last executing test programs: 3.809823921s ago: executing program 3 (id=2159): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000200)=[r2, r2], &(0x7f0000000040)}) 3.80970244s ago: executing program 3 (id=2160): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/uts\x00') 3.163918289s ago: executing program 2 (id=2166): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.079643517s ago: executing program 2 (id=2167): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000480)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x7c00}}, 0x30) 3.019246296s ago: executing program 2 (id=2169): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x15) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r6, 0x5f2ba000) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 2.90934553s ago: executing program 3 (id=2170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa00"], 0xb9) 2.909151526s ago: executing program 0 (id=2171): r0 = syz_io_uring_setup(0x366, &(0x7f00000003c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x100000001, r3, 0x3, {0x1, 0xe9}, 0x6}, 0x1) 2.757713423s ago: executing program 3 (id=2173): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) 2.676733287s ago: executing program 0 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)={@void, @void, @eth={@random="2df1827dfa06", @empty, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x10, 0x2c, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x0, 0x0, '\x00', [@enc_lim]}]}}}}}}, 0x4e) 2.462276421s ago: executing program 0 (id=2176): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 2.084488727s ago: executing program 1 (id=2177): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x15) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r6, 0x5f2ba000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 1.089989084s ago: executing program 2 (id=2178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) r3 = eventfd2(0xa, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x277fffffffd, 0x43000, 0x2, r3, 0x4}) 1.089444645s ago: executing program 1 (id=2179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0x80000000, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x3, 0x2, r2}) 1.089324752s ago: executing program 1 (id=2180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x8}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x1, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.089015217s ago: executing program 0 (id=2181): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x11}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x8]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1479ffffff88031c09102c28", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.029880938s ago: executing program 1 (id=2182): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0xfffffffffffffc71) listen(r0, 0x50) r1 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x84, 0x3, 0x3}, @ra={0x94, 0x4, 0x400}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000004c0)='%', 0x1}], 0x1}}], 0x1, 0x2004c048) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x11c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) close_range(r4, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000780)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/247, 0xf7}, {}, {&(0x7f0000000080)=""/55, 0x37}], 0x7}, 0x100) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) r8 = socket(0x10, 0x3, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) 834.884944ms ago: executing program 1 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 832.88522ms ago: executing program 2 (id=2184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @local, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "38960c", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, {[@hopopts={0x2c}]}}}}}}, 0x42) 739.98766ms ago: executing program 1 (id=2185): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003900)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000002680)=""/115}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffa}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 739.836665ms ago: executing program 2 (id=2186): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$snddsp(r2, &(0x7f0000000000)="1d527a0e67e057", 0x7) 532.3693ms ago: executing program 3 (id=2187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000001c0)={0x50003, 0x0, {[0xfffffffffffffff7, 0x5, 0xd0, 0x0, 0x8, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 329.906947ms ago: executing program 3 (id=2188): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x15) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r6, 0x5f2ba000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 68.793673ms ago: executing program 0 (id=2189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xc, 0x9}, {0x4, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x70000, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 0s ago: executing program 0 (id=2190): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r3, r2, 0x0, 0x8) kernel console output (not intermixed with test programs): 0 interface 0 has no altsetting 0 [ 274.334051][ T1024] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 274.337650][ T1024] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 274.342207][ T1024] usb 6-1: Product: syz [ 274.343798][ T1024] usb 6-1: Manufacturer: syz [ 274.345400][ T1024] usb 6-1: SerialNumber: syz [ 274.349879][ T1024] usb 6-1: config 0 descriptor?? [ 274.386017][ T1024] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 274.903014][ T24] usb 6-1: USB disconnect, device number 3 [ 274.907529][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 274.983574][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'. [ 274.989554][ T8633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.506'. [ 275.276093][ T8636] ubi: mtd0 is already attached to ubi31 [ 276.221173][ T8648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 276.223223][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.230757][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 276.261961][ T8648] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.590776][ T1024] usb 40-1: SetAddress Request (30) to port 0 [ 276.593317][ T1024] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 276.715018][ T8658] /dev/nullb0: Can't open blockdev [ 276.733290][ T8659] hub 8-0:1.0: USB hub found [ 276.735583][ T8659] hub 8-0:1.0: 1 port detected [ 276.840075][ T8649] vhci_hcd: connection reset by peer [ 276.844614][ T5274] vhci_hcd vhci_hcd.1: stop threads [ 276.847347][ T5274] vhci_hcd vhci_hcd.1: release socket [ 276.851508][ T5274] vhci_hcd vhci_hcd.1: disconnect device [ 277.899675][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 277.903435][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.512'. [ 278.845390][ T8690] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 280.005257][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 280.007343][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.019056][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 280.132095][ T8714] netlink: 'syz.3.520': attribute type 4 has an invalid length. [ 280.132110][ T8714] netlink: 17 bytes leftover after parsing attributes in process `syz.3.520'. [ 282.664886][ T1024] usb 40-1: device descriptor read/8, error -110 [ 282.670414][ T8709] vhci_hcd: connection closed [ 282.670621][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 282.680905][ T1149] vhci_hcd vhci_hcd.0: release socket [ 282.691785][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 282.720842][ T29] usb 38-1: enqueue for inactive port 0 [ 282.731908][ T8734] program syz.2.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.975802][ T40] audit: type=1326 audit(1768042203.198:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 282.983462][ T40] audit: type=1326 audit(1768042203.198:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 282.990790][ T40] audit: type=1326 audit(1768042203.198:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.522" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 282.997894][ T40] audit: type=1326 audit(1768042203.198:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 283.007233][ T40] audit: type=1326 audit(1768042203.198:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.2.522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 283.063051][ T1024] usb usb40-port1: attempt power cycle [ 283.221335][ T29] usb usb38-port1: attempt power cycle [ 283.582449][ T8743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 283.586897][ T8743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.525'. [ 283.680817][ T1024] usb usb40-port1: unable to enumerate USB device [ 283.823334][ T8746] /dev/nullb0: Can't open blockdev [ 284.033376][ T29] usb usb38-port1: unable to enumerate USB device [ 284.242127][ T8760] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 284.244356][ T8760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.253291][ T8760] vhci_hcd vhci_hcd.0: Device attached [ 284.281119][ T40] audit: type=1804 audit(1768042204.488:242): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.526" name="/newroot/131/bus/bus" dev="overlay" ino=744 res=1 errno=0 [ 284.478140][ T8765] siw: device registration error -23 [ 284.490986][ T8760] bridge_slave_0: left allmulticast mode [ 284.505759][ T8760] bridge_slave_0: left promiscuous mode [ 284.509668][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.541089][ T1024] usb 38-1: SetAddress Request (26) to port 0 [ 284.543195][ T1024] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 285.088974][ T8760] bridge_slave_1: left allmulticast mode [ 285.100809][ T8760] bridge_slave_1: left promiscuous mode [ 285.111504][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.144954][ T8760] bond0: (slave bond_slave_0): Releasing backup interface [ 285.172592][ T8760] bond0: (slave bond_slave_1): Releasing backup interface [ 285.194401][ T8760] team0: Port device team_slave_0 removed [ 285.218042][ T8760] team0: Port device team_slave_1 removed [ 285.222621][ T8761] vhci_hcd: connection reset by peer [ 285.225222][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 285.227133][ T1149] vhci_hcd vhci_hcd.0: release socket [ 285.229004][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 285.233783][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.237607][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.242165][ T8760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.306023][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.536'. [ 288.312735][ T8805] netlink: 48 bytes leftover after parsing attributes in process `syz.3.536'. [ 289.315944][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'. [ 289.329233][ T8814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.538'. [ 289.419356][ T8816] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 289.421994][ T8816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.426351][ T8816] vhci_hcd vhci_hcd.0: Device attached [ 289.463664][ T8816] random: crng reseeded on system resumption [ 289.630853][ T1024] usb 38-1: device descriptor read/8, error -110 [ 289.742384][ T6069] usb 40-1: SetAddress Request (34) to port 0 [ 289.744663][ T6069] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 290.113292][ T8825] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 290.116000][ T8825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.120956][ T8825] vhci_hcd vhci_hcd.0: Device attached [ 290.192121][ T1024] usb 38-1: SetAddress Request (27) to port 0 [ 290.197202][ T1024] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd [ 290.217401][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.229205][ T8830] siw: device registration error -23 [ 290.317370][ T8828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 290.319682][ T8828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.397875][ T8828] vhci_hcd vhci_hcd.0: Device attached [ 290.685049][ T6037] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 290.753195][ T8828] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 290.812557][ T8833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.539'. [ 290.903256][ T8828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.198155][ T8817] vhci_hcd: connection reset by peer [ 291.201010][ T1248] vhci_hcd vhci_hcd.1: stop threads [ 291.202640][ T1248] vhci_hcd vhci_hcd.1: release socket [ 291.204437][ T1248] vhci_hcd vhci_hcd.1: disconnect device [ 291.418147][ T8829] vhci_hcd: connection reset by peer [ 291.420606][ T1248] vhci_hcd vhci_hcd.2: stop threads [ 291.423244][ T1248] vhci_hcd vhci_hcd.2: release socket [ 291.425198][ T1248] vhci_hcd vhci_hcd.2: disconnect device [ 291.651210][ T8826] vhci_hcd: connection reset by peer [ 291.653801][ T1248] vhci_hcd vhci_hcd.0: stop threads [ 291.655651][ T1248] vhci_hcd vhci_hcd.0: release socket [ 291.660165][ T1248] vhci_hcd vhci_hcd.0: disconnect device [ 292.338744][ T8849] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 292.341550][ T8849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.717175][ T8853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.729217][ T8849] vhci_hcd vhci_hcd.0: Device attached [ 292.802335][ T8854] netlink: 'syz.0.542': attribute type 13 has an invalid length. [ 293.058035][ T8851] vhci_hcd: connection closed [ 293.106497][ T1248] vhci_hcd vhci_hcd.3: stop threads [ 293.110121][ T1248] vhci_hcd vhci_hcd.3: release socket [ 293.122767][ T1248] vhci_hcd vhci_hcd.3: disconnect device [ 293.360930][ T8854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.557883][ T8864] tipc: Started in network mode [ 293.559953][ T8864] tipc: Node identity 7f000001, cluster identity 4711 [ 293.565479][ T8864] tipc: Enabled bearer , priority 10 [ 294.680767][ T29] tipc: Node number set to 2130706433 [ 294.820811][ T6069] usb 40-1: device descriptor read/8, error -110 [ 295.072125][ T8884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.548'. [ 295.081594][ T8884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.548'. [ 295.298501][ T6069] usb usb40-port1: attempt power cycle [ 295.300856][ T1024] usb 38-1: device descriptor read/8, error -110 [ 295.874371][ T6069] usb usb40-port1: unable to enumerate USB device [ 296.660565][ T6037] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 296.670513][ T8895] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 296.720858][ T1024] usb usb38-port1: attempt power cycle [ 296.938863][ T8903] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 297.607408][ T8901] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 297.610585][ T8901] UDF-fs: Scanning with blocksize 2048 failed [ 297.614347][ T8901] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 297.617606][ T8901] UDF-fs: Scanning with blocksize 4096 failed [ 297.887463][ T8906] hub 8-0:1.0: USB hub found [ 297.900924][ T8906] hub 8-0:1.0: 1 port detected [ 297.921701][ T1024] usb usb38-port1: unable to enumerate USB device [ 298.286226][ T8912] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 298.613463][ T8917] netlink: 'syz.1.555': attribute type 13 has an invalid length. [ 299.158664][ T8917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.361323][ T8929] syzkaller1: entered promiscuous mode [ 299.377385][ T8929] syzkaller1: entered allmulticast mode [ 299.412236][ T8929] wg1: entered promiscuous mode [ 299.414364][ T8929] wg1: entered allmulticast mode [ 302.440151][ T8968] netlink: 'syz.2.571': attribute type 13 has an invalid length. [ 303.558409][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.564'. [ 303.561459][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.564'. [ 304.046210][ T8968] syz_tun: refused to change device tx_queue_len [ 304.048494][ T8968] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 304.104751][ T8975] Process accounting resumed [ 304.197940][ T8980] netlink: 'syz.3.566': attribute type 16 has an invalid length. [ 304.201928][ T8980] netlink: 'syz.3.566': attribute type 17 has an invalid length. [ 304.205169][ T8980] netlink: 'syz.3.566': attribute type 27 has an invalid length. [ 304.630768][ T8980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.278824][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 306.284900][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.572'. [ 306.981190][ T9015] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 307.513040][ T6037] ªªªªªª speed is unknown, defaulting to 1000 [ 307.515560][ T6037] sz1: Port: 1 Link DOWN [ 307.518678][ T9015] tipc: Enabled bearer , priority 0 [ 307.521780][ T6037] ªªªªªª speed is unknown, defaulting to 1000 [ 307.577445][ T9024] siw: device registration error -23 [ 307.854562][ T9012] tipc: Disabling bearer [ 310.830838][ T9042] netlink: 'syz.2.579': attribute type 16 has an invalid length. [ 310.833712][ T9042] netlink: 'syz.2.579': attribute type 17 has an invalid length. [ 310.836176][ T9042] netlink: 'syz.2.579': attribute type 27 has an invalid length. [ 310.853558][ T9042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.889455][ T9053] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 310.891852][ T9053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.895278][ T9053] vhci_hcd vhci_hcd.0: Device attached [ 310.903459][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 310.909349][ T9056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.583'. [ 311.211238][ T6030] usb 38-1: SetAddress Request (30) to port 0 [ 311.215937][ T6030] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 312.147781][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 312.152479][ T9059] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 312.263845][ T9054] vhci_hcd: connection reset by peer [ 312.265745][ T99] vhci_hcd vhci_hcd.0: stop threads [ 312.267431][ T99] vhci_hcd vhci_hcd.0: release socket [ 312.269270][ T99] vhci_hcd vhci_hcd.0: disconnect device [ 312.899643][ T9068] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.904053][ T9069] siw: device registration error -23 [ 313.400756][ T40] audit: type=1326 audit(1768042233.518:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.1.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 313.409424][ T40] audit: type=1326 audit(1768042233.528:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.1.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 313.418757][ T40] audit: type=1326 audit(1768042233.568:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.1.587" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 313.428545][ T40] audit: type=1326 audit(1768042233.578:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.1.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 313.438928][ T40] audit: type=1326 audit(1768042233.588:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.1.587" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 315.740778][ T9081] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 316.260920][ T6030] usb 38-1: device descriptor read/8, error -110 [ 316.661298][ T6030] usb usb38-port1: attempt power cycle [ 317.364883][ T9114] QAT: Device 253 not found [ 317.866404][ T9095] netlink: 'syz.0.592': attribute type 16 has an invalid length. [ 317.868992][ T9095] netlink: 'syz.0.592': attribute type 17 has an invalid length. [ 317.874282][ T9095] netlink: 'syz.0.592': attribute type 27 has an invalid length. [ 317.929580][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.938929][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.952154][ T9095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.957925][ T29] ªªªªªª speed is unknown, defaulting to 1000 [ 317.959932][ T29] sz1: Port: 1 Link ACTIVE [ 317.961916][ T29] ªªªªªª speed is unknown, defaulting to 1000 [ 318.392572][ T9121] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 318.395638][ T9121] netlink: 280 bytes leftover after parsing attributes in process `syz.1.595'. [ 318.402312][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 318.556899][ T6030] usb usb38-port1: unable to enumerate USB device [ 318.894734][ T9126] netfs: Couldn't get user pages (rc=-14) [ 319.739575][ T9129] block device autoloading is deprecated and will be removed. [ 320.334901][ T9137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.650778][ T9142] siw: device registration error -23 [ 321.764685][ T9148] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 322.337380][ T9152] netlink: 'syz.1.602': attribute type 16 has an invalid length. [ 322.340027][ T9152] netlink: 'syz.1.602': attribute type 17 has an invalid length. [ 322.345727][ T9152] netlink: 'syz.1.602': attribute type 27 has an invalid length. [ 322.361184][ T9152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.481522][ T9166] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 323.797179][ T9169] tipc: Enabled bearer , priority 0 [ 323.905401][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 323.973174][ T9163] tipc: Disabling bearer [ 324.453974][ T9188] siw: device registration error -23 [ 326.243952][ T9193] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 326.315838][ T9195] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 327.307807][ T9202] ubi: mtd0 is already attached to ubi31 [ 327.409212][ T9214] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 327.411312][ T9214] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.414082][ T9214] vhci_hcd vhci_hcd.0: Device attached [ 327.690853][ T6030] usb 44-1: SetAddress Request (23) to port 0 [ 327.693442][ T6030] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 328.146739][ T9215] vhci_hcd: connection reset by peer [ 328.153086][ T6140] vhci_hcd vhci_hcd.3: stop threads [ 328.154821][ T6140] vhci_hcd vhci_hcd.3: release socket [ 328.157296][ T6140] vhci_hcd vhci_hcd.3: disconnect device [ 328.939040][ T9228] usb usb8: usbfs: process 9228 (syz.0.619) did not claim interface 0 before use [ 329.350129][ T9229] mkiss: ax0: crc mode is auto. [ 329.475508][ T9234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 329.477904][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.480835][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 329.515486][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 330.123488][ T9252] syz2: rxe_newlink: already configured on ipvlan0 [ 333.482004][ T9267] netlink: 'syz.1.627': attribute type 16 has an invalid length. [ 333.490629][ T9267] netlink: 'syz.1.627': attribute type 17 has an invalid length. [ 333.530959][ T9267] netlink: 'syz.1.627': attribute type 27 has an invalid length. [ 333.625952][ T9235] vhci_hcd: connection reset by peer [ 333.627982][ T6456] vhci_hcd vhci_hcd.3: stop threads [ 333.632444][ T6456] vhci_hcd vhci_hcd.3: release socket [ 333.635715][ T6030] usb 44-1: device descriptor read/8, error -110 [ 333.639631][ T6456] vhci_hcd vhci_hcd.3: disconnect device [ 333.744457][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.755101][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.781572][ T9267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.934749][ T9262] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 333.966879][ T9271] netlink: 'syz.3.628': attribute type 16 has an invalid length. [ 333.969411][ T9271] netlink: 'syz.3.628': attribute type 17 has an invalid length. [ 333.972369][ T9271] netlink: 'syz.3.628': attribute type 27 has an invalid length. [ 333.981898][ T9271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.075699][ T6030] usb usb44-port1: attempt power cycle [ 334.206716][ T9277] input: syz1 as /devices/virtual/input/input8 [ 335.473403][ T6030] usb usb44-port1: unable to enumerate USB device [ 335.518445][ T9291] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 335.521019][ T9291] netlink: 280 bytes leftover after parsing attributes in process `syz.0.631'. [ 335.525599][ T9291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 336.534308][ T9300] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 338.071413][ T9314] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 338.784187][ T9321] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 338.786608][ T9321] UDF-fs: Scanning with blocksize 2048 failed [ 338.790359][ T9321] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 338.792848][ T9321] UDF-fs: Scanning with blocksize 4096 failed [ 339.213329][ T9325] netlink: 'syz.0.640': attribute type 16 has an invalid length. [ 339.215845][ T9325] netlink: 'syz.0.640': attribute type 17 has an invalid length. [ 339.218294][ T9325] netlink: 'syz.0.640': attribute type 27 has an invalid length. [ 339.224291][ T9325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.921153][ T9332] ªªªªªª speed is unknown, defaulting to 1000 [ 340.040866][ T29] libceph: connect (1)[c::]:6789 error -101 [ 340.043937][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 340.047450][ T29] libceph: connect (1)[c::]:6789 error -101 [ 340.050035][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 340.062647][ T9333] ªªªªªª speed is unknown, defaulting to 1000 [ 340.096209][ T9336] ceph: No mds server is up or the cluster is laggy [ 340.431877][ T29] libceph: connect (1)[c::]:6789 error -101 [ 340.435531][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 341.080944][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 343.117544][ T9367] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 343.944802][ T841] kernel write not supported for file /dsp (pid: 841 comm: kworker/1:2) [ 344.183451][ T9377] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.649'. [ 345.534888][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.470887][ T9397] mkiss: ax0: crc mode is auto. [ 346.655501][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 349.611341][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 350.364981][ T29] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 350.367563][ T29] usb 6-1: config 1 has no interface number 0 [ 350.369641][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 350.390827][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16 [ 350.405477][ T29] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 350.413566][ T29] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 350.416524][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.419270][ T29] usb 6-1: Product: syz [ 350.421965][ T29] usb 6-1: Manufacturer: syz [ 350.425740][ T29] usb 6-1: SerialNumber: syz [ 350.457224][ T9451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.460119][ T9451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.474041][ T29] usb 6-1: Expected 3 endpoints, found: 2 [ 351.153251][ T9460] netlink: set zone limit has 4 unknown bytes [ 351.819789][ T9469] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 351.822992][ T9469] UDF-fs: Scanning with blocksize 2048 failed [ 351.827932][ T9469] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 351.831124][ T9469] UDF-fs: Scanning with blocksize 4096 failed [ 352.284040][ T40] audit: type=1326 audit(1768042272.508:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.330755][ T40] audit: type=1326 audit(1768042272.548:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.346313][ T40] audit: type=1326 audit(1768042272.568:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.370909][ T40] audit: type=1326 audit(1768042272.568:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.386941][ T40] audit: type=1326 audit(1768042272.568:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.397246][ T40] audit: type=1326 audit(1768042272.568:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.404471][ T40] audit: type=1326 audit(1768042272.568:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.413267][ T40] audit: type=1326 audit(1768042272.568:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.422715][ T40] audit: type=1326 audit(1768042272.568:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.469877][ T40] audit: type=1326 audit(1768042272.688:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.3.664" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 352.480075][ T9459] openvswitch: netlink: Missing key (keys=40, expected=100) [ 352.556513][ T841] usb 6-1: USB disconnect, device number 4 [ 352.789659][ T9485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.812007][ T9487] netlink: 188 bytes leftover after parsing attributes in process `syz.1.666'. [ 354.781036][ T9498] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 354.783350][ T9498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 354.791382][ T9498] vhci_hcd vhci_hcd.0: Device attached [ 354.883563][ T9518] fuse: Bad value for 'fd' [ 355.081175][ T6030] usb 44-1: SetAddress Request (27) to port 0 [ 355.083894][ T6030] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 355.274059][ T9515] vhci_hcd: connection reset by peer [ 355.276621][ T6456] vhci_hcd vhci_hcd.3: stop threads [ 355.278863][ T6456] vhci_hcd vhci_hcd.3: release socket [ 355.281453][ T6456] vhci_hcd vhci_hcd.3: disconnect device [ 356.406116][ T9538] /dev/nullb0: Can't open blockdev [ 356.682995][ T29] IPVS: starting estimator thread 0... [ 356.800825][ T9539] IPVS: using max 43 ests per chain, 103200 per kthread [ 357.277243][ T9542] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 357.520594][ T9545] input: syz1 as /devices/virtual/input/input9 [ 359.948552][ T9569] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 359.951542][ T9569] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 359.955815][ T9569] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 359.960317][ T9569] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 360.182748][ T6030] usb 44-1: device descriptor read/8, error -110 [ 360.432262][ T9570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 360.434646][ T9570] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.437647][ T9570] vhci_hcd vhci_hcd.0: Device attached [ 360.572171][ T6030] usb usb44-port1: attempt power cycle [ 360.690805][ T34] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 361.043122][ T5947] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 361.105179][ T5947] Bluetooth: hci3: unexpected cc 0x2027 length: 5 > 1 [ 361.111132][ T5947] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 361.144197][ T6030] usb usb44-port1: unable to enumerate USB device [ 361.203695][ T9571] vhci_hcd: connection reset by peer [ 361.206398][ T1248] vhci_hcd vhci_hcd.0: stop threads [ 361.208249][ T1248] vhci_hcd vhci_hcd.0: release socket [ 361.210060][ T1248] vhci_hcd vhci_hcd.0: disconnect device [ 362.350792][ T9614] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 362.353364][ T9614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 362.356225][ T9614] vhci_hcd vhci_hcd.0: Device attached [ 363.142729][ T9615] vhci_hcd: connection closed [ 363.144402][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 363.148980][ T1142] vhci_hcd vhci_hcd.0: release socket [ 363.151308][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 363.864646][ T9643] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 365.791084][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 367.081591][ T6069] usb usb38-port1: attempt power cycle [ 367.651724][ T6069] usb usb38-port1: unable to enumerate USB device [ 368.093432][ T6069] IPVS: starting estimator thread 0... [ 368.180755][ T9690] IPVS: using max 44 ests per chain, 105600 per kthread [ 368.874333][ T9688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.876440][ T9688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.804481][ T9700] ªªªªªª speed is unknown, defaulting to 1000 [ 370.279119][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.419391][ T9725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.719'. [ 370.901163][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.066936][ T9697] ªªªªªª speed is unknown, defaulting to 1000 [ 371.325836][ T9731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.720'. [ 373.403626][ T9751] input: syz1 as /devices/virtual/input/input10 [ 374.950977][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.729'. [ 376.311108][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.735'. [ 377.423089][ T9806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.742'. [ 377.831122][ T9777] ªªªªªª speed is unknown, defaulting to 1000 [ 377.898481][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.0.743'. [ 378.390912][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 378.390929][ T40] audit: type=1326 audit(1768042298.588:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.402583][ T40] audit: type=1326 audit(1768042298.588:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.420863][ T40] audit: type=1326 audit(1768042298.588:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.429892][ T40] audit: type=1326 audit(1768042298.598:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.450749][ T40] audit: type=1326 audit(1768042298.598:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.459790][ T40] audit: type=1326 audit(1768042298.598:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.464765][ T9776] ªªªªªª speed is unknown, defaulting to 1000 [ 378.479423][ T40] audit: type=1326 audit(1768042298.598:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.499472][ T40] audit: type=1326 audit(1768042298.598:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.508737][ T40] audit: type=1326 audit(1768042298.598:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 378.520759][ T40] audit: type=1326 audit(1768042298.598:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.1.744" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 379.867633][ T6069] kernel write not supported for file /dsp (pid: 6069 comm: kworker/3:4) [ 380.137351][ T9832] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.753'. [ 381.221176][ T9830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.746'. [ 381.976516][ T9853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.751'. [ 382.742062][ T9865] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 382.745399][ T9865] netlink: 280 bytes leftover after parsing attributes in process `syz.2.763'. [ 382.762904][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.763'. [ 383.335793][ T9863] ªªªªªª speed is unknown, defaulting to 1000 [ 383.668520][ T9884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.762'. [ 384.584347][ T9900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.764'. [ 384.696804][ T9866] ªªªªªª speed is unknown, defaulting to 1000 [ 386.883178][ T9941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.777'. [ 387.773286][ T5947] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 388.086180][ T9962] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 388.453914][ T9965] netlink: 'syz.0.786': attribute type 16 has an invalid length. [ 388.464054][ T9965] netlink: 'syz.0.786': attribute type 17 has an invalid length. [ 388.467076][ T9965] netlink: 'syz.0.786': attribute type 27 has an invalid length. [ 388.493621][ T9965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.878489][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.790'. [ 390.028390][T10004] /dev/nullb0: Can't open blockdev [ 390.456916][T10006] netlink: 'syz.2.798': attribute type 16 has an invalid length. [ 390.459593][T10006] netlink: 'syz.2.798': attribute type 17 has an invalid length. [ 390.462507][T10006] netlink: 'syz.2.798': attribute type 27 has an invalid length. [ 390.476516][T10006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.993882][T10016] netlink: 'syz.0.803': attribute type 16 has an invalid length. [ 390.997234][T10016] netlink: 'syz.0.803': attribute type 17 has an invalid length. [ 391.000352][T10016] netlink: 'syz.0.803': attribute type 27 has an invalid length. [ 391.036475][T10016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.407577][T10052] /dev/nullb0: Can't open blockdev [ 393.014664][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.820'. [ 394.252899][T10110] /dev/nullb0: Can't open blockdev [ 394.772266][T10115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.832'. [ 395.203255][T10122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.834'. [ 396.239478][T10148] CIFS: VFS: Malformed UNC in devname [ 396.459687][T10156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.842'. [ 397.117180][T10169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'. [ 397.251416][T10173] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 397.407568][T10175] usb usb3: usbfs: process 10175 (syz.3.847) did not claim interface 0 before use [ 398.077635][T10180] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 400.208172][T10197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.855'. [ 400.434533][T10209] /dev/nullb0: Can't open blockdev [ 401.040397][T10226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.864'. [ 401.342570][T10237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.868'. [ 401.918674][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.870'. [ 402.043880][T10258] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 402.134927][T10259] netlink: 48 bytes leftover after parsing attributes in process `syz.3.877'. [ 402.621187][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 402.770795][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 402.778162][ T24] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 402.781589][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.785903][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.791115][ T24] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 402.794665][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.811947][ T24] usb 5-1: config 0 descriptor?? [ 402.824412][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 403.024676][ T24] usb 5-1: USB disconnect, device number 5 [ 403.027076][ C2] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 403.152121][T10274] netlink: 'syz.2.880': attribute type 16 has an invalid length. [ 403.154167][T10275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.882'. [ 403.154823][T10274] netlink: 'syz.2.880': attribute type 17 has an invalid length. [ 403.160513][T10274] netlink: 'syz.2.880': attribute type 27 has an invalid length. [ 403.198416][T10274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.000589][T10290] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 404.013433][T10292] binder: 10291:10292 ioctl 400c620e 80000080 returned -22 [ 406.470355][T10309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.892'. [ 406.825016][T10317] /dev/nullb0: Can't open blockdev [ 408.646874][T10369] netlink: 'syz.0.903': attribute type 16 has an invalid length. [ 408.651810][T10369] netlink: 'syz.0.903': attribute type 17 has an invalid length. [ 408.655536][T10369] netlink: 'syz.0.903': attribute type 27 has an invalid length. [ 408.687844][T10369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.120060][T10383] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 409.280638][T10389] netlink: 'syz.0.911': attribute type 23 has an invalid length. [ 409.297962][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.910'. [ 410.832931][T10436] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 411.093619][T10441] netlink: 'syz.3.920': attribute type 16 has an invalid length. [ 411.097916][T10441] netlink: 'syz.3.920': attribute type 17 has an invalid length. [ 411.107386][T10441] netlink: 'syz.3.920': attribute type 27 has an invalid length. [ 411.272665][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.344556][T10452] xfrm0: entered promiscuous mode [ 411.346858][T10452] xfrm0: entered allmulticast mode [ 411.869068][T10461] netlink: 'syz.3.928': attribute type 16 has an invalid length. [ 411.948873][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 411.997424][T10468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.930'. [ 412.553643][T10493] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 413.560919][ T6037] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 413.715818][ T6037] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 413.719039][ T6037] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.769711][ T6037] usb 8-1: config 0 descriptor?? [ 414.028562][ T6037] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 414.073902][ T6037] usb 8-1: USB disconnect, device number 3 [ 414.259791][T10532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.950'. [ 416.047978][T10565] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.080050][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 416.481299][T10579] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 416.906191][T10580] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 417.332294][T10584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.960'. [ 418.043713][T10589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'. [ 418.621196][T10608] /dev/nullb0: Can't open blockdev [ 419.141491][T10641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.972'. [ 420.558990][T10675] /dev/nullb0: Can't open blockdev [ 421.393755][T10678] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 422.000063][T10701] syz2: rxe_newlink: already configured on ipvlan0 [ 423.681637][T10726] netlink: 'syz.1.1000': attribute type 16 has an invalid length. [ 423.684934][T10726] netlink: 'syz.1.1000': attribute type 17 has an invalid length. [ 423.688504][T10726] netlink: 'syz.1.1000': attribute type 27 has an invalid length. [ 423.723122][T10726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.796559][T10706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.995'. [ 425.201769][T10759] syz2: rxe_newlink: already configured on ipvlan0 [ 425.941313][T10761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1014'. [ 426.808763][ T6069] hid-generic AE2C:0300:0008.0004: item fetching failed at offset 0/1 [ 426.812639][ T6069] hid-generic AE2C:0300:0008.0004: probe with driver hid-generic failed with error -22 [ 427.427188][T10785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 427.983110][T10798] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 430.216818][T10827] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 430.632995][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 430.639983][T10833] netlink: 'syz.3.1036': attribute type 5 has an invalid length. [ 430.645658][T10833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1036'. [ 430.774518][T10833] geneve2: entered promiscuous mode [ 430.777567][T10833] geneve2: entered allmulticast mode [ 431.356309][T10851] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 431.440717][ T6037] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 431.830742][ T6037] usb 8-1: Using ep0 maxpacket: 8 [ 431.923684][ T6037] usb 8-1: unable to get BOS descriptor or descriptor too short [ 432.191945][ T6037] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 432.195143][ T6037] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 432.262299][ T6037] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.265163][ T6037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.267681][ T6037] usb 8-1: Product: syz [ 432.269021][ T6037] usb 8-1: Manufacturer: syz [ 432.270503][ T6037] usb 8-1: SerialNumber: syz [ 432.368650][T10866] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 433.266659][ T6037] cdc_ncm 8-1:1.0: bind() failure [ 433.284953][ T6037] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 433.288187][ T6037] cdc_ncm 8-1:1.1: bind() failure [ 433.315368][ T6037] usb 8-1: USB disconnect, device number 4 [ 434.098199][T10893] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 434.532355][T10898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1055'. [ 434.545882][T10898] block nbd0: not configured, cannot reconfigure [ 435.148900][T10910] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 436.989545][T10930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1061'. [ 437.251649][T10939] netlink: 774 bytes leftover after parsing attributes in process `syz.2.1064'. [ 437.538495][T10950] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 438.456498][T10957] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 439.560557][T10976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1078'. [ 440.148468][T10994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1083'. [ 441.115352][T11017] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 442.113929][T11031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1092'. [ 442.232775][T11032] netlink: 'syz.1.1091': attribute type 16 has an invalid length. [ 442.237647][T11032] netlink: 'syz.1.1091': attribute type 17 has an invalid length. [ 442.242768][T11032] netlink: 'syz.1.1091': attribute type 27 has an invalid length. [ 442.333742][T11032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.261184][T11047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1095'. [ 443.721569][T11052] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 443.969664][T11057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1101'. [ 444.209903][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 444.299607][T11070] netlink: 'syz.3.1102': attribute type 16 has an invalid length. [ 444.304986][T11070] netlink: 'syz.3.1102': attribute type 17 has an invalid length. [ 444.309099][T11070] netlink: 'syz.3.1102': attribute type 27 has an invalid length. [ 444.419243][T11070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.703356][T11089] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 444.921163][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 445.139973][T11112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1118'. [ 445.216659][T11109] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 445.901912][T11118] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 445.989318][T11124] bond18: invalid ARP target 0.0.0.0 specified for addition [ 445.991936][T11124] bond18: option arp_ip_target: invalid value (0) [ 445.995851][T11124] bond18 (unregistering): Released all slaves [ 446.254342][T11133] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 447.071630][T11142] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 448.728958][T11150] netlink: 'syz.1.1128': attribute type 16 has an invalid length. [ 448.732213][T11150] netlink: 'syz.1.1128': attribute type 17 has an invalid length. [ 448.735110][T11150] netlink: 'syz.1.1128': attribute type 27 has an invalid length. [ 448.774944][T11150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.902983][T11154] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1131'. [ 449.294409][T11164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1132'. [ 449.888119][T11188] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 450.520240][T11193] /dev/nullb0: Can't open blockdev [ 450.848952][T11196] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 451.330638][T11201] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.541376][T11209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1147'. [ 451.640817][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 451.644785][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 451.687043][T11212] netlink: 'syz.1.1142': attribute type 16 has an invalid length. [ 451.689828][T11212] netlink: 'syz.1.1142': attribute type 17 has an invalid length. [ 451.711594][T11212] netlink: 'syz.1.1142': attribute type 27 has an invalid length. [ 451.779549][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.300771][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 452.388015][T11230] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 452.462183][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 453.655415][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 453.658257][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 453.661039][ T24] usb 6-1: Product: syz [ 453.662373][ T24] usb 6-1: Manufacturer: syz [ 453.663985][ T24] usb 6-1: SerialNumber: syz [ 453.667017][ T24] usb 6-1: config 0 descriptor?? [ 453.873423][ T24] usb 6-1: USB disconnect, device number 5 [ 454.008901][T11258] netlink: 'syz.2.1157': attribute type 16 has an invalid length. [ 454.012599][T11258] netlink: 'syz.2.1157': attribute type 17 has an invalid length. [ 454.016014][T11258] netlink: 'syz.2.1157': attribute type 27 has an invalid length. [ 454.036047][T11258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.514778][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 454.694255][T11281] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 455.520750][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 455.590486][T11296] netlink: 'syz.2.1172': attribute type 16 has an invalid length. [ 455.594029][T11296] netlink: 'syz.2.1172': attribute type 17 has an invalid length. [ 455.597443][T11296] netlink: 'syz.2.1172': attribute type 27 has an invalid length. [ 455.635061][T11296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.706668][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.712091][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.715185][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 455.718220][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.727793][ T24] usb 5-1: config 0 descriptor?? [ 455.731577][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 455.735890][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 455.744088][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.752770][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 455.755234][ T24] usb 5-1: media controller created [ 455.758490][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.771632][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 455.778567][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.785781][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input13 [ 455.795537][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 455.800723][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 455.812871][ T6069] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 455.938661][ T34] usb 5-1: USB disconnect, device number 6 [ 455.959461][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 455.963010][ T6069] usb 6-1: Using ep0 maxpacket: 16 [ 455.969777][ T6069] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 455.973730][ T6069] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 455.976451][ T6069] usb 6-1: Product: syz [ 455.977858][ T6069] usb 6-1: Manufacturer: syz [ 455.979672][ T6069] usb 6-1: SerialNumber: syz [ 455.984078][ T6069] usb 6-1: config 0 descriptor?? [ 456.105738][T11314] loop9: detected capacity change from 0 to 7 [ 456.108476][T11314] buffer_io_error: 11 callbacks suppressed [ 456.108485][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.113759][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.116452][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.119276][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.123027][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.125909][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.128478][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.131415][T11314] ldm_validate_partition_table(): Disk read failed. [ 456.133722][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.136614][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.139626][T11314] Buffer I/O error on dev loop9, logical block 0, async page read [ 456.143312][T11314] Dev loop9: unable to read RDB block 0 [ 456.146111][T11314] loop9: unable to read partition table [ 456.150150][T11314] loop9: partition table beyond EOD, truncated [ 456.153064][T11314] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 456.153064][T11314] ) failed (rc=-5) [ 456.194422][ T34] usb 6-1: USB disconnect, device number 6 [ 456.237504][T11316] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 456.498785][T11320] Bluetooth: MGMT ver 1.23 [ 456.550906][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 456.710316][ T34] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 456.713722][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.717798][ T34] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 456.721540][ T34] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 456.724757][ T34] usb 7-1: Manufacturer: syz [ 456.728970][ T34] usb 7-1: config 0 descriptor?? [ 456.780813][ T34] rc_core: IR keymap rc-hauppauge not found [ 456.783070][ T34] Registered IR keymap rc-empty [ 456.786168][ T34] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 456.791534][ T34] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 456.948196][ T24] usb 7-1: USB disconnect, device number 2 [ 457.944717][T11372] /dev/nullb0: Can't open blockdev [ 458.348272][T11379] netlink: 'syz.0.1197': attribute type 16 has an invalid length. [ 458.351034][T11379] netlink: 'syz.0.1197': attribute type 17 has an invalid length. [ 458.354829][T11379] netlink: 'syz.0.1197': attribute type 27 has an invalid length. [ 458.531854][T11379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.147087][T11385] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 462.484889][T11406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1205'. [ 462.555055][T11407] syz2: rxe_newlink: already configured on ipvlan0 [ 465.435403][T11455] netlink: 'syz.1.1209': attribute type 16 has an invalid length. [ 465.438817][T11455] netlink: 'syz.1.1209': attribute type 17 has an invalid length. [ 466.220716][T11455] netlink: 'syz.1.1209': attribute type 27 has an invalid length. [ 467.001043][T11455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.545294][T11475] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 468.458334][T11488] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 469.557814][T11497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1225'. [ 470.834320][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1227'. [ 472.526796][T11541] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 473.658863][T11548] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1233'. [ 474.349437][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 474.357454][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 474.368279][T11561] netlink: 'syz.3.1240': attribute type 19 has an invalid length. [ 474.378387][T11561] netlink: 'syz.3.1240': attribute type 20 has an invalid length. [ 474.621358][T11569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1242'. [ 474.682916][T11570] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 475.738999][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1246'. [ 476.556987][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 476.716181][T11602] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 478.507835][T11624] /dev/nullb0: Can't open blockdev [ 478.670125][T11630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1262'. [ 479.296011][T11649] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 480.992302][T11683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1279'. [ 481.154627][T11686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1280'. [ 481.833834][T11707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1285'. [ 481.936304][T11709] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 482.920967][T11720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1289'. [ 483.694119][T11728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'. [ 484.900996][T11750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1297'. [ 484.998103][T11755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1296'. [ 486.398530][T11773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1303'. [ 486.452398][T11770] /dev/nullb0: Can't open blockdev [ 486.874211][T11781] Bluetooth: MGMT ver 1.23 [ 487.457730][T11801] /dev/nullb0: Can't open blockdev [ 488.627040][T11838] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 490.124372][T11844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1321'. [ 490.402830][T11853] syz_tun: entered allmulticast mode [ 490.422227][T11852] syz_tun: left allmulticast mode [ 490.548880][T11856] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1326'. [ 491.393276][T11882] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 492.558908][T11911] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 493.098643][T11924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1346'. [ 494.716563][T11950] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1349'. [ 494.928710][T11955] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 496.585726][T11981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1359'. [ 497.194240][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1361'. [ 499.340088][T12034] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 500.092317][T12041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1371'. [ 500.310771][ T6037] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 501.000717][ T6037] usb 6-1: Using ep0 maxpacket: 32 [ 501.003699][ T6037] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 501.008899][ T6037] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 501.013032][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 501.016547][ T6037] usb 6-1: Product: syz [ 501.018439][ T6037] usb 6-1: Manufacturer: syz [ 501.020465][ T6037] usb 6-1: SerialNumber: syz [ 501.023660][ T6037] usb 6-1: config 0 descriptor?? [ 501.027133][T12037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.031620][ T6037] hub 6-1:0.0: bad descriptor, ignoring hub [ 501.033977][ T6037] hub 6-1:0.0: probe with driver hub failed with error -5 [ 501.360893][ T24] usb 6-1: USB disconnect, device number 7 [ 501.684753][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 502.562699][T12078] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 503.349010][T12085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1383'. [ 503.442313][T12087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1382'. [ 504.164579][T12100] vcan0: tx address claim with dlc 0 [ 505.150904][T12131] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1392'. [ 506.009435][T12147] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 506.112392][T12151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1394'. [ 506.337025][T12155] netlink: 'syz.0.1395': attribute type 16 has an invalid length. [ 506.340514][T12155] netlink: 'syz.0.1395': attribute type 17 has an invalid length. [ 506.344476][T12155] netlink: 'syz.0.1395': attribute type 27 has an invalid length. [ 506.589435][T12155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.613465][T12159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1399'. [ 507.130817][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 507.302579][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.307718][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.320702][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.323569][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.543904][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 507.545707][ T24] usbtmc 7-1:16.0: can't read capabilities [ 507.596717][T12173] ªªªªªª speed is unknown, defaulting to 1000 [ 507.748760][ T24] usb 7-1: USB disconnect, device number 3 [ 507.751049][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 507.941020][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 507.961398][ T29] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 507.985247][ T29] usb 5-1: config 0 has no interface number 0 [ 508.000930][ T29] usb 5-1: config 0 interface 209 has no altsetting 0 [ 508.011980][ T29] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 508.015925][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.019537][ T29] usb 5-1: Product: syz [ 508.021797][ T29] usb 5-1: Manufacturer: syz [ 508.024051][ T29] usb 5-1: SerialNumber: syz [ 508.043886][ T29] usb 5-1: config 0 descriptor?? [ 508.347091][T12183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1404'. [ 508.541873][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 508.768372][ T29] usb 5-1: USB disconnect, device number 7 [ 509.905019][T12197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1406'. [ 510.049058][T12193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.051950][T12193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 510.324408][T12208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1410'. [ 510.412652][T12210] netlink: 'syz.2.1409': attribute type 16 has an invalid length. [ 510.415267][T12210] netlink: 'syz.2.1409': attribute type 17 has an invalid length. [ 510.417754][T12210] netlink: 'syz.2.1409': attribute type 27 has an invalid length. [ 510.453173][T12210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.490736][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 510.659642][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 510.666117][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.670265][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.689999][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.697568][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.704008][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.713126][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.717002][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.721059][ T6030] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 510.730968][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.735546][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.747264][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.751177][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.755692][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.759463][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.763900][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.768474][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.772354][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.776121][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.780603][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.785038][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.788814][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.793993][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.797691][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.802104][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.806675][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 510.811607][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 510.815410][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 510.818485][ T24] usb 8-1: Product: syz [ 510.820258][ T24] usb 8-1: Manufacturer: syz [ 510.822579][ T24] usb 8-1: SerialNumber: syz [ 510.827197][ T24] usb 8-1: config 0 descriptor?? [ 510.833942][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 510.883005][ T6030] usb 6-1: config 0 has no interfaces? [ 510.888475][ T6030] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.892866][ T6030] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.896401][ T6030] usb 6-1: Product: syz [ 510.898257][ T6030] usb 6-1: Manufacturer: syz [ 510.900324][ T6030] usb 6-1: SerialNumber: syz [ 510.911126][ T6030] usb 6-1: config 0 descriptor?? [ 511.082441][ T6030] usb 8-1: USB disconnect, device number 5 [ 511.086652][ T6030] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 511.164096][ T24] usb 6-1: USB disconnect, device number 8 [ 511.860896][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 512.100740][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 513.740898][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 514.007962][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 514.016530][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 514.019616][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.027033][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.035043][T12256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.044197][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.080206][T12266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1426'. [ 514.182192][T12270] netlink: 'syz.1.1424': attribute type 16 has an invalid length. [ 514.185128][T12270] netlink: 'syz.1.1424': attribute type 17 has an invalid length. [ 514.187773][T12270] netlink: 'syz.1.1424': attribute type 27 has an invalid length. [ 514.206115][T12270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.334931][T12274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1427'. [ 514.343307][ T24] usb 5-1: USB disconnect, device number 8 [ 516.893905][T12319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1439'. [ 516.997328][T12322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1440'. [ 518.090679][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1445'. [ 518.621803][T12346] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 520.765402][T12365] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1452'. [ 521.712586][T12376] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1457'. [ 523.022480][T12400] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 523.581291][T12401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1463'. [ 524.899458][T12432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1474'. [ 525.888596][T12437] netlink: 'syz.0.1471': attribute type 16 has an invalid length. [ 525.891257][T12437] netlink: 'syz.0.1471': attribute type 17 has an invalid length. [ 525.893764][T12437] netlink: 'syz.0.1471': attribute type 27 has an invalid length. [ 525.939224][T12437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.444640][T12442] capability: warning: `syz.0.1477' uses 32-bit capabilities (legacy support in use) [ 526.657340][T12448] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 527.597861][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 527.597877][ T40] audit: type=1326 audit(1768042447.818:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 527.607890][ T40] audit: type=1326 audit(1768042447.828:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 527.615147][ T40] audit: type=1326 audit(1768042447.838:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 527.623894][ T40] audit: type=1326 audit(1768042447.848:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 527.637488][ T40] audit: type=1326 audit(1768042447.858:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 527.648377][ T40] audit: type=1326 audit(1768042447.858:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 527.666463][ T40] audit: type=1326 audit(1768042447.858:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 527.675057][ T40] audit: type=1326 audit(1768042447.858:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 527.687198][ T40] audit: type=1326 audit(1768042447.858:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 527.700919][ T40] audit: type=1326 audit(1768042447.858:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.1.1481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 528.150739][ T6069] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 528.560709][ T6069] usb 5-1: Using ep0 maxpacket: 32 [ 528.606051][ T6069] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 528.608688][ T6069] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 528.615143][ T6069] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 528.618592][ T6069] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 528.622668][ T6069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 528.630293][ T6069] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 528.633307][ T6069] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 528.635981][ T6069] usb 5-1: Product: syz [ 528.637334][ T6069] usb 5-1: Manufacturer: syz [ 528.638843][ T6069] usb 5-1: SerialNumber: syz [ 528.642085][ T6069] usb 5-1: config 0 descriptor?? [ 528.648812][ T6069] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 528.654157][ T6069] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 528.910365][ T24] usb 5-1: USB disconnect, device number 9 [ 528.910515][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 528.916277][T12459] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 528.923443][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 529.684993][T12483] netlink: 'syz.2.1486': attribute type 16 has an invalid length. [ 529.687479][T12483] netlink: 'syz.2.1486': attribute type 17 has an invalid length. [ 529.689916][T12483] netlink: 'syz.2.1486': attribute type 27 has an invalid length. [ 529.738405][T12483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.506029][T12536] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 532.925110][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1510'. [ 533.235708][T12558] hub 1-0:1.0: USB hub found [ 533.238272][T12558] hub 1-0:1.0: 2 ports detected [ 533.610021][T12564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1519'. [ 534.723640][T12572] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 534.813771][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 534.870783][ T6037] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 535.030768][ T6037] usb 7-1: Using ep0 maxpacket: 8 [ 535.044022][ T6037] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.051880][ T6037] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.062324][ T6037] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 535.074996][ T6037] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.086516][ T6037] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.096337][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.527418][ T6037] usb 7-1: GET_CAPABILITIES returned 0 [ 535.529303][ T6037] usbtmc 7-1:16.0: can't read capabilities [ 535.820331][ T6037] usb 7-1: USB disconnect, device number 4 [ 536.350192][T12587] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 537.078532][ T841] kernel read not supported for file /vcs (pid: 841 comm: kworker/1:2) [ 537.195455][T12594] netlink: 'syz.2.1530': attribute type 9 has an invalid length. [ 537.198013][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 537.212718][T12597] IPv6: addrconf: prefix option has invalid lifetime [ 537.582450][T12626] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 537.719809][T12630] ªªªªªª speed is unknown, defaulting to 1000 [ 538.007058][T12637] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1547'. [ 538.571351][ T6037] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 538.718632][T12649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1550'. [ 538.745095][ T6037] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 538.747972][ T6037] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.753048][ T6037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 538.756229][T12618] netlink: 'syz.1.1535': attribute type 16 has an invalid length. [ 538.766125][ T6037] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.769757][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.782146][ T6037] usb 7-1: Product: syz [ 538.783022][T12618] netlink: 'syz.1.1535': attribute type 17 has an invalid length. [ 538.788169][T12618] netlink: 'syz.1.1535': attribute type 27 has an invalid length. [ 538.795436][ T6037] usb 7-1: Manufacturer: syz [ 538.797078][ T6037] usb 7-1: SerialNumber: syz [ 538.800282][ T6037] usb 7-1: config 0 descriptor?? [ 538.812715][ T6037] hub 7-1:0.0: bad descriptor, ignoring hub [ 538.815234][ T6037] hub 7-1:0.0: probe with driver hub failed with error -5 [ 538.820567][ T6037] usb 7-1: selecting invalid altsetting 0 [ 538.923138][T12618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.463162][T12641] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 539.470730][ T6037] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 539.622209][ T6037] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 539.623406][T12641] usb 7-1: device firmware changed [ 539.625723][ T6037] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 539.625741][ T6037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.629915][ T841] usb 7-1: USB disconnect, device number 5 [ 539.658624][ T6037] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 539.666273][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 539.674889][ T6037] usb 6-1: Product: syz [ 539.676283][ T6037] usb 6-1: Manufacturer: syz [ 539.682943][ T6037] usb 6-1: SerialNumber: syz [ 539.693363][ T6037] usb 6-1: config 0 descriptor?? [ 539.710982][ T6037] usb 6-1: selecting invalid altsetting 0 [ 539.944225][ T6037] usb 6-1: USB disconnect, device number 9 [ 539.960771][ T841] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 540.122857][ T841] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 540.125564][ T841] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 540.128954][ T841] usb 7-1: config 0 interface 0 has no altsetting 0 [ 540.142715][ T841] usb 7-1: string descriptor 0 read error: -22 [ 540.144895][ T841] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.147798][ T841] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 540.164655][ T841] usb 7-1: config 0 descriptor?? [ 540.167698][ T841] hub 7-1:0.0: bad descriptor, ignoring hub [ 540.170181][ T841] hub 7-1:0.0: probe with driver hub failed with error -5 [ 540.183469][ T841] usb 7-1: selecting invalid altsetting 0 [ 540.527792][ T6069] usb 7-1: USB disconnect, device number 6 [ 540.610314][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1562'. [ 540.869497][T12691] netlink: 'syz.3.1561': attribute type 16 has an invalid length. [ 540.872296][T12691] netlink: 'syz.3.1561': attribute type 17 has an invalid length. [ 540.885992][T12691] netlink: 'syz.3.1561': attribute type 27 has an invalid length. [ 540.982613][T12691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.388183][T12699] ªªªªªª: renamed from vlan0 [ 541.532278][T12712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'. [ 541.606586][T12717] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 541.842013][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 541.945473][T12730] netlink: 'syz.1.1578': attribute type 16 has an invalid length. [ 541.948440][T12730] netlink: 'syz.1.1578': attribute type 17 has an invalid length. [ 541.952242][T12730] netlink: 'syz.1.1578': attribute type 27 has an invalid length. [ 541.971695][T12730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.025164][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 542.037841][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.057978][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 542.066199][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 542.069565][ T24] usb 5-1: Manufacturer: syz [ 542.086909][ T24] usb 5-1: config 0 descriptor?? [ 542.160915][ T24] rc_core: IR keymap rc-hauppauge not found [ 542.163617][ T24] Registered IR keymap rc-empty [ 542.176192][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 542.183976][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 542.311395][ T6037] usb 5-1: USB disconnect, device number 10 [ 542.689973][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 542.740724][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 542.891928][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 542.894790][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.898479][ T24] usb 7-1: config 0 descriptor?? [ 543.115094][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 543.117069][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 543.123782][ T24] usb 7-1: USB disconnect, device number 7 [ 543.723584][T12765] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 544.740721][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 546.395705][T12779] /dev/nullb0: Can't open blockdev [ 546.600928][ T6069] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 546.750841][ T6069] usb 5-1: Using ep0 maxpacket: 16 [ 546.754705][ T6069] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 546.758829][ T6069] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 546.763101][ T6069] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.768487][ T6069] usb 5-1: config 1 interface 0 has no altsetting 0 [ 546.776356][ T6069] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.780119][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.784242][ T6069] usb 5-1: Product: syz [ 546.786125][ T6069] usb 5-1: Manufacturer: syz [ 546.790421][ T6069] usb 5-1: SerialNumber: syz [ 546.870198][T12787] netlink: 'syz.2.1591': attribute type 16 has an invalid length. [ 546.872802][T12787] netlink: 'syz.2.1591': attribute type 17 has an invalid length. [ 546.875348][T12787] netlink: 'syz.2.1591': attribute type 27 has an invalid length. [ 546.890812][T12787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.925092][T12788] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 547.024581][ T6069] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 547.245774][ T6069] usb 5-1: USB disconnect, device number 11 [ 547.319615][ T6069] usblp0: removed [ 548.354534][T12829] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 549.866925][T12873] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 549.883198][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.109550][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.117230][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.126546][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 550.134164][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.140912][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.145573][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.186266][ T24] usb 6-1: config 0 descriptor?? [ 550.806800][ T24] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 550.823826][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 551.336446][T12883] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 551.690789][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 551.842835][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.846372][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.849350][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.853374][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.856146][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.860116][ T24] usb 5-1: config 0 descriptor?? [ 552.117621][T12901] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 552.570926][ T24] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 552.910064][ T24] usb 5-1: USB disconnect, device number 12 [ 553.120789][T12918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.123798][T12918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.289445][ T6069] usb 6-1: USB disconnect, device number 10 [ 553.320449][T12931] v: renamed from veth0_vlan [ 554.400906][T11246] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 554.512346][T12968] IPVS: Error connecting to the multicast addr [ 554.562523][T11246] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 554.566001][T11246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 554.570610][T11246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 554.579899][T11246] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.586377][T11246] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.590221][T11246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.596345][T11246] usb 7-1: config 0 descriptor?? [ 554.599274][T12956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 554.610744][ T6037] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 554.667284][T12972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.669613][T12972] IPv6: NLM_F_CREATE should be set when creating new route [ 554.762173][ T6037] usb 5-1: config 0 has no interfaces? [ 554.766495][ T6037] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 554.770183][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 554.773658][ T6037] usb 5-1: Product: syz [ 554.775471][ T6037] usb 5-1: Manufacturer: syz [ 554.777334][ T6037] usb 5-1: SerialNumber: syz [ 554.790136][ T6037] usb 5-1: config 0 descriptor?? [ 554.814593][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 554.819625][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 554.996138][ T24] usb 5-1: USB disconnect, device number 13 [ 555.009876][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.013375][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.015810][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.018164][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.020572][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.023150][T11246] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 555.027735][T11246] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 555.150768][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 555.152857][ T5956] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.273886][ T6037] usb 7-1: USB disconnect, device number 8 [ 555.413096][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 555.418459][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 557.165021][ T6069] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 557.342736][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.347480][ T6069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.351823][ T6069] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.357460][ T6069] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.363785][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.374420][ T6069] usb 6-1: config 0 descriptor?? [ 557.813109][ T6069] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 557.910496][T13029] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 558.062514][ T34] usb 6-1: USB disconnect, device number 11 [ 558.080945][ T6069] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 558.240738][ T6069] usb 7-1: Using ep0 maxpacket: 8 [ 558.245116][ T6069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.249759][ T6069] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 558.253539][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.260381][ T6069] usb 7-1: config 0 descriptor?? [ 558.479274][ T6069] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 558.678498][ T6069] usb 7-1: USB disconnect, device number 9 [ 558.681123][ C3] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 558.830815][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 558.980802][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 558.984630][ T24] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 558.988129][ T24] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 558.992206][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 558.995855][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.998808][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 559.002992][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 559.006989][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 559.009750][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.014773][ T24] usb 6-1: config 0 descriptor?? [ 559.227313][ T24] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 559.456176][T13056] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 559.516256][ T24] usb 6-1: USB disconnect, device number 12 [ 559.555708][ T24] usblp0: removed [ 561.454239][T13082] syzkaller1: entered promiscuous mode [ 561.456098][T13082] syzkaller1: entered allmulticast mode [ 562.122319][T13102] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 566.321875][T13160] batadv_slave_0: entered promiscuous mode [ 566.331512][T13159] batadv_slave_0: left promiscuous mode [ 567.891059][ T841] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 568.072336][ T841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.076350][ T841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.081106][ T841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.084049][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.298951][ T841] usb 5-1: GET_CAPABILITIES returned 0 [ 568.300832][ T841] usbtmc 5-1:16.0: can't read capabilities [ 568.502370][ T6069] usb 5-1: USB disconnect, device number 14 [ 569.021066][T13240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1747'. [ 569.290750][ T6069] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 569.442339][ T6069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.447097][ T6069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.451245][ T6069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.456567][ T6069] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.460387][ T6069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.466527][ T6069] usb 5-1: config 0 descriptor?? [ 569.875088][ T6069] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 569.892228][ T6069] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 571.450777][ T24] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 571.676310][T13284] /dev/nullb0: Can't open blockdev [ 572.262534][T11246] usb 5-1: USB disconnect, device number 15 [ 572.670043][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1762'. [ 572.674753][T13313] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1762'. [ 572.678782][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1762'. [ 572.682709][T13313] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1762'. [ 574.807233][T13342] /dev/nullb0: Can't open blockdev [ 578.612837][T13406] netlink: 'syz.3.1786': attribute type 16 has an invalid length. [ 578.616152][T13406] netlink: 'syz.3.1786': attribute type 17 has an invalid length. [ 578.619565][T13406] netlink: 'syz.3.1786': attribute type 27 has an invalid length. [ 578.658571][T13406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.063993][T13452] netlink: 'syz.3.1803': attribute type 16 has an invalid length. [ 582.067271][T13452] netlink: 'syz.3.1803': attribute type 17 has an invalid length. [ 582.070512][T13452] netlink: 'syz.3.1803': attribute type 27 has an invalid length. [ 583.310960][T13452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.414736][T13463] netlink: 'syz.2.1808': attribute type 16 has an invalid length. [ 583.417502][T13463] netlink: 'syz.2.1808': attribute type 17 has an invalid length. [ 583.420927][T13463] netlink: 'syz.2.1808': attribute type 27 has an invalid length. [ 583.428732][T13463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.080768][T12985] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 586.158130][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 586.158148][ T40] audit: type=1326 audit(1768042506.378:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 586.175487][ T40] audit: type=1326 audit(1768042506.398:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.186926][T13512] netlink: 'syz.1.1819': attribute type 16 has an invalid length. [ 586.189745][T13512] netlink: 'syz.1.1819': attribute type 17 has an invalid length. [ 586.193285][ T40] audit: type=1326 audit(1768042506.398:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 586.193355][T13512] netlink: 'syz.1.1819': attribute type 27 has an invalid length. [ 586.209347][ T40] audit: type=1326 audit(1768042506.398:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.217518][ T40] audit: type=1326 audit(1768042506.398:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.224661][ T40] audit: type=1326 audit(1768042506.398:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1598 code=0x7ffc0000 [ 586.231506][ T40] audit: type=1326 audit(1768042506.398:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.238304][ T40] audit: type=1326 audit(1768042506.398:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.238330][ T40] audit: type=1326 audit(1768042506.398:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.245422][ T40] audit: type=1326 audit(1768042506.398:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.3.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 586.260583][T13512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.289583][T12985] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 586.300183][T12985] usb 5-1: config 0 has no interfaces? [ 586.303044][T12985] usb 5-1: config 0 has no interfaces? [ 586.305617][T12985] usb 5-1: config 0 has no interfaces? [ 586.308359][T12985] usb 5-1: config 0 has no interfaces? [ 586.313405][T12985] usb 5-1: config 0 has no interfaces? [ 586.316006][T12985] usb 5-1: config 0 has no interfaces? [ 586.318567][T12985] usb 5-1: config 0 has no interfaces? [ 586.321130][T12985] usb 5-1: config 0 has no interfaces? [ 586.324616][T12985] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 586.327450][T12985] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 586.330040][T12985] usb 5-1: Product: syz [ 586.332686][T12985] usb 5-1: Manufacturer: syz [ 586.341433][T12985] usb 5-1: SerialNumber: syz [ 586.351690][T12985] usb 5-1: config 0 descriptor?? [ 586.520758][T11246] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 586.690767][T11246] usb 8-1: Using ep0 maxpacket: 8 [ 586.695074][T11246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 586.697920][T11246] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 586.711741][T11246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.721946][T11246] usb 8-1: config 0 descriptor?? [ 586.733368][T13520] netlink: 'syz.2.1824': attribute type 16 has an invalid length. [ 586.736725][T13520] netlink: 'syz.2.1824': attribute type 17 has an invalid length. [ 586.740069][T13520] netlink: 'syz.2.1824': attribute type 27 has an invalid length. [ 586.751559][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.771799][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.781798][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.789574][ T24] usb 5-1: USB disconnect, device number 16 [ 587.140020][T11246] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 587.336251][ T6069] usb 8-1: USB disconnect, device number 6 [ 589.500082][T13553] netlink: 'syz.2.1838': attribute type 16 has an invalid length. [ 589.502776][T13553] netlink: 'syz.2.1838': attribute type 17 has an invalid length. [ 589.505341][T13553] netlink: 'syz.2.1838': attribute type 27 has an invalid length. [ 589.701663][T13553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.299056][T13616] netlink: 'syz.2.1852': attribute type 16 has an invalid length. [ 591.301858][T13616] netlink: 'syz.2.1852': attribute type 17 has an invalid length. [ 591.304411][T13616] netlink: 'syz.2.1852': attribute type 27 has an invalid length. [ 591.324770][T13616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.343652][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 591.474030][T13629] siw: device registration error -23 [ 591.941354][ T6069] ªªªªªª speed is unknown, defaulting to 1000 [ 591.943483][ T6069] sz1: Port: 1 Link DOWN [ 591.945840][ T6069] ªªªªªª speed is unknown, defaulting to 1000 [ 594.151331][T13712] netlink: 'syz.3.1879': attribute type 16 has an invalid length. [ 594.154818][T13712] netlink: 'syz.3.1879': attribute type 17 has an invalid length. [ 594.176056][T13712] netlink: 'syz.3.1879': attribute type 27 has an invalid length. [ 594.337982][T13712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.120760][ T34] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 597.282690][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.287038][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.291287][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 597.295930][ T34] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 597.299780][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.306340][T13742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.319902][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 597.323877][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 597.327335][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 597.329577][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 597.345328][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 597.347980][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 597.711412][T13769] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 598.249917][T13742] usb 6-1: reset full-speed USB device number 13 using dummy_hcd [ 598.414320][T13765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.431102][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.434020][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.436786][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.439568][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.442322][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.444948][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.447592][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.450347][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.452551][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.454906][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.457608][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.460383][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.463154][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.465895][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.468621][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.471349][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.474081][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.476858][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.479782][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 598.482544][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 598.780812][ T34] usb 6-1: USB disconnect, device number 13 [ 601.023862][T13814] netlink: 'syz.0.1910': attribute type 16 has an invalid length. [ 601.026347][T13814] netlink: 'syz.0.1910': attribute type 17 has an invalid length. [ 601.028571][T13814] netlink: 'syz.0.1910': attribute type 27 has an invalid length. [ 601.502108][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.505843][T13814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.510248][T12985] ªªªªªª speed is unknown, defaulting to 1000 [ 601.512843][T12985] sz1: Port: 1 Link ACTIVE [ 601.514261][T12985] ªªªªªª speed is unknown, defaulting to 1000 [ 601.806681][ T6708] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 601.862449][T13832] netlink: 'syz.2.1914': attribute type 16 has an invalid length. [ 601.864984][T13832] netlink: 'syz.2.1914': attribute type 17 has an invalid length. [ 601.867539][T13832] netlink: 'syz.2.1914': attribute type 27 has an invalid length. [ 601.881224][T13832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.983952][ T6708] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.987214][ T6708] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.990051][ T6708] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 601.996316][ T34] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 601.999457][ T6708] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 602.003829][ T6708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.008365][T13828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 602.012295][ T6708] hub 8-1:1.0: bad descriptor, ignoring hub [ 602.014286][ T6708] hub 8-1:1.0: probe with driver hub failed with error -5 [ 602.030988][ T6708] cdc_wdm 8-1:1.0: skipping garbage [ 602.032720][ T6708] cdc_wdm 8-1:1.0: skipping garbage [ 602.036281][ T6708] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 602.038243][ T6708] cdc_wdm 8-1:1.0: Unknown control protocol [ 602.049286][ T40] kauditd_printk_skb: 54 callbacks suppressed [ 602.049295][ T40] audit: type=1804 audit(1768042522.268:435): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1920" name="/newroot/482/file1" dev="tmpfs" ino=2517 res=1 errno=0 [ 602.150721][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 602.153625][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 602.156401][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 602.160098][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.166140][ T34] usb 5-1: config 0 descriptor?? [ 602.204123][T13843] block nbd1: shutting down sockets [ 602.611473][ T34] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 602.617711][T13861] netlink: 'syz.1.1924': attribute type 16 has an invalid length. [ 602.620421][T13861] netlink: 'syz.1.1924': attribute type 17 has an invalid length. [ 602.623428][T13861] netlink: 'syz.1.1924': attribute type 27 has an invalid length. [ 602.634671][T13861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.805563][ T29] usb 5-1: USB disconnect, device number 17 [ 602.921439][T13828] usb 8-1: reset full-speed USB device number 7 using dummy_hcd [ 603.082230][T13847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.391438][T11246] usb 8-1: USB disconnect, device number 7 [ 605.600798][ T1024] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 605.793229][ T1024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.796635][ T1024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.799880][ T1024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.804046][ T1024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.806889][ T1024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.810947][ T1024] usb 6-1: config 0 descriptor?? [ 606.228056][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.235744][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.242742][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.249575][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.256285][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.263070][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.269794][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.275991][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.279060][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.282299][ T1024] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 606.296822][ T1024] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 606.336377][T13944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1959'. [ 606.493897][ T6708] usb 6-1: USB disconnect, device number 14 [ 606.814996][T13951] netlink: 'syz.0.1961': attribute type 16 has an invalid length. [ 606.817503][T13951] netlink: 'syz.0.1961': attribute type 17 has an invalid length. [ 606.820125][T13951] netlink: 'syz.0.1961': attribute type 27 has an invalid length. [ 606.834285][T13951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.753055][T13972] IPVS: Error connecting to the multicast addr [ 609.137021][T13989] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 610.669642][T14022] netlink: 'syz.0.1976': attribute type 16 has an invalid length. [ 610.680726][T14022] netlink: 'syz.0.1976': attribute type 17 has an invalid length. [ 610.684047][T14022] netlink: 'syz.0.1976': attribute type 27 has an invalid length. [ 610.794370][T14022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.214609][T14061] netlink: 'syz.0.1991': attribute type 16 has an invalid length. [ 612.220592][T14061] netlink: 'syz.0.1991': attribute type 17 has an invalid length. [ 612.227664][T14061] netlink: 'syz.0.1991': attribute type 27 has an invalid length. [ 612.380553][T14061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.442354][T14077] /dev/nullb0: Can't open blockdev [ 613.708484][T14086] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 614.538389][T14088] netlink: 'syz.0.2001': attribute type 16 has an invalid length. [ 614.541252][T14088] netlink: 'syz.0.2001': attribute type 17 has an invalid length. [ 614.543644][T14088] netlink: 'syz.0.2001': attribute type 27 has an invalid length. [ 614.567788][T14088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.149515][T14111] /dev/nullb0: Can't open blockdev [ 616.496542][T14127] ªªªªªª speed is unknown, defaulting to 1000 [ 616.690775][T11246] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 616.761687][T14144] syzkaller1: entered promiscuous mode [ 616.763655][T14144] syzkaller1: entered allmulticast mode [ 616.842032][T11246] usb 6-1: config 0 has no interfaces? [ 616.855936][T11246] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 616.859784][T11246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.868919][T11246] usb 6-1: Product: syz [ 616.881309][T11246] usb 6-1: Manufacturer: syz [ 616.883277][T11246] usb 6-1: SerialNumber: syz [ 616.891604][T11246] usb 6-1: config 0 descriptor?? [ 617.356676][T14127] veth1_vlan: left promiscuous mode [ 617.366968][T12985] usb 6-1: USB disconnect, device number 15 [ 617.698717][T14170] netlink: 'syz.3.2024': attribute type 16 has an invalid length. [ 617.702898][T14170] netlink: 'syz.3.2024': attribute type 17 has an invalid length. [ 617.706519][T14170] netlink: 'syz.3.2024': attribute type 27 has an invalid length. [ 617.719328][T14170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.861940][T14172] netlink: 'syz.0.2031': attribute type 16 has an invalid length. [ 617.864461][T14172] netlink: 'syz.0.2031': attribute type 17 has an invalid length. [ 617.866930][T14172] netlink: 'syz.0.2031': attribute type 27 has an invalid length. [ 617.872988][T14172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.125092][T14250] block nbd2: shutting down sockets [ 620.292766][ T1024] kernel read not supported for file /swradio3 (pid: 1024 comm: kworker/0:3) [ 620.660222][T14264] syzkaller1: entered promiscuous mode [ 620.663689][T14264] syzkaller1: entered allmulticast mode [ 621.030740][T11246] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 621.200820][T11246] usb 5-1: Using ep0 maxpacket: 8 [ 621.204672][T11246] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 621.208112][T11246] usb 5-1: config 0 has no interface number 0 [ 621.210981][T11246] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.215549][T11246] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 621.220368][T11246] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 621.226690][T11246] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.234176][T11246] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 621.239224][T11246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.242659][T11246] usb 5-1: Product: syz [ 621.244455][T11246] usb 5-1: Manufacturer: syz [ 621.246458][T11246] usb 5-1: SerialNumber: syz [ 621.251162][T11246] usb 5-1: config 0 descriptor?? [ 621.466210][T11246] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 621.668027][ T1024] usb 5-1: USB disconnect, device number 18 [ 628.441876][T14457] input: syz0 as /devices/virtual/input/input18 [ 628.520040][ T40] audit: type=1326 audit(1768042548.738:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14458 comm="syz.0.2113" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3579 code=0x0 [ 629.488957][T14468] netlink: 'syz.1.2117': attribute type 16 has an invalid length. [ 629.491649][T14468] netlink: 'syz.1.2117': attribute type 17 has an invalid length. [ 629.494469][T14468] netlink: 'syz.1.2117': attribute type 27 has an invalid length. [ 629.505020][T14468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.266348][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2136'. [ 630.870181][T14547] netlink: 'syz.0.2144': attribute type 16 has an invalid length. [ 630.872745][T14547] netlink: 'syz.0.2144': attribute type 17 has an invalid length. [ 630.875232][T14547] netlink: 'syz.0.2144': attribute type 27 has an invalid length. [ 630.881048][T14547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.291865][T14562] input: syz0 as /devices/virtual/input/input19 [ 631.360958][T14568] binder: 14566:14568 ioctl c018620c 80000040 returned -1 [ 631.687948][ T40] audit: type=1326 audit(1768042551.908:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.3.2160" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1579 code=0x0 [ 633.097718][T14649] ªªªªªª speed is unknown, defaulting to 1000 [ 633.290966][ T1024] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 633.477622][ T1024] usb 5-1: Using ep0 maxpacket: 8 [ 633.493183][ T1024] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 633.505009][ T1024] usb 5-1: config 0 has no interface number 0 [ 633.507266][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.512874][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 633.518933][ T1024] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.525521][ T1024] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 633.531636][ T1024] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 633.534605][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.555235][ T1024] usb 5-1: config 0 descriptor?? [ 633.575435][ T1024] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 633.848408][ T24] usb 5-1: USB disconnect, device number 19 [ 633.856074][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 634.680836][T14679] netlink: 'syz.0.2181': attribute type 16 has an invalid length. [ 634.683564][T14679] netlink: 'syz.0.2181': attribute type 17 has an invalid length. [ 634.686690][T14679] netlink: 'syz.0.2181': attribute type 27 has an invalid length. [ 634.705794][T14679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.900845][ T5947] Bluetooth: hci4: command 0xfc11 tx timeout [ 634.905115][ T5956] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 635.410992][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2189'. [ 635.414873][T14708] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 635.418292][T14708] netlink: 'syz.0.2189': attribute type 2 has an invalid length. [ 635.422958][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 635.499578][T14713] [ 635.500658][T14713] ====================================================== [ 635.503586][T14713] WARNING: possible circular locking dependency detected [ 635.506538][T14713] syzkaller #0 Not tainted [ 635.508727][T14713] ------------------------------------------------------ [ 635.511720][T14713] syz.0.2190/14713 is trying to acquire lock: [ 635.514295][T14713] ffff8880260321c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 635.517821][T14713] [ 635.517821][T14713] but task is already holding lock: [ 635.520845][T14713] ffff888013620068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 635.524272][T14713] [ 635.524272][T14713] which lock already depends on the new lock. [ 635.524272][T14713] [ 635.528559][T14713] [ 635.528559][T14713] the existing dependency chain (in reverse order) is: [ 635.532284][T14713] [ 635.532284][T14713] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 635.535385][T14713] __mutex_lock+0x1aa/0x1ca0 [ 635.537549][T14713] anon_pipe_write+0x15d/0x1bd0 [ 635.539827][T14713] __kernel_write_iter+0x720/0xb10 [ 635.542227][T14713] __kernel_write+0xf5/0x140 [ 635.544393][T14713] autofs_notify_daemon+0x4db/0xd60 [ 635.546816][T14713] autofs_wait+0x10f3/0x1ac0 [ 635.548976][T14713] autofs_mount_wait+0x132/0x3c0 [ 635.551273][T14713] autofs_d_automount+0x4b2/0x960 [ 635.553565][T14713] __traverse_mounts+0x1b9/0x830 [ 635.555875][T14713] step_into_slowpath+0x772/0xf50 [ 635.558200][T14713] path_lookupat+0x627/0xc40 [ 635.560345][T14713] filename_lookup+0x224/0x5f0 [ 635.562571][T14713] user_path_at+0x3a/0x60 [ 635.564631][T14713] __ia32_sys_mount+0x1fa/0x310 [ 635.566903][T14713] __do_fast_syscall_32+0xe8/0x680 [ 635.569267][T14713] do_fast_syscall_32+0x32/0x80 [ 635.571526][T14713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.574447][T14713] [ 635.574447][T14713] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 635.577680][T14713] __mutex_lock+0x1aa/0x1ca0 [ 635.579854][T14713] autofs_notify_daemon+0x4a6/0xd60 [ 635.582273][T14713] autofs_wait+0x10f3/0x1ac0 [ 635.584419][T14713] autofs_mount_wait+0x132/0x3c0 [ 635.586723][T14713] autofs_d_automount+0x4b2/0x960 [ 635.589041][T14713] __traverse_mounts+0x1b9/0x830 [ 635.591335][T14713] step_into_slowpath+0x772/0xf50 [ 635.593649][T14713] path_lookupat+0x627/0xc40 [ 635.595814][T14713] filename_lookup+0x224/0x5f0 [ 635.597964][T14713] kern_path+0x35/0x50 [ 635.599858][T14713] lookup_bdev+0xd8/0x280 [ 635.601837][T14713] resume_store+0x1d6/0x490 [ 635.603966][T14713] kobj_attr_store+0x58/0x80 [ 635.606140][T14713] sysfs_kf_write+0xf2/0x150 [ 635.608282][T14713] kernfs_fop_write_iter+0x3af/0x570 [ 635.610675][T14713] vfs_write+0x7d3/0x11d0 [ 635.612717][T14713] ksys_write+0x12a/0x250 [ 635.614773][T14713] __do_fast_syscall_32+0xe8/0x680 [ 635.617121][T14713] do_fast_syscall_32+0x32/0x80 [ 635.619395][T14713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.622255][T14713] [ 635.622255][T14713] -> #1 (&of->mutex){+.+.}-{4:4}: [ 635.625263][T14713] __mutex_lock+0x1aa/0x1ca0 [ 635.627436][T14713] kernfs_seq_start+0x4f/0x2a0 [ 635.629692][T14713] seq_read_iter+0x2c1/0x12d0 [ 635.631886][T14713] kernfs_fop_read_iter+0x46c/0x610 [ 635.634308][T14713] copy_splice_read+0x618/0xc20 [ 635.636564][T14713] do_splice_read+0x285/0x370 [ 635.638777][T14713] splice_direct_to_actor+0x2a1/0xa30 [ 635.641262][T14713] do_splice_direct+0x174/0x240 [ 635.643533][T14713] do_sendfile+0xb06/0xe50 [ 635.645645][T14713] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 635.648274][T14713] __do_fast_syscall_32+0xe8/0x680 [ 635.650631][T14713] do_fast_syscall_32+0x32/0x80 [ 635.652919][T14713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.655794][T14713] [ 635.655794][T14713] -> #0 (&p->lock){+.+.}-{4:4}: [ 635.658723][T14713] __lock_acquire+0x1669/0x2890 [ 635.660976][T14713] lock_acquire+0x179/0x330 [ 635.663103][T14713] __mutex_lock+0x1aa/0x1ca0 [ 635.665263][T14713] seq_read_iter+0xe1/0x12d0 [ 635.667432][T14713] kernfs_fop_read_iter+0x46c/0x610 [ 635.669898][T14713] copy_splice_read+0x618/0xc20 [ 635.672162][T14713] do_splice_read+0x285/0x370 [ 635.674364][T14713] splice_file_to_pipe+0x109/0x120 [ 635.676745][T14713] do_sendfile+0x400/0xe50 [ 635.678875][T14713] __ia32_sys_sendfile64+0x1d7/0x220 [ 635.681320][T14713] __do_fast_syscall_32+0xe8/0x680 [ 635.683685][T14713] do_fast_syscall_32+0x32/0x80 [ 635.685950][T14713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.688840][T14713] [ 635.688840][T14713] other info that might help us debug this: [ 635.688840][T14713] [ 635.693065][T14713] Chain exists of: [ 635.693065][T14713] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 635.693065][T14713] [ 635.697975][T14713] Possible unsafe locking scenario: [ 635.697975][T14713] [ 635.701055][T14713] CPU0 CPU1 [ 635.703317][T14713] ---- ---- [ 635.705562][T14713] lock(&pipe->mutex); [ 635.707145][T14713] lock(&sbi->pipe_mutex); [ 635.709934][T14713] lock(&pipe->mutex); [ 635.712710][T14713] lock(&p->lock); [ 635.714377][T14713] [ 635.714377][T14713] *** DEADLOCK *** [ 635.714377][T14713] [ 635.717753][T14713] 1 lock held by syz.0.2190/14713: [ 635.719961][T14713] #0: ffff888013620068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 635.723601][T14713] [ 635.723601][T14713] stack backtrace: [ 635.726091][T14713] CPU: 3 UID: 0 PID: 14713 Comm: syz.0.2190 Not tainted syzkaller #0 PREEMPT(full) [ 635.726115][T14713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 635.726128][T14713] Call Trace: [ 635.726135][T14713] [ 635.726144][T14713] dump_stack_lvl+0x116/0x1f0 [ 635.726177][T14713] print_circular_bug+0x275/0x340 [ 635.726209][T14713] check_noncircular+0x146/0x160 [ 635.726241][T14713] __lock_acquire+0x1669/0x2890 [ 635.726261][T14713] ? mark_held_locks+0x49/0x80 [ 635.726280][T14713] lock_acquire+0x179/0x330 [ 635.726298][T14713] ? seq_read_iter+0xe1/0x12d0 [ 635.726324][T14713] ? __pfx___might_resched+0x10/0x10 [ 635.726352][T14713] __mutex_lock+0x1aa/0x1ca0 [ 635.726370][T14713] ? seq_read_iter+0xe1/0x12d0 [ 635.726393][T14713] ? do_sendfile+0x400/0xe50 [ 635.726417][T14713] ? __do_fast_syscall_32+0xe8/0x680 [ 635.726434][T14713] ? do_fast_syscall_32+0x32/0x80 [ 635.726451][T14713] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.726474][T14713] ? seq_read_iter+0xe1/0x12d0 [ 635.726499][T14713] ? __pfx___mutex_lock+0x10/0x10 [ 635.726522][T14713] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 635.726547][T14713] ? seq_read_iter+0xe1/0x12d0 [ 635.726569][T14713] seq_read_iter+0xe1/0x12d0 [ 635.726593][T14713] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 635.726619][T14713] kernfs_fop_read_iter+0x46c/0x610 [ 635.726650][T14713] copy_splice_read+0x618/0xc20 [ 635.726687][T14713] ? __pfx_aa_file_perm+0x10/0x10 [ 635.726716][T14713] ? __pfx_copy_splice_read+0x10/0x10 [ 635.726748][T14713] ? __fget_files+0x204/0x3c0 [ 635.726776][T14713] ? __pfx_copy_splice_read+0x10/0x10 [ 635.726802][T14713] do_splice_read+0x285/0x370 [ 635.726830][T14713] splice_file_to_pipe+0x109/0x120 [ 635.726859][T14713] do_sendfile+0x400/0xe50 [ 635.726886][T14713] ? __pfx_do_sendfile+0x10/0x10 [ 635.726910][T14713] ? do_seccomp+0x333/0x2640 [ 635.726929][T14713] ? __pfx___seccomp_filter+0x10/0x10 [ 635.726952][T14713] __ia32_sys_sendfile64+0x1d7/0x220 [ 635.726969][T14713] ? xfd_validate_state+0x61/0x180 [ 635.726987][T14713] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 635.727007][T14713] ? __secure_computing+0x21c/0x320 [ 635.727030][T14713] __do_fast_syscall_32+0xe8/0x680 [ 635.727050][T14713] do_fast_syscall_32+0x32/0x80 [ 635.727067][T14713] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.727091][T14713] RIP: 0023:0xf7ff3579 [ 635.727106][T14713] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 635.727124][T14713] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 635.727141][T14713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000005 [ 635.727152][T14713] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 635.727163][T14713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.727174][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.727184][T14713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.727202][T14713]