 [ 1034.840180][T32288] rtnl_newlink+0xed/0x1c70 [ 1034.844681][T32288] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1034.849797][T32288] netlink_rcv_skb+0x205/0x470 [ 1034.854560][T32288] netlink_unicast+0x82c/0x9e0 [ 1034.859324][T32288] netlink_sendmsg+0x805/0xb30 [ 1034.864272][T32288] __sock_sendmsg+0x21c/0x270 [ 1034.868970][T32288] __sys_sendto+0x3bd/0x520 [ 1034.873515][T32288] __x64_sys_sendto+0xde/0x100 [ 1034.878485][T32288] page last free pid 1 tgid 1 stack trace: [ 1034.884291][T32288] __free_frozen_pages+0xbc4/0xd30 [ 1034.889519][T32288] free_contig_range+0x1bd/0x4a0 [ 1034.894492][T32288] destroy_args+0x69/0x660 [ 1034.898933][T32288] debug_vm_pgtable+0x39f/0x3b0 [ 1034.903990][T32288] do_one_initcall+0x233/0x820 [ 1034.908767][T32288] do_initcall_level+0x104/0x190 [ 1034.913717][T32288] do_initcalls+0x59/0xa0 [ 1034.918053][T32288] kernel_init_freeable+0x334/0x4b0 [ 1034.923264][T32288] kernel_init+0x1d/0x1d0 [ 1034.927617][T32288] ret_from_fork+0x47c/0x820 [ 1034.932766][T32288] ret_from_fork_asm+0x1a/0x30 [ 1034.937680][T32288] [ 1034.940062][T32288] Memory state around the buggy address: [ 1034.945722][T32288] ffff88805a226300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.953811][T32288] ffff88805a226380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.961867][T32288] >ffff88805a226400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1034.969934][T32288] ^ [ 1034.974290][T32288] ffff88805a226480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1034.982349][T32288] ffff88805a226500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1034.990415][T32288] ================================================================== [ 1035.007145][T18807] Bluetooth: hci1: command tx timeout [ 1035.013024][T32292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10319'. [ 1035.029893][T32288] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1035.037142][T32288] CPU: 0 UID: 0 PID: 32288 Comm: syz.4.10269 Not tainted syzkaller #0 PREEMPT(full) [ 1035.046791][T32288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1035.057154][T32288] Call Trace: [ 1035.060447][T32288] [ 1035.063394][T32288] dump_stack_lvl+0x99/0x250 [ 1035.068006][T32288] ? __asan_memcpy+0x40/0x70 [ 1035.072712][T32288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1035.077917][T32288] ? __pfx__printk+0x10/0x10 [ 1035.082610][T32288] vpanic+0x237/0x6d0 [ 1035.086595][T32288] ? __pfx_vpanic+0x10/0x10 [ 1035.091193][T32288] ? preempt_schedule+0xae/0xc0 [ 1035.096226][T32288] ? __pfx_preempt_schedule+0x10/0x10 [ 1035.101608][T32288] panic+0xb9/0xc0 [ 1035.105341][T32288] ? __pfx_panic+0x10/0x10 [ 1035.109765][T32288] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1035.115753][T32288] ? change_page_attr_set_clr+0x625/0xfc0 [ 1035.121477][T32288] check_panic_on_warn+0x89/0xb0 [ 1035.126430][T32288] ? change_page_attr_set_clr+0x625/0xfc0 [ 1035.132239][T32288] end_report+0x78/0x160 [ 1035.136582][T32288] kasan_report+0x129/0x150 [ 1035.141113][T32288] ? change_page_attr_set_clr+0x625/0xfc0 [ 1035.146874][T32288] change_page_attr_set_clr+0x625/0xfc0 [ 1035.152782][T32288] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1035.158855][T32288] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1035.165111][T32288] ? memtype_reserve+0x874/0xb30 [ 1035.170246][T32288] _set_pages_array+0x145/0x270 [ 1035.175102][T32288] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1035.181175][T32288] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1035.187770][T32288] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1035.193318][T32288] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1035.199390][T32288] ? ww_mutex_lock+0x3f/0x1c0 [ 1035.204072][T32288] drm_gem_map_attach+0x19c/0x1f0 [ 1035.209098][T32288] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1035.214469][T32288] ? __fget_files+0x3a0/0x420 [ 1035.219144][T32288] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1035.225995][T32288] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1035.232239][T32288] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1035.238131][T32288] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1035.244984][T32288] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1035.250706][T32288] drm_ioctl_kernel+0x2cc/0x390 [ 1035.255735][T32288] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1035.262158][T32288] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1035.267538][T32288] drm_ioctl+0x67f/0xb10 [ 1035.271778][T32288] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1035.278201][T32288] ? __pfx_drm_ioctl+0x10/0x10 [ 1035.282990][T32288] ? __fget_files+0x3a0/0x420 [ 1035.287685][T32288] ? __fget_files+0x2a/0x420 [ 1035.292293][T32288] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1035.297255][T32288] ? __pfx_drm_ioctl+0x10/0x10 [ 1035.302041][T32288] __se_sys_ioctl+0xfc/0x170 [ 1035.306646][T32288] do_syscall_64+0xfa/0xfa0 [ 1035.311245][T32288] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.316527][T32288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.322622][T32288] ? clear_bhb_loop+0x60/0xb0 [ 1035.327324][T32288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.333225][T32288] RIP: 0033:0x7f3cd198ebe9 [ 1035.337647][T32288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.357469][T32288] RSP: 002b:00007f3cd2731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.366002][T32288] RAX: ffffffffffffffda RBX: 00007f3cd1bc5fa0 RCX: 00007f3cd198ebe9 [ 1035.374172][T32288] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000005 [ 1035.382236][T32288] RBP: 00007f3cd1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1035.390393][T32288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.398365][T32288] R13: 00007f3cd1bc6038 R14: 00007f3cd1bc5fa0 R15: 00007fffe8f80b38 [ 1035.406354][T32288] [ 1035.409721][T32288] Kernel Offset: disabled [ 1035.414063][T32288] Rebooting in 86400 seconds..