last executing test programs: 13m58.793300462s ago: executing program 3 (id=14121): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 13m58.65651349s ago: executing program 3 (id=14124): r0 = epoll_create(0x8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) 13m58.584804538s ago: executing program 3 (id=14127): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 13m58.496456963s ago: executing program 3 (id=14128): creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8800, &(0x7f0000000100)={0x1, 0x2, 0x100000}, 0x20) 13m58.28675954s ago: executing program 3 (id=14134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r1}, 0x38) 13m58.088810167s ago: executing program 3 (id=14137): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x8004) 13m57.77474928s ago: executing program 32 (id=14137): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x8004) 7m36.68913383s ago: executing program 5 (id=21353): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 7m36.5946379s ago: executing program 5 (id=21355): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) 7m36.381668119s ago: executing program 5 (id=21358): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 7m36.221281743s ago: executing program 5 (id=21361): mknod$loop(&(0x7f000000db40)='./file0\x00', 0x400, 0x1) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x3beb44c, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0xd) 7m36.157079317s ago: executing program 5 (id=21363): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe, 0x1}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x8) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 7m35.65131995s ago: executing program 5 (id=21369): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 7m35.359397634s ago: executing program 33 (id=21369): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 5.414563051s ago: executing program 0 (id=28488): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x4) 5.326526584s ago: executing program 0 (id=28490): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x129080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000003240)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, 0x1, 0x0) 5.24601578s ago: executing program 0 (id=28493): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 5.182001013s ago: executing program 0 (id=28494): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x35c, 0x0) r0 = syz_io_uring_setup(0x1e1a, &(0x7f0000000440)={0x0, 0x430, 0x10100, 0x0, 0x83}, &(0x7f0000002000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r0, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 5.002846667s ago: executing program 0 (id=28498): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000237000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 3.75113686s ago: executing program 6 (id=28524): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 3.673118921s ago: executing program 6 (id=28525): ioprio_set$pid(0x2, 0x0, 0x6000) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 3.482621593s ago: executing program 6 (id=28529): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f) 3.369289978s ago: executing program 6 (id=28532): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800011b805000300000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3.23390994s ago: executing program 0 (id=28534): socket$inet_tcp(0x2, 0x1, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) mq_open(0x0, 0x40, 0xad, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) 3.115934946s ago: executing program 6 (id=28536): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x800) 3.00661614s ago: executing program 6 (id=28538): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x0, 0x11, 0x3, "476d02"}, 0x0, 0x0}) 759.334482ms ago: executing program 1 (id=28552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e20, @in6=@private0}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 746.127722ms ago: executing program 2 (id=28553): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40000001}]}}]}, 0x48}}, 0x0) 557.834381ms ago: executing program 1 (id=28555): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) 526.123486ms ago: executing program 2 (id=28556): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x44080) 488.678635ms ago: executing program 4 (id=28557): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0x8, 0x8000000e, 0x40087ffd, 0x14, "69120700000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x18, {"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", 0x1000}}, 0x1006) 425.273943ms ago: executing program 1 (id=28558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000092}]}) 398.556358ms ago: executing program 2 (id=28559): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x202, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 375.798679ms ago: executing program 4 (id=28560): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x707, 0x2, 0x800000, {0xa, 0x0, 0x0, 0x0, r1, 0x3}}, 0x1c}}, 0x0) 295.300719ms ago: executing program 4 (id=28561): unshare(0x22020600) creat(&(0x7f0000000240)='./bus\x00', 0x21) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x280600, 0xfe) ftruncate(r0, 0x2008002) 263.829983ms ago: executing program 2 (id=28562): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de000000ffffff7f0000000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 223.528116ms ago: executing program 4 (id=28563): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 207.596722ms ago: executing program 1 (id=28564): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x10004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) 138.728897ms ago: executing program 2 (id=28565): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000040)) 130.110605ms ago: executing program 4 (id=28566): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x3d, "43720705000000004786b89e6fb2be5c3f000000a69e0825471829a0395ebb7bf7b5555f84e55fee49e0e4ba020ffd702b5cd64fd950858238465f49a4"}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x2, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"}) 120.489183ms ago: executing program 1 (id=28567): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) sendmsg$unix(r0, &(0x7f0000010040)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x404c0c8}, 0x2) 53.624835ms ago: executing program 4 (id=28568): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) write$FUSE_STATX(r0, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x5, 0xba92, 0x0, '\x00', {0x1000, 0xf, 0x2, 0x8, 0xee01, 0x0, 0x2000, '\x00', 0x80000000, 0x10000, 0xf, 0xde, {0x63, 0x9}, {0xcb, 0x2}, {0x5, 0x6}, {0x1000}, 0x4, 0x4, 0x80000000, 0xa}}}, 0x130) 24.943274ms ago: executing program 2 (id=28569): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) 0s ago: executing program 1 (id=28570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3ff, 0x2, 0x1, 0x0, @sint={0x9, 0x1}}]}) kernel console output (not intermixed with test programs): T1729] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1345.425443][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.437524][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.463717][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.482608][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.492400][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.513820][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.532223][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.542575][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.556008][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.568585][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.578100][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.590060][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.599147][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.604963][T29835] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1345.610706][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.628726][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.637304][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.647849][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.659337][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.669447][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.683189][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.695201][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.704625][ T1729] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1345.713914][ T1729] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1345.726008][ T1729] usb 5-1: config 64 interface 0 has no altsetting 0 [ 1345.738205][ T1729] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1345.748872][ T1729] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1345.757660][ T1729] usb 5-1: Product: syz [ 1345.762071][ T1729] usb 5-1: Manufacturer: syz [ 1345.767462][ T1729] usb 5-1: SerialNumber: syz [ 1345.791417][ T1729] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 1346.064445][T29843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1346.096242][ T1729] usb 5-1: USB disconnect, device number 5 [ 1346.110367][ T1729] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 1346.142618][T10259] bridge0: port 1(syz_tun) entered blocking state [ 1346.162052][T10259] bridge0: port 1(syz_tun) entered disabled state [ 1346.169787][T10259] syz_tun: entered allmulticast mode [ 1346.181667][T10259] syz_tun: entered promiscuous mode [ 1346.187973][T10259] bridge0: port 1(syz_tun) entered blocking state [ 1346.194672][T10259] bridge0: port 1(syz_tun) entered forwarding state [ 1346.215891][T29843] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 1346.224926][T29843] usb 3-1: config 4 has no interface number 0 [ 1346.233648][T29843] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1346.254632][T29843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.273482][T29843] usb 3-1: Product: syz [ 1346.283805][T29843] usb 3-1: Manufacturer: syz [ 1346.304368][T29843] usb 3-1: SerialNumber: syz [ 1346.334359][T29843] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input123 [ 1346.534135][ T5175] bcm5974 3-1:4.28: could not read from device [ 1346.547986][ T5175] bcm5974 3-1:4.28: could not read from device [ 1346.559489][T29843] usb 3-1: USB disconnect, device number 14 [ 1348.074378][T30086] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1348.264738][T30086] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 1348.294120][T30086] usb 5-1: config 4 has no interface number 0 [ 1348.409656][T30086] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1348.419348][T30086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.427986][T30086] usb 5-1: Product: syz [ 1348.432185][T30086] usb 5-1: Manufacturer: syz [ 1348.444481][T30086] usb 5-1: SerialNumber: syz [ 1348.481092][T30086] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input124 [ 1348.664444][T10233] vhci_hcd: connection reset by peer [ 1348.670418][T30542] vhci_hcd vhci_hcd.0: stop threads [ 1348.676006][T30542] vhci_hcd vhci_hcd.0: release socket [ 1348.689749][T30542] vhci_hcd vhci_hcd.0: disconnect device [ 1348.750538][ T5175] bcm5974 5-1:4.28: could not read from device [ 1348.756797][T29834] usb 5-1: USB disconnect, device number 6 [ 1348.829685][T13221] bcm5974 5-1:4.28: could not read from device [ 1348.912089][T13221] udevd[13221]: Error opening device "/dev/input/event4": No such file or directory [ 1348.955233][T13221] udevd[13221]: Unable to EVIOCGABS device "/dev/input/event4" [ 1348.981183][T13221] udevd[13221]: Unable to EVIOCGABS device "/dev/input/event4" [ 1349.019044][T13221] udevd[13221]: Unable to EVIOCGABS device "/dev/input/event4" [ 1349.054339][T13221] udevd[13221]: Unable to EVIOCGABS device "/dev/input/event4" [ 1349.904618][T29843] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1350.066614][T29843] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 1350.075094][T29843] usb 5-1: config 7 has no interface number 0 [ 1350.106314][T29843] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1350.124782][T29843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.132851][T29843] usb 5-1: Product: syz [ 1350.158188][T29843] usb 5-1: Manufacturer: syz [ 1350.162998][T29843] usb 5-1: SerialNumber: syz [ 1350.504171][ T1731] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1350.656443][ T1731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.674975][ T1731] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1350.684730][ T1731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.710534][ T1731] usb 2-1: config 0 descriptor?? [ 1350.724401][T29835] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1350.968289][T29843] as10x_usb: device has been detected [ 1350.995651][T29843] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1351.013667][T29843] usb 5-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1351.058604][T29843] as10x_usb: error during firmware upload part1 [ 1351.074829][T29843] Registered device Elgato EyeTV DTT Deluxe [ 1351.164603][ T1731] waltop 0003:172F:0501.00A4: unbalanced collection at end of report description [ 1351.183334][ T1731] waltop 0003:172F:0501.00A4: probe with driver waltop failed with error -22 [ 1351.220305][T29843] usb 5-1: USB disconnect, device number 7 [ 1351.259263][T29843] Unregistered device Elgato EyeTV DTT Deluxe [ 1351.267701][T29843] as10x_usb: device has been disconnected [ 1351.284626][T30086] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1351.388470][ T1731] usb 2-1: USB disconnect, device number 8 [ 1351.444250][T30086] usb 3-1: Using ep0 maxpacket: 32 [ 1351.458404][T30086] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1351.467665][T30086] usb 3-1: config 0 has no interface number 0 [ 1351.473846][T30086] usb 3-1: config 0 interface 230 has no altsetting 0 [ 1351.485254][T30086] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1351.495410][T30086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.503482][T30086] usb 3-1: Product: syz [ 1351.508622][T30086] usb 3-1: Manufacturer: syz [ 1351.513358][T30086] usb 3-1: SerialNumber: syz [ 1351.522193][T30086] usb 3-1: config 0 descriptor?? [ 1351.530994][T30086] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 1351.551289][T30086] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1351.657989][T10513] vlan2: entered allmulticast mode [ 1351.663350][T10513] veth0_to_bond: entered allmulticast mode [ 1353.098983][T10563] netlink: 56 bytes leftover after parsing attributes in process `syz.4.25265'. [ 1353.800388][T30086] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 1353.996267][T29843] usb 3-1: USB disconnect, device number 15 [ 1354.865972][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25283'. [ 1354.886547][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25283'. [ 1355.074904][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1355.074927][ T30] audit: type=1326 audit(1771257626.310:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.144117][ T30] audit: type=1326 audit(1771257626.320:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.220272][ T30] audit: type=1326 audit(1771257626.380:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.326560][ T30] audit: type=1326 audit(1771257626.380:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.413548][ T30] audit: type=1326 audit(1771257626.380:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.436698][ T30] audit: type=1326 audit(1771257626.380:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.459907][ T30] audit: type=1326 audit(1771257626.380:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1355.483371][ T30] audit: type=1326 audit(1771257626.380:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.25289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1357.625569][T10734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25324'. [ 1357.827946][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25327'. [ 1357.864492][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25327'. [ 1357.894201][T10743] netlink: 'syz.4.25327': attribute type 13 has an invalid length. [ 1357.972311][T10745] kvm: user requested TSC rate below hardware speed [ 1358.184890][T10755] futex_wake_op: syz.1.25332 tries to shift op by -1; fix this program [ 1359.052128][T10808] kvm: kvm [10798]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1359.224069][ T1731] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1359.318482][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25356'. [ 1359.388942][ T1731] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1359.403810][ T1731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.412881][ T1731] usb 2-1: Product: syz [ 1359.417907][ T1731] usb 2-1: Manufacturer: syz [ 1359.423173][ T1731] usb 2-1: SerialNumber: syz [ 1359.431416][ T1731] usb 2-1: config 0 descriptor?? [ 1359.451646][ T1731] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1360.120671][T29835] usb 2-1: USB disconnect, device number 9 [ 1360.722459][T10905] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.25387'. [ 1360.833134][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25389'. [ 1360.902051][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25389'. [ 1361.022635][T10927] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1361.365812][T10945] dlm: non-version read from control device 34 [ 1361.788107][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.795418][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.809039][T10961] ptrace attach of "./syz-executor exec"[10963] was attempted by "./syz-executor exec"[10961] [ 1363.224527][ T1731] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1363.244508][T30086] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1363.354462][T29843] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1363.376941][ T1731] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1363.385741][ T1731] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1363.397761][ T1731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1363.407401][ T1731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1363.418970][ T1731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1363.432804][ T1731] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1363.442661][ T1731] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1363.451070][ T1731] usb 5-1: Product: syz [ 1363.455998][ T1731] usb 5-1: Manufacturer: syz [ 1363.460955][T30086] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1363.471862][T30086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.481497][T30086] usb 2-1: Product: syz [ 1363.485893][T30086] usb 2-1: Manufacturer: syz [ 1363.490576][T30086] usb 2-1: SerialNumber: syz [ 1363.497089][ T1731] cdc_wdm 5-1:1.0: skipping garbage [ 1363.502383][ T1731] cdc_wdm 5-1:1.0: skipping garbage [ 1363.515795][ T1731] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1363.521789][ T1731] cdc_wdm 5-1:1.0: Unknown control protocol [ 1363.527914][T29843] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.543478][T30086] usb 2-1: config 0 descriptor?? [ 1363.563802][T29843] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.579532][T29843] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1363.595996][T29843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.799287][T30086] usb 2-1: USB disconnect, device number 10 [ 1364.447117][T29843] hid-led 0003:27B8:01ED.00A5: probe with driver hid-led failed with error -71 [ 1364.474992][T29843] usb 3-1: USB disconnect, device number 16 [ 1364.648603][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25441'. [ 1365.985754][T17218] usb 5-1: USB disconnect, device number 8 [ 1366.345961][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25473'. [ 1366.435294][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25473'. [ 1367.549730][T11250] netlink: 'syz.6.25496': attribute type 1 has an invalid length. [ 1367.560432][T11250] netlink: 'syz.6.25496': attribute type 2 has an invalid length. [ 1367.568923][T11250] netlink: 'syz.6.25496': attribute type 1 has an invalid length. [ 1367.579372][T11250] netlink: 'syz.6.25496': attribute type 3 has an invalid length. [ 1367.587681][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25496'. [ 1368.118599][T11267] kvm: kvm [11266]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1370.311751][T11335] batman_adv: batadv0: Adding interface: dummy0 [ 1370.318789][T11335] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 1370.347535][T11335] batman_adv: batadv0: Interface activated: dummy0 [ 1370.509338][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25533'. [ 1371.522569][ T30] audit: type=1326 audit(1771257642.760:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11399 comm="syz.4.25554" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x0 [ 1373.263821][ T30] audit: type=1800 audit(1771257644.500:4969): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25585" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=22017 res=0 errno=0 [ 1373.363701][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25596'. [ 1374.204921][T30086] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1374.225766][ T8917] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1374.366958][T30086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.382914][T30086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.397300][T30086] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1374.425689][ T8917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.444543][T30086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1374.452787][ T8917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.473918][T30086] usb 5-1: SerialNumber: syz [ 1374.490791][ T8917] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1374.529099][ T8917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1374.537999][ T8917] usb 3-1: SerialNumber: syz [ 1374.639061][T11563] "syz.6.25605" (11563) uses obsolete ecb(arc4) skcipher [ 1374.670323][T11563] "syz.6.25605" (11563) uses obsolete ecb(arc4) skcipher [ 1374.762415][ T8917] usb 3-1: 0:2 : does not exist [ 1374.793816][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25606'. [ 1374.873896][T30086] usb 5-1: 0:2 : does not exist [ 1374.884997][ T8917] usb 3-1: USB disconnect, device number 17 [ 1374.907060][T30086] usb 5-1: 0:0: failed to get current value for ch 0 (-22) [ 1374.935373][T11581] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1375.025500][T30086] usb 5-1: USB disconnect, device number 9 [ 1375.106875][T13221] udevd[13221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1375.831626][ T30] audit: type=1326 audit(1771257647.070:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1375.896822][ T30] audit: type=1326 audit(1771257647.070:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1375.964445][ T30] audit: type=1326 audit(1771257647.120:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.016938][ T30] audit: type=1326 audit(1771257647.120:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.040590][ T30] audit: type=1326 audit(1771257647.120:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.103047][ T30] audit: type=1326 audit(1771257647.120:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.132311][ T30] audit: type=1326 audit(1771257647.120:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.178189][ T30] audit: type=1326 audit(1771257647.120:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.25622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1376.522135][T11672] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1377.606470][T11721] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1377.883448][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25656'. [ 1378.248652][T11745] vivid-008: disconnect [ 1378.254425][T11744] vivid-008: reconnect [ 1378.508001][T11755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1379.467237][T11793] C: renamed from team_slave_0 [ 1379.496973][T11793] netlink: 'syz.1.25680': attribute type 2 has an invalid length. [ 1379.525578][T11793] netlink: 128 bytes leftover after parsing attributes in process `syz.1.25680'. [ 1379.557423][T11793] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1380.063735][T11823] batadv_slave_0: entered promiscuous mode [ 1380.124735][T29843] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1380.282331][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25692'. [ 1380.294367][T29843] usb 3-1: Using ep0 maxpacket: 8 [ 1380.307371][T29843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1380.317437][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1380.341723][T29843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1380.405473][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1380.424757][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1380.442821][T29843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1380.483039][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1380.508120][T29843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1380.534118][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1380.559498][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1380.572507][T29843] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1380.582919][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1380.604043][T29843] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1380.618011][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1380.634307][T29843] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1380.649073][T29843] usb 3-1: string descriptor 0 read error: -22 [ 1380.656980][T29843] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1380.666387][T29843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.691380][T29843] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1380.709794][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25698'. [ 1380.746387][T11845] netlink: 277 bytes leftover after parsing attributes in process `syz.1.25698'. [ 1380.756159][T11845] netlink: 277 bytes leftover after parsing attributes in process `syz.1.25698'. [ 1380.858112][T29835] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1380.915826][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25702'. [ 1380.940923][T30086] usb 3-1: USB disconnect, device number 18 [ 1381.013740][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25701'. [ 1381.028574][T29835] usb 5-1: Using ep0 maxpacket: 8 [ 1381.042860][T29835] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1381.061244][T29835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.086144][T29835] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1381.093339][T29835] pvrusb2: ********** [ 1381.105933][T29835] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1381.116733][T29835] pvrusb2: Important functionality might not be entirely working. [ 1381.125565][T29835] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1381.138628][T29835] pvrusb2: ********** [ 1381.311394][ T2344] pvrusb2: Invalid write control endpoint [ 1381.430988][ T2344] pvrusb2: Invalid write control endpoint [ 1381.454817][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1381.484778][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1381.523150][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1381.540463][ T1731] usb 5-1: USB disconnect, device number 10 [ 1381.567199][ T2344] pvrusb2: Device being rendered inoperable [ 1381.594183][ T2344] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1381.601901][ T2344] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1381.630482][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1381.639781][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1381.655410][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1382.029590][T11920] vivid-004: disconnect [ 1382.058352][T11918] vivid-004: reconnect [ 1382.408221][T11938] vimc link validate: Scaler:src:16x16 (0x33424752, 10, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314752, 8, 0, 0, 0) [ 1383.248921][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1383.248942][ T30] audit: type=1326 audit(1771257654.490:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.279586][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25738'. [ 1383.307723][ T30] audit: type=1326 audit(1771257654.490:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.338172][T11971] dvmrp6: entered allmulticast mode [ 1383.344700][ T30] audit: type=1326 audit(1771257654.490:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.434158][ T30] audit: type=1326 audit(1771257654.490:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.486901][ T30] audit: type=1326 audit(1771257654.490:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.546635][ T30] audit: type=1326 audit(1771257654.490:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.569381][ T30] audit: type=1326 audit(1771257654.490:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.6.25739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1383.654143][ T30] audit: type=1326 audit(1771257654.890:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.25741" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23f6c code=0x0 [ 1383.798816][T11981] sctp: [Deprecated]: syz.2.25742 (pid 11981) Use of int in max_burst socket option. [ 1383.798816][T11981] Use struct sctp_assoc_value instead [ 1384.980820][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25765'. [ 1387.374216][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1387.382073][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1387.697571][T12169] kvm: kvm [12166]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 1387.911912][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25820'. [ 1388.087184][T12197] netlink: 774 bytes leftover after parsing attributes in process `syz.4.25826'. [ 1388.272660][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25829'. [ 1388.299887][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25829'. [ 1388.886866][T12227] input: syz0 as /devices/virtual/input/input126 [ 1388.915950][T12231] ALSA: mixer_oss: invalid OSS volume '' [ 1389.376404][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.25847'. [ 1389.666752][T26954] tipc: Subscription rejected, illegal request [ 1390.142720][T12293] kvm: kvm [12291]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 1390.387612][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25869'. [ 1391.396026][ T30] audit: type=1326 audit(1771257662.640:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1391.429604][ T30] audit: type=1326 audit(1771257662.670:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1391.463049][ T30] audit: type=1326 audit(1771257662.670:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1391.516000][ T30] audit: type=1326 audit(1771257662.670:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1391.568550][ T30] audit: type=1326 audit(1771257662.670:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1391.615178][ T30] audit: type=1326 audit(1771257662.670:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.1.25884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1392.495332][ C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1392.503286][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1393.195460][T12399] kvm: kvm [12398]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 1393.641834][T12430] VFS: Mount too revealing [ 1393.865666][T12445] Attempt to restore checkpoint with obsolete wellknown handles [ 1394.678539][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25933'. [ 1394.689753][T12482] netlink: 141 bytes leftover after parsing attributes in process `syz.1.25933'. [ 1394.985074][T12499] netlink: 116 bytes leftover after parsing attributes in process `syz.6.25941'. [ 1396.112216][T12573] blkio.reset_stats is deprecated [ 1396.514099][T29835] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1396.561160][T12605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1396.684893][T29835] usb 2-1: Using ep0 maxpacket: 32 [ 1396.704589][T29835] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1396.717704][T29835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.730380][T29835] usb 2-1: config 0 descriptor?? [ 1396.955805][T29835] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1396.977974][T29835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1397.010133][T29835] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1397.024860][T29835] usb 2-1: media controller created [ 1397.049110][T29835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1397.167642][T29835] az6027: usb out operation failed. (-71) [ 1397.182553][T29835] az6027: usb out operation failed. (-71) [ 1397.189589][T29835] stb0899_attach: Driver disabled by Kconfig [ 1397.197146][T29835] az6027: no front-end attached [ 1397.197146][T29835] [ 1397.206873][T29835] az6027: usb out operation failed. (-71) [ 1397.212646][T29835] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1397.230052][T29835] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input127 [ 1397.276425][T29835] dvb-usb: schedule remote query interval to 400 msecs. [ 1397.304048][T29835] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1397.318877][T29835] usb 2-1: USB disconnect, device number 11 [ 1397.567243][T29835] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1398.657153][T12684] syz.1.25993 (12684): drop_caches: 2 [ 1398.813560][T12698] netlink: 'syz.2.25997': attribute type 46 has an invalid length. [ 1398.835270][T12698] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.25997'. [ 1401.027514][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26021'. [ 1401.037420][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.6.26021'. [ 1401.108197][T12786] netlink: 'syz.2.26022': attribute type 14 has an invalid length. [ 1401.124307][T12787] netlink: 'syz.1.26023': attribute type 9 has an invalid length. [ 1401.314405][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26027'. [ 1401.838194][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26039'. [ 1402.735981][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.038322][T12860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.186166][T12860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.474905][T12871] netlink: 64 bytes leftover after parsing attributes in process `syz.6.26058'. [ 1404.248814][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.260163][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.268598][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.274915][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.281222][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.290402][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.296796][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.302912][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.309785][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.318425][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.325183][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.331418][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.338067][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.345120][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.351422][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.357729][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.364165][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.370404][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.377671][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.383883][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.391458][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.397956][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.405834][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.412032][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.419681][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.426941][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.438768][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.447728][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.451054][T12912] kvm: user requested TSC rate below hardware speed [ 1404.457500][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.474410][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.480648][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.487519][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.493792][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.501512][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.511261][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.517724][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.524940][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.531858][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.538663][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.545901][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.552591][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.559137][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.566633][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.572858][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.584934][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.601370][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.611498][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.619401][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.626165][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.632643][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.639532][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.645788][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.652073][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.667316][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.673568][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.680270][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.690704][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.704823][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.719633][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.726345][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.732916][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.739974][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.746512][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.752783][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.762712][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.769092][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.776155][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.782520][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.802219][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.814800][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.826656][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.849445][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.856550][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.862722][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.884332][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.890491][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.900285][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.906885][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.913246][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.920359][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.965479][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1404.972393][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.014242][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.021312][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.045903][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.052099][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.081682][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.105199][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.119183][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.139959][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.177582][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.183748][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.211320][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26082'. [ 1405.223466][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.245649][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.285620][T12910] syz.6.26075 (12910): drop_caches: 2 [ 1405.638847][T12941] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1405.651227][ T1731] IPVS: starting estimator thread 0... [ 1405.755077][T12942] IPVS: using max 33 ests per chain, 79200 per kthread [ 1405.985552][ T30] audit: type=1326 audit(1771257677.230:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.6.26090" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 1406.107113][T12953] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 1406.145180][T12953] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1406.758996][T12979] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1406.963252][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26103'. [ 1407.231554][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26107'. [ 1407.251327][T13002] ipvlan0: entered promiscuous mode [ 1407.259726][T13002] ipvlan0: left promiscuous mode [ 1407.278601][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26107'. [ 1407.728537][T13025] cifs: Unknown parameter 'f' [ 1407.855478][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1408.098648][ T1731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1408.149404][ T1731] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1408.192191][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26126'. [ 1408.423694][T13031] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1408.443035][ T1731] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1408.494442][ T1731] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1408.689361][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26133'. [ 1408.785275][T17218] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1408.834529][T17218] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1408.917018][T13034] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 1408.937374][T13050] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 1408.945941][ T8917] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1409.124243][T17218] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1409.304665][ T8917] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1410.145706][T13131] netlink: 212 bytes leftover after parsing attributes in process `syz.4.26159'. [ 1410.490971][T13146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.579338][T13146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.916675][T13167] netlink: 224 bytes leftover after parsing attributes in process `syz.4.26173'. [ 1410.936470][T13167] netlink: 220 bytes leftover after parsing attributes in process `syz.4.26173'. [ 1411.647480][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26188'. [ 1411.684271][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26188'. [ 1411.910624][T13210] netlink: 'syz.4.26194': attribute type 3 has an invalid length. [ 1412.409969][T13244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1413.173385][ T30] audit: type=1326 audit(1771257684.410:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.200500][ T30] audit: type=1326 audit(1771257684.420:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.234948][ T30] audit: type=1326 audit(1771257684.440:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.257830][ T30] audit: type=1326 audit(1771257684.440:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.281839][ T30] audit: type=1326 audit(1771257684.440:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.336664][ T30] audit: type=1326 audit(1771257684.440:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.403003][ T30] audit: type=1326 audit(1771257684.440:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.449174][ T30] audit: type=1326 audit(1771257684.460:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1413.528313][ T30] audit: type=1326 audit(1771257684.460:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.611354][ T30] audit: type=1326 audit(1771257684.460:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.26223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1413.866101][T13318] lo: Caught tx_queue_len zero misconfig [ 1413.927999][T13321] IPv6: NLM_F_CREATE should be specified when creating new route [ 1413.980005][T13327] loop6: detected capacity change from 0 to 524287999 [ 1415.204888][T13394] __nla_validate_parse: 1 callbacks suppressed [ 1415.204911][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26260'. [ 1415.902416][T13437] team0: Caught tx_queue_len zero misconfig [ 1415.973359][T13441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.26276'. [ 1416.064224][T13443] netlink: 'syz.4.26277': attribute type 1 has an invalid length. [ 1416.082745][T13443] netlink: 'syz.4.26277': attribute type 2 has an invalid length. [ 1418.356623][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26314'. [ 1418.403486][T13531] netlink: 56 bytes leftover after parsing attributes in process `syz.1.26314'. [ 1418.664596][T13530] bridge0: port 1(syz_tun) entered disabled state [ 1418.817357][T13530] batman_adv: batadv0: Interface deactivated: dummy0 [ 1418.856704][T13530] veth0_to_team: left promiscuous mode [ 1418.878980][T13530] bridge1: left promiscuous mode [ 1418.887681][T13530] bridge1: left allmulticast mode [ 1418.893393][T13530] ip6erspan0: left allmulticast mode [ 1418.899526][T13530] bond1: left allmulticast mode [ 1418.906959][T13530] bond2: left promiscuous mode [ 1418.911996][T13530] geneve3: left promiscuous mode [ 1418.917403][T13530] geneve3: left allmulticast mode [ 1418.922984][T13530] ip6tnl3: left allmulticast mode [ 1418.929112][T13530] bridge2: left promiscuous mode [ 1418.934547][T13530] bridge2: left allmulticast mode [ 1418.940167][T13530] bridge4: left promiscuous mode [ 1418.945370][T13530] bridge4: left allmulticast mode [ 1418.954373][T13530] bond5: left promiscuous mode [ 1418.959546][T13530] vlan0: left promiscuous mode [ 1418.964608][T13530] geneve1: left promiscuous mode [ 1418.969953][T13530] vlan0: left allmulticast mode [ 1418.975469][T13530] geneve1: left allmulticast mode [ 1418.981148][T13530] vlan1: left promiscuous mode [ 1418.986172][T13530] bridge0: left promiscuous mode [ 1418.993122][T13530] macsec1: left promiscuous mode [ 1418.998803][T13530] macsec1: left allmulticast mode [ 1419.004905][T13530] vlan3: left allmulticast mode [ 1419.009953][T13530] bond0: left allmulticast mode [ 1419.016144][T13530] bond7: left allmulticast mode [ 1419.021354][T13530] bridge7: left promiscuous mode [ 1419.052606][T13541] lo: Caught tx_queue_len zero misconfig [ 1419.067017][T13541] netem: incorrect gi model size [ 1419.082331][T13541] netem: change failed [ 1419.093168][ T36] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.113107][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.138109][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.148826][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.648282][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26329'. [ 1419.657923][T13572] sch_tbf: burst 0 is lower than device lo mtu (1302) ! [ 1419.844387][T30083] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1420.017364][T30083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1420.034087][T30083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1420.056080][T30083] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1420.074066][T30083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.082150][T30083] usb 2-1: Product: syz [ 1420.095818][T30083] usb 2-1: Manufacturer: syz [ 1420.100523][T30083] usb 2-1: SerialNumber: syz [ 1420.125495][T30083] usb 2-1: config 0 descriptor?? [ 1420.142536][T30083] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1420.411683][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26339'. [ 1420.419716][T13614] sg_read: process 9163 (syz.4.26338) changed security contexts after opening file descriptor, this is not allowed. [ 1420.558100][T29835] usb 2-1: USB disconnect, device number 12 [ 1420.838056][T13647] ALSA: mixer_oss: invalid OSS volume '‡' [ 1421.395401][T13668] netlink: 64 bytes leftover after parsing attributes in process `syz.6.26354'. [ 1422.014742][ T5899] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1422.188412][ T5899] usb 5-1: config 0 has no interfaces? [ 1422.196369][ T5899] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1422.214037][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.235971][ T5899] usb 5-1: config 0 descriptor?? [ 1422.568170][T17218] usb 5-1: USB disconnect, device number 11 [ 1422.814296][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1422.814316][ T30] audit: type=1800 audit(1771257694.050:5008): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26378" name="file1" dev="tmpfs" ino=27810 res=0 errno=0 [ 1423.214242][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1423.214265][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1423.238579][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.245241][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.368017][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26388'. [ 1423.385830][T13793] netlink: 'syz.1.26388': attribute type 15 has an invalid length. [ 1423.725854][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26396'. [ 1423.737574][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26396'. [ 1423.909122][T13819] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1423.947934][T13819] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1424.697589][ T30] audit: type=1326 audit(1771257695.940:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.4.26411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1424.746099][ T30] audit: type=1326 audit(1771257695.940:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.4.26411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1424.794787][ T30] audit: type=1326 audit(1771257695.960:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.4.26411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1424.843117][ T30] audit: type=1326 audit(1771257695.960:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.4.26411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1424.896633][ T30] audit: type=1326 audit(1771257695.960:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.4.26411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1426.194609][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26426'. [ 1426.203664][T13902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.26426'. [ 1426.267453][T13906] input: syz1 as /devices/virtual/input/input130 [ 1426.538887][T13900] batadv0: left promiscuous mode [ 1426.562281][T13900] batadv0: left allmulticast mode [ 1426.585742][T13900] wg1: left promiscuous mode [ 1426.590411][T13900] wg1: left allmulticast mode [ 1426.610657][T13900] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1426.626765][T13900] bridge0: left promiscuous mode [ 1426.631961][T13900] bridge0: left allmulticast mode [ 1426.641046][T13900] batman_adv: batadv0: Interface deactivated: gretap1 [ 1426.657451][T13900] gtp2: left promiscuous mode [ 1426.712371][T13900] gtp2: left allmulticast mode [ 1426.970612][T13930] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.26435'. [ 1426.983073][T13930] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1427.352322][ T30] audit: type=1326 audit(1771257698.580:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.6.26439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1427.414882][ T30] audit: type=1326 audit(1771257698.590:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.6.26439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1427.464696][ T30] audit: type=1326 audit(1771257698.590:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.6.26439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1427.514221][ T30] audit: type=1326 audit(1771257698.590:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.6.26439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1428.046057][T13972] lo: Caught tx_queue_len zero misconfig [ 1429.749287][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26481'. [ 1430.032310][T14066] loop4: detected capacity change from 0 to 1 [ 1430.053536][T14066] Dev loop4: unable to read RDB block 1 [ 1430.064512][T14066] loop4: unable to read partition table [ 1430.070407][T14066] loop4: partition table beyond EOD, truncated [ 1430.085671][T14066] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1430.118249][ T5191] Dev loop4: unable to read RDB block 1 [ 1430.123896][ T5191] loop4: unable to read partition table [ 1430.131463][ T5191] loop4: partition table beyond EOD, truncated [ 1431.151831][T14114] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.26501'. [ 1432.057249][T14160] binder: 14159:14160 ioctl c018620c 80000000 returned -22 [ 1432.186275][T17218] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1432.346320][T17218] usb 2-1: Using ep0 maxpacket: 16 [ 1432.355667][T17218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.367945][T17218] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1432.378669][T17218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.393706][T17218] usb 2-1: config 0 descriptor?? [ 1432.820301][T17218] mcp2221 0003:04D8:00DD.00A6: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1432.850695][T14190] netlink: 'syz.6.26533': attribute type 10 has an invalid length. [ 1433.226800][T17218] usb 2-1: USB disconnect, device number 13 [ 1433.768505][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1433.768529][ T30] audit: type=1326 audit(1771257705.000:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.2.26542" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x0 [ 1434.973637][T14297] loop4: detected capacity change from 0 to 1 [ 1434.989314][T14297] Dev loop4: unable to read RDB block 1 [ 1434.996881][T14297] loop4: unable to read partition table [ 1435.002795][T14297] loop4: partition table beyond EOD, truncated [ 1435.024529][T14297] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1435.285726][T14311] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.26562'. [ 1435.639333][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26568'. [ 1435.654502][ T30] audit: type=1326 audit(1771257706.900:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.689062][ T30] audit: type=1326 audit(1771257706.900:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.713877][T14334] dummy0: entered allmulticast mode [ 1435.720350][T14334] dummy0: left allmulticast mode [ 1435.726403][ T30] audit: type=1326 audit(1771257706.930:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.772584][ T30] audit: type=1326 audit(1771257706.930:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.844936][ T30] audit: type=1326 audit(1771257706.930:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.886508][ T30] audit: type=1326 audit(1771257706.960:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a572b code=0x7ffc0000 [ 1435.915138][ T30] audit: type=1326 audit(1771257706.960:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1435.939034][ T30] audit: type=1326 audit(1771257706.960:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1436.004543][ T30] audit: type=1326 audit(1771257706.960:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.2.26570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1436.032710][T29843] hid-generic 0003:0004:0000.00A7: unknown main item tag 0x0 [ 1436.041681][T29843] hid-generic 0003:0004:0000.00A7: unknown main item tag 0x0 [ 1436.060318][T29843] hid-generic 0003:0004:0000.00A7: unknown main item tag 0x0 [ 1436.100640][T29843] hid-generic 0003:0004:0000.00A7: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1436.112467][T14350] netlink: 'syz.6.26575': attribute type 10 has an invalid length. [ 1436.148795][T14350] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1436.179484][T14350] team0: Port device netdevsim0 added [ 1436.271110][T14355] fido_id[14355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1436.865719][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1436.890745][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x2 [ 1436.950208][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1436.962681][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1436.987428][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1437.003022][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1437.022215][T30083] hid-generic 0000:0000:0000.00A8: unknown main item tag 0x0 [ 1437.056265][T30083] hid-generic 0000:0000:0000.00A8: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1437.117368][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26587'. [ 1437.131195][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26587'. [ 1437.163216][T14420] fido_id[14420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1438.636007][T14499] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1441.890198][T16339] netlink: 'syz.1.26653': attribute type 2 has an invalid length. [ 1441.934422][T16339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.26653'. [ 1442.253837][T16626] netlink: 'syz.2.26659': attribute type 14 has an invalid length. [ 1442.435534][T16635] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1442.556487][T16637] could not allocate digest TFM handle -¿ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj„¸$€ŒÆª­ü€«;º}'üj°O [ 1442.996595][T16663] netlink: 'syz.6.26673': attribute type 2 has an invalid length. [ 1443.611812][T29843] hid_parser_main: 27 callbacks suppressed [ 1443.611837][T29843] hid-generic 0003:0004:0000.00A9: unknown main item tag 0x0 [ 1443.635310][T29843] hid-generic 0003:0004:0000.00A9: unknown main item tag 0x0 [ 1443.653549][T29843] hid-generic 0003:0004:0000.00A9: unknown main item tag 0x0 [ 1443.674476][T29843] hid-generic 0003:0004:0000.00A9: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1443.790504][T16702] fido_id[16702]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1444.424488][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26695'. [ 1445.011482][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26703'. [ 1445.067014][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26703'. [ 1445.875946][T30083] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1446.056987][T30083] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 1446.074008][T30083] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1446.097341][T30083] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 1446.134028][T30083] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 1446.160457][T30083] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.170859][T30083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.192557][T16815] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1446.201014][T16815] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1446.213889][T30083] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.237905][T30083] usb 3-1: invalid MIDI in EP 0 [ 1446.438340][T30083] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1446.478803][T30083] usb 3-1: USB disconnect, device number 19 [ 1448.792282][T16980] ip6tnl0: Caught tx_queue_len zero misconfig [ 1449.284377][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1449.384948][T17003] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1449.435553][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1449.457275][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.474462][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.496714][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1449.518785][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.546949][ T5899] usb 3-1: config 0 descriptor?? [ 1449.565629][ T5899] hub 3-1:0.0: USB hub found [ 1449.784738][ T5899] hub 3-1:0.0: 1 port detected [ 1450.042077][T17037] sctp: [Deprecated]: syz.4.26774 (pid 17037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1450.042077][T17037] Use struct sctp_sack_info instead [ 1450.212979][ T5899] usb 3-1: USB disconnect, device number 20 [ 1450.468612][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26781'. [ 1450.492622][T17064] hsr0: entered promiscuous mode [ 1450.502605][T17064] macvlan3: entered allmulticast mode [ 1450.520286][T17064] hsr0: entered allmulticast mode [ 1450.527519][T17064] hsr_slave_0: entered allmulticast mode [ 1450.533860][T17064] hsr_slave_1: entered allmulticast mode [ 1451.222682][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26795'. [ 1452.870041][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.878556][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.305293][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26825'. [ 1453.546254][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26829'. [ 1454.459506][T17271] sch_tbf: burst 0 is lower than device lo mtu (1302) ! [ 1457.136508][T17412] netlink: 'syz.1.26891': attribute type 16 has an invalid length. [ 1457.181168][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26891'. [ 1457.204223][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1457.204255][ T30] audit: type=1326 audit(1771257728.440:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.273822][ T30] audit: type=1326 audit(1771257728.480:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.321532][ T30] audit: type=1326 audit(1771257728.480:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.392137][ T30] audit: type=1326 audit(1771257728.480:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.447898][ T30] audit: type=1326 audit(1771257728.480:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.527491][ T30] audit: type=1326 audit(1771257728.480:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.607056][ T30] audit: type=1326 audit(1771257728.480:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.672888][ T30] audit: type=1326 audit(1771257728.480:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.775809][ T30] audit: type=1326 audit(1771257728.480:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1457.866138][ T30] audit: type=1326 audit(1771257728.480:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17414 comm="syz.6.26892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1458.415004][T17446] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.26904'. [ 1459.696396][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26919'. [ 1459.914763][T17509] delete_channel: no stack [ 1460.648674][T17550] kvm: kvm [17549]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1461.103156][T17578] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1461.965843][T17615] netlink: 3 bytes leftover after parsing attributes in process `syz.0.26957'. [ 1462.669708][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26967'. [ 1462.682272][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26967'. [ 1463.380575][T17698] IPVS: Unknown mcast interface: macvlan0 [ 1463.669882][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26991'. [ 1463.902821][T17731] input: syz0 as /devices/virtual/input/input132 [ 1465.878237][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1466.046145][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.074973][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.095306][ T5899] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1466.117063][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.146694][ T5899] usb 3-1: config 0 descriptor?? [ 1466.603599][ T5899] arvo 0003:1E7D:30D4.00AA: unknown main item tag 0x0 [ 1466.622719][ T5899] arvo 0003:1E7D:30D4.00AA: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1466.953005][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1466.953024][ T30] audit: type=1800 audit(1771257738.190:5049): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27047" name="file0" dev="tmpfs" ino=28636 res=0 errno=0 [ 1466.990505][T17897] netlink: 'syz.6.27049': attribute type 5 has an invalid length. [ 1467.026346][ T5899] usb 3-1: USB disconnect, device number 21 [ 1467.151741][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27051'. [ 1467.776052][T17950] netlink: 'syz.6.27065': attribute type 2 has an invalid length. [ 1467.784714][T17950] netlink: 16158 bytes leftover after parsing attributes in process `syz.6.27065'. [ 1468.347700][T17975] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1468.361161][T17974] IPVS: stopping backup sync thread 17975 ... [ 1468.634362][T30083] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1468.817703][T30083] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1468.828584][T30083] usb 5-1: config 0 has no interface number 0 [ 1468.844370][T30083] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1468.863977][T30083] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.884993][T30083] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1468.914475][T30083] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1468.921181][T30083] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1468.934408][T30083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.956181][T30083] usb 5-1: config 0 descriptor?? [ 1469.325212][T18024] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1469.369961][T18023] IPVS: stopping backup sync thread 18024 ... [ 1469.577739][T30083] uclogic 0003:145F:0212.00AB: pen parameters not found [ 1469.585524][T30083] uclogic 0003:145F:0212.00AB: interface is invalid, ignoring [ 1469.791009][T17218] usb 5-1: USB disconnect, device number 12 [ 1471.448121][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27123'. [ 1472.162502][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27137'. [ 1472.186859][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27137'. [ 1472.712527][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27149'. [ 1472.924075][ T5899] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1473.090557][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1473.130785][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.146504][ T5899] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1473.162553][ T5899] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1473.179138][ T5899] usb 3-1: Manufacturer: syz [ 1473.198108][ T5899] usb 3-1: config 0 descriptor?? [ 1473.625847][ T5899] cougar 0003:060B:700A.00AC: unknown main item tag 0x0 [ 1473.632909][ T5899] cougar 0003:060B:700A.00AC: unknown main item tag 0x0 [ 1473.652011][ T5899] cougar 0003:060B:700A.00AC: unknown main item tag 0x0 [ 1473.660147][ T5899] cougar 0003:060B:700A.00AC: unknown main item tag 0x0 [ 1473.684021][ T5899] cougar 0003:060B:700A.00AC: unknown main item tag 0x0 [ 1473.705933][ T5899] cougar 0003:060B:700A.00AC: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1473.872692][ T5899] usb 3-1: USB disconnect, device number 22 [ 1474.234724][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1474.414121][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1474.426272][ T5899] usb 2-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.456133][ T5899] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.503950][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1474.516459][ T5899] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1474.535987][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.566527][ T5899] usb 2-1: config 0 descriptor?? [ 1475.020735][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: unknown main item tag 0x0 [ 1475.054157][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: unknown main item tag 0x0 [ 1475.062425][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: unknown main item tag 0x0 [ 1475.073993][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: unknown main item tag 0x0 [ 1475.082165][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: unknown main item tag 0x0 [ 1475.120164][ T5899] aquacomputer_d5next 0003:0C70:F0B6.00AD: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 1475.250067][ T5899] usb 2-1: USB disconnect, device number 14 [ 1475.303537][T18314] fido_id[18314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1476.434636][T17218] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1476.558889][T18376] netlink: 4444 bytes leftover after parsing attributes in process `syz.4.27189'. [ 1476.664162][T17218] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1476.672231][T17218] usb 3-1: config 0 has no interface number 0 [ 1476.695942][T17218] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1476.714970][T17218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.723176][T17218] usb 3-1: Product: syz [ 1476.743477][T17218] usb 3-1: Manufacturer: syz [ 1476.755032][T17218] usb 3-1: SerialNumber: syz [ 1476.795716][T17218] usb 3-1: config 0 descriptor?? [ 1477.046783][T17218] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1477.078359][T17218] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1477.106224][T17218] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1477.134538][T17218] usb 3-1: media controller created [ 1477.171621][T17218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.195468][T18390] tipc: Enabling of bearer rejected, already enabled [ 1477.231373][T18390] netlink: 'syz.6.27193': attribute type 4 has an invalid length. [ 1477.262539][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27194'. [ 1477.277373][T17218] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1477.326894][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27194'. [ 1477.394855][T17218] usb 3-1: USB disconnect, device number 23 [ 1477.463575][T18406] tmpfs: Unknown parameter 'fd' [ 1477.824271][T29843] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1478.018334][T29843] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1478.028450][T29843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.039065][T29843] usb 2-1: Product: syz [ 1478.072014][T29843] usb 2-1: Manufacturer: syz [ 1478.078068][T29843] usb 2-1: SerialNumber: syz [ 1478.110915][T29843] usb 2-1: config 0 descriptor?? [ 1478.564960][T29843] usb 2-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 1478.784450][T29843] usb 2-1: failed to fetch extended address, random address set [ 1478.792257][T29843] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1478.806798][T29843] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1478.846000][T29843] usb 2-1: USB disconnect, device number 15 [ 1479.697238][T18520] netlink: 27 bytes leftover after parsing attributes in process `syz.2.27232'. [ 1481.640078][T18614] netlink: 80 bytes leftover after parsing attributes in process `syz.2.27262'. [ 1481.911437][T18612] vivid-000: disconnect [ 1481.931944][T18611] vivid-000: reconnect [ 1483.134904][T18686] : renamed from bond0 [ 1483.689911][T18716] netlink: 'syz.2.27298': attribute type 12 has an invalid length. [ 1483.716415][T18716] netlink: 'syz.2.27298': attribute type 28 has an invalid length. [ 1483.744083][T18716] netlink: 148 bytes leftover after parsing attributes in process `syz.2.27298'. [ 1483.801280][T18718] macvlan0: entered promiscuous mode [ 1483.808917][T18718] netlink: 'syz.1.27299': attribute type 2 has an invalid length. [ 1484.657301][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.663698][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.758342][T18751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27311'. [ 1485.082243][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27316'. [ 1485.914428][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1485.994994][T18830] ip6tnl0: Caught tx_queue_len zero misconfig [ 1486.011383][T18830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27338'. [ 1486.089243][ T5899] usb 5-1: config 0 has no interfaces? [ 1486.099026][ T5899] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1486.135911][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.158196][ T5899] usb 5-1: config 0 descriptor?? [ 1486.385000][T29835] usb 5-1: USB disconnect, device number 13 [ 1486.818413][T18873] netlink: 'syz.6.27353': attribute type 11 has an invalid length. [ 1487.617490][T18906] netlink: 'syz.2.27366': attribute type 1 has an invalid length. [ 1488.253716][T18936] input: syz0 as /devices/virtual/input/input135 [ 1489.434392][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27401'. [ 1489.672709][T19009] program syz.6.27405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1489.797510][T19018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27408'. [ 1489.808467][T19018] netem: unknown loss type 13 [ 1489.828631][T19018] netem: change failed [ 1490.384724][T17218] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1490.556440][T17218] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1490.566392][T17218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.588652][T17218] usb 3-1: config 0 descriptor?? [ 1490.598736][T17218] cp210x 3-1:0.0: cp210x converter detected [ 1490.804026][T30083] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1490.954406][T30083] usb 5-1: Using ep0 maxpacket: 8 [ 1490.961899][T30083] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1490.972612][T30083] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1490.984298][T30083] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1490.995430][T30083] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1491.009124][T30083] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1491.020411][T30083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.230579][T17218] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1491.256028][T30083] usb 5-1: GET_CAPABILITIES returned 0 [ 1491.259010][T17218] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1491.268806][T30083] usbtmc 5-1:16.0: can't read capabilities [ 1491.284899][T17218] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1491.307578][T17218] usb 3-1: USB disconnect, device number 24 [ 1491.370785][T17218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1491.392135][T17218] cp210x 3-1:0.0: device disconnected [ 1491.465879][T30083] usb 5-1: USB disconnect, device number 14 [ 1492.132371][T19196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27447'. [ 1492.169529][T19166] bond1: entered promiscuous mode [ 1492.214445][T30083] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1492.395249][T30083] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1492.415588][T30083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.432361][T30083] usb 3-1: config 0 descriptor?? [ 1492.443455][T30083] cp210x 3-1:0.0: cp210x converter detected [ 1492.868408][T30083] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1492.898606][T30083] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1493.115109][T29835] usb 3-1: USB disconnect, device number 25 [ 1493.135604][T29835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1493.180953][T29835] cp210x 3-1:0.0: device disconnected [ 1494.113462][T19313] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1494.210270][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27479'. [ 1494.221567][T19319] netlink: 'syz.2.27479': attribute type 14 has an invalid length. [ 1494.230867][T19319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27479'. [ 1494.595728][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27486'. [ 1494.830565][ T30] audit: type=1326 audit(1771257766.070:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19382 comm="syz.0.27490" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 1494.870496][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27492'. [ 1494.880989][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27492'. [ 1496.422817][T19475] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.27522'. [ 1496.436173][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27519'. [ 1496.491957][T19477] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27519'. [ 1496.770569][T19499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27529'. [ 1497.511056][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27545'. [ 1497.522522][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27545'. [ 1497.684340][T30079] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1497.838571][T30079] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1497.847856][T30079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.861289][T30079] usb 2-1: Product: syz [ 1497.867934][T30079] usb 2-1: Manufacturer: syz [ 1497.872685][T30079] usb 2-1: SerialNumber: syz [ 1497.887074][T30079] usb 2-1: config 0 descriptor?? [ 1498.104195][T30079] usb 2-1: ignoring: probably an ADSL modem [ 1498.522889][T30079] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1498.736483][T29843] usb 2-1: USB disconnect, device number 16 [ 1500.014419][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1500.329692][T19687] netlink: 'syz.1.27586': attribute type 6 has an invalid length. [ 1500.712959][T19712] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1500.736829][T19712] bond8 (unregistering): Released all slaves [ 1500.788523][T17218] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1500.977622][T17218] usb 2-1: Using ep0 maxpacket: 8 [ 1500.995912][T17218] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1501.008240][T17218] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1501.022035][T17218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1501.028993][T17218] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1501.038690][T17218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.059799][T17218] usb 2-1: config 0 descriptor?? [ 1501.376074][T30083] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1501.498749][T17218] wacom 0003:056A:010E.00AE: unbalanced collection at end of report description [ 1501.520978][T17218] wacom 0003:056A:010E.00AE: parse failed [ 1501.529562][T17218] wacom 0003:056A:010E.00AE: probe with driver wacom failed with error -22 [ 1501.544752][T30083] usb 3-1: Using ep0 maxpacket: 16 [ 1501.566568][T30083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.581969][T30083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.593304][T30083] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1501.608690][T30083] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1501.619160][T30083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.640167][T30083] usb 3-1: config 0 descriptor?? [ 1501.709876][T30079] usb 2-1: USB disconnect, device number 17 [ 1502.090340][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.106817][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.118975][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.126384][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.133803][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.141795][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.158730][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.166899][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.175071][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.189110][T30083] microsoft 0003:045E:07DA.00AF: unknown main item tag 0x0 [ 1502.227972][T30083] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00AF/input/input136 [ 1502.254788][T30083] microsoft 0003:045E:07DA.00AF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1502.295339][T30083] usb 3-1: USB disconnect, device number 26 [ 1502.460819][T19860] fido_id[19860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1504.565531][T19981] netlink: 'syz.2.27642': attribute type 2 has an invalid length. [ 1504.583719][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27642'. [ 1504.691895][T19981] bond8 (unregistering): Released all slaves [ 1505.134150][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1506.107899][ T30] audit: type=1326 audit(1771257777.350:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20123 comm="syz.4.27671" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78f6c code=0x0 [ 1507.148166][T20155] netlink: 260 bytes leftover after parsing attributes in process `syz.4.27680'. [ 1507.384721][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27684'. [ 1507.465502][T20167] tunl0: Caught tx_queue_len zero misconfig [ 1507.471475][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27687'. [ 1508.193599][T20197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27696'. [ 1508.880912][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27710'. [ 1509.109540][T20244] vivid-008: disconnect [ 1509.134364][T20243] vivid-008: reconnect [ 1509.365090][T20251] netlink: 'syz.4.27713': attribute type 11 has an invalid length. [ 1509.373197][T20251] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.27713'. [ 1509.857078][T20280] wg2: Caught tx_queue_len zero misconfig [ 1510.254151][ C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1510.262426][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1510.379666][T20311] netlink: 92 bytes leftover after parsing attributes in process `syz.2.27734'. [ 1510.989305][T20354] netlink: 'syz.6.27749': attribute type 29 has an invalid length. [ 1511.164020][T29835] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1511.223452][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27754'. [ 1511.247411][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27754'. [ 1512.014838][T29835] usb 2-1: Using ep0 maxpacket: 16 [ 1512.023165][T29835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.034334][T29835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.044622][T29835] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1512.054308][T29835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.093219][T29835] usb 2-1: config 0 descriptor?? [ 1512.521469][T29835] hid_parser_main: 5 callbacks suppressed [ 1512.521494][T29835] corsair 0003:1B1C:1B02.00B0: unknown main item tag 0x0 [ 1512.559453][T29835] corsair 0003:1B1C:1B02.00B0: unknown main item tag 0x0 [ 1512.585387][T29835] corsair 0003:1B1C:1B02.00B0: unknown main item tag 0x0 [ 1512.613165][T29835] corsair 0003:1B1C:1B02.00B0: unknown main item tag 0x0 [ 1512.621072][T29835] corsair 0003:1B1C:1B02.00B0: unknown main item tag 0x0 [ 1512.662927][T29835] corsair 0003:1B1C:1B02.00B0: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1512.952688][T29835] usb 2-1: USB disconnect, device number 18 [ 1513.656749][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27785'. [ 1513.703512][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27785'. [ 1513.931684][T20487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27791'. [ 1514.461205][T20520] netlink: 'syz.4.27803': attribute type 1 has an invalid length. [ 1514.470821][T20520] netlink: 'syz.4.27803': attribute type 2 has an invalid length. [ 1516.509143][T20594] program syz.2.27829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1516.837814][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27843'. [ 1516.867826][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27843'. [ 1517.254020][T17218] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1517.264213][T20659] loop9: detected capacity change from 0 to 5 [ 1517.273652][T12560] Dev loop9: unable to read RDB block 5 [ 1517.280921][T12560] loop9: unable to read partition table [ 1517.288821][T12560] loop9: partition table beyond EOD, truncated [ 1517.300994][T20659] Dev loop9: unable to read RDB block 5 [ 1517.309415][T20659] loop9: unable to read partition table [ 1517.318046][T20659] loop9: partition table beyond EOD, truncated [ 1517.324966][T20659] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1517.426897][T17218] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1517.445365][T17218] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1517.456873][T20670] netlink: 52 bytes leftover after parsing attributes in process `syz.1.27852'. [ 1517.466477][T17218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1517.476386][T17218] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1517.502592][T17218] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1517.518971][T17218] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1517.543268][T17218] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1517.564548][T17218] usb 3-1: Product: syz [ 1517.569554][T17218] usb 3-1: Manufacturer: syz [ 1517.595171][T17218] cdc_wdm 3-1:1.0: skipping garbage [ 1517.606509][T17218] cdc_wdm 3-1:1.0: skipping garbage [ 1517.614149][T30079] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1517.624757][T17218] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1517.633093][T17218] cdc_wdm 3-1:1.0: Unknown control protocol [ 1517.784505][T30079] usb 5-1: Using ep0 maxpacket: 16 [ 1517.792541][T30079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.814708][T30079] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1517.823796][T30079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.857254][T30079] usb 5-1: config 0 descriptor?? [ 1518.066435][T17218] usb 3-1: USB disconnect, device number 27 [ 1518.110765][T30079] usbhid 5-1:0.0: can't add hid device: -71 [ 1518.128665][T30079] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1518.166830][T30079] usb 5-1: USB disconnect, device number 15 [ 1518.218522][T20721] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1520.244468][ T30] audit: type=1326 audit(1771257791.470:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.292118][ T30] audit: type=1326 audit(1771257791.480:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.365597][ T30] audit: type=1326 audit(1771257791.480:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.434145][ T30] audit: type=1326 audit(1771257791.480:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.513548][ T30] audit: type=1326 audit(1771257791.480:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.563624][ T30] audit: type=1326 audit(1771257791.480:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.598761][ T30] audit: type=1326 audit(1771257791.480:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.622413][ T30] audit: type=1326 audit(1771257791.480:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.648459][ T30] audit: type=1326 audit(1771257791.490:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1520.676614][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27897'. [ 1520.738300][ T30] audit: type=1326 audit(1771257791.490:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.6.27894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1521.798235][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27919'. [ 1521.818787][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27919'. [ 1521.970190][T20900] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1521.978102][T20900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1522.589386][T20928] netlink: 'syz.4.27932': attribute type 11 has an invalid length. [ 1523.059650][T20954] random: crng reseeded on system resumption [ 1523.300891][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27947'. [ 1523.327552][T20971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.27948'. [ 1523.426381][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27949'. [ 1523.447045][T20977] veth0: Caught tx_queue_len zero misconfig [ 1523.679493][T20989] tipc: Started in network mode [ 1523.684901][T20989] tipc: Node identity ac14140f, cluster identity 4711 [ 1523.691973][T20989] tipc: New replicast peer: 255.255.255.255 [ 1523.701819][T20989] tipc: Enabled bearer , priority 20 [ 1524.306584][T21019] vivid-004: disconnect [ 1524.549127][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27973'. [ 1524.763976][T17218] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1524.814786][T29843] tipc: Node number set to 2886997007 [ 1524.929271][T17218] usb 5-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.940649][T17218] usb 5-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 1524.943676][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27978'. [ 1524.961733][T17218] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1524.973083][T17218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.981776][T17218] usb 5-1: Product: syz [ 1524.986592][T17218] usb 5-1: Manufacturer: syz [ 1524.991297][T17218] usb 5-1: SerialNumber: syz [ 1525.083772][T21018] vivid-004: reconnect [ 1525.401837][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27985'. [ 1525.411756][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27985'. [ 1525.426706][T30083] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1525.431751][T17218] usb 5-1: USB disconnect, device number 16 [ 1525.594325][T30083] usb 3-1: Using ep0 maxpacket: 8 [ 1525.601600][T30083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.612727][T30083] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1525.623770][T30083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.634799][T30083] usb 3-1: config 0 descriptor?? [ 1525.734317][T29843] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1525.891599][T29843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1525.907014][T29843] usb 2-1: config 0 has no interface number 0 [ 1525.922460][T29843] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1525.932284][T29843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.944133][T29843] usb 2-1: Product: syz [ 1525.955858][T29843] usb 2-1: Manufacturer: syz [ 1525.960503][T29843] usb 2-1: SerialNumber: syz [ 1525.983841][T29843] usb 2-1: config 0 descriptor?? [ 1526.058742][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.088638][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.102367][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.119867][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.134557][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.144048][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.151138][T30083] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 1526.180748][T30083] belkin 0003:050D:3201.00B1: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 1526.211142][T29843] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1526.256259][T29843] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1526.284780][T29843] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1526.303028][T29843] usb 2-1: media controller created [ 1526.311095][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27991'. [ 1526.321265][T17218] usb 3-1: USB disconnect, device number 28 [ 1526.365682][T29843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1526.431238][T21107] fido_id[21107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1526.452325][T29843] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1526.571017][T29843] usb 2-1: USB disconnect, device number 19 [ 1527.861413][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28014'. [ 1527.975016][T21230] openvswitch: netlink: EtherType 50a is less than min 600 [ 1528.624537][T30079] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1528.787503][T30079] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1528.799120][T30079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.814683][T30079] usb 3-1: config 0 descriptor?? [ 1528.832948][T30079] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1529.032105][T30079] gp8psk: usb in 128 operation failed. [ 1529.038280][T30079] gp8psk: usb in 137 operation failed. [ 1529.043791][T30079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1529.061374][T30079] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1529.070480][T30079] usb 3-1: media controller created [ 1529.086925][T30079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1529.112033][T30079] gp8psk_fe: Frontend attached [ 1529.117160][T30083] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1529.125637][T30079] usb 3-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 1529.135657][T30079] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1529.296239][T30083] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.310956][T30083] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1529.326924][T30083] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1529.336522][T30083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.344934][T30083] usb 2-1: Product: syz [ 1529.349231][T30083] usb 2-1: Manufacturer: syz [ 1529.353842][T30083] usb 2-1: SerialNumber: syz [ 1529.397754][T30079] gp8psk: usb in 137 operation failed. [ 1529.410799][T30079] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1529.420950][T30079] gp8psk: found Genpix USB device pID = 203 (hex) [ 1529.434541][T30079] usb 3-1: USB disconnect, device number 29 [ 1529.577419][T30083] usb 2-1: 0:2 : does not exist [ 1529.598508][T30079] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1529.615213][T30083] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1529.665360][T30083] usb 2-1: USB disconnect, device number 20 [ 1529.708288][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1530.150299][T21328] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1530.239697][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28042'. [ 1532.107659][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1532.107680][ T30] audit: type=1326 audit(1771257803.350:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.201689][ T30] audit: type=1326 audit(1771257803.350:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.230120][ T30] audit: type=1326 audit(1771257803.350:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.253380][ T30] audit: type=1326 audit(1771257803.350:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.279996][ T30] audit: type=1326 audit(1771257803.350:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.307966][ T30] audit: type=1326 audit(1771257803.350:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.331231][ T30] audit: type=1326 audit(1771257803.350:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.431866][ T30] audit: type=1326 audit(1771257803.350:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.508735][ T30] audit: type=1326 audit(1771257803.350:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.582865][ T30] audit: type=1326 audit(1771257803.350:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21429 comm="syz.4.28082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1532.830223][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28092'. [ 1533.224376][T29835] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1533.375753][T29835] usb 5-1: Using ep0 maxpacket: 32 [ 1533.385479][T29835] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1533.398414][T29835] usb 5-1: config 0 has no interface number 0 [ 1533.417946][T29835] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1533.443322][T29835] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1533.453340][T29835] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1533.465460][T29835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.475729][T29835] usb 5-1: Product: syz [ 1533.480173][T29835] usb 5-1: Manufacturer: syz [ 1533.485480][T29835] usb 5-1: SerialNumber: syz [ 1533.495031][T29835] usb 5-1: config 0 descriptor?? [ 1534.163530][T29835] appletouch 5-1:0.85: Geyser mode initialized. [ 1534.188807][T29835] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input139 [ 1534.209344][T21527] bridge0: port 3(vlan6) entered blocking state [ 1534.216241][T21527] bridge0: port 3(vlan6) entered disabled state [ 1534.222815][T21527] vlan6: entered allmulticast mode [ 1534.228981][T21527] bridge0: entered allmulticast mode [ 1534.275928][T21527] vlan6: left allmulticast mode [ 1534.286554][T21527] bridge0: left allmulticast mode [ 1534.363044][T21538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28110'. [ 1534.376839][T29835] usb 5-1: USB disconnect, device number 17 [ 1534.483153][T29835] appletouch 5-1:0.85: input: appletouch disconnected [ 1535.561705][T21650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28133'. [ 1535.575544][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28133'. [ 1535.586214][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28133'. [ 1535.744961][T29843] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1535.894641][T29843] usb 2-1: Using ep0 maxpacket: 32 [ 1535.906455][T29843] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1535.918394][T29843] usb 2-1: config 0 has no interface number 0 [ 1535.932948][T29843] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1535.964121][T29843] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1535.978746][T29843] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1535.989028][T29843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.997539][T29843] usb 2-1: Product: syz [ 1536.001754][T29843] usb 2-1: Manufacturer: syz [ 1536.007583][T29843] usb 2-1: SerialNumber: syz [ 1536.030618][T29843] usb 2-1: config 0 descriptor?? [ 1536.088172][T21686] bridge0: entered promiscuous mode [ 1536.095003][T21686] macvlan2: entered promiscuous mode [ 1536.208200][T21692] veth1_vlan: Caught tx_queue_len zero misconfig [ 1536.448613][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28150'. [ 1536.460210][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28150'. [ 1536.663685][T29843] appletouch 2-1:0.85: Geyser mode initialized. [ 1536.674701][T29843] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input140 [ 1536.691161][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28153'. [ 1536.883674][T29843] usb 2-1: USB disconnect, device number 21 [ 1536.907466][T29843] appletouch 2-1:0.85: input: appletouch disconnected [ 1537.069503][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.077612][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.090160][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.098960][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.107734][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.115546][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.125715][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.133153][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.142191][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.150066][T17218] hid-generic 00A0:0006:0003.00B2: unknown main item tag 0x0 [ 1537.174209][T17218] hid-generic 00A0:0006:0003.00B2: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1537.275478][ T1731] IPVS: starting estimator thread 0... [ 1537.314479][T30083] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1537.375514][T21760] IPVS: using max 28 ests per chain, 67200 per kthread [ 1537.465758][T30083] usb 3-1: config 0 has no interfaces? [ 1537.474338][T30083] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1537.483429][T30083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.497567][T30083] usb 3-1: config 0 descriptor?? [ 1537.756577][T30083] usb 3-1: USB disconnect, device number 30 [ 1538.375719][T21814] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.28176'. [ 1538.457386][T21816] random: crng reseeded on system resumption [ 1538.884837][T29843] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1539.044573][T29843] usb 3-1: Using ep0 maxpacket: 8 [ 1539.059846][T29843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.094053][T29843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1539.108686][T29843] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1539.122455][T29843] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1539.131651][T29843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.156982][T29843] hub 3-1:1.0: bad descriptor, ignoring hub [ 1539.162967][T29843] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1539.171375][T29843] cdc_wdm 3-1:1.0: skipping garbage [ 1539.186853][T29843] cdc_wdm 3-1:1.0: skipping garbage [ 1539.192128][T29843] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1539.249104][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28189'. [ 1539.466540][T29843] usb 3-1: USB disconnect, device number 31 [ 1539.805373][T29843] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1539.975073][T29843] usb 3-1: Using ep0 maxpacket: 8 [ 1539.985923][T29843] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1540.004440][T29843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1540.013413][T29843] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1540.036381][T29843] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1540.046603][T29843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.093830][T29843] hub 3-1:1.0: bad descriptor, ignoring hub [ 1540.103547][T29843] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1540.126500][T29843] cdc_wdm 3-1:1.0: skipping garbage [ 1540.131766][T29843] cdc_wdm 3-1:1.0: skipping garbage [ 1540.139723][T29843] cdc_wdm 3-1:1.0: invalid descriptor buffer length [ 1540.154597][T29843] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1540.274929][T21901] netem: incorrect ge model size [ 1540.290476][T21901] netem: change failed [ 1540.407382][T29843] usb 3-1: USB disconnect, device number 32 [ 1540.975001][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1541.786732][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28226'. [ 1542.355126][ T30] audit: type=1326 audit(1771257813.600:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.399236][ T30] audit: type=1326 audit(1771257813.620:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.454428][ T30] audit: type=1326 audit(1771257813.620:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.500310][ T30] audit: type=1326 audit(1771257813.620:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.537159][ T30] audit: type=1326 audit(1771257813.620:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.575715][T29843] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1542.614335][ T30] audit: type=1326 audit(1771257813.620:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.656493][ T30] audit: type=1326 audit(1771257813.620:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.28240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23f6c code=0x7ffc0000 [ 1542.739626][T29843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.750943][T29843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.762142][T29843] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1542.772287][T29843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.785334][T29843] usb 3-1: config 0 descriptor?? [ 1543.216514][T29843] hid_parser_main: 5 callbacks suppressed [ 1543.216538][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.230197][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.237912][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.245633][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.258455][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.266135][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.273143][T29843] pyra 0003:1E7D:2CF6.00B3: unknown main item tag 0x0 [ 1543.292211][T29843] pyra 0003:1E7D:2CF6.00B3: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1543.609027][T29843] pyra 0003:1E7D:2CF6.00B3: couldn't init struct pyra_device [ 1543.620588][T29843] pyra 0003:1E7D:2CF6.00B3: couldn't install mouse [ 1543.630659][T29843] pyra 0003:1E7D:2CF6.00B3: probe with driver pyra failed with error -71 [ 1543.661460][T29843] usb 3-1: USB disconnect, device number 33 [ 1544.705374][T22112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28271'. [ 1544.716674][T22112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28271'. [ 1545.277838][T22147] loop5: detected capacity change from 0 to 7 [ 1545.295714][T22147] Dev loop5: unable to read RDB block 7 [ 1545.301481][T22147] loop5: AHDI p1 [ 1545.306868][T22147] loop5: partition table partially beyond EOD, truncated [ 1546.099485][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.101390][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1546.114118][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.386005][T22201] overlay: Unknown parameter 'f' [ 1546.929338][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28319'. [ 1546.949219][T22240] program syz.2.28320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1550.182306][T30083] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1550.211265][T30083] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1551.226566][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1551.626193][T22429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28386'. [ 1552.443063][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28406'. [ 1552.463395][T22476] wg0: Caught tx_queue_len zero misconfig [ 1553.272570][T22506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1553.428830][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28422'. [ 1553.904348][ T1731] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1554.074463][ T1731] usb 5-1: Using ep0 maxpacket: 32 [ 1554.081734][ T1731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.104081][ T1731] usb 5-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 1554.120235][ T1731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.149641][ T1731] usb 5-1: config 0 descriptor?? [ 1554.209496][T22547] netlink: 'syz.1.28435': attribute type 9 has an invalid length. [ 1554.218235][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28435'. [ 1554.234971][T22547] macvlan4: entered promiscuous mode [ 1554.240334][T22547] hsr0: entered promiscuous mode [ 1554.251290][T22547] macvlan4: entered allmulticast mode [ 1554.259279][T22547] hsr0: entered allmulticast mode [ 1554.265651][T22547] hsr_slave_0: entered allmulticast mode [ 1554.271404][T22547] hsr_slave_1: entered allmulticast mode [ 1554.578447][ T1731] sony 0003:12BA:074B.00B5: unknown main item tag 0x0 [ 1554.588609][ T1731] sony 0003:12BA:074B.00B5: unknown main item tag 0x0 [ 1554.596205][ T1731] sony 0003:12BA:074B.00B5: unknown main item tag 0x0 [ 1554.603578][ T1731] sony 0003:12BA:074B.00B5: unknown main item tag 0x0 [ 1554.611045][ T1731] sony 0003:12BA:074B.00B5: unknown main item tag 0x0 [ 1554.634546][ T1731] sony 0003:12BA:074B.00B5: hidraw0: USB HID v0.00 Device [HID 12ba:074b] on usb-dummy_hcd.4-1/input0 [ 1554.650363][ T1731] sony 0003:12BA:074B.00B5: failed to claim input [ 1554.803481][T29835] usb 5-1: USB disconnect, device number 18 [ 1556.026997][T22643] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.28468'. [ 1556.428196][T22661] kvm: user requested TSC rate below hardware speed [ 1556.487803][T22668] loop3: detected capacity change from 0 to 1 [ 1556.496336][T22668] Dev loop3: unable to read RDB block 1 [ 1556.501982][T22668] loop3: unable to read partition table [ 1556.512321][T22668] loop3: partition table beyond EOD, truncated [ 1556.530640][T22668] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1557.122892][T22694] sctp: [Deprecated]: syz.0.28488 (pid 22694) Use of int in maxseg socket option. [ 1557.122892][T22694] Use struct sctp_assoc_value instead [ 1557.771167][T22727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1557.914173][ T30] audit: type=1326 audit(1771257829.140:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22690 comm="syz.2.28485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7fc00000 [ 1558.563614][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28520'. [ 1558.576819][T22775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.28520'. [ 1558.586286][T22775] netlink: 104 bytes leftover after parsing attributes in process `syz.6.28520'. [ 1559.205208][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28532'. [ 1559.694432][T29843] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1559.845975][T29843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.857439][T29843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1559.868132][T29843] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1559.877494][T29843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1559.885844][T29843] usb 5-1: SerialNumber: syz [ 1560.111746][T29843] usb 5-1: 0:2 : does not exist [ 1560.172403][T29843] usb 5-1: USB disconnect, device number 19 [ 1560.215917][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.858647][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28552'. [ 1561.912300][T22907] dummy0: Caught tx_queue_len zero misconfig [ 1562.501921][T22938] [ 1562.504318][T22938] ===================================================== [ 1562.511359][T22938] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1562.518855][T22938] syzkaller #0 Tainted: G L [ 1562.524860][T22938] ----------------------------------------------------- [ 1562.531810][T22938] syz.4.28568/22938 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1562.539647][T22938] ffff88807ffc0750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1562.548398][T22938] [ 1562.548398][T22938] and this task is already holding: [ 1562.555863][T22938] ffff88806a1ee028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1562.565646][T22938] which would create a new lock dependency: [ 1562.571567][T22938] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1562.579709][T22938] [ 1562.579709][T22938] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1562.589269][T22938] (&client->buffer_lock){..-.}-{3:3} [ 1562.589298][T22938] [ 1562.589298][T22938] ... which became SOFTIRQ-irq-safe at: [ 1562.602395][T22938] lock_acquire+0xf0/0x2e0 [ 1562.606927][T22938] _raw_spin_lock+0x2e/0x40 [ 1562.611545][T22938] evdev_pass_values+0xb9/0xbd0 [ 1562.616510][T22938] evdev_events+0x1e6/0x340 [ 1562.621123][T22938] input_pass_values+0x288/0x890 [ 1562.626167][T22938] input_event_dispose+0x3e5/0x6b0 [ 1562.631386][T22938] input_inject_event+0x1dd/0x340 [ 1562.636545][T22938] led_trigger_event+0x138/0x210 [ 1562.641589][T22938] kbd_bh+0x1f3/0x300 [ 1562.645675][T22938] tasklet_action_common+0x2da/0x4b0 [ 1562.651074][T22938] handle_softirqs+0x22a/0x870 [ 1562.655944][T22938] run_ksoftirqd+0x36/0x60 [ 1562.660478][T22938] smpboot_thread_fn+0x541/0xa50 [ 1562.665523][T22938] kthread+0x388/0x470 [ 1562.669692][T22938] ret_from_fork+0x51e/0xb90 [ 1562.674388][T22938] ret_from_fork_asm+0x1a/0x30 [ 1562.679269][T22938] [ 1562.679269][T22938] to a SOFTIRQ-irq-unsafe lock: [ 1562.686297][T22938] (tasklist_lock){.+.+}-{3:3} [ 1562.686327][T22938] [ 1562.686327][T22938] ... which became SOFTIRQ-irq-unsafe at: [ 1562.699242][T22938] ... [ 1562.699250][T22938] lock_acquire+0xf0/0x2e0 [ 1562.706362][T22938] _raw_read_lock+0x36/0x50 [ 1562.710979][T22938] __do_wait+0xde/0x740 [ 1562.715236][T22938] do_wait+0x1e7/0x540 [ 1562.719407][T22938] kernel_wait+0xd6/0x1c0 [ 1562.723840][T22938] call_usermodehelper_exec_work+0xbe/0x230 [ 1562.729846][T22938] process_scheduled_works+0xb02/0x1830 [ 1562.735496][T22938] worker_thread+0xa50/0xfc0 [ 1562.740197][T22938] kthread+0x388/0x470 [ 1562.744367][T22938] ret_from_fork+0x51e/0xb90 [ 1562.749075][T22938] ret_from_fork_asm+0x1a/0x30 [ 1562.753962][T22938] [ 1562.753962][T22938] other info that might help us debug this: [ 1562.753962][T22938] [ 1562.764207][T22938] Chain exists of: [ 1562.764207][T22938] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1562.764207][T22938] [ 1562.777375][T22938] Possible interrupt unsafe locking scenario: [ 1562.777375][T22938] [ 1562.785790][T22938] CPU0 CPU1 [ 1562.791170][T22938] ---- ---- [ 1562.796546][T22938] lock(tasklist_lock); [ 1562.800810][T22938] local_irq_disable(); [ 1562.807575][T22938] lock(&client->buffer_lock); [ 1562.814987][T22938] lock(&new->fa_lock); [ 1562.821772][T22938] [ 1562.825236][T22938] lock(&client->buffer_lock); [ 1562.830279][T22938] [ 1562.830279][T22938] *** DEADLOCK *** [ 1562.830279][T22938] [ 1562.838437][T22938] 7 locks held by syz.4.28568/22938: [ 1562.843739][T22938] #0: ffff88802b6d1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1562.852913][T22938] #1: ffff88801e7cf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1562.863042][T22938] #2: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1562.872729][T22938] #3: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1562.882324][T22938] #4: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1562.891491][T22938] #5: ffff88806a1ee028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1562.901707][T22938] #6: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1562.910797][T22938] [ 1562.910797][T22938] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1562.921218][T22938] -> (&client->buffer_lock){..-.}-{3:3} { [ 1562.927063][T22938] IN-SOFTIRQ-W at: [ 1562.931064][T22938] lock_acquire+0xf0/0x2e0 [ 1562.937174][T22938] _raw_spin_lock+0x2e/0x40 [ 1562.943375][T22938] evdev_pass_values+0xb9/0xbd0 [ 1562.949907][T22938] evdev_events+0x1e6/0x340 [ 1562.956097][T22938] input_pass_values+0x288/0x890 [ 1562.962712][T22938] input_event_dispose+0x3e5/0x6b0 [ 1562.969501][T22938] input_inject_event+0x1dd/0x340 [ 1562.976219][T22938] led_trigger_event+0x138/0x210 [ 1562.982835][T22938] kbd_bh+0x1f3/0x300 [ 1562.988489][T22938] tasklet_action_common+0x2da/0x4b0 [ 1562.995567][T22938] handle_softirqs+0x22a/0x870 [ 1563.002020][T22938] run_ksoftirqd+0x36/0x60 [ 1563.008111][T22938] smpboot_thread_fn+0x541/0xa50 [ 1563.014728][T22938] kthread+0x388/0x470 [ 1563.020552][T22938] ret_from_fork+0x51e/0xb90 [ 1563.026816][T22938] ret_from_fork_asm+0x1a/0x30 [ 1563.033263][T22938] INITIAL USE at: [ 1563.037179][T22938] lock_acquire+0xf0/0x2e0 [ 1563.043183][T22938] _raw_spin_lock+0x2e/0x40 [ 1563.049292][T22938] evdev_handle_get_val+0x70/0x9f0 [ 1563.055996][T22938] evdev_ioctl_handler+0x127b/0x1fe0 [ 1563.062876][T22938] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1563.069921][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.076710][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.083148][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.091151][T22938] } [ 1563.093665][T22938] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1563.101840][T22938] [ 1563.101840][T22938] the dependencies between the lock to be acquired [ 1563.101852][T22938] and SOFTIRQ-irq-unsafe lock: [ 1563.115396][T22938] -> (tasklist_lock){.+.+}-{3:3} { [ 1563.120734][T22938] HARDIRQ-ON-R at: [ 1563.124910][T22938] lock_acquire+0xf0/0x2e0 [ 1563.131366][T22938] _raw_read_lock+0x36/0x50 [ 1563.138022][T22938] __do_wait+0xde/0x740 [ 1563.144202][T22938] do_wait+0x1e7/0x540 [ 1563.150386][T22938] kernel_wait+0xd6/0x1c0 [ 1563.156739][T22938] call_usermodehelper_exec_work+0xbe/0x230 [ 1563.164667][T22938] process_scheduled_works+0xb02/0x1830 [ 1563.172257][T22938] worker_thread+0xa50/0xfc0 [ 1563.178902][T22938] kthread+0x388/0x470 [ 1563.184990][T22938] ret_from_fork+0x51e/0xb90 [ 1563.191617][T22938] ret_from_fork_asm+0x1a/0x30 [ 1563.198495][T22938] SOFTIRQ-ON-R at: [ 1563.202671][T22938] lock_acquire+0xf0/0x2e0 [ 1563.209112][T22938] _raw_read_lock+0x36/0x50 [ 1563.215652][T22938] __do_wait+0xde/0x740 [ 1563.221843][T22938] do_wait+0x1e7/0x540 [ 1563.227926][T22938] kernel_wait+0xd6/0x1c0 [ 1563.234274][T22938] call_usermodehelper_exec_work+0xbe/0x230 [ 1563.242193][T22938] process_scheduled_works+0xb02/0x1830 [ 1563.249759][T22938] worker_thread+0xa50/0xfc0 [ 1563.256372][T22938] kthread+0x388/0x470 [ 1563.262454][T22938] ret_from_fork+0x51e/0xb90 [ 1563.269063][T22938] ret_from_fork_asm+0x1a/0x30 [ 1563.275853][T22938] INITIAL USE at: [ 1563.279943][T22938] lock_acquire+0xf0/0x2e0 [ 1563.286294][T22938] _raw_write_lock_irq+0x3d/0x50 [ 1563.293157][T22938] copy_process+0x247a/0x3cf0 [ 1563.299779][T22938] kernel_clone+0x248/0x8e0 [ 1563.306222][T22938] user_mode_thread+0x110/0x180 [ 1563.313008][T22938] rest_init+0x23/0x300 [ 1563.319102][T22938] start_kernel+0x385/0x3d0 [ 1563.325530][T22938] x86_64_start_reservations+0x24/0x30 [ 1563.332922][T22938] x86_64_start_kernel+0x143/0x1c0 [ 1563.339966][T22938] common_startup_64+0x13e/0x147 [ 1563.346832][T22938] INITIAL READ USE at: [ 1563.351351][T22938] lock_acquire+0xf0/0x2e0 [ 1563.358225][T22938] _raw_read_lock+0x36/0x50 [ 1563.365098][T22938] __do_wait+0xde/0x740 [ 1563.371616][T22938] do_wait+0x1e7/0x540 [ 1563.378047][T22938] kernel_wait+0xd6/0x1c0 [ 1563.384831][T22938] call_usermodehelper_exec_work+0xbe/0x230 [ 1563.393088][T22938] process_scheduled_works+0xb02/0x1830 [ 1563.401020][T22938] worker_thread+0xa50/0xfc0 [ 1563.407989][T22938] kthread+0x388/0x470 [ 1563.414508][T22938] ret_from_fork+0x51e/0xb90 [ 1563.421464][T22938] ret_from_fork_asm+0x1a/0x30 [ 1563.428595][T22938] } [ 1563.431279][T22938] ... key at: [] tasklist_lock+0x18/0x40 [ 1563.439280][T22938] ... acquired at: [ 1563.443290][T22938] _raw_read_lock+0x36/0x50 [ 1563.448002][T22938] send_sigurg+0x12b/0x420 [ 1563.452622][T22938] sk_send_sigurg+0x6c/0x2e0 [ 1563.457400][T22938] queue_oob+0x42c/0x4f0 [ 1563.461845][T22938] unix_stream_sendmsg+0xcb1/0xe80 [ 1563.467148][T22938] ____sys_sendmsg+0xa68/0xad0 [ 1563.472112][T22938] ___sys_sendmsg+0x2a5/0x360 [ 1563.476999][T22938] __sys_sendmsg+0x183/0x260 [ 1563.481772][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.487162][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.492204][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.498725][T22938] [ 1563.501082][T22938] -> (&f_owner->lock){....}-{3:3} { [ 1563.506407][T22938] INITIAL USE at: [ 1563.510403][T22938] lock_acquire+0xf0/0x2e0 [ 1563.516579][T22938] _raw_write_lock_irq+0x3d/0x50 [ 1563.523351][T22938] __f_setown+0x67/0x370 [ 1563.529355][T22938] generic_setlease+0xacf/0xff0 [ 1563.535962][T22938] do_fcntl_add_lease+0x35e/0x470 [ 1563.542763][T22938] fcntl_setlease+0x123/0x180 [ 1563.549212][T22938] do_fcntl+0x8b3/0x1a20 [ 1563.555209][T22938] do_compat_fcntl64+0x51e/0x7e0 [ 1563.561903][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.568856][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.575545][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.583633][T22938] INITIAL READ USE at: [ 1563.588070][T22938] lock_acquire+0xf0/0x2e0 [ 1563.594690][T22938] _raw_read_lock_irqsave+0x48/0x60 [ 1563.602088][T22938] send_sigurg+0x55/0x420 [ 1563.608617][T22938] sk_send_sigurg+0x6c/0x2e0 [ 1563.615404][T22938] queue_oob+0x42c/0x4f0 [ 1563.621858][T22938] unix_stream_sendmsg+0xcb1/0xe80 [ 1563.629184][T22938] ____sys_sendmsg+0xa68/0xad0 [ 1563.636140][T22938] ___sys_sendmsg+0x2a5/0x360 [ 1563.643009][T22938] __sys_sendmmsg+0x2e7/0x4e0 [ 1563.649871][T22938] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1563.657616][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.665004][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.672044][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.680564][T22938] } [ 1563.683164][T22938] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1563.692132][T22938] ... acquired at: [ 1563.696040][T22938] _raw_read_lock_irqsave+0x48/0x60 [ 1563.701439][T22938] send_sigio+0x38/0x370 [ 1563.705879][T22938] kill_fasync+0x24d/0x4d0 [ 1563.710492][T22938] lease_break_callback+0x26/0x30 [ 1563.715712][T22938] __break_lease+0x81c/0x1e80 [ 1563.720583][T22938] do_dentry_open+0x1010/0x14e0 [ 1563.725625][T22938] vfs_open+0x3b/0x340 [ 1563.729906][T22938] path_openat+0x2e08/0x3860 [ 1563.734694][T22938] do_file_open+0x23e/0x4a0 [ 1563.739398][T22938] do_sys_openat2+0x113/0x200 [ 1563.744272][T22938] __ia32_compat_sys_openat+0x131/0x160 [ 1563.750018][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.755512][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.760562][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.767091][T22938] [ 1563.769430][T22938] -> (&new->fa_lock){....}-{3:3} { [ 1563.774581][T22938] INITIAL USE at: [ 1563.778488][T22938] lock_acquire+0xf0/0x2e0 [ 1563.784501][T22938] _raw_write_lock_irq+0x3d/0x50 [ 1563.791020][T22938] fasync_remove_entry+0xf1/0x1c0 [ 1563.797635][T22938] __fput+0x8a5/0xa70 [ 1563.803208][T22938] task_work_run+0x1d9/0x270 [ 1563.809381][T22938] exit_to_user_mode_loop+0xed/0x480 [ 1563.816681][T22938] __do_fast_syscall_32+0x415/0x640 [ 1563.823459][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.829909][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.837822][T22938] INITIAL READ USE at: [ 1563.842163][T22938] lock_acquire+0xf0/0x2e0 [ 1563.848593][T22938] _raw_read_lock_irqsave+0x48/0x60 [ 1563.855814][T22938] kill_fasync+0x199/0x4d0 [ 1563.862251][T22938] __se_sys_vmsplice+0x100d/0x1490 [ 1563.869411][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.876640][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.883508][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.891854][T22938] } [ 1563.894364][T22938] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1563.903052][T22938] ... acquired at: [ 1563.906868][T22938] _raw_read_lock_irqsave+0x48/0x60 [ 1563.912264][T22938] kill_fasync+0x199/0x4d0 [ 1563.916900][T22938] evdev_pass_values+0x627/0xbd0 [ 1563.922029][T22938] evdev_events+0x1e6/0x340 [ 1563.926733][T22938] input_pass_values+0x288/0x890 [ 1563.932055][T22938] input_event_dispose+0x330/0x6b0 [ 1563.937357][T22938] input_inject_event+0x1dd/0x340 [ 1563.942569][T22938] evdev_write+0x325/0x4c0 [ 1563.947190][T22938] vfs_write+0x29a/0xb90 [ 1563.951634][T22938] ksys_write+0x150/0x270 [ 1563.956162][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.961551][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.966593][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.973114][T22938] [ 1563.975459][T22938] [ 1563.975459][T22938] stack backtrace: [ 1563.981365][T22938] CPU: 0 UID: 0 PID: 22938 Comm: syz.4.28568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.981390][T22938] Tainted: [L]=SOFTLOCKUP [ 1563.981397][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1563.981409][T22938] Call Trace: [ 1563.981417][T22938] [ 1563.981426][T22938] dump_stack_lvl+0xe8/0x150 [ 1563.981453][T22938] __lock_acquire+0x2a94/0x2cf0 [ 1563.981485][T22938] lock_acquire+0xf0/0x2e0 [ 1563.981506][T22938] ? kill_fasync+0x199/0x4d0 [ 1563.981538][T22938] _raw_read_lock_irqsave+0x48/0x60 [ 1563.981567][T22938] ? kill_fasync+0x199/0x4d0 [ 1563.981593][T22938] kill_fasync+0x199/0x4d0 [ 1563.981620][T22938] ? kill_fasync+0x53/0x4d0 [ 1563.981648][T22938] evdev_pass_values+0x627/0xbd0 [ 1563.981676][T22938] ? evdev_pass_values+0x651/0xbd0 [ 1563.981703][T22938] evdev_events+0x1e6/0x340 [ 1563.981726][T22938] ? evdev_events+0x79/0x340 [ 1563.981750][T22938] ? input_pass_values+0x8d/0x890 [ 1563.981773][T22938] input_pass_values+0x288/0x890 [ 1563.981798][T22938] ? input_handle_event+0x70c/0xf30 [ 1563.981818][T22938] input_event_dispose+0x330/0x6b0 [ 1563.981838][T22938] input_inject_event+0x1dd/0x340 [ 1563.981857][T22938] ? input_inject_event+0xb6/0x340 [ 1563.981878][T22938] evdev_write+0x325/0x4c0 [ 1563.981905][T22938] ? __pfx_evdev_write+0x10/0x10 [ 1563.981930][T22938] ? bpf_lsm_file_permission+0x9/0x20 [ 1563.981950][T22938] ? security_file_permission+0x75/0x260 [ 1563.981972][T22938] ? rw_verify_area+0x255/0x4d0 [ 1563.981999][T22938] ? __pfx_evdev_write+0x10/0x10 [ 1563.982024][T22938] vfs_write+0x29a/0xb90 [ 1563.982054][T22938] ? __pfx_vfs_write+0x10/0x10 [ 1563.982081][T22938] ? __fget_files+0x2a/0x420 [ 1563.982105][T22938] ? __fget_files+0x2a/0x420 [ 1563.982133][T22938] ? __fget_files+0x3a0/0x420 [ 1563.982156][T22938] ? __fget_files+0x2a/0x420 [ 1563.982181][T22938] ksys_write+0x150/0x270 [ 1563.982209][T22938] ? __pfx_ksys_write+0x10/0x10 [ 1563.982240][T22938] __do_fast_syscall_32+0x20d/0x640 [ 1563.982261][T22938] ? do_fast_syscall_32+0x33/0x70 [ 1563.982281][T22938] ? asm_int80_emulation+0x1a/0x20 [ 1563.982297][T22938] ? do_int80_emulation+0x274/0x4d0 [ 1563.982316][T22938] ? trace_irq_disable+0x3b/0x150 [ 1563.982342][T22938] do_fast_syscall_32+0x33/0x70 [ 1563.982362][T22938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.982384][T22938] RIP: 0023:0xf7f78f6c [ 1563.982400][T22938] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1563.982417][T22938] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1563.982435][T22938] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002200 [ 1563.982448][T22938] RDX: 0000000000000130 RSI: 0000000000000000 RDI: 0000000000000000 [ 1563.982459][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1563.982470][T22938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1563.982481][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.982498][T22938]