last executing test programs: 20.379694906s ago: executing program 4 (id=2212): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x40243, 0x6b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'\x00', {0x2, 0x0, @initdev}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0xe, 0x0, &(0x7f0000000280)) 15.09669589s ago: executing program 4 (id=2226): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000), 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 14.802389099s ago: executing program 1 (id=2228): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 14.012628051s ago: executing program 4 (id=2229): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x250}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001900010900000000000000000a1800000000fd010000000008000100ac14140008"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, &(0x7f0000000000)='.\x00', 0x0) close(r0) 12.85122184s ago: executing program 1 (id=2230): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c041}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'team0\x00', &(0x7f0000000000)=@ethtool_ts_info}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x401c2103, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11.855096017s ago: executing program 1 (id=2231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2}, 0x1}], 0x1, 0x40000002, &(0x7f0000000440)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@overlay={0x8, 0x0, 0x4, 0x0, 0xfffffffd, {0x0, 0xea60}, {0x1, 0x1, 0x3, 0x9, 0x21, 0x3, "bc5c938a"}, 0x1ff, 0x3, {}, 0x9, 0x0, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000000), 0xa194, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_INIT(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r8, 0x0, 0x0) close_range(r6, r8, 0x2) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 11.700184384s ago: executing program 0 (id=2234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0x5, 0x3}) 11.681061803s ago: executing program 4 (id=2235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) acct(0x0) 10.630478468s ago: executing program 1 (id=2236): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x40243, 0x6b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'\x00', {0x2, 0x0, @initdev}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0xe, 0x0, &(0x7f0000000280)) 10.583471971s ago: executing program 0 (id=2238): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x0, 0x40, 0x0}) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r2) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.442493598s ago: executing program 4 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x1, 0x82) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) acct(0x0) acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) open(&(0x7f00000001c0)='./file0\x00', 0x98000, 0x63) 10.198020533s ago: executing program 0 (id=2241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000001c0)={0x2, 0x100, 0x9, 0x0, 0xda02, 0x75f43e1e}) 9.426261075s ago: executing program 4 (id=2243): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.46188179s ago: executing program 3 (id=2249): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_tables_targets\x00') socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.296185937s ago: executing program 0 (id=2251): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close_range(r0, 0xffffffffffffffff, 0x0) 5.156467937s ago: executing program 2 (id=2252): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) r1 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) 5.154812676s ago: executing program 3 (id=2253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x1, 0x82) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) acct(0x0) acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) open(&(0x7f00000001c0)='./file0\x00', 0x98000, 0x63) 4.998190134s ago: executing program 0 (id=2254): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) dup(r1) syz_open_dev$usbfs(0x0, 0x0, 0x103981) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0xfffffffffffffffa) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4.865988465s ago: executing program 2 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r4}, 0x42) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 4.219027331s ago: executing program 3 (id=2256): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) sched_setattr(r1, &(0x7f00000001c0)={0x38, 0x0, 0x10000060, 0x6, 0xc16b, 0x4, 0x2, 0xcb, 0x7}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) 3.864822617s ago: executing program 2 (id=2257): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$KDFONTOP_SET(r5, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) setresuid(0x0, 0xffffffffffffffff, 0xee01) setreuid(0xee01, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000240)=@ethtool_gstrings}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 3.009930136s ago: executing program 3 (id=2258): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000fcdbdf2524000000"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r1, r0, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.288112209s ago: executing program 1 (id=2259): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1.256162187s ago: executing program 3 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xc0400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x60, @tick=0x3, 0x6, {0x3, 0xff}, 0x3, 0x0, 0x6}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2cc, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1.074717409s ago: executing program 1 (id=2261): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000009) 303.894321ms ago: executing program 2 (id=2262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) acct(0x0) 266.500424ms ago: executing program 3 (id=2263): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x891e, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000), 0xe) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 168.057403ms ago: executing program 0 (id=2264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x62, 0xb, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "36c337c55ea76e5d83ceb097db3b"}, @cipso={0x86, 0x6, 0x3}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1f, &(0x7f0000000180)=0x12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) 78.606965ms ago: executing program 2 (id=2265): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a6540b74e9503", 0x9) 0s ago: executing program 2 (id=2266): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r1 = fsopen(&(0x7f0000000280)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='sm\x93\xe0wc\x1c\xe3\xacoQ5\xbdD>\xbfw\x8b\xeb\x9f\x91\x13s6Gxj\xee\x18\xc6\x90_H1\xe2\x89\xd1\x1e`\xe7\xae\xe58\xdc\x166,\xb5\xa41\x02', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000005c0)={0x47e, "718f626016c0cbc69c462fa43e58d108e08bc77e72149791475a002647433817", 0x1, 0x800, 0x4, 0x9, 0x4, 0x1, 0x8, 0x49}) tkill(r2, 0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) accept4(r6, 0x0, 0x0, 0x80000) kernel console output (not intermixed with test programs): T9] usb 2-1: Product: syz [ 165.155153][ T9] usb 2-1: Manufacturer: syz [ 165.161693][ T9] usb 2-1: SerialNumber: syz [ 165.170429][ T9] usb 2-1: config 0 descriptor?? [ 165.180259][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 166.305892][ T9] gspca_ov534_9: reg_w failed -110 [ 166.718843][ T9] gspca_ov534_9: Unknown sensor 0000 [ 166.719134][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 168.193366][ T9] usb 2-1: USB disconnect, device number 2 [ 174.161076][ T6797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.223735][ T6797] capability: warning: `syz.2.205' uses deprecated v2 capabilities in a way that may be insecure [ 175.166233][ T6805] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.952042][ T30] audit: type=1326 audit(1751481500.466:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 176.999835][ T30] audit: type=1326 audit(1751481500.476:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 177.489525][ T6833] netlink: 'syz.3.217': attribute type 20 has an invalid length. [ 177.589385][ T6833] loop3: detected capacity change from 0 to 2048 [ 177.935345][ T30] audit: type=1326 audit(1751481500.476:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 178.030217][ T6833] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 178.066741][ T30] audit: type=1326 audit(1751481500.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 178.315608][ T30] audit: type=1326 audit(1751481500.496:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 178.808048][ T30] audit: type=1326 audit(1751481500.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 178.969382][ T30] audit: type=1326 audit(1751481500.496:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 179.047668][ T30] audit: type=1326 audit(1751481500.496:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 179.293067][ T30] audit: type=1326 audit(1751481500.496:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 179.340997][ T30] audit: type=1326 audit(1751481500.496:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c392ab19 code=0x7ffc0000 [ 183.214787][ T6871] trusted_key: encrypted_key: hex blob is missing [ 183.224222][ T6871] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6871] [ 184.742908][ T6891] bridge0: entered promiscuous mode [ 184.749107][ T6891] macvlan2: entered promiscuous mode [ 184.822872][ T6892] tipc: Started in network mode [ 184.827978][ T6892] tipc: Node identity e2c4143b5a58, cluster identity 4711 [ 184.874642][ T6892] tipc: Enabled bearer , priority 0 [ 184.905466][ T6892] syzkaller0: entered promiscuous mode [ 185.003526][ T6892] syzkaller0: entered allmulticast mode [ 185.008795][ T5983] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.052652][ T5922] tipc: Node number set to 3097236539 [ 186.226523][ T6892] tipc: Resetting bearer [ 186.558502][ T6888] tipc: Resetting bearer [ 186.596357][ T6888] tipc: Disabling bearer [ 186.809314][ T5983] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.821695][ T5983] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.834922][ T5983] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.846184][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.865704][ T6893] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.907328][ T6917] process 'syz.3.239' launched '/dev/fd/5' with NULL argv: empty string added [ 187.045707][ T5983] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.039246][ T5983] usb 1-1: USB disconnect, device number 5 [ 188.229003][ T6928] loop1: detected capacity change from 0 to 256 [ 188.852477][ T6928] vfat: Unknown parameter 'shorname' [ 189.295388][ T6935] random: crng reseeded on system resumption [ 189.763297][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 190.524885][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 191.336589][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 191.369206][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.382787][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 191.413210][ T5906] usb 1-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config [ 192.269283][ T5906] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 192.338141][ T5906] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 192.362729][ T5906] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.502625][ T5906] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 192.511842][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.519954][ T5906] usb 1-1: Product: syz [ 192.524893][ T5906] usb 1-1: Manufacturer: syz [ 192.529914][ T5906] usb 1-1: SerialNumber: syz [ 192.539974][ T6940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.161827][ T5906] usb 1-1: USB disconnect, device number 6 [ 193.678453][ T6976] loop1: detected capacity change from 0 to 256 [ 193.690429][ T6976] vfat: Unknown parameter 'shorname' [ 194.481602][ T6977] random: crng reseeded on system resumption [ 194.531777][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.610368][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 196.616491][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 196.622648][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 196.631003][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 196.637106][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 197.969108][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.129993][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 198.152947][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 198.178729][ T10] usb 3-1: config 0 has no interface number 0 [ 198.188433][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 199.210227][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 199.340080][ T7019] affs: No valid root block on device nullb0 [ 199.347950][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.356332][ T10] usb 3-1: Product: syz [ 199.362709][ T10] usb 3-1: Manufacturer: syz [ 199.367399][ T10] usb 3-1: SerialNumber: syz [ 199.441691][ T10] usb 3-1: config 0 descriptor?? [ 200.771084][ T7032] mkiss: ax0: crc mode is auto. [ 200.963596][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 200.981545][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 200.996246][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 201.084030][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 201.506714][ T10] usb 3-1: USB disconnect, device number 4 [ 203.693229][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 203.925546][ T2154] libceph: connect (1)[c::]:6789 error -101 [ 203.956707][ T2154] libceph: mon0 (1)[c::]:6789 connect error [ 204.099995][ T7083] ceph: No mds server is up or the cluster is laggy [ 204.805355][ T2154] libceph: connect (1)[c::]:6789 error -101 [ 204.862551][ T2154] libceph: mon0 (1)[c::]:6789 connect error [ 205.953273][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.962198][ T7109] batadv_slave_0: entered promiscuous mode [ 205.968203][ T7109] batadv_slave_0: entered allmulticast mode [ 209.676738][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 210.573839][ T7148] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.989541][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.315'. [ 215.818799][ T5906] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.028820][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 216.056113][ T5906] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 216.069276][ T5906] usb 1-1: config 0 has no interface number 0 [ 216.082696][ T5906] usb 1-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 216.110565][ T5906] usb 1-1: config 0 interface 89 has no altsetting 0 [ 216.544250][ T5906] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 216.557552][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.583649][ T5906] usb 1-1: Product: syz [ 216.587937][ T5906] usb 1-1: Manufacturer: syz [ 216.619055][ T5906] usb 1-1: SerialNumber: syz [ 216.657237][ T5906] usb 1-1: config 0 descriptor?? [ 216.687837][ T7180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.736752][ T5906] hub 1-1:0.89: bad descriptor, ignoring hub [ 216.880010][ T5906] hub 1-1:0.89: probe with driver hub failed with error -5 [ 216.889849][ T5906] option 1-1:0.89: GSM modem (1-port) converter detected [ 218.500717][ T5906] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 218.604076][ T7209] loop6: detected capacity change from 0 to 7 [ 218.644981][ T7209] Dev loop6: unable to read RDB block 7 [ 218.664265][ T7209] loop6: unable to read partition table [ 218.671275][ T5906] usb 1-1: USB disconnect, device number 7 [ 218.691944][ T7209] loop6: partition table beyond EOD, truncated [ 218.710041][ T5906] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 218.726697][ T7209] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 218.800603][ T5906] option 1-1:0.89: device disconnected [ 219.859664][ T7224] netlink: 68 bytes leftover after parsing attributes in process `syz.3.329'. [ 224.654529][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 225.095786][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 230.508412][ T7344] netlink: 'syz.2.366': attribute type 4 has an invalid length. [ 237.071011][ T5906] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 238.080141][ T5906] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 238.092926][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 238.203510][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 238.606500][ T7423] omfs: Invalid superblock (0) [ 239.095712][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.214274][ T5906] usb 5-1: string descriptor 0 read error: -71 [ 239.261101][ T5906] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 239.684411][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 239.735438][ T5906] usb 5-1: config 0 descriptor?? [ 239.765527][ T5906] usb 5-1: can't set config #0, error -71 [ 239.985780][ T5906] usb 5-1: USB disconnect, device number 7 [ 244.818774][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 245.079311][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 245.117495][ T5906] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 245.309613][ T5906] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.344188][ T5906] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.391064][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.418040][ T5906] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 245.458311][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.503641][ T5906] usb 3-1: config 0 descriptor?? [ 245.891543][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 245.897578][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 246.700633][ T5906] usb 3-1: USB disconnect, device number 5 [ 254.016559][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.345321][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 254.352876][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 254.378951][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 254.387547][ T10] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 254.472536][ T7559] ceph: No mds server is up or the cluster is laggy [ 254.784111][ T9] libceph: connect (1)[c::]:6789 error -101 [ 254.814179][ T10] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.830134][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 254.854253][ T10] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.893550][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.914095][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 255.036750][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.052048][ T10] usb 3-1: config 0 descriptor?? [ 255.625796][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 255.643016][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.682922][ T10] usb 3-1: USB disconnect, device number 6 [ 255.829957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.932352][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.941053][ T7591] batadv_slave_0: entered promiscuous mode [ 256.946936][ T7591] batadv_slave_0: entered allmulticast mode [ 259.587633][ T10] libceph: connect (1)[c::]:6789 error -101 [ 259.594112][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 259.783656][ T7613] ceph: No mds server is up or the cluster is laggy [ 260.031964][ T10] libceph: connect (1)[c::]:6789 error -101 [ 260.079519][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 261.699988][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 261.878919][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 261.958839][ T5906] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 261.996253][ T5906] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.030541][ T5906] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.056464][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.076403][ T5906] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 262.134973][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.159936][ T5906] usb 3-1: config 0 descriptor?? [ 262.348758][ T2154] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 262.512220][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 262.518357][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 262.559567][ T5906] usb 3-1: USB disconnect, device number 7 [ 262.631174][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.656477][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.677780][ T2154] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 262.700568][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.725156][ T2154] usb 4-1: config 0 descriptor?? [ 263.203137][ T2154] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 263.745122][ T2154] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 263.791209][ T2154] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 264.534444][ T2154] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 264.687175][ T2154] usb 4-1: USB disconnect, device number 3 [ 264.804002][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 264.810337][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 264.982621][ T7667] ceph: No mds server is up or the cluster is laggy [ 265.028745][ T5847] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 265.249222][ T9] libceph: connect (1)[c::]:6789 error -101 [ 265.255330][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 265.379652][ T7675] affs: No valid root block on device nullb0 [ 265.448851][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 265.494215][ T5847] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.504611][ T5847] usb 1-1: config 0 has no interface number 0 [ 265.524589][ T5847] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.551956][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.574019][ T5847] usb 1-1: Product: syz [ 265.644606][ T5847] usb 1-1: Manufacturer: syz [ 265.759266][ T7678] netlink: 76 bytes leftover after parsing attributes in process `syz.1.462'. [ 266.042126][ T5847] usb 1-1: SerialNumber: syz [ 266.121361][ T5847] usb 1-1: config 0 descriptor?? [ 266.150680][ T5847] smsc95xx v2.0.0 [ 267.549008][ T5847] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 267.886098][ T5847] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 267.999143][ T5847] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 268.056346][ T5847] usb 1-1: USB disconnect, device number 8 [ 270.726393][ T9] libceph: connect (1)[c::]:6789 error -101 [ 270.768591][ T7723] ceph: No mds server is up or the cluster is laggy [ 270.785560][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 271.061275][ T9] libceph: connect (1)[c::]:6789 error -101 [ 271.919644][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 275.199457][ T7771] CIFS mount error: No usable UNC path provided in device string! [ 275.199457][ T7771] [ 275.209540][ T7771] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.433666][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 275.444412][ T7775] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 275.452590][ T7775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.956889][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 279.956909][ T30] audit: type=1800 audit(1751481603.456:71): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.502" name="bus" dev="ramfs" ino=14328 res=0 errno=0 [ 280.921110][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 280.965779][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 280.990032][ T7828] ceph: No mds server is up or the cluster is laggy [ 281.664284][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'. [ 283.783872][ T7850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.511'. [ 284.118469][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.126590][ T7856] batadv_slave_0: entered promiscuous mode [ 284.132935][ T7856] batadv_slave_0: entered allmulticast mode [ 293.184813][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 294.512843][ T7923] loop6: detected capacity change from 0 to 7 [ 294.565563][ T6946] Dev loop6: unable to read RDB block 7 [ 294.581300][ T6946] loop6: unable to read partition table [ 294.607735][ T6946] loop6: partition table beyond EOD, truncated [ 294.717424][ T7923] Dev loop6: unable to read RDB block 7 [ 294.801418][ T7923] loop6: unable to read partition table [ 294.807371][ T7923] loop6: partition table beyond EOD, truncated [ 294.815207][ T7923] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 299.007098][ T7956] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 299.014656][ T7956] syz.0.541: attempt to access beyond end of device [ 299.014656][ T7956] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 299.740917][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 299.749947][ T7964] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 299.757148][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.056332][ T7971] loop6: detected capacity change from 0 to 7 [ 300.066681][ T7971] Dev loop6: unable to read RDB block 7 [ 300.073095][ T7971] loop6: unable to read partition table [ 300.139194][ T7971] loop6: partition table beyond EOD, truncated [ 300.286804][ T7976] CIFS mount error: No usable UNC path provided in device string! [ 300.286804][ T7976] [ 300.297027][ T7976] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 300.459317][ T7974] Failed to get privilege flags for destination (handle=0x2:0x4) [ 300.524269][ T7971] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 301.011174][ T7979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.549'. [ 305.065234][ T8012] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 305.080527][ T8012] syz.1.556: attempt to access beyond end of device [ 305.080527][ T8012] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 305.699859][ T8017] loop4: detected capacity change from 0 to 2048 [ 305.742198][ T8017] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 307.252574][ T8030] loop6: detected capacity change from 0 to 7 [ 307.308956][ T8030] Dev loop6: unable to read RDB block 7 [ 307.314576][ T8030] loop6: unable to read partition table [ 307.361700][ T8030] loop6: partition table beyond EOD, truncated [ 307.412396][ T8030] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 310.077042][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.085737][ T8066] batadv_slave_0: entered promiscuous mode [ 310.091706][ T8066] batadv_slave_0: entered allmulticast mode [ 310.926479][ T8073] netlink: 112 bytes leftover after parsing attributes in process `syz.3.566'. [ 312.065705][ T8083] Cannot find del_set index 0 as target [ 312.732801][ T8089] loop6: detected capacity change from 0 to 7 [ 312.778823][ T8089] Dev loop6: unable to read RDB block 7 [ 312.784445][ T8089] loop6: unable to read partition table [ 312.794926][ T8089] loop6: partition table beyond EOD, truncated [ 312.804721][ T8089] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 315.974397][ T8119] trusted_key: encrypted_key: hex blob is missing [ 316.015865][ T8119] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[8119] [ 316.850854][ T8128] SET target dimension over the limit! [ 317.328352][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434588][ T8116] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 317.440476][ T8116] syzkaller0: ignored: set checksum disabled [ 322.820177][ T8172] trusted_key: encrypted_key: hex blob is missing [ 322.877917][ T8172] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[8172] [ 323.582443][ T8181] overlayfs: failed to resolve './file0': -2 [ 327.921374][ T8211] loop6: detected capacity change from 0 to 7 [ 327.966668][ T5834] Dev loop6: unable to read RDB block 7 [ 327.994242][ T5834] loop6: unable to read partition table [ 328.031090][ T5834] loop6: partition table beyond EOD, truncated [ 328.072349][ T8211] Dev loop6: unable to read RDB block 7 [ 328.202809][ T8211] loop6: unable to read partition table [ 328.228996][ T8211] loop6: partition table beyond EOD, truncated [ 328.272256][ T8211] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 329.855511][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.865005][ T8241] batadv_slave_0: entered promiscuous mode [ 329.871286][ T8241] batadv_slave_0: entered allmulticast mode [ 333.410395][ T8271] omfs: Invalid superblock (0) [ 335.963382][ T8300] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 340.815442][ T30] audit: type=1326 audit(1751481664.336:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 340.990329][ T8348] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 341.304883][ T30] audit: type=1326 audit(1751481664.336:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 341.538206][ T30] audit: type=1326 audit(1751481664.336:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 341.569281][ T30] audit: type=1326 audit(1751481664.336:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 342.135576][ T30] audit: type=1326 audit(1751481664.346:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 342.158583][ T30] audit: type=1326 audit(1751481664.346:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 342.382525][ T30] audit: type=1326 audit(1751481664.346:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 342.405071][ T30] audit: type=1326 audit(1751481664.346:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 342.538120][ T8359] omfs: Invalid superblock (0) [ 342.680181][ T8362] Failed to get privilege flags for destination (handle=0x2:0x4) [ 344.678983][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 344.886599][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 344.936169][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.979543][ T9] usb 2-1: Product: syz [ 344.984116][ T9] usb 2-1: Manufacturer: syz [ 344.992602][ T9] usb 2-1: SerialNumber: syz [ 345.004334][ T9] usb 2-1: config 0 descriptor?? [ 346.639817][ T8396] CIFS mount error: No usable UNC path provided in device string! [ 346.639817][ T8396] [ 346.650020][ T8396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 347.473152][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 347.650549][ T9] usb 2-1: USB disconnect, device number 3 [ 349.826407][ T8424] omfs: Invalid superblock (0) [ 351.516877][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 351.978175][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 351.987324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.996305][ T10] usb 4-1: Product: syz [ 352.000762][ T10] usb 4-1: Manufacturer: syz [ 352.005366][ T10] usb 4-1: SerialNumber: syz [ 352.018853][ T10] usb 4-1: config 0 descriptor?? [ 352.445283][ T1093] Bluetooth: hci5: Frame reassembly failed (-84) [ 354.167232][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 354.300305][ T5838] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 354.576255][ T10] usb 4-1: USB disconnect, device number 4 [ 357.643139][ T8498] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 357.649069][ T8498] syzkaller0: ignored: set checksum disabled [ 357.835307][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.697'. [ 369.786710][ T8629] netlink: 96 bytes leftover after parsing attributes in process `syz.1.735'. [ 374.099026][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 374.400912][ T5847] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 374.484838][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.740384][ T5847] usb 5-1: Product: syz [ 374.744703][ T5847] usb 5-1: Manufacturer: syz [ 374.749921][ T5847] usb 5-1: SerialNumber: syz [ 374.769810][ T5847] usb 5-1: config 0 descriptor?? [ 376.940745][ T5847] usb-storage 5-1:0.0: USB Mass Storage device detected [ 376.967257][ T8694] netlink: 44 bytes leftover after parsing attributes in process `syz.1.754'. [ 377.148293][ T5847] usb 5-1: USB disconnect, device number 8 [ 377.367574][ T8716] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 378.428751][ T8717] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 378.448984][ T8717] syz.4.760: attempt to access beyond end of device [ 378.448984][ T8717] loop4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 378.771037][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.552900][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 380.561872][ T8743] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 380.569178][ T8743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.435077][ T8746] affs: No valid root block on device nullb0 [ 382.832528][ T8766] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 382.843911][ T8766] syz.3.773: attempt to access beyond end of device [ 382.843911][ T8766] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 383.326514][ T8772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.774'. [ 384.677896][ T8774] overlayfs: missing 'lowerdir' [ 386.413693][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'. [ 387.061811][ T8812] loop0: detected capacity change from 0 to 2048 [ 387.603577][ T8812] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 389.252621][ T8834] overlayfs: missing 'lowerdir' [ 391.439801][ T8844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 391.734607][ T8853] affs: No valid root block on device nullb0 [ 392.188451][ T8864] loop0: detected capacity change from 0 to 2048 [ 392.661406][ T8864] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 396.740145][ T8895] trusted_key: encrypted_key: hex blob is missing [ 396.780479][ T8895] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8895] [ 398.060228][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 398.444864][ T8914] loop4: detected capacity change from 0 to 2048 [ 398.907459][ T8914] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 400.320274][ T8936] trusted_key: encrypted_key: hex blob is missing [ 400.768180][ T8933] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8933] [ 402.970587][ T8963] loop2: detected capacity change from 0 to 2048 [ 403.359058][ T8963] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 406.569098][ T8997] loop4: detected capacity change from 0 to 2048 [ 406.832775][ T8997] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 407.469406][ T9010] Cannot find del_set index 0 as target [ 412.467410][ T9066] Cannot find del_set index 0 as target [ 415.908792][ T5922] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 416.498880][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 416.515491][ T5922] usb 5-1: config 2 has an invalid interface number: 176 but max is 0 [ 416.531658][ T5922] usb 5-1: config 2 has no interface number 0 [ 416.540182][ T5922] usb 5-1: config 2 interface 176 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 416.553552][ T5922] usb 5-1: config 2 interface 176 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 416.565548][ T5922] usb 5-1: config 2 interface 176 has no altsetting 0 [ 416.584938][ T5922] usb 5-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=48.6b [ 416.668876][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.676897][ T5922] usb 5-1: Product: syz [ 416.681566][ T5922] usb 5-1: Manufacturer: syz [ 416.686174][ T5922] usb 5-1: SerialNumber: syz [ 418.006915][ T5922] usb 5-1: USB disconnect, device number 9 [ 419.401806][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.879'. [ 421.747665][ T9149] netlink: 'syz.3.891': attribute type 11 has an invalid length. [ 421.789908][ T9149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.891'. [ 425.272673][ T9185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 425.315589][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 427.601363][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 427.611833][ T9221] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 427.619481][ T9221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.157141][ T9223] loop6: detected capacity change from 0 to 7 [ 428.164587][ T9223] Dev loop6: unable to read RDB block 7 [ 428.187778][ T9223] loop6: unable to read partition table [ 428.198066][ T9223] loop6: partition table beyond EOD, truncated [ 428.213704][ T9223] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 428.891922][ T9233] omfs: Invalid superblock (0) [ 432.577661][ T9263] trusted_key: encrypted_key: insufficient parameters specified [ 432.825996][ T9263] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[9263] [ 434.636425][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 434.718272][ T9286] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 434.744543][ T9299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'. [ 434.767877][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.716402][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.929'. [ 435.744494][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 437.173473][ T9316] overlayfs: missing 'lowerdir' [ 440.025646][ T9354] omfs: Invalid superblock (0) [ 440.134865][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.014851][ T9370] Cannot find del_set index 0 as target [ 446.691104][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.955'. [ 448.222885][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 448.259944][ T9429] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 448.267872][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.989186][ T9444] overlayfs: missing 'lowerdir' [ 452.656293][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 454.366177][ T9490] Cannot find del_set index 0 as target [ 456.623925][ T9513] omfs: Invalid superblock (0) [ 457.166624][ T9519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'. [ 457.181236][ T9520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 457.261597][ T9520] fuse: Bad value for 'rootmode' [ 459.758396][ T9544] CIFS mount error: No usable UNC path provided in device string! [ 459.758396][ T9544] [ 459.769330][ T9544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 463.076745][ T9569] fuse: Bad value for 'rootmode' [ 463.739287][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 463.978907][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 464.101060][ T10] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 465.174620][ T10] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.184867][ T10] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.199308][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 465.205939][ T10] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 465.215293][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.404858][ T10] usb 5-1: config 0 descriptor?? [ 465.801642][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 465.809430][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 466.782482][ T10] usb 5-1: USB disconnect, device number 10 [ 469.669542][ T9656] fuse: Bad value for 'rootmode' [ 469.936619][ T9658] affs: No valid root block on device nullb0 [ 478.006193][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 478.198391][ T9724] fuse: Bad value for 'rootmode' [ 478.528921][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 478.554441][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 478.572009][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 478.585458][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.614619][ T10] usb 1-1: Product: syz [ 478.645590][ T10] usb 1-1: Manufacturer: syz [ 478.652714][ T10] usb 1-1: SerialNumber: syz [ 478.771970][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1037'. [ 478.820045][ T10] usb 1-1: config 0 descriptor?? [ 478.883900][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 479.896755][ T10] usb 1-1: Detected FT232R [ 479.907588][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 482.135660][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 482.191483][ T10] usb 1-1: USB disconnect, device number 9 [ 482.209762][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 482.243795][ T10] ftdi_sio 1-1:0.0: device disconnected [ 483.296960][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 483.488073][ T9770] fuse: Bad value for 'rootmode' [ 483.533585][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 483.741679][ T9] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 483.919277][ T9] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.937442][ T9] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.954195][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.961044][ T9] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 483.974111][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.985809][ T9] usb 5-1: config 0 descriptor?? [ 487.388354][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 487.436088][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 487.526220][ T9] usb 5-1: USB disconnect, device number 11 [ 487.554739][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1052'. [ 487.678933][ T9795] omfs: Invalid superblock (0) [ 489.596806][ T9817] CIFS mount error: No usable UNC path provided in device string! [ 489.596806][ T9817] [ 489.607046][ T9817] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 489.678897][ T9028] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 490.080966][ T9813] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.328743][ T9028] usb 1-1: Using ep0 maxpacket: 16 [ 490.336396][ T9028] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 490.388766][ T9028] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.402849][ T9028] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.437912][ T9028] usb 1-1: config 0 interface 0 has no altsetting 0 [ 490.487251][ T9028] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 490.498067][ T9028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.530729][ T9028] usb 1-1: config 0 descriptor?? [ 491.753895][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1066'. [ 494.539671][ T9028] usbhid 1-1:0.0: can't add hid device: -71 [ 494.545778][ T9028] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 494.621585][ T9028] usb 1-1: USB disconnect, device number 10 [ 497.399732][ T9852] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1075'. [ 499.149419][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1080'. [ 501.657717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.257647][ T9904] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.835730][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 504.356442][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 504.966543][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.981389][ T9] usb 1-1: Product: syz [ 504.993793][ T9] usb 1-1: Manufacturer: syz [ 504.998854][ T9] usb 1-1: SerialNumber: syz [ 505.009566][ T9] usb 1-1: config 0 descriptor?? [ 507.466324][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 508.379325][ T9] usb 1-1: USB disconnect, device number 11 [ 512.618513][ T9977] affs: No valid root block on device nullb0 [ 512.677207][ T9981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 520.769113][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 520.778779][T10048] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 520.786165][T10048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.580752][T10058] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 522.922489][T10062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'. [ 524.778928][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 527.339111][T10094] trusted_key: encrypted_key: keylen parameter is missing [ 528.064997][T10094] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[10094] [ 529.676346][ T5886] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 530.058771][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 530.078785][ T5886] usb 1-1: config 1 has no interface number 0 [ 530.084937][ T5886] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.173716][ T5886] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 530.193138][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 530.544993][ T5886] usb 1-1: New USB device found, idVendor=0525, idProduct=a5a1, bcdDevice= 0.40 [ 530.727621][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.780016][ T5886] usb 1-1: Product: syz [ 530.784289][ T5886] usb 1-1: Manufacturer: syz [ 530.791774][ T5886] usb 1-1: SerialNumber: syz [ 530.998463][T10125] loop6: detected capacity change from 0 to 7 [ 531.269728][ T77] Bluetooth: hci5: Frame reassembly failed (-84) [ 531.284793][T10125] Dev loop6: unable to read RDB block 7 [ 531.368998][T10125] loop6: unable to read partition table [ 531.375474][T10125] loop6: partition table beyond EOD, truncated [ 531.392494][T10125] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 532.124348][ T5886] cdc_ncm 1-1:1.1: bind() failure [ 532.143188][ T5886] usb 1-1: USB disconnect, device number 12 [ 532.472639][T10137] trusted_key: encrypted_key: keylen parameter is missing [ 532.632545][T10137] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[10137] [ 533.168787][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 533.315331][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 536.183396][T10165] omfs: Invalid superblock (0) [ 537.341215][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'. [ 537.350940][T10179] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 537.358299][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.207348][T10182] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 538.214051][T10182] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.289639][T10182] vhci_hcd vhci_hcd.0: Device attached [ 538.619889][ T5847] vhci_hcd: vhci_device speed not set [ 538.787521][ T5847] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 538.801004][ T5886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 538.904622][T10199] tmpfs: Unknown parameter '' [ 538.964183][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 539.413547][ T5886] usb 2-1: config 3 has an invalid interface number: 227 but max is 0 [ 539.473197][ T5886] usb 2-1: config 3 has no interface number 0 [ 539.566257][ T5886] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 539.647587][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.910779][ T5886] usb 2-1: Product: syz [ 540.107619][ T5886] usb 2-1: Manufacturer: syz [ 540.112506][ T5886] usb 2-1: SerialNumber: syz [ 540.171877][ T5886] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 540.241837][ T5886] cxusb: set interface failed [ 540.286093][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 540.507509][T10183] vhci_hcd: connection reset by peer [ 540.641698][ T6027] vhci_hcd: stop threads [ 540.728033][ T6027] vhci_hcd: release socket [ 540.790289][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.043433][ T6027] vhci_hcd: disconnect device [ 541.073665][ T5886] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 541.126347][ T5886] usb 2-1: media controller created [ 541.240251][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.040889][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 542.060903][T10229] Cannot find del_set index 0 as target [ 542.781665][ T5886] DVB: Unable to find symbol lgdt330x_attach() [ 542.902511][ T5886] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 542.928829][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 542.934604][ T5886] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 542.967489][ T5886] usb 2-1: USB disconnect, device number 4 [ 543.157946][ T5886] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 543.879091][ T5847] vhci_hcd: vhci_device speed not set [ 557.535945][T10362] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1218'. [ 558.770477][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 558.779747][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 558.805656][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 558.815449][T10375] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 558.822890][T10375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.168270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.171947][T10430] omfs: Invalid superblock (0) [ 565.874274][T10443] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1242'. [ 571.057232][T10512] ALSA: mixer_oss: invalid index 40000 [ 575.784782][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 576.815204][T10533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1268'. [ 576.920111][T10533] gfs2: gfs2 mount does not exist [ 579.587644][T10559] omfs: Invalid superblock (0) [ 582.573162][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1280'. [ 583.948755][ T9783] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 584.120268][ T9783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.168824][ T9783] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 584.190050][ T9783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.214300][ T9783] usb 2-1: config 0 descriptor?? [ 585.583994][ T9783] kye 0003:0458:0153.0002: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0 [ 586.472414][ T9783] usb 2-1: USB disconnect, device number 5 [ 586.493269][T10623] loop6: detected capacity change from 0 to 2560 [ 586.502217][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.549068][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.716005][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.188415][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.197936][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.208541][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.219482][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.229174][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.238093][T10623] ldm_validate_partition_table(): Disk read failed. [ 588.245288][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.619405][T10623] Buffer I/O error on dev loop6, logical block 0, async page read [ 588.627481][T10623] Dev loop6: unable to read RDB block 0 [ 588.633781][T10623] loop6: unable to read partition table [ 588.656104][T10623] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 588.818914][T10628] fido_id[10628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 594.474567][ T6029] Bluetooth: hci5: Frame reassembly failed (-84) [ 596.539120][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 599.911592][ T9599] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 600.345911][ T9599] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.426296][ T9599] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 601.008814][ T9599] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 601.030103][ T9599] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 601.048756][ T9599] usb 5-1: New USB device strings: Mfr=227, Product=0, SerialNumber=0 [ 601.068193][ T9599] usb 5-1: Manufacturer: syz [ 601.125643][T10746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.328946][ T9599] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.662662][T10775] CIFS mount error: No usable UNC path provided in device string! [ 603.662662][T10775] [ 603.672861][T10775] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 606.158922][ T5922] usb 5-1: USB disconnect, device number 12 [ 606.376290][T10785] SET target dimension over the limit! [ 606.513351][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 606.536817][T10060] Bluetooth: hci4: command 0x0405 tx timeout [ 607.202166][T10798] tmpfs: Bad value for 'mpol' [ 607.317499][ T153] Bluetooth: hci5: Frame reassembly failed (-84) [ 607.354406][ T153] Bluetooth: hci5: Frame reassembly failed (-84) [ 609.406203][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 609.415289][T10816] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 609.422577][T10816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.867914][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 613.994087][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'. [ 616.261389][T10875] fuse: Bad value for 'rootmode' [ 618.397714][T10892] netlink: 'syz.1.1373': attribute type 12 has an invalid length. [ 618.598774][T10896] 9pnet_fd: Insufficient options for proto=fd [ 621.958445][T10922] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[10922] [ 622.259956][T10924] fuse: Bad value for 'rootmode' [ 623.896514][T10942] 9pnet_fd: Insufficient options for proto=fd [ 624.454333][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.575389][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1392'. [ 625.681371][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 630.517985][T11004] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1406'. [ 630.709301][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 632.562169][ T9599] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 632.948860][ T9599] usb 1-1: Using ep0 maxpacket: 16 [ 632.975539][ T9599] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 632.989883][ T9599] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.019349][ T9599] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.035548][ T9599] usb 1-1: config 0 interface 0 has no altsetting 0 [ 633.045270][ T9599] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 633.171656][ T9599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.273821][ T9599] usb 1-1: config 0 descriptor?? [ 633.897740][ T9599] usbhid 1-1:0.0: can't add hid device: -71 [ 634.061871][ T9599] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 634.073795][ T9599] usb 1-1: USB disconnect, device number 13 [ 634.803015][T11053] SET target dimension over the limit! [ 634.803747][T11054] ALSA: mixer_oss: invalid index 40000 [ 635.561063][ T6027] Bluetooth: hci5: Frame reassembly failed (-84) [ 635.624113][ T6027] Bluetooth: hci5: Frame reassembly failed (-84) [ 637.578921][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 637.864728][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 638.049202][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.093231][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.133942][ T5906] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 638.323125][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.339829][ T5906] usb 4-1: config 0 descriptor?? [ 638.492693][T11094] omfs: Invalid superblock (0) [ 639.645869][T11101] infiniband syz!: set active [ 639.650752][T11101] infiniband syz!: added team_slave_0 [ 639.685876][ T5906] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 639.793875][T11099] loop6: detected capacity change from 0 to 7 [ 639.861202][ T5906] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input12 [ 639.919133][T11101] RDS/IB: syz!: added [ 639.923694][T11101] smc: adding ib device syz! with port count 1 [ 639.930092][T11101] smc: ib device syz! port 1 has pnetid [ 639.980215][T11099] Dev loop6: unable to read RDB block 7 [ 640.668542][T11099] loop6: unable to read partition table [ 640.677381][T11099] loop6: partition table beyond EOD, truncated [ 640.700697][T11099] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 640.946572][ T5906] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 644.265898][ T5906] usb 4-1: USB disconnect, device number 5 [ 645.888154][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 645.898536][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 648.436894][T11170] bridge0: entered promiscuous mode [ 648.458713][T11170] batman_adv: batadv0: Adding interface: macsec1 [ 648.465660][T11170] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.508063][T11170] batman_adv: batadv0: Interface activated: macsec1 [ 655.199745][T11207] affs: No valid root block on device nullb0 [ 660.463490][ T77] Bluetooth: hci5: Frame reassembly failed (-84) [ 661.529176][ T5922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 661.846092][T11281] Cannot find del_set index 0 as target [ 661.871200][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 661.880476][T11285] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 661.887721][T11285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.073919][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 662.346227][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.457123][ T5922] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 662.554630][T10060] Bluetooth: hci5: command 0xfc11 tx timeout [ 662.561195][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 662.569503][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.577636][ T5922] usb 4-1: Product: syz [ 662.658924][ T5922] usb 4-1: Manufacturer: syz [ 662.668041][ T5922] usb 4-1: SerialNumber: syz [ 662.714399][ T5922] usb 4-1: config 0 descriptor?? [ 662.748096][ T5922] cdc_ether 4-1:0.0: skipping garbage [ 662.755854][ T5922] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 662.774559][ T5922] usb 4-1: unsupported MDLM descriptors [ 662.968531][ T5922] usb 4-1: USB disconnect, device number 6 [ 668.559128][T11327] Cannot find del_set index 0 as target [ 669.290962][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 669.300053][T11329] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 669.307281][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.969786][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1510'. [ 672.208823][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 673.211064][T11376] Cannot find del_set index 0 as target [ 673.834429][T11367] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 677.427473][T11401] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 677.443687][T11401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 678.186801][T11418] Cannot find del_set index 0 as target [ 678.889736][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 678.919173][T11420] fuse: Bad value for 'rootmode' [ 679.060687][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.084050][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 679.126165][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 679.164297][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.196075][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.227266][T11417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.251759][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 679.851766][ T9] usb 1-1: USB disconnect, device number 14 [ 682.383164][T11441] Device name cannot be null; rc = [-22] [ 682.988733][T11466] Cannot find del_set index 0 as target [ 684.054121][T11470] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 685.958658][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.952859][ T30] audit: type=1326 audit(1751482010.476:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.034693][T11503] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1555'. [ 687.045642][ T30] audit: type=1326 audit(1751482010.476:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.183649][ T30] audit: type=1326 audit(1751482010.496:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.205918][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.234554][ T30] audit: type=1326 audit(1751482010.506:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.256732][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.323011][ T30] audit: type=1326 audit(1751482010.506:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.356871][ T30] audit: type=1326 audit(1751482010.506:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 687.458865][ T30] audit: type=1326 audit(1751482010.506:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 688.022035][ T30] audit: type=1326 audit(1751482010.506:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 688.045099][ T30] audit: type=1326 audit(1751482010.506:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 688.098895][ T30] audit: type=1326 audit(1751482010.506:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 689.059866][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 689.636540][T11529] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 689.660687][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 693.418206][T11574] CIFS mount error: No usable UNC path provided in device string! [ 693.418206][T11574] [ 693.428664][T11574] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 695.074904][T11592] omfs: Invalid superblock (0) [ 696.091865][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 696.101031][T11600] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 696.109253][T11600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.729609][T11621] CIFS mount error: No usable UNC path provided in device string! [ 697.729609][T11621] [ 697.739773][T11621] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 699.851332][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 699.851349][ T30] audit: type=1326 audit(1751482023.376:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 699.994350][T11631] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1591'. [ 700.028723][ T30] audit: type=1326 audit(1751482023.376:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 700.422860][ T30] audit: type=1326 audit(1751482023.436:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 700.793377][ T30] audit: type=1326 audit(1751482023.436:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 700.996035][ T30] audit: type=1326 audit(1751482023.436:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 701.675825][ T30] audit: type=1326 audit(1751482023.436:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 701.698454][ T30] audit: type=1326 audit(1751482023.436:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 701.737667][ T30] audit: type=1326 audit(1751482023.436:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 702.306854][ T30] audit: type=1326 audit(1751482023.436:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 702.345162][ T30] audit: type=1326 audit(1751482023.436:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 704.706019][T11701] omfs: Invalid superblock (0) [ 707.253268][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 707.253285][ T30] audit: type=1326 audit(1751482030.776:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.317059][ T30] audit: type=1326 audit(1751482030.806:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.339424][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.398413][ T30] audit: type=1326 audit(1751482030.806:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.426537][ T30] audit: type=1326 audit(1751482030.806:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.449496][ T30] audit: type=1326 audit(1751482030.806:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.473336][ T30] audit: type=1326 audit(1751482030.806:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.496192][ T30] audit: type=1326 audit(1751482030.806:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.589613][ T30] audit: type=1326 audit(1751482030.806:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 707.619737][ T30] audit: type=1326 audit(1751482030.816:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 708.214550][ T30] audit: type=1326 audit(1751482030.816:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955b58e929 code=0x7ffc0000 [ 708.254915][T11741] fuse: Bad value for 'rootmode' [ 710.436615][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 712.266390][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 712.267029][ T30] audit: type=1326 audit(1751482035.766:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 712.920190][T11781] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1632'. [ 712.938742][ T30] audit: type=1326 audit(1751482035.766:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.045575][ T30] audit: type=1326 audit(1751482035.766:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.200411][ T30] audit: type=1326 audit(1751482035.786:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.224382][ T30] audit: type=1326 audit(1751482035.786:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.247525][ T30] audit: type=1326 audit(1751482036.446:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.851794][ T30] audit: type=1326 audit(1751482036.446:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 713.880544][ T30] audit: type=1326 audit(1751482036.446:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 714.012672][ T30] audit: type=1326 audit(1751482036.446:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 714.037916][ T30] audit: type=1326 audit(1751482036.446:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.0.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 717.543302][T11827] Device name not specified. [ 717.543302][T11827] [ 717.886703][ T6046] Bluetooth: hci5: Frame reassembly failed (-84) [ 718.427757][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 718.427773][ T30] audit: type=1326 audit(1751482041.946:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.474279][T11834] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1646'. [ 718.518295][ T30] audit: type=1326 audit(1751482041.966:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.668863][ T30] audit: type=1326 audit(1751482041.966:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.692317][ T30] audit: type=1326 audit(1751482041.966:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.715316][ T30] audit: type=1326 audit(1751482041.966:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.773339][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 718.782398][T11837] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 718.789680][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.873575][ T30] audit: type=1326 audit(1751482041.966:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 718.899427][ T30] audit: type=1326 audit(1751482041.986:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 719.498798][ T30] audit: type=1326 audit(1751482041.986:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 719.521531][ T30] audit: type=1326 audit(1751482041.996:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 719.544215][ T30] audit: type=1326 audit(1751482041.996:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11831 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 719.889078][T10060] Bluetooth: hci5: command 0xfc11 tx timeout [ 719.896515][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 721.863568][T11870] [U] v3f"S/4:XTzWtlW= [ 721.870820][T11870] [U] J"e:" [ 722.035268][T11865] fuse: Bad value for 'rootmode' [ 728.158762][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 728.158784][ T30] audit: type=1326 audit(1751482051.656:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 728.185027][T11920] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1672'. [ 728.699872][ T30] audit: type=1326 audit(1751482051.656:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 728.766511][ T30] audit: type=1326 audit(1751482051.706:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 728.861460][ T30] audit: type=1326 audit(1751482051.706:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 728.883801][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.022654][ T30] audit: type=1326 audit(1751482051.706:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 729.128711][ T30] audit: type=1326 audit(1751482051.706:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 729.151062][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.208843][ T30] audit: type=1326 audit(1751482051.706:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 729.255493][ T30] audit: type=1326 audit(1751482051.706:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 729.288579][ T30] audit: type=1326 audit(1751482051.706:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 729.967224][ T30] audit: type=1326 audit(1751482051.706:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 732.930017][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 734.649912][T11977] fuse: Bad value for 'rootmode' [ 736.717405][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1682'. [ 741.427185][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 743.076916][T10060] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 745.135677][ T2985] Bluetooth: hci5: Frame reassembly failed (-84) [ 745.479816][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 746.798851][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 746.807319][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 748.050581][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.010976][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 751.679381][T12100] loop9: detected capacity change from 0 to 7 [ 751.687333][T12100] buffer_io_error: 11 callbacks suppressed [ 751.687349][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.701392][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.710311][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.718424][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.727279][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.735977][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.744400][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.752721][T12100] ldm_validate_partition_table(): Disk read failed. [ 751.759717][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.768135][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.797568][T12100] Buffer I/O error on dev loop9, logical block 0, async page read [ 751.806312][T12100] Dev loop9: unable to read RDB block 0 [ 751.814579][T12100] loop9: unable to read partition table [ 751.821231][T12100] loop9: partition table beyond EOD, truncated [ 751.827545][T12100] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 751.827545][T12100] ) failed (rc=-5) [ 755.585763][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 755.594114][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 759.728429][T12163] omfs: Invalid superblock (0) [ 768.080033][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 768.452157][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.472800][ T5922] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 768.508266][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.536817][ T5922] usb 2-1: config 0 descriptor?? [ 769.694540][ T5922] ath6kl: Unsupported hardware version: 0x0 [ 769.954866][ T5922] ath6kl: Failed to init ath6kl core: -22 [ 770.066847][ T5922] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 770.778695][ T9783] usb 2-1: USB disconnect, device number 6 [ 772.129751][T12270] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1769'. [ 772.651714][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 772.664893][ T30] audit: type=1326 audit(1751482095.646:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 772.690034][ T30] audit: type=1326 audit(1751482095.646:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 772.828849][ T30] audit: type=1326 audit(1751482095.646:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 773.259981][ T30] audit: type=1326 audit(1751482095.646:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 773.282334][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.301422][ T30] audit: type=1326 audit(1751482095.646:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 773.485213][ T30] audit: type=1326 audit(1751482095.646:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 774.328131][ T30] audit: type=1326 audit(1751482095.646:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 774.385491][ T30] audit: type=1326 audit(1751482095.646:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 774.487565][ T30] audit: type=1326 audit(1751482095.646:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 774.623536][ T30] audit: type=1326 audit(1751482095.646:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x7ffc0000 [ 778.600603][T12316] Device name not specified. [ 778.600603][T12316] [ 779.061932][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1783'. [ 780.321698][T12334] fuse: Bad value for 'rootmode' [ 783.356620][T12352] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1792'. [ 784.081852][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1796'. [ 786.073463][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 786.787668][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.803102][ T5886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 786.812705][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.977983][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 787.138848][ T5886] usb 2-1: config 0 descriptor?? [ 787.429795][T12396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1806'. [ 788.322348][ T5886] ath6kl: Unsupported hardware version: 0x0 [ 788.336897][ T5886] ath6kl: Failed to init ath6kl core: -22 [ 788.349112][ T5983] kworker/0:7 (5983) used greatest stack depth: 19784 bytes left [ 788.349441][ T5886] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 789.757597][ T5922] usb 2-1: USB disconnect, device number 7 [ 792.159710][T12443] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1820'. [ 792.637393][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 792.637412][ T30] audit: type=1326 audit(1751482115.676:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 792.901708][ T30] audit: type=1326 audit(1751482115.676:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 792.924929][ T30] audit: type=1326 audit(1751482115.676:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 792.948031][ T30] audit: type=1326 audit(1751482115.676:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 792.970600][ T30] audit: type=1326 audit(1751482115.676:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.030040][ T30] audit: type=1326 audit(1751482115.676:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.059842][ T30] audit: type=1326 audit(1751482115.676:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.106305][ T30] audit: type=1326 audit(1751482115.686:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.129154][ T30] audit: type=1326 audit(1751482115.686:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.151716][ T30] audit: type=1326 audit(1751482115.686:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42dfb8e929 code=0x7ffc0000 [ 793.173958][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.970248][T12461] syz.1.1823: attempt to access beyond end of device [ 794.970248][T12461] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 794.984567][T12461] (syz.1.1823,12461,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 794.992484][T12461] (syz.1.1823,12461,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 795.000037][T12461] (syz.1.1823,12461,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 795.009118][T12461] (syz.1.1823,12461,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 795.517641][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 795.527333][T12470] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 795.535686][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.609678][T12490] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1832'. [ 797.639809][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 797.639827][ T30] audit: type=1326 audit(1751482121.156:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 797.822800][ T30] audit: type=1326 audit(1751482121.156:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12487 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 799.328854][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 799.338580][T12514] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 799.346088][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.868754][ T9028] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 805.018791][ T9028] usb 1-1: Using ep0 maxpacket: 16 [ 805.151815][ T9028] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 805.220154][ T9028] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.359714][ T9028] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.724163][ T9028] usb 1-1: config 0 interface 0 has no altsetting 0 [ 805.741869][ T9028] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 805.762773][ T9028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.820432][ T9028] usb 1-1: config 0 descriptor?? [ 806.156891][ T9028] usbhid 1-1:0.0: can't add hid device: -71 [ 806.164513][ T9028] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 806.931775][ T9028] usb 1-1: USB disconnect, device number 15 [ 808.776019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.069821][T12590] fuse: Bad value for 'rootmode' [ 814.233557][ T9599] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 815.008825][ T9599] usb 3-1: Using ep0 maxpacket: 16 [ 815.068384][ T9599] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 815.109043][ T9599] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.156103][ T9599] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.312893][ T9599] usb 3-1: config 0 interface 0 has no altsetting 0 [ 815.320497][ T9599] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 815.333309][ T9599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.362454][ T9599] usb 3-1: config 0 descriptor?? [ 815.410470][T12646] fuse: Bad value for 'rootmode' [ 815.794044][ T9599] usbhid 3-1:0.0: can't add hid device: -71 [ 815.818828][ T9599] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 816.205117][ T9599] usb 3-1: USB disconnect, device number 8 [ 817.687221][T12676] CIFS mount error: No usable UNC path provided in device string! [ 817.687221][T12676] [ 817.697397][T12676] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 819.164124][T12689] overlayfs: missing 'lowerdir' [ 819.579690][T12695] fuse: Bad value for 'rootmode' [ 821.528817][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 821.725569][T12725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1892'. [ 821.820333][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 821.884881][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 822.195133][ T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.325031][ T9] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.495988][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 822.581229][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 822.667450][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.706013][ T9] usb 2-1: config 0 descriptor?? [ 822.951564][T12732] fuse: Bad value for 'rootmode' [ 822.980144][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 822.986175][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 823.013149][ T9] usb 2-1: USB disconnect, device number 8 [ 823.566019][T12747] loop9: detected capacity change from 0 to 7 [ 823.577864][T12747] buffer_io_error: 4 callbacks suppressed [ 823.577887][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.597420][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.606476][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.615748][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.626273][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.635379][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.648351][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.687394][T12747] ldm_validate_partition_table(): Disk read failed. [ 823.698583][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.707399][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.717816][T12747] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.727146][T12747] Dev loop9: unable to read RDB block 0 [ 823.734868][T12747] loop9: unable to read partition table [ 823.741745][T12747] loop9: partition table beyond EOD, truncated [ 823.748403][T12747] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 823.748403][T12747] ) failed (rc=-5) [ 827.666826][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 828.229543][T12797] loop9: detected capacity change from 0 to 7 [ 828.238282][T12797] ldm_validate_partition_table(): Disk read failed. [ 828.245719][T12797] Dev loop9: unable to read RDB block 0 [ 828.251985][T12797] loop9: unable to read partition table [ 828.258091][T12797] loop9: partition table beyond EOD, truncated [ 828.264367][T12797] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 828.264367][T12797] ) failed (rc=-5) [ 828.870648][ T5834] buffer_io_error: 23 callbacks suppressed [ 828.870666][ T5834] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.915459][T12795] fuse: Bad value for 'rootmode' [ 828.933081][ T5834] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.954806][ T5834] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.968868][ T5834] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.977588][ T5834] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.989416][ T30] audit: type=1326 audit(1751482152.516:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.002278][T12801] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1913'. [ 829.037250][ T30] audit: type=1326 audit(1751482152.516:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.131897][ T30] audit: type=1326 audit(1751482152.516:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.185757][ T30] audit: type=1326 audit(1751482152.516:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.232663][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 829.273302][ T30] audit: type=1326 audit(1751482152.516:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.408822][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 829.416012][ T30] audit: type=1326 audit(1751482152.516:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.430512][ T9] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 829.440764][ T30] audit: type=1326 audit(1751482152.516:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.476157][ T30] audit: type=1326 audit(1751482152.516:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.513855][ T9] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.518731][ T30] audit: type=1326 audit(1751482152.516:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 829.735763][ T9] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.754090][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 829.845365][ T30] audit: type=1326 audit(1751482152.516:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12800 comm="syz.1.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f42c398e929 code=0x7ffc0000 [ 830.285300][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 830.295078][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.314946][ T9] usb 3-1: config 0 descriptor?? [ 830.754426][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 830.767535][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 830.787049][ T9] usb 3-1: USB disconnect, device number 9 [ 831.665042][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 832.610508][T12840] fuse: Bad value for 'rootmode' [ 832.803277][T12846] CIFS: Unable to determine destination address [ 833.421165][T12851] loop9: detected capacity change from 0 to 7 [ 833.441975][T12851] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.450712][T12851] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.459533][T12851] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.469129][T12851] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.478144][T12851] Buffer I/O error on dev loop9, logical block 0, async page read [ 833.518743][T12851] ldm_validate_partition_table(): Disk read failed. [ 833.531113][T12851] Dev loop9: unable to read RDB block 0 [ 833.538462][T12851] loop9: unable to read partition table [ 833.545731][T12851] loop9: partition table beyond EOD, truncated [ 833.552177][T12851] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 833.552177][T12851] ) failed (rc=-5) [ 834.302514][T12857] [U] v3f"S/4:XTzWtlW= [ 835.321100][T12857] [U] J"e:" [ 837.875027][T12895] fuse: Bad value for 'rootmode' [ 840.085446][T12924] [U] v3f"S/4:XTzWtlW= [ 840.140018][T12924] [U] J"e:" [ 840.303129][T12929] omfs: Invalid superblock (0) [ 840.624400][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 841.192946][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.204761][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 841.218926][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.247966][ T9] usb 1-1: config 0 descriptor?? [ 841.681677][ T9] ath6kl: Unsupported hardware version: 0x0 [ 841.731159][ T9] ath6kl: Failed to init ath6kl core: -22 [ 841.904046][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 841.965994][T12944] fuse: Bad value for 'rootmode' [ 842.487467][ T2985] Bluetooth: hci5: Frame reassembly failed (-84) [ 843.327056][ T9599] usb 1-1: USB disconnect, device number 16 [ 844.650584][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 846.408279][T12975] input: syz1 as /devices/virtual/input/input13 [ 847.196100][T12983] team_slave_0: entered promiscuous mode [ 847.201999][T12983] team_slave_1: entered promiscuous mode [ 847.247845][T12983] macsec2: entered promiscuous mode [ 847.256661][T12983] team0: entered promiscuous mode [ 847.414698][T12983] team0: left promiscuous mode [ 847.421646][T12983] team_slave_0: left promiscuous mode [ 847.427154][T12983] team_slave_1: left promiscuous mode [ 847.479297][T12987] fuse: Bad value for 'rootmode' [ 848.068751][ T9028] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 849.221865][ T9028] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.235117][ T9028] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 849.452782][ T9028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.485463][ T9028] usb 2-1: config 0 descriptor?? [ 850.464949][ T9028] ath6kl: Unsupported hardware version: 0x0 [ 850.489604][ T9028] ath6kl: Failed to init ath6kl core: -22 [ 850.495871][ T9028] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 850.529484][T12864] Bluetooth: hci5: command 0xfc11 tx timeout [ 850.536163][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 851.468717][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 851.468735][ T30] audit: type=1326 audit(1751482174.966:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 851.624966][T13031] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1979'. [ 851.674915][ T30] audit: type=1326 audit(1751482174.966:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 851.697267][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.718784][ T30] audit: type=1326 audit(1751482174.986:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 851.788822][ T30] audit: type=1326 audit(1751482174.986:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 851.809161][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 851.811229][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.021823][T13039] fuse: Bad value for 'rootmode' [ 852.043464][ T30] audit: type=1326 audit(1751482174.986:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 852.106849][ T30] audit: type=1326 audit(1751482175.006:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 852.138980][ T30] audit: type=1326 audit(1751482175.006:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 852.178991][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 852.191979][ T9028] usb 2-1: USB disconnect, device number 9 [ 852.555596][ T30] audit: type=1326 audit(1751482175.006:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 852.579699][ T30] audit: type=1326 audit(1751482175.146:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 852.813216][ T30] audit: type=1326 audit(1751482175.146:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040178e929 code=0x7ffc0000 [ 856.104663][T13078] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1993'. [ 856.426584][T13085] sp0: Synchronizing with TNC [ 856.645322][T13093] fuse: Bad value for 'rootmode' [ 856.719125][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 857.284721][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.298468][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 857.307807][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.677276][T13107] CIFS mount error: No usable UNC path provided in device string! [ 857.677276][T13107] [ 857.687497][T13107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 858.006848][ T9] usb 3-1: config 0 descriptor?? [ 858.643791][ T9] ath6kl: Failed to read usb control message: -32 [ 859.167310][ T9] ath6kl: Unable to read the bmi data from the device: -32 [ 859.198995][ T9] ath6kl: Unable to recv target info: -32 [ 859.235808][ T9] ath6kl: Failed to init ath6kl core: -32 [ 859.252219][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 859.947932][T13123] overlayfs: missing 'lowerdir' [ 860.145788][T13126] loop2: detected capacity change from 0 to 6 [ 860.202071][ T9783] usb 3-1: USB disconnect, device number 10 [ 860.222713][T13126] loop2: [POWERTEC] p1 p2 p3 p4 [ 860.227909][T13126] loop2: p1 start 262143 is beyond EOD, truncated [ 860.345195][T13126] loop2: p2 start 16 is beyond EOD, truncated [ 860.394514][T13126] loop2: p3 size 8 extends beyond EOD, truncated [ 860.449751][T13126] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 860.588840][ T6534] udevd[6534]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 860.599324][ T5834] udevd[5834]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 861.637274][T13149] overlay: Unknown parameter '/' [ 862.997289][T13163] CIFS mount error: No usable UNC path provided in device string! [ 862.997289][T13163] [ 863.007512][T13163] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 864.965137][T13184] syz.3.2023: attempt to access beyond end of device [ 864.965137][T13184] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 864.978748][T13184] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 865.178855][ T5886] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 866.000316][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.140934][ T5886] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 866.150582][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.271530][ T5886] usb 1-1: config 0 descriptor?? [ 867.368862][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 867.368882][ T30] audit: type=1326 audit(1751482189.956:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz.4.2029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c8498e929 code=0x0 [ 867.429051][ T5886] ath6kl: Failed to submit usb control message: -110 [ 867.435818][ T5886] ath6kl: unable to send the bmi data to the device: -110 [ 867.507042][ T5886] ath6kl: Unable to send get target info: -110 [ 867.637299][ T5886] ath6kl: Failed to init ath6kl core: -110 [ 867.704054][ T5886] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 868.055993][T13216] CIFS mount error: No usable UNC path provided in device string! [ 868.055993][T13216] [ 868.066488][T13216] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 870.313160][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.499797][ T5847] usb 1-1: USB disconnect, device number 17 [ 871.385226][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 871.797333][T13245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2040'. [ 874.642651][T13245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.149495][T13245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.170343][T13245] bond0 (unregistering): Released all slaves [ 875.188716][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 875.333279][ T10] kworker/0:1 (10) used greatest stack depth: 18080 bytes left [ 875.451838][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.489053][ T5847] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 875.498135][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.542858][ T5847] usb 3-1: config 0 descriptor?? [ 876.039426][ T5847] ath6kl: Failed to read usb control message: -32 [ 876.062910][ T5847] ath6kl: Unable to read the bmi data from the device: -32 [ 876.074126][ T5847] ath6kl: Unable to recv target info: -32 [ 876.084260][ T5847] ath6kl: Failed to init ath6kl core: -32 [ 876.099516][ T5847] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 876.697957][ T5886] usb 3-1: USB disconnect, device number 11 [ 877.105082][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 878.409244][T13321] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2063'. [ 878.819093][T13334] [U] v3f"S/4:XTzWtlW= [ 878.825228][T13334] [U] J"e:" [ 879.469292][T13321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.537475][T13321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.567631][T13321] bond0 (unregistering): Released all slaves [ 881.424047][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 881.440257][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 882.583350][T13365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.655807][T13365] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 883.499036][T13374] [U] v3f"S/4:XTzWtlW= [ 883.504990][T13374] [U] J"e:" [ 885.140076][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 886.923205][T13410] binder: 13409:13410 ioctl c0306201 0 returned -14 [ 888.855468][ T9783] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 890.298808][ T9783] usb 1-1: Using ep0 maxpacket: 16 [ 890.306141][ T9783] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 890.325127][ T9783] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.346436][ T9783] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.395340][ T9783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.404318][ T9783] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 890.413845][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.426954][ T9783] usb 1-1: config 0 descriptor?? [ 890.661149][ T9783] usbhid 1-1:0.0: can't add hid device: -71 [ 890.669961][ T9783] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 890.719908][ T9783] usb 1-1: USB disconnect, device number 18 [ 891.133611][T13446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2100'. [ 891.872831][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 891.882713][T13455] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 891.891279][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.081719][T13446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.327432][T13446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.351782][T13446] bond0 (unregistering): Released all slaves [ 892.798067][T13463] syz.2.2097: attempt to access beyond end of device [ 892.798067][T13463] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 892.814204][T13463] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 893.963322][T13480] Device name cannot be null; rc = [-22] [ 898.080086][ T9783] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 898.144881][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 898.552657][ T9783] usb 4-1: Using ep0 maxpacket: 16 [ 898.574379][ T9783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.728793][ T9783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 898.746523][ T9783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 898.760245][ T9783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.335217][ T5922] usb 3-1: device not accepting address 12, error -71 [ 899.343054][ T9783] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 899.366653][ T9783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.393732][ T9783] usb 4-1: Product: syz [ 899.403425][ T9783] usb 4-1: Manufacturer: syz [ 899.415498][ T9783] usb 4-1: SerialNumber: syz [ 899.559257][ T9783] usb 4-1: config 0 descriptor?? [ 899.998769][ T9783] rc_core: IR keymap rc-xbox-dvd not found [ 900.004766][ T9783] Registered IR keymap rc-empty [ 900.012131][ T9783] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 900.031640][ T9783] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 900.708272][T13524] tty tty2: ldisc open failed (-12), clearing slot 1 [ 904.308382][T13502] usb 4-1: USB disconnect, device number 7 [ 904.308444][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 912.880784][T13605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.538822][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2138'. [ 914.558219][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 915.981224][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 916.201807][T13653] Device name not specified. [ 916.201807][T13653] [ 916.498533][T13661] i2c i2c-0: Invalid block write size 34 [ 918.754890][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2158'. [ 918.903866][T13682] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2161'. [ 919.661652][ T2985] Bluetooth: hci5: Frame reassembly failed (-84) [ 920.549995][T13694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2165'. [ 920.702287][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 921.335183][T10060] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 922.093970][T13718] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2174'. [ 922.930608][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 923.579984][T13735] loop9: detected capacity change from 0 to 7 [ 923.587526][T13735] buffer_io_error: 9 callbacks suppressed [ 923.587581][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.601541][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.609747][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.617813][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.626040][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.635718][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.644100][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.652357][T13735] ldm_validate_partition_table(): Disk read failed. [ 923.659362][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.667741][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.676203][T13735] Buffer I/O error on dev loop9, logical block 0, async page read [ 923.707218][T13735] Dev loop9: unable to read RDB block 0 [ 923.714531][T13735] loop9: unable to read partition table [ 923.721162][T13735] loop9: partition table beyond EOD, truncated [ 923.727484][T13735] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 923.727484][T13735] ) failed (rc=-5) [ 925.247998][T13728] team0 (unregistering): Port device team_slave_0 removed [ 925.305435][T13728] team0 (unregistering): Port device team_slave_1 removed [ 925.400024][ T9028] syz!: Port: 1 Link DOWN [ 925.697155][T13758] CIFS mount error: No usable UNC path provided in device string! [ 925.697155][T13758] [ 925.920985][T13758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 926.351657][T13766] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2188'. [ 928.148422][T13786] loop9: detected capacity change from 0 to 7 [ 928.157581][T13786] ldm_validate_partition_table(): Disk read failed. [ 928.165198][T13786] Dev loop9: unable to read RDB block 0 [ 928.171528][T13786] loop9: unable to read partition table [ 928.177703][T13786] loop9: partition table beyond EOD, truncated [ 928.184010][T13786] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 928.184010][T13786] ) failed (rc=-5) [ 929.039629][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 931.661070][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.122460][T13815] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2200'. [ 933.655281][T13829] loop9: detected capacity change from 0 to 7 [ 933.662909][T13829] buffer_io_error: 23 callbacks suppressed [ 933.662925][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.677641][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.686287][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.694385][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.702578][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.711039][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.719396][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.727579][T13829] ldm_validate_partition_table(): Disk read failed. [ 933.734838][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.743438][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.772992][T13829] Buffer I/O error on dev loop9, logical block 0, async page read [ 933.781642][T13829] Dev loop9: unable to read RDB block 0 [ 933.788565][T13829] loop9: unable to read partition table [ 933.795229][T13829] loop9: partition table beyond EOD, truncated [ 933.801584][T13829] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 933.801584][T13829] ) failed (rc=-5) [ 935.618259][T13855] CIFS mount error: No usable UNC path provided in device string! [ 935.618259][T13855] [ 935.628491][T13855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 940.299887][T13887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.970567][ T5942] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 943.279763][ T5942] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 943.781433][ T5942] usb 4-1: config 0 has no interface number 0 [ 943.795129][ T5942] usb 4-1: config 0 interface 170 has no altsetting 0 [ 943.809852][ T5942] usb 4-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 943.900247][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.956728][ T5942] usb 4-1: config 0 descriptor?? [ 943.997022][ T5942] usb 4-1: can't set config #0, error -71 [ 944.068952][ T5942] usb 4-1: USB disconnect, device number 8 [ 944.636204][T13931] CIFS: Unable to determine destination address [ 944.715862][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 944.725260][T13929] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 944.735171][T13929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.467986][T13942] fuse: Bad value for 'rootmode' [ 946.158869][ T9599] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 946.429093][ T9599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.655946][ T9599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.682416][ T9599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.965498][ T9599] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.983596][ T9599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.002247][ T9599] usb 1-1: config 0 descriptor?? [ 947.388313][T13966] binder: 13965:13966 ioctl c0306201 0 returned -14 [ 948.435900][ T9599] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xe [ 949.109203][ T9599] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 949.154937][ T9599] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 949.221856][ T9599] usb 1-1: USB disconnect, device number 19 [ 950.048538][T13985] CIFS: Unable to determine destination address [ 950.424949][T13980] fido_id[13980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 950.641350][T13991] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2251'. [ 950.851481][T13995] fuse: Bad value for 'rootmode' [ 951.082922][T14000] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2254'. [ 954.844495][T14028] CIFS: Unable to determine destination address [ 955.202266][ T1109] Bluetooth: hci5: Frame reassembly failed (-84) [ 955.232965][T14000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.265081][T14000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.286672][T14000] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 955.304629][T14000] bond0 (unregistering): Released all slaves [ 955.808824][T13955] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 956.312813][T13955] usb 4-1: Using ep0 maxpacket: 8 [ 956.320457][T13955] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 956.327915][T13955] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 956.350413][T13955] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.365659][T13955] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 956.377729][T13955] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 956.389037][ C0] ================================================================== [ 956.389054][ C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 956.389085][ C0] Write of size 8 at addr ffff8880289a7580 by task kworker/0:1/13955 [ 956.389100][ C0] [ 956.389116][ C0] CPU: 0 UID: 0 PID: 13955 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 956.389137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.389155][ C0] Workqueue: usb_hub_wq hub_event [ 956.389184][ C0] Call Trace: [ 956.389191][ C0] [ 956.389198][ C0] dump_stack_lvl+0x189/0x250 [ 956.389220][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 956.389233][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.389253][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.389274][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.389293][ C0] ? lock_release+0x4b/0x3e0 [ 956.389313][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 956.389325][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 956.389341][ C0] print_report+0xd2/0x2b0 [ 956.389362][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 956.389374][ C0] kasan_report+0x118/0x150 [ 956.389391][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 956.389409][ C0] kasan_check_range+0x2b0/0x2c0 [ 956.389426][ C0] flush_tlb_func+0x23d/0x6c0 [ 956.389444][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.389459][ C0] ? sched_clock_cpu+0x74/0x430 [ 956.389482][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.389502][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.389517][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 956.389539][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.389556][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 956.389572][ C0] sysvec_call_function_single+0x9e/0xc0 [ 956.389596][ C0] [ 956.389602][ C0] [ 956.389608][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 956.389631][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 956.389648][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 956.389664][ C0] RSP: 0018:ffffc90002ef6ce0 EFLAGS: 00000287 [ 956.389679][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 956.389691][ C0] RDX: ffffc90019e92000 RSI: 000000000001a3ea RDI: 000000000001a3eb [ 956.389702][ C0] RBP: ffffc90002ef6e30 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 956.389712][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 956.389723][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 956.389743][ C0] ? console_flush_all+0x13a/0xc40 [ 956.389760][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 956.389777][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 956.389794][ C0] console_unlock+0xc4/0x270 [ 956.389866][ C0] ? __pfx_console_unlock+0x10/0x10 [ 956.389889][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 956.389905][ C0] vprintk_emit+0x5b7/0x7a0 [ 956.389926][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 956.389948][ C0] ? __pfx_snprintf+0x10/0x10 [ 956.389970][ C0] dev_vprintk_emit+0x337/0x3f0 [ 956.389985][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 956.390007][ C0] dev_printk_emit+0xe0/0x130 [ 956.390026][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 956.390042][ C0] ? __dev_printk+0x131/0x190 [ 956.390066][ C0] _dev_notice+0x10a/0x160 [ 956.390079][ C0] ? _dev_notice+0x10a/0x160 [ 956.390113][ C0] ? __pfx__dev_notice+0x10/0x10 [ 956.390129][ C0] ? __pfx__dev_notice+0x10/0x10 [ 956.390152][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.390171][ C0] ? trace_kmalloc+0x1f/0xd0 [ 956.390190][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 956.390211][ C0] usb_get_configuration+0x309c/0x52c0 [ 956.390251][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 956.390273][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.390293][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.390315][ C0] usb_new_device+0x146/0x16f0 [ 956.390335][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 956.390351][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 956.390365][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.390376][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.390388][ C0] hub_event+0x2941/0x4a00 [ 956.390415][ C0] ? __pfx_hub_event+0x10/0x10 [ 956.390426][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.390439][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.390450][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.390460][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.390471][ C0] process_scheduled_works+0xae1/0x17b0 [ 956.390488][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 956.390502][ C0] worker_thread+0x8a0/0xda0 [ 956.390514][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 956.390528][ C0] ? __kthread_parkme+0x7b/0x200 [ 956.390541][ C0] kthread+0x70e/0x8a0 [ 956.390550][ C0] ? __pfx_worker_thread+0x10/0x10 [ 956.390560][ C0] ? __pfx_kthread+0x10/0x10 [ 956.390568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.390579][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.390590][ C0] ? __pfx_kthread+0x10/0x10 [ 956.390598][ C0] ret_from_fork+0x3fc/0x770 [ 956.390610][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 956.390622][ C0] ? __switch_to_asm+0x39/0x70 [ 956.390630][ C0] ? __switch_to_asm+0x33/0x70 [ 956.390638][ C0] ? __pfx_kthread+0x10/0x10 [ 956.390645][ C0] ret_from_fork_asm+0x1a/0x30 [ 956.390657][ C0] [ 956.390661][ C0] [ 956.390664][ C0] Allocated by task 5839: [ 956.390675][ C0] kasan_save_track+0x3e/0x80 [ 956.390688][ C0] __kasan_slab_alloc+0x6c/0x80 [ 956.390699][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 956.390711][ C0] copy_mm+0xdb/0x4b0 [ 956.390722][ C0] copy_process+0x1706/0x3c00 [ 956.390732][ C0] kernel_clone+0x21e/0x870 [ 956.390743][ C0] __x64_sys_clone+0x18b/0x1e0 [ 956.390749][ C0] do_syscall_64+0xfa/0x3b0 [ 956.390757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.390765][ C0] [ 956.390767][ C0] Freed by task 14041: [ 956.390772][ C0] kasan_save_track+0x3e/0x80 [ 956.390782][ C0] kasan_save_free_info+0x46/0x50 [ 956.390792][ C0] __kasan_slab_free+0x62/0x70 [ 956.390802][ C0] kmem_cache_free+0x18f/0x400 [ 956.390813][ C0] exit_mm+0x1da/0x2c0 [ 956.390820][ C0] do_exit+0x648/0x2300 [ 956.390827][ C0] do_group_exit+0x21c/0x2d0 [ 956.390834][ C0] __x64_sys_exit_group+0x3f/0x40 [ 956.390842][ C0] x64_sys_call+0x21f7/0x2200 [ 956.390850][ C0] do_syscall_64+0xfa/0x3b0 [ 956.390858][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.390865][ C0] [ 956.390868][ C0] The buggy address belongs to the object at ffff8880289a6b80 [ 956.390868][ C0] which belongs to the cache mm_struct of size 2584 [ 956.390877][ C0] The buggy address is located 2560 bytes inside of [ 956.390877][ C0] freed 2584-byte region [ffff8880289a6b80, ffff8880289a7598) [ 956.390887][ C0] [ 956.390889][ C0] The buggy address belongs to the physical page: [ 956.390894][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x289a0 [ 956.390907][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 956.390918][ C0] memcg:ffff8880593bf601 [ 956.390925][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 956.390944][ C0] page_type: f5(slab) [ 956.390959][ C0] raw: 00fff00000000040 ffff88801a44bb40 ffffea000197be00 dead000000000004 [ 956.390973][ C0] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff8880593bf601 [ 956.390987][ C0] head: 00fff00000000040 ffff88801a44bb40 ffffea000197be00 dead000000000004 [ 956.391002][ C0] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff8880593bf601 [ 956.391016][ C0] head: 00fff00000000003 ffffea0000a26801 00000000ffffffff 00000000ffffffff [ 956.391027][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 956.391032][ C0] page dumped because: kasan: bad access detected [ 956.391041][ C0] page_owner tracks the page as allocated [ 956.391045][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5652, tgid 5652 (dhcpcd-run-hook), ts 55630843551, free_ts 55083499582 [ 956.391064][ C0] post_alloc_hook+0x240/0x2a0 [ 956.391086][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 956.391101][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 956.391116][ C0] alloc_pages_mpol+0x232/0x4a0 [ 956.391138][ C0] allocate_slab+0x8a/0x370 [ 956.391153][ C0] ___slab_alloc+0xbeb/0x1410 [ 956.391161][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 956.391171][ C0] copy_mm+0xdb/0x4b0 [ 956.391183][ C0] copy_process+0x1706/0x3c00 [ 956.391193][ C0] kernel_clone+0x21e/0x870 [ 956.391203][ C0] __x64_sys_clone+0x18b/0x1e0 [ 956.391210][ C0] do_syscall_64+0xfa/0x3b0 [ 956.391218][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.391226][ C0] page last free pid 5497 tgid 5497 stack trace: [ 956.391231][ C0] __free_frozen_pages+0xb80/0xd80 [ 956.391239][ C0] __put_partials+0x156/0x1a0 [ 956.391246][ C0] put_cpu_partial+0x17c/0x250 [ 956.391255][ C0] __slab_free+0x2d5/0x3c0 [ 956.391263][ C0] qlist_free_all+0x97/0x140 [ 956.391273][ C0] kasan_quarantine_reduce+0x148/0x160 [ 956.391283][ C0] __kasan_slab_alloc+0x22/0x80 [ 956.391294][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 956.391306][ C0] __alloc_skb+0x112/0x2d0 [ 956.391314][ C0] alloc_skb_with_frags+0xca/0x890 [ 956.391324][ C0] sock_alloc_send_pskb+0x857/0x990 [ 956.391334][ C0] unix_dgram_sendmsg+0x4f6/0x1870 [ 956.391345][ C0] __sock_sendmsg+0x219/0x270 [ 956.391357][ C0] sock_write_iter+0x258/0x330 [ 956.391367][ C0] vfs_write+0x54b/0xa90 [ 956.391378][ C0] ksys_write+0x145/0x250 [ 956.391388][ C0] [ 956.391391][ C0] Memory state around the buggy address: [ 956.391396][ C0] ffff8880289a7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.391402][ C0] ffff8880289a7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.391408][ C0] >ffff8880289a7580: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 956.391413][ C0] ^ [ 956.391418][ C0] ffff8880289a7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 956.391424][ C0] ffff8880289a7680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 956.391429][ C0] ================================================================== [ 956.391439][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 956.391447][ C0] CPU: 0 UID: 0 PID: 13955 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 956.391458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.391465][ C0] Workqueue: usb_hub_wq hub_event [ 956.391479][ C0] Call Trace: [ 956.391484][ C0] [ 956.391488][ C0] dump_stack_lvl+0x99/0x250 [ 956.391501][ C0] ? __asan_memcpy+0x40/0x70 [ 956.391512][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.391524][ C0] ? __pfx__printk+0x10/0x10 [ 956.391536][ C0] panic+0x2db/0x790 [ 956.391550][ C0] ? __pfx_panic+0x10/0x10 [ 956.391563][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 956.391576][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 956.391591][ C0] ? print_memory_metadata+0x314/0x400 [ 956.391603][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 956.391612][ C0] check_panic_on_warn+0x89/0xb0 [ 956.391622][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 956.391630][ C0] end_report+0x78/0x160 [ 956.391638][ C0] kasan_report+0x129/0x150 [ 956.391647][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 956.391657][ C0] kasan_check_range+0x2b0/0x2c0 [ 956.391666][ C0] flush_tlb_func+0x23d/0x6c0 [ 956.391677][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.391685][ C0] ? sched_clock_cpu+0x74/0x430 [ 956.391697][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.391709][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.391717][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 956.391730][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 956.391740][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 956.391749][ C0] sysvec_call_function_single+0x9e/0xc0 [ 956.391762][ C0] [ 956.391765][ C0] [ 956.391769][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 956.391778][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 956.391787][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 956.391795][ C0] RSP: 0018:ffffc90002ef6ce0 EFLAGS: 00000287 [ 956.391804][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 956.391811][ C0] RDX: ffffc90019e92000 RSI: 000000000001a3ea RDI: 000000000001a3eb [ 956.391818][ C0] RBP: ffffc90002ef6e30 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 956.391824][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 956.391831][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 956.391843][ C0] ? console_flush_all+0x13a/0xc40 [ 956.391852][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 956.391863][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 956.391873][ C0] console_unlock+0xc4/0x270 [ 956.391886][ C0] ? __pfx_console_unlock+0x10/0x10 [ 956.391898][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 956.391908][ C0] vprintk_emit+0x5b7/0x7a0 [ 956.391920][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 956.391932][ C0] ? __pfx_snprintf+0x10/0x10 [ 956.391946][ C0] dev_vprintk_emit+0x337/0x3f0 [ 956.391955][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 956.391967][ C0] dev_printk_emit+0xe0/0x130 [ 956.391977][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 956.391986][ C0] ? __dev_printk+0x131/0x190 [ 956.392000][ C0] _dev_notice+0x10a/0x160 [ 956.392008][ C0] ? _dev_notice+0x10a/0x160 [ 956.392017][ C0] ? __pfx__dev_notice+0x10/0x10 [ 956.392025][ C0] ? __pfx__dev_notice+0x10/0x10 [ 956.392034][ C0] ? rcu_is_watching+0x15/0xb0 [ 956.392044][ C0] ? trace_kmalloc+0x1f/0xd0 [ 956.392055][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 956.392066][ C0] usb_get_configuration+0x309c/0x52c0 [ 956.392088][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 956.392100][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.392111][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.392124][ C0] usb_new_device+0x146/0x16f0 [ 956.392136][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 956.392149][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 956.392160][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.392171][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.392184][ C0] hub_event+0x2941/0x4a00 [ 956.392207][ C0] ? __pfx_hub_event+0x10/0x10 [ 956.392218][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.392231][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.392242][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.392252][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 956.392263][ C0] process_scheduled_works+0xae1/0x17b0 [ 956.392280][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 956.392294][ C0] worker_thread+0x8a0/0xda0 [ 956.392306][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 956.392320][ C0] ? __kthread_parkme+0x7b/0x200 [ 956.392333][ C0] kthread+0x70e/0x8a0 [ 956.392342][ C0] ? __pfx_worker_thread+0x10/0x10 [ 956.392353][ C0] ? __pfx_kthread+0x10/0x10 [ 956.392361][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 956.392372][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.392383][ C0] ? __pfx_kthread+0x10/0x10 [ 956.392391][ C0] ret_from_fork+0x3fc/0x770 [ 956.392403][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 956.392415][ C0] ? __switch_to_asm+0x39/0x70 [ 956.392423][ C0] ? __switch_to_asm+0x33/0x70 [ 956.392431][ C0] ? __pfx_kthread+0x10/0x10 [ 956.392439][ C0] ret_from_fork_asm+0x1a/0x30 [ 956.392451][ C0] [ 956.392698][ C0] Kernel Offset: disabled