last executing test programs: 13m44.265209885s ago: executing program 1 (id=21475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f00000003c0)={0x80000003, 0xffffffffffffffff, 0xfffffffe}) 13m44.025507745s ago: executing program 1 (id=21481): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r0, 0x11d30, 0x0, 0x0, 0x0, 0x0) 13m43.872755485s ago: executing program 1 (id=21496): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 13m43.78819644s ago: executing program 1 (id=21488): creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8800, &(0x7f0000000100)={0x1, 0x2, 0x100000}, 0x20) 13m43.676621028s ago: executing program 1 (id=21491): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 13m43.377759176s ago: executing program 1 (id=21498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xe38, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) unshare(0x26020480) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x11, r0, 0x4}, 0x38) 13m42.864494062s ago: executing program 32 (id=21498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xe38, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) unshare(0x26020480) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x11, r0, 0x4}, 0x38) 7m21.815295729s ago: executing program 4 (id=28977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8000000000000000) 7m21.702112492s ago: executing program 4 (id=28981): r0 = io_uring_setup(0x1532, &(0x7f0000000200)={0x0, 0x850c, 0x1, 0x8000002, 0x1d4}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m20.787293426s ago: executing program 4 (id=28993): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001e40)={'syz1\x00', {0x4, 0x7, 0x5}, 0x36, [0x9, 0xe, 0x3, 0x1, 0xd, 0x4, 0x3c0, 0x1ff, 0x3, 0x9, 0x0, 0x180, 0x9, 0x0, 0x81, 0x80, 0x5e, 0x13, 0x9, 0x1, 0x10, 0x1, 0x94f1, 0x2, 0xfffffffa, 0xe36, 0x0, 0x3, 0x3, 0x0, 0x0, 0x40, 0x1, 0x7, 0x1, 0x20000000, 0x9, 0x9, 0x8, 0x3, 0x4, 0xd5d, 0x30d, 0x3, 0x6ea, 0x0, 0x6, 0x7, 0x3, 0x4, 0x8, 0x6, 0x0, 0xa1, 0x6c2e, 0x80000001, 0x3, 0x7fff, 0x3, 0x0, 0x200, 0x8465, 0x4, 0x7c4e], [0x7, 0x8, 0x40, 0x7fffffff, 0x1, 0x100, 0x9, 0x7, 0xfffff2a8, 0x87e, 0x6, 0x9, 0x7, 0x8375, 0x7fffffff, 0x4f8d900e, 0x1, 0x0, 0x2, 0x2, 0xf911, 0xf, 0x5, 0x10, 0xf, 0x9, 0x1, 0x7, 0x0, 0x5, 0x7, 0x3afd, 0x3, 0x2, 0x81, 0x0, 0xae, 0x6, 0x5, 0x5, 0x2, 0x5, 0x1, 0x2, 0x3, 0x0, 0x3, 0x4dc, 0x8000, 0x100, 0x5, 0xff, 0x5, 0xe0f, 0xfffffe01, 0x0, 0x400000, 0x8000, 0x7, 0x1, 0x277, 0x6, 0x7, 0xfd1e], [0xfff, 0xffff, 0x45cfcf91, 0x1, 0x2, 0x4, 0x5, 0x4, 0x9, 0x0, 0x2, 0x4, 0x4, 0xfffffe01, 0xa37, 0x800, 0x5, 0x3, 0x0, 0x6e39, 0x7737eed3, 0x5, 0x9, 0x9, 0xea, 0x7, 0x400, 0xb3c, 0x2, 0x9, 0x6df, 0x9, 0x3, 0x7, 0x7, 0x9, 0x8, 0x1292, 0xffffbca4, 0xc, 0x8, 0x935, 0x8, 0x40, 0x8, 0x7fffffff, 0x0, 0xb71, 0x800, 0x175d, 0x9, 0x3, 0x80000000, 0x7, 0x8, 0x7, 0x7, 0x4, 0x86, 0x5, 0x7, 0x0, 0x5, 0xcf], [0x9, 0x6, 0x5, 0x7, 0x9, 0x1000, 0x1, 0x3, 0x70, 0x5, 0x5, 0xffff, 0x5e1, 0xffffffa2, 0x4, 0x5, 0x3, 0x9, 0xbba6, 0x909a, 0x8, 0xfe1, 0xc, 0x5, 0x1000, 0x1ff, 0x8, 0x736b5931, 0x5, 0x401, 0x400, 0x7, 0xe0, 0x2, 0xc, 0xfffffff7, 0x3, 0x4c, 0xfffffffc, 0x6, 0x7fff, 0x24, 0xfff, 0xa2f, 0x7fffffff, 0xf, 0x3, 0x10001, 0x10, 0x0, 0x6, 0x77, 0x2, 0x6, 0x7f, 0xfffffffb, 0x0, 0x3, 0x7, 0x2, 0x7, 0x4, 0xd0, 0x10000]}, 0x45c) 7m20.732271825s ago: executing program 4 (id=28994): mknod$loop(&(0x7f000000db40)='./file0\x00', 0x400, 0x1) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x3beb44c, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0xd) 7m20.685550134s ago: executing program 4 (id=28995): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000080)) 7m20.296077856s ago: executing program 4 (id=28998): mmap(&(0x7f00003c9000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m20.078891135s ago: executing program 33 (id=28998): mmap(&(0x7f00003c9000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.873137508s ago: executing program 5 (id=36261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001040)={0x1, 0x0, [{0x580, 0x0, 0xfffffffffffffffc}]}) 4.509789991s ago: executing program 5 (id=36269): unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2, 0xff, 0x3, 0xe}, {0x2d, 0x0, 0x0, 0x1000}]}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 2.935156183s ago: executing program 5 (id=36300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd25, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x3, {@in6_addr=@mcast1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.603652589s ago: executing program 5 (id=36307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x3d70000, 0x0}) 2.141592517s ago: executing program 2 (id=36308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000480)={@void, @void, @ipv6=@icmpv6={0x3, 0x6, "8eb922", 0x12e, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1f, 0xe, "13c465e941074ffe16b81586462ed4211ccf53ceb30fccadb1c195ed4797d00a3fb4ad92ee58d40b19a3543f9d9b27332f8a8ebabb9c150f5c80a359dfccc8ea530726fc28584e845a47ffe80ce547e38b4e26dced568ea4a3ff8cf1c4d783166274273472e8e0a0934ee562acc94c"}, {0x18, 0x14, "9e7f0faa7d6125a49c6de15beb1a40f2ad4c5c30faf067e079e3043f82b69b9917542a70e8f8f9edf8cd178528097b572c7715690a4d50cc1fc089e2a9090b91afe979f28f4dc6f8a9158554624156d77be8eb579bedd169a827784f54cc843bc41dc90a4e9a94526bcd101fcb93fe22861c262e2d22dd22418da7420d81034a09004579e5b0b5286f85fa6434a16dc09b5a2eed744dc991c16d29ddb3a4a6"}, {0x2, 0x0, "eefc"}]}}}}, 0x156) 2.006182793s ago: executing program 2 (id=36310): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 1.88865714s ago: executing program 2 (id=36314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0002, 0x1000, 0xf000, 0x9, 0x1, 0x9, 0x81, 0x1, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0xa, 0x1, 0x4, 0x0, 0xe}, {0x1f000, 0x1000, 0x4, 0x4, 0x10, 0xa5, 0x4, 0x4e, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x3f, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0x9, 0x9, 0x84, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xd, 0xf, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x2, 0xf000, 0x0, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x1}, {0x100000, 0xd}, {0x80a0000, 0xff81}, 0xa0010022, 0x0, 0x6000, 0x401e1, 0x5, 0x0, 0x8000900, 0x1, [0xb, 0x2, 0x4, 0x3]}) 1.659262121s ago: executing program 2 (id=36317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xbedf, 0xc, 0x0, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x7fffffff, 0x4) 1.626976938s ago: executing program 6 (id=36320): socket$inet6(0x2d, 0x2, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x300, 0x2, 0x0, 0x0) 1.464130027s ago: executing program 6 (id=36322): syz_open_dev$loop(0x0, 0x101, 0x20000) socketpair$unix(0x1, 0x2, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) alarm(0x4000000000002) 1.335097672s ago: executing program 6 (id=36323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.164209853s ago: executing program 6 (id=36326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x30, r1, 0xd01, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x20000004) 1.137475472s ago: executing program 5 (id=36327): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x40, 0x0) 1.05635395s ago: executing program 6 (id=36328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x2}) 1.034657773s ago: executing program 3 (id=36329): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) close(r0) 857.645815ms ago: executing program 3 (id=36330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0002, 0x1000, 0xf000, 0x9, 0x1, 0x9, 0x81, 0x1, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0xa, 0x1, 0x4, 0x0, 0xe}, {0x1f000, 0x1000, 0x4, 0x4, 0x10, 0xa5, 0x4, 0x4e, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x3f, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0x9, 0x9, 0x84, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xd, 0xf, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x2, 0xf000, 0x0, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x1}, {0x100000, 0xd}, {0x80a0000, 0xff81}, 0xa0010022, 0x0, 0x6000, 0x401e1, 0x5, 0x0, 0x8000900, 0x1, [0xb, 0x2, 0x4, 0x3]}) 838.294799ms ago: executing program 0 (id=36331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xfc, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x2, 0x4) 829.137388ms ago: executing program 6 (id=36332): unshare(0x22020400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 824.255152ms ago: executing program 5 (id=36333): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigqueueinfo(0x0, 0x21, 0x0) 714.884374ms ago: executing program 0 (id=36334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x9000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) 596.867663ms ago: executing program 3 (id=36335): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x0, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) io_setup(0x10f5, &(0x7f0000000300)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000380)=[{}, {}, {}], 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8434}], 0x1, 0x0, 0x0, 0x0) 499.602391ms ago: executing program 2 (id=36336): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000040)) 435.278438ms ago: executing program 2 (id=36337): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) 433.549977ms ago: executing program 0 (id=36338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x3, 0x3d7}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 302.17909ms ago: executing program 0 (id=36339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x30, r1, 0xd01, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x20000004) 276.144314ms ago: executing program 3 (id=36340): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 173.990446ms ago: executing program 0 (id=36341): recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001dc0)=""/172, 0xac}], 0x2}, 0x10001}], 0x1, 0x12162, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 82.628605ms ago: executing program 3 (id=36342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r1, 0x382b59769e38e0c7, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 25.964372ms ago: executing program 0 (id=36343): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) write$FUSE_STATX(r0, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x5, 0xba92, 0x0, '\x00', {0x1000, 0xf, 0x2, 0x8, 0xee01, 0x0, 0x2000, '\x00', 0x80000000, 0x10000, 0xf, 0xde, {0x63, 0x9}, {0xcb, 0x2}, {0x5, 0x6}, {0x1000}, 0x4, 0x4, 0x80000000, 0xa}}}, 0x130) 0s ago: executing program 3 (id=36344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bc2d, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff240e}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x20040050) kernel console output (not intermixed with test programs): socket option. [ 1824.491164][T24376] Use struct sctp_assoc_value instead [ 1824.492061][T24446] usb 3-1: USB disconnect, device number 58 [ 1824.527158][T24446] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1824.596154][T24446] cp210x 3-1:0.0: device disconnected [ 1824.682067][T24403] loop6: detected capacity change from 0 to 524288000 [ 1824.716149][T24403] loop6: detected capacity change from 524288000 to 0 [ 1825.904032][T18248] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1826.065221][T18248] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1826.072760][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1826.085397][T18248] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1826.100309][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1826.111762][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1826.124314][T18248] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1826.131861][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1826.143273][T18248] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1826.155479][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1826.167256][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1826.180174][T18248] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1826.187959][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1826.199328][T18248] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1826.212482][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1826.225715][T18248] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1826.241217][T18248] usb 3-1: string descriptor 0 read error: -22 [ 1826.248092][T18248] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1826.257496][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.296508][T18248] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1826.506195][T18248] usb 3-1: USB disconnect, device number 59 [ 1826.715160][T24464] adutux: No device or device unplugged -19 [ 1828.179628][T24602] tmpfs: Unknown parameter '00000000000000000000003' [ 1829.325851][T24672] input: syz1 as /devices/virtual/input/input234 [ 1829.433076][T24680] netlink: 'syz.0.32292': attribute type 9 has an invalid length. [ 1829.441679][T24680] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.32292'. [ 1829.544600][T24682] kvm: kvm [24681]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 1830.969473][T24732] loop6: detected capacity change from 0 to 524288000 [ 1831.175156][T24732] loop6: detected capacity change from 524288000 to 0 [ 1831.753644][T18248] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1831.853396][T24767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32319'. [ 1831.862892][T24767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1831.905556][T18248] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1831.923659][T18248] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1831.942716][T18248] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.956512][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32320'. [ 1831.965976][T18248] usb 6-1: config 220 has no interface number 2 [ 1831.969432][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32320'. [ 1831.972396][T18248] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1832.024079][T18248] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1832.031890][T18248] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1832.043052][T18248] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1832.063822][T18248] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1832.075098][T18248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.083212][T18248] usb 6-1: Product: syz [ 1832.088227][T18248] usb 6-1: Manufacturer: syz [ 1832.092927][T18248] usb 6-1: SerialNumber: syz [ 1832.332876][T18248] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1832.354381][T18248] uvcvideo 6-1:220.0: No valid video chain found. [ 1832.372487][T18248] usb 6-1: selecting invalid altsetting 0 [ 1832.418859][T18248] usb 6-1: selecting invalid altsetting 0 [ 1832.442675][T18248] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1832.481522][T18248] usb 6-1: USB disconnect, device number 77 [ 1832.935912][ T29] audit: type=1326 audit(1771257576.396:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1832.968316][ T29] audit: type=1326 audit(1771257576.416:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.006132][ T29] audit: type=1326 audit(1771257576.426:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.064773][ T29] audit: type=1326 audit(1771257576.426:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.098779][ T29] audit: type=1326 audit(1771257576.426:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.122286][ T29] audit: type=1326 audit(1771257576.426:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.158967][ T29] audit: type=1326 audit(1771257576.426:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.191774][ T29] audit: type=1326 audit(1771257576.426:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.215019][ T29] audit: type=1326 audit(1771257576.426:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f78f87 code=0x7ffc0000 [ 1833.258775][ T29] audit: type=1326 audit(1771257576.426:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24832 comm="syz.3.32337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1833.475536][T24872] kvm: kvm [24871]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 1833.569646][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32344'. [ 1833.584741][T24878] netlink: 'syz.3.32344': attribute type 30 has an invalid length. [ 1834.663737][T18248] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1834.851068][T18248] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1834.863538][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.882161][T18248] usb 3-1: Product: syz [ 1834.892153][T18248] usb 3-1: Manufacturer: syz [ 1834.902260][T18248] usb 3-1: SerialNumber: syz [ 1834.923319][T18248] usb 3-1: config 0 descriptor?? [ 1835.190700][T18272] usb 3-1: USB disconnect, device number 60 [ 1835.436215][T24969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32366'. [ 1835.847365][T24993] tmpfs: Unknown parameter '5 lkTn[o$)-vJƴYLok;/;j' [ 1835.873949][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1836.058099][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.32375'. [ 1838.014139][T25165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.32416'. [ 1838.980602][ T29] audit: type=1800 audit(1771257582.436:6690): pid=25224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.32432" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1840.000505][T25290] tipc: Enabling of bearer rejected, already enabled [ 1840.977782][T25335] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1843.364557][ T29] audit: type=1800 audit(1771257586.826:6691): pid=25474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.32517" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1843.497100][T25478] netlink: 'syz.3.32520': attribute type 9 has an invalid length. [ 1844.885268][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32543'. [ 1844.896175][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32543'. [ 1845.585198][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32551'. [ 1845.596888][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32551'. [ 1845.693048][T25586] kvm: kvm [25585]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1845.783232][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32557'. [ 1845.793234][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32557'. [ 1847.089005][T25679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1847.096338][T25679] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.103655][T25679] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.110906][T25679] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.216852][T25686] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 1848.011635][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32604'. [ 1848.023137][T25731] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32604'. [ 1848.885619][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32618'. [ 1848.896247][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32618'. [ 1850.073158][T25851] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1850.085147][T25851] bond2 (unregistering): Released all slaves [ 1852.343612][T18248] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1852.513655][T18248] usb 3-1: Using ep0 maxpacket: 8 [ 1852.526557][T18248] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1852.536334][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.553883][T18248] usb 3-1: Product: syz [ 1852.558123][T18248] usb 3-1: Manufacturer: syz [ 1852.562729][T18248] usb 3-1: SerialNumber: syz [ 1852.574523][T18248] usb 3-1: config 0 descriptor?? [ 1852.746465][T26029] __nla_validate_parse: 2 callbacks suppressed [ 1852.746483][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32679'. [ 1852.807016][T18248] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1853.159158][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.165722][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.420483][T18248] usb write operation failed. (-71) [ 1853.438063][T18248] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1853.449408][T18248] dvbdev: DVB: registering new adapter (Terratec H7) [ 1853.456719][T18248] usb 3-1: media controller created [ 1853.462431][T18248] usb read operation failed. (-71) [ 1853.469103][T18248] usb write operation failed. (-71) [ 1853.487747][T18248] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1853.503903][T18248] usb 3-1: USB disconnect, device number 61 [ 1854.236278][T26083] input: syz1 as /devices/virtual/input/input237 [ 1854.333662][T18248] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1854.483602][T18248] usb 3-1: Using ep0 maxpacket: 32 [ 1854.490464][T18248] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1854.499035][T18248] usb 3-1: config 0 has no interface number 0 [ 1854.507489][T18248] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1854.520271][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.529751][T18248] usb 3-1: Product: syz [ 1854.534141][T18248] usb 3-1: Manufacturer: syz [ 1854.538758][T18248] usb 3-1: SerialNumber: syz [ 1854.546201][T18248] usb 3-1: config 0 descriptor?? [ 1854.554368][T18248] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1854.565112][T18248] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1854.758636][T26074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1854.767886][T18272] usb 3-1: USB disconnect, device number 62 [ 1854.925025][T26121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32706'. [ 1855.238797][T26137] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.32713'. [ 1855.574959][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.32722'. [ 1855.584231][T26155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.32722'. [ 1857.093108][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.32758'. [ 1857.802868][T26277] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x80) [ 1857.958529][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32774'. [ 1857.967965][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32774'. [ 1857.978276][T26289] netlink: 39 bytes leftover after parsing attributes in process `syz.2.32774'. [ 1858.142588][T26300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32779'. [ 1858.155171][T26300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32779'. [ 1858.673725][T18272] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1858.712791][ T29] audit: type=1326 audit(1771257602.166:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.735532][ T29] audit: type=1326 audit(1771257602.166:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.758570][ T29] audit: type=1326 audit(1771257602.166:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.782223][ T29] audit: type=1326 audit(1771257602.166:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.820441][ T29] audit: type=1326 audit(1771257602.166:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.848179][T18272] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 1858.856664][ T29] audit: type=1326 audit(1771257602.166:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.863585][T18272] usb 6-1: config 4 has no interface number 0 [ 1858.881314][ T29] audit: type=1326 audit(1771257602.166:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.894583][T18272] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1858.917812][T18272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.926048][T18272] usb 6-1: Product: syz [ 1858.930514][T18272] usb 6-1: Manufacturer: syz [ 1858.936451][T18272] usb 6-1: SerialNumber: syz [ 1858.944656][ T29] audit: type=1326 audit(1771257602.166:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.967195][ T29] audit: type=1326 audit(1771257602.166:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1858.994041][ T29] audit: type=1326 audit(1771257602.166:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.2.32787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1859.033130][T18272] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input239 [ 1859.203601][T18248] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1859.253071][ T5176] bcm5974 6-1:4.28: could not read from device [ 1859.272550][T18272] usb 6-1: USB disconnect, device number 78 [ 1859.288216][T26316] bcm5974 6-1:4.28: could not read from device [ 1859.346875][T14634] udevd[14634]: Error opening device "/dev/input/event4": No such device [ 1859.360378][T14634] udevd[14634]: Unable to EVIOCGABS device "/dev/input/event4" [ 1859.368127][T18248] usb 3-1: Using ep0 maxpacket: 8 [ 1859.374493][T14634] udevd[14634]: Unable to EVIOCGABS device "/dev/input/event4" [ 1859.384363][T18248] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1859.396004][T14634] udevd[14634]: Unable to EVIOCGABS device "/dev/input/event4" [ 1859.404033][T18248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.418277][T14634] udevd[14634]: Unable to EVIOCGABS device "/dev/input/event4" [ 1859.426396][T18248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.457380][T18248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1859.473029][T18248] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1859.482574][T18248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.507690][T18248] usb 3-1: config 0 descriptor?? [ 1859.896897][T26413] io-wq is not configured for unbound workers [ 1859.924526][T18248] redragon 0003:0C45:760B.0092: unknown main item tag 0x6 [ 1859.946955][T18248] redragon 0003:0C45:760B.0092: item fetching failed at offset 7/133 [ 1859.975785][T18248] redragon 0003:0C45:760B.0092: probe with driver redragon failed with error -22 [ 1860.078558][T26431] team0: Master is either lo or non-ether device [ 1860.127937][T18271] usb 3-1: USB disconnect, device number 63 [ 1860.412586][T26456] cifs: Unknown parameter 'fd' [ 1860.825251][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32824'. [ 1860.836632][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32824'. [ 1860.910301][T26489] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.32827'. [ 1861.196966][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32835'. [ 1861.294688][T26515] netlink: 2196 bytes leftover after parsing attributes in process `syz.2.32837'. [ 1861.730041][T26543] cifs: Unknown parameter 'fd' [ 1861.901087][T26556] kvm: kvm [26555]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200b7 [ 1862.534342][T26589] netlink: 'syz.0.32869': attribute type 7 has an invalid length. [ 1863.887151][T26674] netlink: 'syz.3.32892': attribute type 12 has an invalid length. [ 1863.913812][T26674] __nla_validate_parse: 6 callbacks suppressed [ 1863.913832][T26674] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.32892'. [ 1865.150051][T26756] input: syz1 as /devices/virtual/input/input241 [ 1865.494277][T26775] kvm: kvm [26774]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200b7 [ 1865.523085][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1865.523102][ T29] audit: type=1326 audit(1771257608.976:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.563283][ T29] audit: type=1326 audit(1771257608.986:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.588622][ T29] audit: type=1326 audit(1771257608.986:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.678388][ T29] audit: type=1326 audit(1771257608.986:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.783826][ T29] audit: type=1326 audit(1771257608.986:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.844976][ T29] audit: type=1326 audit(1771257608.986:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.872730][ T29] audit: type=1326 audit(1771257608.986:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.924100][ T29] audit: type=1326 audit(1771257608.986:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1865.967876][ T29] audit: type=1326 audit(1771257608.986:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26778 comm="syz.0.32934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1866.782343][T26853] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1866.788912][T26853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1866.797298][T26853] vhci_hcd vhci_hcd.0: Device attached [ 1867.043624][T18248] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1867.051325][T24446] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1867.087626][T26871] random: crng reseeded on system resumption [ 1867.227931][T18248] usb 6-1: config 0 has no interfaces? [ 1867.243245][T18248] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1867.255377][T18248] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1867.274005][T18248] usb 6-1: Manufacturer: syz [ 1867.289828][T18248] usb 6-1: config 0 descriptor?? [ 1867.578370][T26854] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1867.594372][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1867.599747][ T12] vhci_hcd vhci_hcd.5: release socket [ 1867.605438][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1867.616817][T18271] usb 6-1: USB disconnect, device number 79 [ 1868.217545][T26947] loop4: detected capacity change from 0 to 7 [ 1868.225352][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.233277][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.242158][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.250405][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.259031][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.267363][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.280298][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.288846][T26947] ldm_validate_partition_table(): Disk read failed. [ 1868.296183][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.307810][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.316368][T26947] Buffer I/O error on dev loop4, logical block 0, async page read [ 1868.326253][T26947] Dev loop4: unable to read RDB block 0 [ 1868.331991][T26947] loop4: unable to read partition table [ 1868.338546][T26947] loop4: partition table beyond EOD, truncated [ 1868.345214][T26947] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1868.378373][ T5191] ldm_validate_partition_table(): Disk read failed. [ 1868.385343][T18248] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1868.393230][ T5191] Dev loop4: unable to read RDB block 0 [ 1868.399851][ T5191] loop4: unable to read partition table [ 1868.407222][ T5191] loop4: partition table beyond EOD, truncated [ 1868.566060][T18248] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1868.575026][T18248] usb 3-1: config 7 has no interface number 0 [ 1868.583581][T18248] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1868.593057][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.603240][T18248] usb 3-1: Product: syz [ 1868.607640][T18248] usb 3-1: Manufacturer: syz [ 1868.612334][T18248] usb 3-1: SerialNumber: syz [ 1868.701106][T26962] veth1_to_team: entered promiscuous mode [ 1868.709341][T26962] veth1_to_team: left promiscuous mode [ 1869.073691][T18272] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1869.235218][T18272] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1869.258395][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.283588][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.304060][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.325504][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.334831][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.346298][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.357526][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.383769][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.400172][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.405452][T18248] as10x_usb: device has been detected [ 1869.413141][T18248] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1869.424704][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.441033][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.453071][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.459879][T18248] usb 3-1: DVB: registering adapter 6 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1869.474612][T26985] netlink: 'syz.6.32993': attribute type 9 has an invalid length. [ 1869.475392][T18248] as10x_usb: error during firmware upload part1 [ 1869.489918][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.32993'. [ 1869.490071][T18248] Registered device Elgato EyeTV DTT Deluxe [ 1869.500746][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.543903][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.564156][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.600881][T18248] usb 3-1: USB disconnect, device number 64 [ 1869.617145][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.630469][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.652551][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.660191][ T29] audit: type=1326 audit(1771257613.106:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.6.32994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1869.673056][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.711071][T18248] Unregistered device Elgato EyeTV DTT Deluxe [ 1869.717221][T18248] as10x_usb: device has been disconnected [ 1869.732272][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.756877][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.775995][T18272] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1869.794098][T18272] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.814121][T18272] usb 6-1: config 64 interface 0 has no altsetting 0 [ 1869.823320][T18272] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1869.834465][T18272] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1869.842923][T18272] usb 6-1: Product: syz [ 1869.848032][T18272] usb 6-1: Manufacturer: syz [ 1869.852680][T18272] usb 6-1: SerialNumber: syz [ 1869.889111][T18272] yurex 6-1:64.0: USB YUREX device now attached to Yurex #0 [ 1870.368275][T18248] usb 6-1: USB disconnect, device number 80 [ 1870.378692][T18248] yurex 6-1:64.0: USB YUREX #0 now disconnected [ 1871.822887][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.33024'. [ 1872.183640][T24446] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1872.277137][T27127] bridge0: port 1(syz_tun) entered blocking state [ 1872.293775][T27127] bridge0: port 1(syz_tun) entered disabled state [ 1872.303358][T27127] syz_tun: entered allmulticast mode [ 1872.311514][T27127] syz_tun: entered promiscuous mode [ 1872.663137][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1872.663157][ T29] audit: type=1326 audit(1771257616.116:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.713697][ T29] audit: type=1326 audit(1771257616.116:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.736611][ T29] audit: type=1326 audit(1771257616.156:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.760799][ T29] audit: type=1326 audit(1771257616.156:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.783732][ T29] audit: type=1326 audit(1771257616.156:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.823700][ T29] audit: type=1326 audit(1771257616.156:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.865818][ T29] audit: type=1326 audit(1771257616.156:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.888350][ T29] audit: type=1326 audit(1771257616.156:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.916504][ T29] audit: type=1326 audit(1771257616.156:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1872.938975][ T29] audit: type=1326 audit(1771257616.156:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27137 comm="syz.0.33037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1874.181893][T27188] netlink: 'syz.3.33057': attribute type 1 has an invalid length. [ 1874.193343][T27188] netlink: 'syz.3.33057': attribute type 2 has an invalid length. [ 1874.201830][T27188] netlink: 'syz.3.33057': attribute type 1 has an invalid length. [ 1877.268941][T27309] vlan5: entered allmulticast mode [ 1877.297104][T27309] veth0_to_bond: entered allmulticast mode [ 1877.981009][T27334] bridge0: port 1(syz_tun) entered blocking state [ 1877.996434][T27334] bridge0: port 1(syz_tun) entered disabled state [ 1878.003091][T27334] syz_tun: entered allmulticast mode [ 1878.021254][T27334] syz_tun: entered promiscuous mode [ 1878.703364][T27371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.33122'. [ 1878.716658][T27371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.33122'. [ 1878.754068][T18272] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1878.905610][T18272] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1878.914725][T18272] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1878.925783][T18272] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1878.935370][T18272] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1878.947218][T18272] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1878.960347][T18272] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1878.969814][T18272] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1878.977969][T18272] usb 6-1: Product: syz [ 1878.982264][T18272] usb 6-1: Manufacturer: syz [ 1878.994585][T18272] cdc_wdm 6-1:1.0: skipping garbage [ 1878.999835][T18272] cdc_wdm 6-1:1.0: skipping garbage [ 1879.006982][T18272] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1879.012912][T18272] cdc_wdm 6-1:1.0: Unknown control protocol [ 1879.249605][T27387] bridge0: port 2(syz_tun) entered blocking state [ 1879.257451][T27387] bridge0: port 2(syz_tun) entered disabled state [ 1879.265338][T27387] syz_tun: entered allmulticast mode [ 1879.331701][T27390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.33125'. [ 1879.453659][T18248] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1879.483339][ T29] audit: type=1326 audit(1771257622.936:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.509732][ T29] audit: type=1326 audit(1771257622.936:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.532810][ T29] audit: type=1326 audit(1771257622.966:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.555698][ T29] audit: type=1326 audit(1771257622.966:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.578544][ T29] audit: type=1326 audit(1771257622.966:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.601422][ T29] audit: type=1326 audit(1771257622.976:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.626320][ T29] audit: type=1326 audit(1771257622.976:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.651004][T18248] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.662435][ T29] audit: type=1326 audit(1771257622.976:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1879.685084][T18248] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.696900][T18248] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1879.706212][T18248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.714566][ T29] audit: type=1326 audit(1771257622.976:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27395 comm="syz.3.33127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1880.572267][T18248] hid-led 0003:27B8:01ED.0093: probe with driver hid-led failed with error -71 [ 1880.606190][T18248] usb 3-1: USB disconnect, device number 65 [ 1881.103136][ T29] audit: type=1326 audit(1771257624.556:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27436 comm="syz.6.33140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1881.221593][T27441] pimreg: entered allmulticast mode [ 1881.253212][T27441] pimreg: left allmulticast mode [ 1881.503567][T18272] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1881.537621][T18248] usb 6-1: USB disconnect, device number 81 [ 1881.663632][T18272] usb 3-1: Using ep0 maxpacket: 16 [ 1881.696250][T18272] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1881.705434][T18272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.718378][T18272] usb 3-1: Product: syz [ 1881.722598][T18272] usb 3-1: Manufacturer: syz [ 1881.743547][T18272] usb 3-1: SerialNumber: syz [ 1881.772452][T18272] usb 3-1: config 0 descriptor?? [ 1881.792944][T18272] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1881.990401][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33156'. [ 1881.999945][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33156'. [ 1882.011432][T27490] netlink: 'syz.0.33156': attribute type 13 has an invalid length. [ 1882.019910][T18272] gspca_sn9c2028: read1 error -32 [ 1882.037212][T18272] gspca_sn9c2028: read1 error -32 [ 1882.250123][T18248] usb 3-1: USB disconnect, device number 66 [ 1882.894330][T27530] kvm: user requested TSC rate below hardware speed [ 1883.163750][T27551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33174'. [ 1884.693175][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33203'. [ 1884.757011][T27629] kvm: kvm [27628]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1884.773630][T18248] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1884.937275][T18248] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1884.952689][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.971544][T18248] usb 3-1: Product: syz [ 1884.977372][T18248] usb 3-1: Manufacturer: syz [ 1884.982175][T18248] usb 3-1: SerialNumber: syz [ 1885.024253][T18248] usb 3-1: config 0 descriptor?? [ 1885.034632][T18248] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1885.680603][T18272] usb 3-1: USB disconnect, device number 67 [ 1886.611295][T27726] futex_wake_op: syz.6.33235 tries to shift op by -1; fix this program [ 1886.767269][T27740] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.33240'. [ 1886.933710][T18272] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1887.095709][T18272] usb 3-1: Using ep0 maxpacket: 32 [ 1887.107478][T18272] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1887.117781][T18272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.128103][T18272] usb 3-1: Product: syz [ 1887.132326][T18272] usb 3-1: Manufacturer: syz [ 1887.138094][T18272] usb 3-1: SerialNumber: syz [ 1887.150588][T18272] usb 3-1: config 0 descriptor?? [ 1887.165041][T18272] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1887.183052][T18272] dvb-usb: bulk message failed: -22 (4/0) [ 1887.193016][T18272] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1887.223929][T18272] dvb-usb: bulk message failed: -22 (5/0) [ 1887.229728][T18272] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1887.257129][T18272] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1887.274163][T18272] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1887.282339][T18272] usb 3-1: media controller created [ 1887.317416][T18272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1887.365294][T18272] usb 3-1: selecting invalid altsetting 3 [ 1887.371082][T18272] ttusb2: set interface to alts=3 failed [ 1887.419517][T18272] DVB: Unable to find symbol tda10086_attach() [ 1887.428999][T18272] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1887.439173][T18272] dvb-usb: bulk message failed: -22 (4/0) [ 1887.449282][T18272] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1887.469517][T18272] dvb-usb: bulk message failed: -22 (5/0) [ 1887.476421][T18272] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1887.493591][T18272] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1887.523252][T18272] usb 3-1: USB disconnect, device number 68 [ 1887.596241][T18272] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1888.003079][T27791] macvlan0: renamed from ip6gretap0 (while UP) [ 1888.167718][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33259'. [ 1888.603595][T18271] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1888.619013][T27827] dlm: non-version read from control device 34 [ 1888.757858][T18271] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1888.767449][T18271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.784052][T18271] usb 3-1: Product: syz [ 1888.788310][T18271] usb 3-1: Manufacturer: syz [ 1888.792945][T18271] usb 3-1: SerialNumber: syz [ 1888.799533][T27835] ptrace attach of "./syz-executor exec"[27836] was attempted by "./syz-executor exec"[27835] [ 1888.816242][T18271] usb 3-1: config 0 descriptor?? [ 1889.058471][T18272] usb 3-1: USB disconnect, device number 69 [ 1889.526632][T27884] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1890.778820][T27956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33311'. [ 1890.798756][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.33310'. [ 1890.879398][T27956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33311'. [ 1892.401045][T28011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33334'. [ 1892.492909][T28011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33334'. [ 1893.268856][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33349'. [ 1894.719623][T28130] batman_adv: batadv0: Adding interface: dummy0 [ 1894.744315][T28130] batman_adv: batadv0: The MTU of interface dummy0 is too small (1288) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.788343][T28130] batman_adv: batadv0: Interface activated: dummy0 [ 1894.884773][T28132] kvm: kvm [28131]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1895.335511][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33383'. [ 1895.439334][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33384'. [ 1895.450109][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33384'. [ 1895.814490][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33392'. [ 1898.277043][T28288] netlink: 'syz.2.33436': attribute type 1 has an invalid length. [ 1898.293716][T28288] netlink: 'syz.2.33436': attribute type 2 has an invalid length. [ 1898.312722][T28288] netlink: 'syz.2.33436': attribute type 1 has an invalid length. [ 1898.331088][T28288] netlink: 'syz.2.33436': attribute type 3 has an invalid length. [ 1898.349960][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33436'. [ 1898.707510][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.33443'. [ 1898.719536][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.33443'. [ 1901.021848][T28404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33476'. [ 1901.263737][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1901.263756][ T29] audit: type=1326 audit(1771257644.716:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.5.33478" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 1901.419544][T28429] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1902.005974][ T29] audit: type=1800 audit(1771257645.456:6766): pid=28463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33491" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=19545 res=0 errno=0 [ 1902.791429][ T29] audit: type=1326 audit(1771257646.246:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1902.855482][ T29] audit: type=1326 audit(1771257646.286:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1902.908545][ T29] audit: type=1326 audit(1771257646.286:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1902.936824][ T29] audit: type=1326 audit(1771257646.286:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1902.960102][ T29] audit: type=1326 audit(1771257646.286:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1902.984828][ T29] audit: type=1326 audit(1771257646.286:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1903.071268][ T29] audit: type=1326 audit(1771257646.286:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1903.113595][ T29] audit: type=1326 audit(1771257646.286:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28505 comm="syz.2.33511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1903.314884][T28516] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1903.499164][T28526] "syz.2.33516" (28526) uses obsolete ecb(arc4) skcipher [ 1903.509290][T28526] "syz.2.33516" (28526) uses obsolete ecb(arc4) skcipher [ 1903.565119][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33519'. [ 1903.637360][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33521'. [ 1904.069110][T18271] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1904.225178][T18271] usb 3-1: Using ep0 maxpacket: 8 [ 1904.233370][T18271] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1904.262719][T18271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.302611][T18271] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1904.323281][T18271] pvrusb2: ********** [ 1904.330655][T18271] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1904.341876][T18271] pvrusb2: Important functionality might not be entirely working. [ 1904.350336][T18271] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1904.362400][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1904.376655][T18271] pvrusb2: ********** [ 1904.500471][ T2346] pvrusb2: Invalid write control endpoint [ 1904.607236][ T2346] pvrusb2: Invalid write control endpoint [ 1904.641838][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1904.652445][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1904.661265][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1904.673649][ T2346] pvrusb2: Device being rendered inoperable [ 1904.679679][ T2346] cx25840 6-0044: Unable to detect h/w, assuming cx23887 [ 1904.687839][ T2346] cx25840 6-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1904.702800][T24446] usb 3-1: USB disconnect, device number 70 [ 1904.736081][ T2346] pvrusb2: Attached sub-driver cx25840 [ 1904.748076][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1904.773527][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1904.971735][T28601] vivid-002: disconnect [ 1904.977035][T28600] vivid-002: reconnect [ 1905.298575][T24446] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1905.463671][T24446] usb 6-1: Using ep0 maxpacket: 8 [ 1905.489676][T24446] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1905.505365][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1905.521105][T24446] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1905.533694][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1905.546062][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1905.559865][T24446] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1905.574201][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1905.600100][T24446] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1905.618725][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1905.636904][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1905.668628][T24446] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1905.682019][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1905.709523][T24446] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1905.741816][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1905.768550][T24446] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1905.794676][T24446] usb 6-1: string descriptor 0 read error: -22 [ 1905.801381][T24446] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1905.812669][T24446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.850194][T24446] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1905.886092][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.33553'. [ 1906.107359][T18271] usb 6-1: USB disconnect, device number 82 [ 1906.444410][T24446] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1906.606064][T24446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.624040][T24446] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1906.649122][T28687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33566'. [ 1906.660924][T24446] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1906.670805][T24446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1906.690557][T24446] usb 3-1: SerialNumber: syz [ 1906.844060][T28696] batman_adv: batadv0: Adding interface: macsec3 [ 1906.852115][T28696] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.902937][T28696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1906.929688][T24446] usb 3-1: 0:2 : does not exist [ 1906.936630][T28696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.947834][T24446] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 1906.984192][T28696] batman_adv: batadv0: Interface activated: macsec3 [ 1907.026773][T24446] usb 3-1: USB disconnect, device number 71 [ 1907.076882][T15271] udevd[15271]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.451856][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33582'. [ 1907.473387][T28745] netlink: 277 bytes leftover after parsing attributes in process `syz.3.33582'. [ 1907.482879][T28745] netlink: 277 bytes leftover after parsing attributes in process `syz.3.33582'. [ 1907.829466][T28763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33590'. [ 1908.817196][T28812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33609'. [ 1909.499559][T28849] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314752, 8, 0, 0, 0) [ 1909.595256][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1909.595278][ T29] audit: type=1326 audit(1771257653.056:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28851 comm="syz.5.33622" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 1909.892869][T28867] netlink: 'syz.2.33629': attribute type 2 has an invalid length. [ 1909.901404][T28867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.33629'. [ 1909.913746][T28867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1911.373655][T24446] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1911.527161][T24446] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.549748][T24446] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1911.567567][T24446] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1911.578626][T24446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1911.589437][T24446] usb 3-1: SerialNumber: syz [ 1911.823003][T24446] usb 3-1: 0:2 : does not exist [ 1911.884863][T24446] usb 3-1: USB disconnect, device number 72 [ 1911.926655][T15271] udevd[15271]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1911.944447][ T29] audit: type=1326 audit(1771257655.386:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1911.967926][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.33657'. [ 1911.985381][ T29] audit: type=1326 audit(1771257655.386:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.043552][ T29] audit: type=1326 audit(1771257655.386:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.083620][ T29] audit: type=1326 audit(1771257655.386:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.114753][ T29] audit: type=1326 audit(1771257655.386:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.138055][ T29] audit: type=1326 audit(1771257655.386:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.160457][ T29] audit: type=1326 audit(1771257655.386:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.183413][ T29] audit: type=1326 audit(1771257655.386:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.0.33656" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1912.717651][T28979] sctp: [Deprecated]: syz.3.33663 (pid 28979) Use of int in max_burst socket option. [ 1912.717651][T28979] Use struct sctp_assoc_value instead [ 1914.065295][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33695'. [ 1914.228810][T29064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33699'. [ 1914.391794][T29076] input: syz0 as /devices/virtual/input/input243 [ 1914.492011][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33706'. [ 1914.523643][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33706'. [ 1914.599507][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.605997][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.615250][T29090] kvm: kvm [29089]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 1915.840315][T29143] ALSA: mixer_oss: invalid OSS volume '' [ 1916.340121][T29164] kvm: kvm [29163]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 1916.427207][T29171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.33736'. [ 1916.807685][T18556] tipc: Subscription rejected, illegal request [ 1917.346736][ T29] audit: type=1326 audit(1771257660.806:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1917.399692][ T29] audit: type=1326 audit(1771257660.826:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1917.422538][ T29] audit: type=1326 audit(1771257660.826:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1917.445906][ T29] audit: type=1326 audit(1771257660.826:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1917.480120][ T29] audit: type=1326 audit(1771257660.826:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1917.523911][ T29] audit: type=1326 audit(1771257660.826:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29229 comm="syz.2.33757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 1918.898349][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33788'. [ 1919.422737][T29344] kvm: kvm [29343]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 1919.756169][T29364] VFS: Mount too revealing [ 1919.945993][T29376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.33815'. [ 1919.956712][T29376] netlink: 141 bytes leftover after parsing attributes in process `syz.6.33815'. [ 1920.145057][T29388] netlink: 116 bytes leftover after parsing attributes in process `syz.2.33819'. [ 1922.113866][T18271] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1922.186881][T29499] Attempt to restore checkpoint with obsolete wellknown handles [ 1922.199721][T29497] blkio.reset_stats is deprecated [ 1922.288350][T18271] usb 3-1: Using ep0 maxpacket: 32 [ 1922.295662][T18271] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1922.306000][T18271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.319456][T18271] usb 3-1: config 0 descriptor?? [ 1922.534514][T18271] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1922.557802][T18271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1922.569566][T18271] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1922.569621][T18271] usb 3-1: media controller created [ 1922.602814][T18271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1922.740422][T18271] az6027: usb out operation failed. (-71) [ 1922.748861][T18271] az6027: usb out operation failed. (-71) [ 1922.778205][T18271] stb0899_attach: Driver disabled by Kconfig [ 1922.785615][T18271] az6027: no front-end attached [ 1922.785615][T18271] [ 1922.796121][T18271] az6027: usb out operation failed. (-71) [ 1922.801896][T18271] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1922.814113][T18271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input244 [ 1922.837831][T18271] dvb-usb: schedule remote query interval to 400 msecs. [ 1922.846067][T18271] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1922.868463][T18271] usb 3-1: USB disconnect, device number 73 [ 1922.958314][T18271] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1923.541051][T29576] netlink: 'syz.6.33872': attribute type 46 has an invalid length. [ 1923.565051][T29576] netlink: 212868 bytes leftover after parsing attributes in process `syz.6.33872'. [ 1925.039400][T29633] syz.6.33895 (29633): drop_caches: 2 [ 1925.480818][T29660] netlink: 'syz.0.33905': attribute type 9 has an invalid length. [ 1926.038827][T29679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33913'. [ 1927.396053][T29757] netlink: 64 bytes leftover after parsing attributes in process `syz.3.33937'. [ 1927.637653][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33947'. [ 1927.709380][T29778] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1927.821998][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33952'. [ 1927.831458][T29786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33952'. [ 1929.469495][T29867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1929.514600][T29867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1931.990638][T29946] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1932.112543][T29949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34005'. [ 1932.745969][T29974] ipvlan0: entered promiscuous mode [ 1932.752950][T29974] ipvlan0: left promiscuous mode [ 1933.073341][T30001] kvm: user requested TSC rate below hardware speed [ 1934.028360][T30037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34034'. [ 1934.158586][T30042] cifs: Unknown parameter 'f' [ 1934.266306][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34037'. [ 1934.278493][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34037'. [ 1935.347360][T30076] syz.0.34049 (30076): drop_caches: 2 [ 1936.991927][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34079'. [ 1937.002638][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34079'. [ 1937.141979][T30157] netlink: 'syz.6.34082': attribute type 3 has an invalid length. [ 1937.152014][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34082'. [ 1937.311100][T30163] netlink: 212 bytes leftover after parsing attributes in process `syz.6.34084'. [ 1937.394835][T30165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1937.436451][T30170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1938.265872][T30211] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 1938.724456][ T29] audit: type=1326 audit(1771257682.186:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30231 comm="syz.0.34110" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 1938.789039][T30237] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1938.806439][T30237] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1939.193841][T24451] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1939.225050][ T29] audit: type=1326 audit(1771257682.686:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.255423][ T29] audit: type=1326 audit(1771257682.686:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.280617][ T29] audit: type=1326 audit(1771257682.686:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.304820][ T29] audit: type=1326 audit(1771257682.686:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.330219][ T29] audit: type=1326 audit(1771257682.686:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.356176][ T29] audit: type=1326 audit(1771257682.686:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf714572b code=0x7ffc0000 [ 1939.381055][ T29] audit: type=1326 audit(1771257682.686:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.405757][T24451] usb 3-1: Using ep0 maxpacket: 16 [ 1939.414237][T24451] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.426123][T24451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1939.426883][ T29] audit: type=1326 audit(1771257682.686:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.433193][T24451] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1939.469432][T24451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.492446][ T29] audit: type=1326 audit(1771257682.686:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30260 comm="syz.6.34123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1939.493023][T24451] usb 3-1: config 0 descriptor?? [ 1939.528799][T30268] netlink: 224 bytes leftover after parsing attributes in process `syz.6.34124'. [ 1939.538733][T30268] netlink: 220 bytes leftover after parsing attributes in process `syz.6.34124'. [ 1939.929872][T30293] IPv6: NLM_F_CREATE should be specified when creating new route [ 1939.961801][T24451] nzxt-smart2 0003:1E71:2009.0094: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1940.422475][T24446] usb 3-1: USB disconnect, device number 74 [ 1940.782701][T30350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1941.800698][T30409] IPv6: NLM_F_CREATE should be specified when creating new route [ 1942.388497][T30440] lo: Caught tx_queue_len zero misconfig [ 1942.817696][T30460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1943.513603][T24451] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1943.620825][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.34205'. [ 1943.714817][T24451] usb 3-1: config 0 has no interfaces? [ 1943.720579][T24451] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1943.730017][T24451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.749854][T24451] usb 3-1: config 0 descriptor?? [ 1944.012897][T24446] usb 3-1: USB disconnect, device number 75 [ 1944.369230][T30570] loop6: detected capacity change from 0 to 524287999 [ 1944.449560][T30576] netlink: 'syz.3.34223': attribute type 1 has an invalid length. [ 1944.476283][T30576] netlink: 'syz.3.34223': attribute type 2 has an invalid length. [ 1945.405063][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.34239'. [ 1945.594178][T30631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34241'. [ 1945.624372][T30631] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1946.530755][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34255'. [ 1947.868684][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34275'. [ 1947.899451][T30723] netlink: 56 bytes leftover after parsing attributes in process `syz.2.34275'. [ 1947.977674][T30720] batman_adv: batadv0: Interface deactivated: dummy0 [ 1948.022036][T30720] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1948.044301][T30720] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1948.059689][T30720] macsec1: left promiscuous mode [ 1948.065316][T30720] macsec1: left allmulticast mode [ 1948.243295][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34278'. [ 1948.274961][T30734] netlink: 64 bytes leftover after parsing attributes in process `syz.3.34279'. [ 1948.286197][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34278'. [ 1949.218831][T30791] netem: incorrect gi model size [ 1949.228062][T30791] netem: change failed [ 1949.752772][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1949.752792][ T29] audit: type=1326 audit(1771257693.206:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1949.800854][ T29] audit: type=1326 audit(1771257693.206:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1949.857745][ T29] audit: type=1326 audit(1771257693.216:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1949.890411][ T29] audit: type=1326 audit(1771257693.216:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1949.920542][ T29] audit: type=1326 audit(1771257693.216:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30822 comm="syz.0.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 1950.229490][T30842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34316'. [ 1950.267337][T30842] netlink: 'syz.0.34316': attribute type 15 has an invalid length. [ 1950.817450][T30881] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1950.907281][T30885] ALSA: mixer_oss: invalid OSS volume '' [ 1951.373011][ T29] audit: type=1800 audit(1771257694.826:6820): pid=30907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.34339" name="file1" dev="tmpfs" ino=20503 res=0 errno=0 [ 1951.889846][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.34344'. [ 1952.041381][T30953] netlink: 56 bytes leftover after parsing attributes in process `syz.5.34344'. [ 1952.335410][T30925] ip6gre1: left promiscuous mode [ 1952.340441][T30925] ip6gre1: left allmulticast mode [ 1952.346355][T30925] vlan3: left promiscuous mode [ 1952.351186][T30925] bridge0: left promiscuous mode [ 1952.357532][T30925] macsec1: left promiscuous mode [ 1952.362548][T30925] macsec1: left allmulticast mode [ 1952.368674][T30925] vlan4: left promiscuous mode [ 1952.374230][T30925] dummy0: left promiscuous mode [ 1952.379347][T30925] vlan4: left allmulticast mode [ 1952.384901][T30925] dummy0: left allmulticast mode [ 1952.390086][T30925] geneve2: left promiscuous mode [ 1952.395272][T30925] geneve2: left allmulticast mode [ 1952.400709][T30925] macsec2: left promiscuous mode [ 1952.405944][T30925] macsec2: left allmulticast mode [ 1952.411738][T30925] vlan5: left allmulticast mode [ 1952.418206][T30925] veth0_to_bond: left allmulticast mode [ 1952.435079][T30953] geneve3: entered promiscuous mode [ 1952.440352][T30953] geneve3: entered allmulticast mode [ 1952.447441][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.473241][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.502688][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.522996][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.908871][T31113] input: syz1 as /devices/virtual/input/input247 [ 1956.594833][T31149] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.34405'. [ 1956.605636][T31149] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1957.113601][T18248] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1957.267888][T18248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1957.280103][T18248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1957.294332][T18248] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1957.304104][T18248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.312212][T18248] usb 3-1: Product: syz [ 1957.333853][T18248] usb 3-1: Manufacturer: syz [ 1957.344678][T18248] usb 3-1: SerialNumber: syz [ 1957.373929][T18248] usb 3-1: config 0 descriptor?? [ 1957.397060][T18248] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1957.572081][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34420'. [ 1957.609582][T31195] netlink: 56 bytes leftover after parsing attributes in process `syz.6.34420'. [ 1957.659877][T31191] bridge2: left promiscuous mode [ 1957.685901][T31191] macsec1: left promiscuous mode [ 1957.787439][T31195] geneve2: entered promiscuous mode [ 1957.799568][T31195] geneve2: entered allmulticast mode [ 1957.826546][T24951] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.863687][T24951] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.872479][T24951] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.893639][T24951] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.911022][T18248] usb 3-1: USB disconnect, device number 76 [ 1958.642363][T31254] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1958.656594][T31257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34435'. [ 1958.667982][T31254] vlan0: left promiscuous mode [ 1958.674540][T31254] gretap0: left promiscuous mode [ 1958.679931][T31254] vlan1: left promiscuous mode [ 1958.685158][T31257] netlink: 56 bytes leftover after parsing attributes in process `syz.3.34435'. [ 1958.687679][T31254] geneve1: left promiscuous mode [ 1958.700341][T31254] vlan1: left allmulticast mode [ 1958.708067][T31254] geneve1: left allmulticast mode [ 1958.716062][T31254] macsec0: left promiscuous mode [ 1958.723177][T31254] macsec0: left allmulticast mode [ 1958.728808][T31254] macsec1: left promiscuous mode [ 1958.734100][T31254] macsec1: left allmulticast mode [ 1958.739550][T31254] vlan2: left allmulticast mode [ 1958.745470][T31254] bond0: left allmulticast mode [ 1958.750389][T31254] dummy0: left allmulticast mode [ 1958.756572][T31254] macsec2: left promiscuous mode [ 1958.762109][T31259] loop4: detected capacity change from 0 to 1 [ 1958.778753][ T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1958.789461][ T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1958.799457][ T59] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1958.801118][T15271] Dev loop4: unable to read RDB block 1 [ 1958.820490][T15271] loop4: unable to read partition table [ 1958.832098][T15271] loop4: partition table beyond EOD, truncated [ 1958.847841][T31259] Dev loop4: unable to read RDB block 1 [ 1958.854276][T31259] loop4: unable to read partition table [ 1958.864198][T31259] loop4: partition table beyond EOD, truncated [ 1958.871227][T31259] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1959.419154][T31293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34447'. [ 1960.899425][T31317] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.34451'. [ 1960.962627][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34450'. [ 1960.979120][T31315] tipc: Resetting bearer [ 1960.981169][T31319] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34450'. [ 1961.118232][T31315] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1961.126510][T31315] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 1961.140704][T31315] vti1: left promiscuous mode [ 1961.145562][T31315] vti1: left allmulticast mode [ 1961.154171][T31315] vlan2: left promiscuous mode [ 1961.159097][T31315] dummy0: left promiscuous mode [ 1961.165393][T31315] vlan2: left allmulticast mode [ 1961.170369][T31315] dummy0: left allmulticast mode [ 1961.176756][T31315] vlan3: left promiscuous mode [ 1961.181958][T31315] geneve1: left promiscuous mode [ 1961.187689][T31315] vlan3: left allmulticast mode [ 1961.192781][T31315] geneve1: left allmulticast mode [ 1961.198963][T31315] macvtap1: left promiscuous mode [ 1961.204396][T31315] macvtap1: left allmulticast mode [ 1961.209905][T31315] macsec1: left promiscuous mode [ 1961.215362][T31315] macsec1: left allmulticast mode [ 1961.220841][T31315] gtp2: left promiscuous mode [ 1961.225753][T31315] gtp2: left allmulticast mode [ 1961.243310][T31315] batman_adv: batadv0: Interface deactivated: macsec3 [ 1961.252565][T31325] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.34456'. [ 1961.695126][T31347] binder: 31346:31347 ioctl c018620c 80000000 returned -22 [ 1962.000140][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.008240][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.016670][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.025428][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.033014][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.042020][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.049927][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.057868][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.066178][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.074139][T24451] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1962.086306][T24451] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1962.232709][T31368] fido_id[31368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1962.763758][ T29] audit: type=1326 audit(1771257706.216:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1962.837014][ T29] audit: type=1326 audit(1771257706.216:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1962.902344][ T29] audit: type=1326 audit(1771257706.256:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1962.975219][ T29] audit: type=1326 audit(1771257706.256:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.024217][ T29] audit: type=1326 audit(1771257706.256:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.053106][ T29] audit: type=1326 audit(1771257706.266:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 1963.080182][ T29] audit: type=1326 audit(1771257706.266:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.107038][ T29] audit: type=1326 audit(1771257706.266:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.130504][ T29] audit: type=1326 audit(1771257706.266:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.196484][ T29] audit: type=1326 audit(1771257706.266:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31404 comm="syz.3.34486" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 1963.452397][T31433] bond0: Caught tx_queue_len zero misconfig [ 1963.458928][T31433] netlink: 'syz.6.34496': attribute type 10 has an invalid length. [ 1963.676027][T31442] cgroup: fork rejected by pids controller in /syz2 [ 1965.079575][T32470] dummy0: entered allmulticast mode [ 1965.094453][T32470] dummy0: left allmulticast mode [ 1966.163706][T32523] netlink: 'syz.3.34527': attribute type 10 has an invalid length. [ 1966.185150][T32523] team0: Device  is of different type [ 1966.375848][T32537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34532'. [ 1966.469939][T24451] hid-generic 0003:0004:0000.0096: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1966.571458][T18276] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1966.684420][T32553] fido_id[32553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1966.989253][T32588] fido_id[32588]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1968.686601][T32679] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1969.225207][T32716] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1969.790044][T32751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.34594'. [ 1970.053563][T18276] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1970.215740][T18276] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1970.232298][T18276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.244981][T18276] usb 3-1: config 0 descriptor?? [ 1970.254828][T18276] cp210x 3-1:0.0: cp210x converter detected [ 1970.650044][ T330] netlink: 'syz.5.34609': attribute type 2 has an invalid length. [ 1970.658692][ T330] netlink: 100 bytes leftover after parsing attributes in process `syz.5.34609'. [ 1970.669653][T18276] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1970.686914][T18276] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1970.896402][T18276] usb 3-1: USB disconnect, device number 77 [ 1970.908166][T18276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1970.926680][T18276] cp210x 3-1:0.0: device disconnected [ 1971.157543][ T367] netlink: 'syz.5.34615': attribute type 14 has an invalid length. [ 1973.420998][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34659'. [ 1973.457180][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34659'. [ 1973.700460][ T501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.34656'. [ 1973.722309][ T501] macvlan2: entered allmulticast mode [ 1973.728774][ T501] hsr0: entered allmulticast mode [ 1973.735343][ T501] hsr_slave_0: entered allmulticast mode [ 1973.741171][ T501] hsr_slave_1: entered allmulticast mode [ 1974.315651][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34677'. [ 1974.325972][ T542] netlink: 56 bytes leftover after parsing attributes in process `syz.3.34677'. [ 1975.685685][ T605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34702'. [ 1976.040127][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.046787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.074190][ T616] sctp: [Deprecated]: syz.5.34705 (pid 616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1976.074190][ T616] Use struct sctp_sack_info instead [ 1976.737287][ T642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34715'. [ 1976.751677][ T642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34715'. [ 1978.121225][ T724] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1979.447840][ T805] loop9: detected capacity change from 0 to 7 [ 1979.492209][ T805] Dev loop9: unable to read RDB block 7 [ 1979.503536][ T805] loop9: unable to read partition table [ 1979.509397][ T805] loop9: partition table beyond EOD, truncated [ 1979.543384][ T805] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1980.184716][ T849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34776'. [ 1981.492208][ T926] sch_tbf: burst 0 is lower than device lo mtu (65511) ! [ 1982.587034][ T985] netlink: 'syz.6.34818': attribute type 16 has an invalid length. [ 1982.604178][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.34818'. [ 1983.171510][ T1016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34828'. [ 1985.015913][ T1134] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.34860'. [ 1985.276525][ T1143] ip6tnl0: Caught tx_queue_len zero misconfig [ 1985.807735][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1985.807754][ T29] audit: type=1326 audit(1771257729.256:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1985.838367][ T29] audit: type=1326 audit(1771257729.266:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1985.871313][ T29] audit: type=1326 audit(1771257729.266:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1985.898868][ T29] audit: type=1326 audit(1771257729.326:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1985.923109][ T29] audit: type=1326 audit(1771257729.356:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1985.991806][ T29] audit: type=1326 audit(1771257729.356:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1986.038822][ T29] audit: type=1326 audit(1771257729.356:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1986.103680][ T29] audit: type=1326 audit(1771257729.356:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1986.142849][ T29] audit: type=1326 audit(1771257729.376:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1986.181081][ T29] audit: type=1326 audit(1771257729.376:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1171 comm="syz.5.34872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1986.926313][ T1252] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1986.935727][ T1252] batadv_slave_0: entered promiscuous mode [ 1987.929790][ T1314] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1988.916852][ T1347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34919'. [ 1988.998946][ T1342] cgroup: fork rejected by pids controller in /syz6 [ 1989.476452][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34923'. [ 1989.491256][ T2458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34923'. [ 1989.836717][ T3114] delete_channel: no stack [ 1991.213621][ T3267] kvm: kvm [3266]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 1993.017342][ T3367] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 1993.027396][ T3366] IPVS: stopping backup sync thread 3367 ... [ 1993.181358][ T3375] netlink: 'syz.2.34982': attribute type 5 has an invalid length. [ 1993.467858][ T3401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34988'. [ 1993.805492][ T3418] netlink: 'syz.5.34993': attribute type 2 has an invalid length. [ 1993.820476][ T3418] netlink: 16158 bytes leftover after parsing attributes in process `syz.5.34993'. [ 1993.846437][ T3420] input: syz0 as /devices/virtual/input/input249 [ 1995.601363][ T3519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35030'. [ 1996.593639][T18271] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1996.766726][T18271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.793617][T18271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.813496][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1996.813514][ T29] audit: type=1800 audit(1771257740.266:6851): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.35046" name="file0" dev="tmpfs" ino=21230 res=0 errno=0 [ 1996.840874][T18271] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1996.850371][T18271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.869896][T18271] usb 3-1: config 0 descriptor?? [ 1997.319645][T18271] hid_parser_main: 110 callbacks suppressed [ 1997.319668][T18271] arvo 0003:1E7D:30D4.0098: unknown main item tag 0x0 [ 1997.368071][T18271] arvo 0003:1E7D:30D4.0098: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1997.763838][T24442] usb 3-1: USB disconnect, device number 78 [ 1998.566726][ T3643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.35061'. [ 1999.303659][T24442] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1999.464041][T24442] usb 3-1: Using ep0 maxpacket: 16 [ 1999.471107][T24442] usb 3-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.483144][T24442] usb 3-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1999.499448][T24442] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1999.506472][T24442] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1999.516430][T24442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.535301][T24442] usb 3-1: config 0 descriptor?? [ 1999.957988][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: unknown main item tag 0x0 [ 1999.969780][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: unknown main item tag 0x0 [ 1999.978962][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: unknown main item tag 0x0 [ 1999.988303][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: unknown main item tag 0x0 [ 1999.998852][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: unknown main item tag 0x0 [ 2000.019735][T24442] aquacomputer_d5next 0003:0C70:F0B6.0099: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 2000.179567][T24442] usb 3-1: USB disconnect, device number 79 [ 2000.851103][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35093'. [ 2001.714585][ T3806] netlink: 56 bytes leftover after parsing attributes in process `syz.6.35104'. [ 2001.737917][ T3806] team0: Caught tx_queue_len zero misconfig [ 2002.836576][ T3858] tmpfs: Unknown parameter 'fd' [ 2004.795943][ T3962] netlink: 'syz.2.35150': attribute type 11 has an invalid length. [ 2004.850665][ T3962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35150'. [ 2005.206974][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35158'. [ 2005.861297][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35171'. [ 2005.886380][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35171'. [ 2005.911940][ T4021] vivid-001: disconnect [ 2005.942033][ T4019] vivid-001: reconnect [ 2006.653535][T18276] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2006.828979][T18276] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2006.844351][T18276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.874623][T18276] usb 6-1: config 0 descriptor?? [ 2006.900239][T18276] cp210x 6-1:0.0: cp210x converter detected [ 2007.428352][T18276] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2007.504607][T18276] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2007.775955][T18276] usb 6-1: USB disconnect, device number 83 [ 2007.807365][T18276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2007.861824][T18276] cp210x 6-1:0.0: device disconnected [ 2008.181712][ T4135] netlink: 27 bytes leftover after parsing attributes in process `syz.3.35207'. [ 2008.756725][ T4164] netlink: 'syz.0.35218': attribute type 1 has an invalid length. [ 2008.795542][ T4164] netlink: 'syz.0.35218': attribute type 2 has an invalid length. [ 2008.823701][ T4164] netlink: 'syz.0.35218': attribute type 1 has an invalid length. [ 2009.863876][T18276] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2010.025623][T18276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2010.035037][T18276] usb 3-1: config 0 has no interface number 0 [ 2010.064551][T18276] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2010.074649][T18276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.082684][T18276] usb 3-1: Product: syz [ 2010.097174][T18276] usb 3-1: Manufacturer: syz [ 2010.101835][T18276] usb 3-1: SerialNumber: syz [ 2010.126236][T18276] usb 3-1: config 0 descriptor?? [ 2010.204843][ T4257] netlink: 80 bytes leftover after parsing attributes in process `syz.6.35247'. [ 2010.245103][ T4259] : renamed from bond0 [ 2010.351019][T18276] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2010.368629][T18276] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2010.383835][T18276] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2010.392085][T18276] usb 3-1: media controller created [ 2010.414550][T18276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2010.552948][T18276] i2c i2c-6: ec100: i2c rd failed=-71 reg=33 [ 2010.593726][T18276] usb 3-1: USB disconnect, device number 80 [ 2010.687622][ T4295] netlink: 'syz.5.35255': attribute type 12 has an invalid length. [ 2010.697072][ T4295] netlink: 'syz.5.35255': attribute type 28 has an invalid length. [ 2010.705971][ T4295] netlink: 148 bytes leftover after parsing attributes in process `syz.5.35255'. [ 2012.338018][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35276'. [ 2013.213739][ T4392] macvlan0: entered promiscuous mode [ 2013.254885][ T4392] netlink: 'syz.5.35287': attribute type 2 has an invalid length. [ 2013.431998][ T4406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35295'. [ 2014.024683][ T4450] netlink: 'syz.0.35310': attribute type 11 has an invalid length. [ 2015.505175][T24451] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2015.673842][T24451] usb 6-1: Using ep0 maxpacket: 32 [ 2015.689731][T24451] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2015.709691][T24451] usb 6-1: config 0 has no interface number 0 [ 2015.750758][T24451] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2015.770393][T24451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.783685][T24451] usb 6-1: Product: syz [ 2015.787917][T24451] usb 6-1: Manufacturer: syz [ 2015.802886][T24451] usb 6-1: SerialNumber: syz [ 2015.824115][T24451] usb 6-1: config 0 descriptor?? [ 2015.836073][T24451] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2016.035442][T18276] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2016.055214][T24451] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2016.079834][T24451] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2016.195790][T18276] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2016.205139][T18276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.217336][T18276] usb 3-1: config 0 descriptor?? [ 2016.234514][T18276] cp210x 3-1:0.0: cp210x converter detected [ 2016.391922][ T4570] netlink: 'syz.0.35347': attribute type 1 has an invalid length. [ 2016.456827][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2016.458159][T24442] usb 6-1: USB disconnect, device number 84 [ 2016.483930][T24442] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2016.505207][T24442] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2016.523046][T24442] quatech2 6-1:0.51: device disconnected [ 2016.835667][T18276] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2016.851979][T18276] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2016.865079][T18276] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2016.876952][T18276] usb 3-1: USB disconnect, device number 81 [ 2016.895608][T18276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2016.907535][T18276] cp210x 3-1:0.0: device disconnected [ 2017.078332][ T4612] netlink: 44 bytes leftover after parsing attributes in process `syz.5.35352'. [ 2017.937932][ T4657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35369'. [ 2018.123062][ T4669] program syz.0.35372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2019.072865][ T4725] bond2: entered promiscuous mode [ 2019.129289][ T4766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35393'. [ 2019.139192][ T4766] netem: unknown loss type 13 [ 2019.145726][ T4766] netem: change failed [ 2019.150950][ T4761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.35391'. [ 2020.692775][T18556] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2020.707581][T18556] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2020.724760][T18556] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2020.734355][T18556] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2021.031652][ T4842] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 2023.354813][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35455'. [ 2023.685186][ T4998] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.35466'. [ 2024.174356][ T29] audit: type=1326 audit(1771257767.636:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.0.35474" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 2024.455717][ T5040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35481'. [ 2024.474227][ T5040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35481'. [ 2024.840908][ T5068] netlink: 'syz.6.35489': attribute type 16 has an invalid length. [ 2024.875107][ T5068] netlink: 64130 bytes leftover after parsing attributes in process `syz.6.35489'. [ 2026.039160][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35513'. [ 2026.109255][ T5135] netlink: 72 bytes leftover after parsing attributes in process `syz.0.35513'. [ 2026.384266][T18271] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2026.546184][T18271] usb 6-1: Using ep0 maxpacket: 16 [ 2026.558200][T18271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.571556][T18271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.583002][T18271] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2026.599855][T18271] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2026.612525][T18271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.642132][T18271] usb 6-1: config 0 descriptor?? [ 2026.725798][ T5194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35528'. [ 2027.188636][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.202351][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.230561][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.251232][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.251278][ T5224] Failed to get privilege flags for destination (handle=0x2:0x40) [ 2027.265569][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.279857][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.287492][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.295330][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.302795][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.324130][T18271] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 2027.395846][T18271] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.009A/input/input252 [ 2027.460006][T18271] microsoft 0003:045E:07DA.009A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2027.508757][T18271] usb 6-1: USB disconnect, device number 85 [ 2027.591694][ T5244] fido_id[5244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2030.372524][ T5384] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2030.395203][ T5384] bond4 (unregistering): Released all slaves [ 2030.873925][T18276] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2031.053640][T18276] usb 3-1: Using ep0 maxpacket: 8 [ 2031.075311][T18276] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 2031.097056][T18276] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 2031.125418][T18276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2031.132123][T18276] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 2031.142429][T18276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.284503][T18276] usb 3-1: config 0 descriptor?? [ 2031.786270][T18276] wacom 0003:056A:010E.009B: unbalanced collection at end of report description [ 2031.800163][T18276] wacom 0003:056A:010E.009B: parse failed [ 2031.806881][T18276] wacom 0003:056A:010E.009B: probe with driver wacom failed with error -22 [ 2031.999197][T24451] usb 3-1: USB disconnect, device number 82 [ 2032.816913][ T5582] usb usb8: usbfs: process 5582 (syz.6.35613) did not claim interface 0 before use [ 2033.464912][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35625'. [ 2033.690857][ T5629] netlink: 260 bytes leftover after parsing attributes in process `syz.2.35629'. [ 2033.963290][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35635'. [ 2034.226811][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.35638'. [ 2034.243937][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.6.35638'. [ 2034.623814][ T5678] netlink: 'syz.5.35642': attribute type 2 has an invalid length. [ 2034.632588][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35642'. [ 2034.665640][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35647'. [ 2034.808529][ T5678] bond4 (unregistering): Released all slaves [ 2036.046231][ T5810] netlink: 'syz.2.35667': attribute type 11 has an invalid length. [ 2036.073998][ T5810] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.35667'. [ 2037.007339][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35679'. [ 2037.435670][ T5866] netlink: 92 bytes leftover after parsing attributes in process `syz.2.35687'. [ 2037.479842][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.486333][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.567705][T24442] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2038.727358][T24442] usb 3-1: config 0 has no interfaces? [ 2038.733241][T24442] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2038.748158][T24442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.767044][T24442] usb 3-1: config 0 descriptor?? [ 2039.026234][T18271] usb 3-1: USB disconnect, device number 83 [ 2039.479187][ T5975] program syz.6.35719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2040.218686][ T6016] __nla_validate_parse: 2 callbacks suppressed [ 2040.218705][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35732'. [ 2040.759399][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35742'. [ 2040.779002][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35742'. [ 2043.693223][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35797'. [ 2043.716707][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35797'. [ 2043.877262][ T6225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.35802'. [ 2043.983884][ T6232] loop9: detected capacity change from 0 to 5 [ 2043.992448][ T6232] Dev loop9: unable to read RDB block 5 [ 2044.005092][ T6232] loop9: unable to read partition table [ 2044.013277][ T6232] loop9: partition table beyond EOD, truncated [ 2044.023227][ T6232] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2044.257091][ T6256] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 2044.304041][T24442] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 2044.494594][T24442] usb 3-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.512175][T24442] usb 3-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 2044.538781][T24442] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2044.548591][T24442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.557369][T24442] usb 3-1: Product: syz [ 2044.562672][T24442] usb 3-1: Manufacturer: syz [ 2044.568716][T24442] usb 3-1: SerialNumber: syz [ 2045.003489][T24442] usb 3-1: USB disconnect, device number 84 [ 2045.095999][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.35828'. [ 2045.163981][T18276] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2045.334769][T18276] usb 6-1: Using ep0 maxpacket: 32 [ 2045.341703][T18276] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2045.351406][T18276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.365653][T18276] usb 6-1: config 0 descriptor?? [ 2045.582209][T18276] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2045.597456][T18276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2045.608802][T18276] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2045.616563][T18276] usb 6-1: media controller created [ 2045.640386][T18276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2045.811289][T18276] az6027: usb out operation failed. (-71) [ 2045.827608][T18276] az6027: usb out operation failed. (-71) [ 2045.849056][T18276] stb0899_attach: Driver disabled by Kconfig [ 2045.863628][T18276] az6027: no front-end attached [ 2045.863628][T18276] [ 2045.879046][T18276] az6027: usb out operation failed. (-71) [ 2045.890317][T18276] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2045.913314][T18276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input254 [ 2045.938713][T18276] dvb-usb: schedule remote query interval to 400 msecs. [ 2045.959646][T18276] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2045.989971][T18276] usb 6-1: USB disconnect, device number 86 [ 2046.116060][T18276] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2046.716132][ T6369] netlink: 52 bytes leftover after parsing attributes in process `syz.3.35840'. [ 2047.803832][ T6433] vivid-000: disconnect [ 2048.260997][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35876'. [ 2048.511442][ T29] audit: type=1326 audit(1771257791.966:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.547054][ T29] audit: type=1326 audit(1771257791.966:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.570957][ T6430] vivid-000: reconnect [ 2048.610996][ T29] audit: type=1326 audit(1771257791.996:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.663761][ T29] audit: type=1326 audit(1771257791.996:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.698456][ T29] audit: type=1326 audit(1771257791.996:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.755637][ T6477] netlink: 'syz.0.35887': attribute type 11 has an invalid length. [ 2048.764209][ T29] audit: type=1326 audit(1771257792.046:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.774025][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35886'. [ 2048.810876][ T29] audit: type=1326 audit(1771257792.046:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.840464][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35886'. [ 2048.894785][ T29] audit: type=1326 audit(1771257792.046:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.918415][ T29] audit: type=1326 audit(1771257792.046:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2048.944152][ T29] audit: type=1326 audit(1771257792.046:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.2.35883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2049.119662][ T6492] random: crng reseeded on system resumption [ 2049.295703][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35896'. [ 2049.622129][ T6528] netlink: 52 bytes leftover after parsing attributes in process `syz.6.35905'. [ 2050.157686][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.35912'. [ 2050.535583][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35918'. [ 2051.436902][ T6608] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2051.444916][ T6608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2051.461669][ T6610] dummy0: entered allmulticast mode [ 2051.604155][T18276] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2051.670586][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35940'. [ 2051.778529][T18276] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 2051.798013][T18276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.827180][T18276] usb 3-1: config 0 descriptor?? [ 2051.846339][T18276] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2052.037946][T18276] gp8psk: usb in 128 operation failed. [ 2052.052369][T18276] gp8psk: usb in 137 operation failed. [ 2052.071370][T18276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2052.101774][T18276] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 2052.115917][T18276] usb 3-1: media controller created [ 2052.144873][T18276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2052.200220][T18276] gp8psk_fe: Frontend attached [ 2052.207771][T18276] usb 3-1: DVB: registering adapter 6 frontend 0 (Genpix DVB-S)... [ 2052.222152][T18276] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2052.537728][T18276] gp8psk: usb in 137 operation failed. [ 2052.556341][T18276] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 2052.571849][T18276] gp8psk: found Genpix USB device pID = 203 (hex) [ 2052.589110][T18276] usb 3-1: USB disconnect, device number 85 [ 2052.695892][T18276] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 2052.708330][ T6691] tipc: Started in network mode [ 2052.713249][ T6691] tipc: Node identity ac14140f, cluster identity 4711 [ 2052.728350][ T6691] tipc: New replicast peer: 255.255.255.255 [ 2052.736459][ T6691] tipc: Enabled bearer , priority 10 [ 2053.228969][ T6715] openvswitch: netlink: EtherType 50a is less than min 600 [ 2053.458896][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35963'. [ 2053.744457][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35972'. [ 2053.774748][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35972'. [ 2053.864072][T24445] tipc: Node number set to 2886997007 [ 2054.833227][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35991'. [ 2056.129270][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36015'. [ 2056.325677][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2056.325697][ T29] audit: type=1326 audit(1771257799.786:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.383901][ T29] audit: type=1326 audit(1771257799.816:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.438685][ T29] audit: type=1326 audit(1771257799.816:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.461218][ T29] audit: type=1326 audit(1771257799.816:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.491175][ T29] audit: type=1326 audit(1771257799.816:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.528078][ T29] audit: type=1326 audit(1771257799.816:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.607001][ T29] audit: type=1326 audit(1771257799.816:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.6.36021" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 2056.702879][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36010'. [ 2058.483533][ T7008] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2059.634620][T18271] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2059.793891][T18271] usb 3-1: Using ep0 maxpacket: 8 [ 2059.800674][T18271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.812026][T18271] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 2059.821332][T18271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.832538][T18271] usb 3-1: config 0 descriptor?? [ 2060.248082][T18271] hid_parser_main: 5 callbacks suppressed [ 2060.248107][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.261217][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.268861][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.276236][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.283215][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.290597][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.297731][T18271] belkin 0003:050D:3201.009C: unknown main item tag 0x0 [ 2060.314318][T18271] belkin 0003:050D:3201.009C: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 2060.483948][T18271] usb 3-1: USB disconnect, device number 86 [ 2060.540600][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36088'. [ 2061.999175][ T7157] trusted_key: encrypted_key: keyword 'date' not recognized [ 2063.794989][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36133'. [ 2064.071171][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36139'. [ 2064.090123][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36139'. [ 2064.102643][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36139'. [ 2064.692553][ T7355] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.36149'. [ 2065.031515][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36155'. [ 2065.063949][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36155'. [ 2065.206167][ T7374] netem: incorrect ge model size [ 2065.211986][ T7374] netem: change failed [ 2065.246983][ T7376] usb usb8: usbfs: process 7376 (syz.3.36158) did not claim interface 0 before use [ 2065.540739][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36162'. [ 2065.558873][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36162'. [ 2065.578625][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36162'. [ 2066.223347][ T7409] macvlan3: entered promiscuous mode [ 2066.263684][ T7409] bridge0: entered promiscuous mode [ 2066.864530][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.889528][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.898595][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.907932][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.915819][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.923338][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.936474][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.945070][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.952500][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.960462][T18276] hid-generic 00A0:0006:0003.009D: unknown main item tag 0x0 [ 2066.986049][T18276] hid-generic 00A0:0006:0003.009D: hidraw0: HID v0.05 Device [syz0] on syz0 [ 2067.283870][ T7447] random: crng reseeded on system resumption [ 2068.131591][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36195'. [ 2068.487207][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36201'. [ 2072.002586][ T7660] loop5: detected capacity change from 0 to 7 [ 2072.012228][ T7660] Dev loop5: unable to read RDB block 7 [ 2072.019484][ T7660] loop5: AHDI p1 [ 2072.023344][ T7660] loop5: partition table partially beyond EOD, truncated [ 2073.483726][ T7748] overlay: Unknown parameter 'f' [ 2074.146403][ T7790] program syz.0.36302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2076.999665][ T7926] [ 2077.002063][ T7926] ===================================================== [ 2077.009022][ T7926] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2077.016696][ T7926] syzkaller #0 Tainted: G L [ 2077.022703][ T7926] ----------------------------------------------------- [ 2077.029661][ T7926] syz.0.36343/7926 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2077.037423][ T7926] ffff88807cb81360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2077.046239][ T7926] [ 2077.046239][ T7926] and this task is already holding: [ 2077.053626][ T7926] ffff88802bf7e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2077.063431][ T7926] which would create a new lock dependency: [ 2077.069342][ T7926] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2077.077472][ T7926] [ 2077.077472][ T7926] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2077.086932][ T7926] (&dev->event_lock#2){..-.}-{3:3} [ 2077.086967][ T7926] [ 2077.086967][ T7926] ... which became SOFTIRQ-irq-safe at: [ 2077.099886][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.104418][ T7926] _raw_spin_lock_irqsave+0x40/0x60 [ 2077.109729][ T7926] input_inject_event+0xa5/0x340 [ 2077.114768][ T7926] led_trigger_event+0x138/0x210 [ 2077.119820][ T7926] kbd_bh+0x1f3/0x300 [ 2077.123920][ T7926] tasklet_action_common+0x2da/0x4b0 [ 2077.129311][ T7926] handle_softirqs+0x22a/0x870 [ 2077.134192][ T7926] __irq_exit_rcu+0x5f/0x150 [ 2077.138889][ T7926] irq_exit_rcu+0x9/0x30 [ 2077.143239][ T7926] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2077.148976][ T7926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2077.155086][ T7926] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2077.160831][ T7926] do_con_write+0x4243/0x5300 [ 2077.165617][ T7926] con_write+0x27/0x290 [ 2077.169892][ T7926] n_tty_write+0xd84/0x12a0 [ 2077.174506][ T7926] file_tty_write+0x559/0xa20 [ 2077.179301][ T7926] vfs_write+0x61d/0xb90 [ 2077.183667][ T7926] ksys_write+0x150/0x270 [ 2077.188117][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2077.193432][ T7926] do_fast_syscall_32+0x33/0x70 [ 2077.198403][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.204844][ T7926] [ 2077.204844][ T7926] to a SOFTIRQ-irq-unsafe lock: [ 2077.211898][ T7926] (tasklist_lock){.+.+}-{3:3} [ 2077.211928][ T7926] [ 2077.211928][ T7926] ... which became SOFTIRQ-irq-unsafe at: [ 2077.224607][ T7926] ... [ 2077.224616][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.231733][ T7926] _raw_read_lock+0x36/0x50 [ 2077.236353][ T7926] __do_wait+0xde/0x740 [ 2077.240617][ T7926] do_wait+0x1e7/0x540 [ 2077.244789][ T7926] kernel_wait+0xd6/0x1c0 [ 2077.249231][ T7926] call_usermodehelper_exec_work+0xbe/0x230 [ 2077.255230][ T7926] process_scheduled_works+0xb02/0x1830 [ 2077.260888][ T7926] worker_thread+0xa50/0xfc0 [ 2077.265592][ T7926] kthread+0x388/0x470 [ 2077.269777][ T7926] ret_from_fork+0x51e/0xb90 [ 2077.274470][ T7926] ret_from_fork_asm+0x1a/0x30 [ 2077.279372][ T7926] [ 2077.279372][ T7926] other info that might help us debug this: [ 2077.279372][ T7926] [ 2077.289614][ T7926] Chain exists of: [ 2077.289614][ T7926] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2077.289614][ T7926] [ 2077.303215][ T7926] Possible interrupt unsafe locking scenario: [ 2077.303215][ T7926] [ 2077.311555][ T7926] CPU0 CPU1 [ 2077.316948][ T7926] ---- ---- [ 2077.322335][ T7926] lock(tasklist_lock); [ 2077.326606][ T7926] local_irq_disable(); [ 2077.333393][ T7926] lock(&dev->event_lock#2); [ 2077.340719][ T7926] lock(&client->buffer_lock); [ 2077.348116][ T7926] [ 2077.351589][ T7926] lock(&dev->event_lock#2); [ 2077.356467][ T7926] [ 2077.356467][ T7926] *** DEADLOCK *** [ 2077.356467][ T7926] [ 2077.364631][ T7926] 7 locks held by syz.0.36343/7926: [ 2077.369841][ T7926] #0: ffff88802bace118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 2077.379015][ T7926] #1: ffff88801f3a0230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2077.389139][ T7926] #2: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2077.398842][ T7926] #3: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2077.408442][ T7926] #4: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2077.417631][ T7926] #5: ffff88802bf7e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2077.427879][ T7926] #6: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2077.436977][ T7926] [ 2077.436977][ T7926] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2077.447411][ T7926] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2077.453101][ T7926] IN-SOFTIRQ-W at: [ 2077.457328][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.463606][ T7926] _raw_spin_lock_irqsave+0x40/0x60 [ 2077.470667][ T7926] input_inject_event+0xa5/0x340 [ 2077.477461][ T7926] led_trigger_event+0x138/0x210 [ 2077.484257][ T7926] kbd_bh+0x1f3/0x300 [ 2077.490089][ T7926] tasklet_action_common+0x2da/0x4b0 [ 2077.497254][ T7926] handle_softirqs+0x22a/0x870 [ 2077.503871][ T7926] __irq_exit_rcu+0x5f/0x150 [ 2077.510310][ T7926] irq_exit_rcu+0x9/0x30 [ 2077.516398][ T7926] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2077.523908][ T7926] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2077.532009][ T7926] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2077.539493][ T7926] do_con_write+0x4243/0x5300 [ 2077.546008][ T7926] con_write+0x27/0x290 [ 2077.552108][ T7926] n_tty_write+0xd84/0x12a0 [ 2077.558498][ T7926] file_tty_write+0x559/0xa20 [ 2077.565062][ T7926] vfs_write+0x61d/0xb90 [ 2077.571170][ T7926] ksys_write+0x150/0x270 [ 2077.577450][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2077.584497][ T7926] do_fast_syscall_32+0x33/0x70 [ 2077.591202][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.599375][ T7926] INITIAL USE at: [ 2077.603383][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.609571][ T7926] _raw_spin_lock_irqsave+0x40/0x60 [ 2077.616530][ T7926] input_inject_event+0xa5/0x340 [ 2077.623229][ T7926] kbd_led_trigger_activate+0xbc/0x100 [ 2077.630454][ T7926] led_trigger_set+0x535/0x960 [ 2077.636981][ T7926] led_trigger_set_default+0x260/0x2a0 [ 2077.644200][ T7926] led_classdev_register_ext+0x787/0x9c0 [ 2077.651600][ T7926] input_leds_connect+0x517/0x790 [ 2077.658383][ T7926] input_register_device+0xd00/0x1160 [ 2077.665526][ T7926] atkbd_connect+0x731/0xa50 [ 2077.671882][ T7926] serio_driver_probe+0x82/0xd0 [ 2077.678491][ T7926] really_probe+0x267/0xaf0 [ 2077.684759][ T7926] __driver_probe_device+0x18c/0x320 [ 2077.691818][ T7926] driver_probe_device+0x4f/0x240 [ 2077.698609][ T7926] __driver_attach+0x3e7/0x710 [ 2077.705127][ T7926] bus_for_each_dev+0x23b/0x2c0 [ 2077.711729][ T7926] serio_handle_event+0x20a/0xdd0 [ 2077.718510][ T7926] process_scheduled_works+0xb02/0x1830 [ 2077.725810][ T7926] worker_thread+0xa50/0xfc0 [ 2077.732180][ T7926] kthread+0x388/0x470 [ 2077.738004][ T7926] ret_from_fork+0x51e/0xb90 [ 2077.744496][ T7926] ret_from_fork_asm+0x1a/0x30 [ 2077.751051][ T7926] } [ 2077.753684][ T7926] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2077.762856][ T7926] -> (&client->buffer_lock){....}-{3:3} { [ 2077.768637][ T7926] INITIAL USE at: [ 2077.772550][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.778556][ T7926] _raw_spin_lock+0x2e/0x40 [ 2077.784658][ T7926] evdev_handle_get_val+0x70/0x9f0 [ 2077.791371][ T7926] evdev_ioctl_handler+0x127b/0x1fe0 [ 2077.798266][ T7926] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2077.805320][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2077.812111][ T7926] do_fast_syscall_32+0x33/0x70 [ 2077.818543][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.826465][ T7926] } [ 2077.828976][ T7926] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2077.837172][ T7926] ... acquired at: [ 2077.840997][ T7926] _raw_spin_lock+0x2e/0x40 [ 2077.845712][ T7926] evdev_handle_get_val+0x70/0x9f0 [ 2077.851023][ T7926] evdev_ioctl_handler+0x127b/0x1fe0 [ 2077.856511][ T7926] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2077.862941][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2077.868330][ T7926] do_fast_syscall_32+0x33/0x70 [ 2077.873460][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.880010][ T7926] [ 2077.882356][ T7926] [ 2077.882356][ T7926] the dependencies between the lock to be acquired [ 2077.882366][ T7926] and SOFTIRQ-irq-unsafe lock: [ 2077.895911][ T7926] -> (tasklist_lock){.+.+}-{3:3} { [ 2077.901269][ T7926] HARDIRQ-ON-R at: [ 2077.905439][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.911897][ T7926] _raw_read_lock+0x36/0x50 [ 2077.918453][ T7926] __do_wait+0xde/0x740 [ 2077.924629][ T7926] do_wait+0x1e7/0x540 [ 2077.930765][ T7926] kernel_wait+0xd6/0x1c0 [ 2077.937122][ T7926] call_usermodehelper_exec_work+0xbe/0x230 [ 2077.945066][ T7926] process_scheduled_works+0xb02/0x1830 [ 2077.953167][ T7926] worker_thread+0xa50/0xfc0 [ 2077.959779][ T7926] kthread+0x388/0x470 [ 2077.965865][ T7926] ret_from_fork+0x51e/0xb90 [ 2077.972480][ T7926] ret_from_fork_asm+0x1a/0x30 [ 2077.979270][ T7926] SOFTIRQ-ON-R at: [ 2077.983455][ T7926] lock_acquire+0xf0/0x2e0 [ 2077.989920][ T7926] _raw_read_lock+0x36/0x50 [ 2077.996451][ T7926] __do_wait+0xde/0x740 [ 2078.002639][ T7926] do_wait+0x1e7/0x540 [ 2078.008730][ T7926] kernel_wait+0xd6/0x1c0 [ 2078.015098][ T7926] call_usermodehelper_exec_work+0xbe/0x230 [ 2078.023017][ T7926] process_scheduled_works+0xb02/0x1830 [ 2078.030780][ T7926] worker_thread+0xa50/0xfc0 [ 2078.037407][ T7926] kthread+0x388/0x470 [ 2078.043497][ T7926] ret_from_fork+0x51e/0xb90 [ 2078.050109][ T7926] ret_from_fork_asm+0x1a/0x30 [ 2078.056936][ T7926] INITIAL USE at: [ 2078.061051][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.067397][ T7926] _raw_write_lock_irq+0x3d/0x50 [ 2078.074262][ T7926] copy_process+0x247a/0x3cf0 [ 2078.080870][ T7926] kernel_clone+0x248/0x8e0 [ 2078.087308][ T7926] user_mode_thread+0x110/0x180 [ 2078.094180][ T7926] rest_init+0x23/0x300 [ 2078.100284][ T7926] start_kernel+0x385/0x3d0 [ 2078.106714][ T7926] x86_64_start_reservations+0x24/0x30 [ 2078.114108][ T7926] x86_64_start_kernel+0x143/0x1c0 [ 2078.121157][ T7926] common_startup_64+0x13e/0x147 [ 2078.128030][ T7926] INITIAL READ USE at: [ 2078.132550][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.139327][ T7926] _raw_read_lock+0x36/0x50 [ 2078.146204][ T7926] __do_wait+0xde/0x740 [ 2078.152725][ T7926] do_wait+0x1e7/0x540 [ 2078.159161][ T7926] kernel_wait+0xd6/0x1c0 [ 2078.165884][ T7926] call_usermodehelper_exec_work+0xbe/0x230 [ 2078.174157][ T7926] process_scheduled_works+0xb02/0x1830 [ 2078.182072][ T7926] worker_thread+0xa50/0xfc0 [ 2078.189033][ T7926] kthread+0x388/0x470 [ 2078.195467][ T7926] ret_from_fork+0x51e/0xb90 [ 2078.202420][ T7926] ret_from_fork_asm+0x1a/0x30 [ 2078.209550][ T7926] } [ 2078.212231][ T7926] ... key at: [] tasklist_lock+0x18/0x40 [ 2078.220144][ T7926] ... acquired at: [ 2078.224130][ T7926] _raw_read_lock+0x36/0x50 [ 2078.228827][ T7926] send_sigurg+0x12b/0x420 [ 2078.233437][ T7926] sk_send_sigurg+0x6c/0x2e0 [ 2078.238217][ T7926] queue_oob+0x42c/0x4f0 [ 2078.242648][ T7926] unix_stream_sendmsg+0xcb1/0xe80 [ 2078.247949][ T7926] ____sys_sendmsg+0xa68/0xad0 [ 2078.252902][ T7926] ___sys_sendmsg+0x2a5/0x360 [ 2078.257792][ T7926] __sys_sendmsg+0x183/0x260 [ 2078.262573][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.267972][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.273019][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.279545][ T7926] [ 2078.281895][ T7926] -> (&f_owner->lock){....}-{3:3} { [ 2078.287207][ T7926] INITIAL USE at: [ 2078.291198][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.297372][ T7926] _raw_write_lock_irq+0x3d/0x50 [ 2078.304068][ T7926] __f_setown+0x67/0x370 [ 2078.310099][ T7926] generic_setlease+0xacf/0xff0 [ 2078.316723][ T7926] do_fcntl_add_lease+0x35e/0x470 [ 2078.323514][ T7926] fcntl_setlease+0x123/0x180 [ 2078.329957][ T7926] do_fcntl+0x8b3/0x1a20 [ 2078.335971][ T7926] do_compat_fcntl64+0x51e/0x7e0 [ 2078.342680][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.349634][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.356323][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.364414][ T7926] INITIAL READ USE at: [ 2078.368853][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.375469][ T7926] _raw_read_lock_irqsave+0x48/0x60 [ 2078.382865][ T7926] send_sigio+0x38/0x370 [ 2078.389322][ T7926] dnotify_handle_event+0x169/0x440 [ 2078.396712][ T7926] fsnotify+0x1831/0x1ae0 [ 2078.403240][ T7926] vfs_set_acl+0xb09/0xc00 [ 2078.409859][ T7926] filename_setxattr+0x305/0x630 [ 2078.416990][ T7926] path_setxattrat+0x3eb/0x440 [ 2078.423941][ T7926] __ia32_sys_setxattr+0xbc/0xe0 [ 2078.431079][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.438473][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.445515][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.454044][ T7926] } [ 2078.456649][ T7926] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2078.465616][ T7926] ... acquired at: [ 2078.469539][ T7926] _raw_read_lock_irqsave+0x48/0x60 [ 2078.474936][ T7926] send_sigio+0x38/0x370 [ 2078.479379][ T7926] kill_fasync+0x24d/0x4d0 [ 2078.483998][ T7926] lease_break_callback+0x26/0x30 [ 2078.489216][ T7926] __break_lease+0x81c/0x1e80 [ 2078.494084][ T7926] do_dentry_open+0x1010/0x14e0 [ 2078.499135][ T7926] vfs_open+0x3b/0x340 [ 2078.503400][ T7926] path_openat+0x2e08/0x3860 [ 2078.508197][ T7926] do_file_open+0x23e/0x4a0 [ 2078.512904][ T7926] do_sys_openat2+0x113/0x200 [ 2078.517777][ T7926] __ia32_compat_sys_openat+0x131/0x160 [ 2078.523531][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.528928][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.533970][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.540495][ T7926] [ 2078.542843][ T7926] -> (&new->fa_lock){....}-{3:3} { [ 2078.547995][ T7926] INITIAL USE at: [ 2078.551904][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.557912][ T7926] _raw_write_lock_irq+0x3d/0x50 [ 2078.564432][ T7926] fasync_remove_entry+0xf1/0x1c0 [ 2078.571053][ T7926] __fput+0x8a5/0xa70 [ 2078.576628][ T7926] task_work_run+0x1d9/0x270 [ 2078.582806][ T7926] exit_to_user_mode_loop+0xed/0x480 [ 2078.589688][ T7926] __do_fast_syscall_32+0x415/0x640 [ 2078.596479][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.602916][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.610833][ T7926] INITIAL READ USE at: [ 2078.615185][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.621628][ T7926] _raw_read_lock_irqsave+0x48/0x60 [ 2078.628857][ T7926] kill_fasync+0x199/0x4d0 [ 2078.635303][ T7926] pipe_release+0x19c/0x330 [ 2078.641823][ T7926] __fput+0x44f/0xa70 [ 2078.647820][ T7926] task_work_run+0x1d9/0x270 [ 2078.654426][ T7926] exit_to_user_mode_loop+0xed/0x480 [ 2078.661730][ T7926] __do_fast_syscall_32+0x415/0x640 [ 2078.668951][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.675818][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.684180][ T7926] } [ 2078.686710][ T7926] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2078.695402][ T7926] ... acquired at: [ 2078.699221][ T7926] _raw_read_lock_irqsave+0x48/0x60 [ 2078.704647][ T7926] kill_fasync+0x199/0x4d0 [ 2078.709263][ T7926] evdev_pass_values+0x627/0xbd0 [ 2078.714397][ T7926] evdev_events+0x1e6/0x340 [ 2078.719108][ T7926] input_pass_values+0x288/0x890 [ 2078.724233][ T7926] input_event_dispose+0x330/0x6b0 [ 2078.729541][ T7926] input_inject_event+0x1dd/0x340 [ 2078.734755][ T7926] evdev_write+0x325/0x4c0 [ 2078.739371][ T7926] vfs_write+0x29a/0xb90 [ 2078.743815][ T7926] ksys_write+0x150/0x270 [ 2078.748341][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.753738][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.758780][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.765310][ T7926] [ 2078.767652][ T7926] [ 2078.767652][ T7926] stack backtrace: [ 2078.773555][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.0.36343 Tainted: G L syzkaller #0 PREEMPT(full) [ 2078.773580][ T7926] Tainted: [L]=SOFTLOCKUP [ 2078.773587][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2078.773598][ T7926] Call Trace: [ 2078.773608][ T7926] [ 2078.773616][ T7926] dump_stack_lvl+0xe8/0x150 [ 2078.773642][ T7926] __lock_acquire+0x2a94/0x2cf0 [ 2078.773674][ T7926] lock_acquire+0xf0/0x2e0 [ 2078.773694][ T7926] ? kill_fasync+0x199/0x4d0 [ 2078.773724][ T7926] _raw_read_lock_irqsave+0x48/0x60 [ 2078.773752][ T7926] ? kill_fasync+0x199/0x4d0 [ 2078.773778][ T7926] kill_fasync+0x199/0x4d0 [ 2078.773804][ T7926] ? kill_fasync+0x53/0x4d0 [ 2078.773830][ T7926] evdev_pass_values+0x627/0xbd0 [ 2078.773857][ T7926] ? evdev_pass_values+0x651/0xbd0 [ 2078.773883][ T7926] evdev_events+0x1e6/0x340 [ 2078.773905][ T7926] ? evdev_events+0x79/0x340 [ 2078.773928][ T7926] ? input_pass_values+0x8d/0x890 [ 2078.773949][ T7926] input_pass_values+0x288/0x890 [ 2078.773974][ T7926] ? input_handle_event+0x70c/0xf30 [ 2078.773992][ T7926] input_event_dispose+0x330/0x6b0 [ 2078.774012][ T7926] input_inject_event+0x1dd/0x340 [ 2078.774031][ T7926] ? input_inject_event+0xb6/0x340 [ 2078.774051][ T7926] evdev_write+0x325/0x4c0 [ 2078.774077][ T7926] ? __pfx_evdev_write+0x10/0x10 [ 2078.774101][ T7926] ? bpf_lsm_file_permission+0x9/0x20 [ 2078.774119][ T7926] ? security_file_permission+0x75/0x260 [ 2078.774142][ T7926] ? rw_verify_area+0x255/0x4d0 [ 2078.774167][ T7926] ? __pfx_evdev_write+0x10/0x10 [ 2078.774192][ T7926] vfs_write+0x29a/0xb90 [ 2078.774220][ T7926] ? __pfx_vfs_write+0x10/0x10 [ 2078.774246][ T7926] ? __fget_files+0x2a/0x420 [ 2078.774271][ T7926] ? __fget_files+0x2a/0x420 [ 2078.774298][ T7926] ? __fget_files+0x3a0/0x420 [ 2078.774320][ T7926] ? __fget_files+0x2a/0x420 [ 2078.774345][ T7926] ksys_write+0x150/0x270 [ 2078.774371][ T7926] ? __pfx_ksys_write+0x10/0x10 [ 2078.774401][ T7926] __do_fast_syscall_32+0x20d/0x640 [ 2078.774421][ T7926] ? do_fast_syscall_32+0x33/0x70 [ 2078.774440][ T7926] ? asm_int80_emulation+0x1a/0x20 [ 2078.774456][ T7926] ? do_int80_emulation+0x274/0x4d0 [ 2078.774476][ T7926] ? trace_irq_disable+0x3b/0x150 [ 2078.774501][ T7926] do_fast_syscall_32+0x33/0x70 [ 2078.774539][ T7926] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2078.774561][ T7926] RIP: 0023:0xf708ef6c [ 2078.774578][ T7926] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2078.774594][ T7926] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2078.774613][ T7926] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002200 [ 2078.774626][ T7926] RDX: 0000000000000130 RSI: 0000000000000000 RDI: 0000000000000000 [ 2078.774637][ T7926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2078.774648][ T7926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2078.774659][ T7926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2078.774676][ T7926]