last executing test programs: 31m48.01323699s ago: executing program 4 (id=2791): io_uring_setup(0x202af9, &(0x7f00000003c0)={0x0, 0x7422, 0x10, 0x0, 0x3d5}) 31m47.808164115s ago: executing program 2 (id=2794): unshare(0x66000080) 31m47.808068654s ago: executing program 4 (id=2796): clock_getres(0xfffffffffffffff6, 0x0) 31m47.678195049s ago: executing program 4 (id=2797): syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) 31m47.48109185s ago: executing program 2 (id=2801): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd, 0x7a, 0xb2, 0x10, 0x5c6, 0x9000, 0x458e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x4, 0x0, 0x2, 0xff, 0x66, 0x2f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x40, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x10, 0x40}}]}}]}}]}}, 0x0) 31m46.202740606s ago: executing program 4 (id=2804): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0) 31m46.132154728s ago: executing program 3 (id=2806): keyctl$reject(0x13, 0x0, 0x7, 0x204, 0x0) 31m46.055111967s ago: executing program 3 (id=2807): fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1) 31m46.024644021s ago: executing program 2 (id=2809): syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @rand_addr=' \x01\x00', [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}]}}}}}}}, 0x0) 31m45.93490491s ago: executing program 3 (id=2810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071103e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 31m45.90147514s ago: executing program 3 (id=2812): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 31m45.884656289s ago: executing program 2 (id=2814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x7, 0x1, 0x5, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) 31m45.762578567s ago: executing program 2 (id=2816): linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 31m45.591918642s ago: executing program 2 (id=2818): syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) 31m45.466992616s ago: executing program 3 (id=2819): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 31m45.365750909s ago: executing program 3 (id=2820): syz_usb_connect(0x0, 0x24, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0x5, 0x5e, 0xa0, 0x8, 0xe41, 0x4159, 0xea77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xeb, 0x34}}]}}]}}, 0x0) 31m44.429558012s ago: executing program 4 (id=2821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x5, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 31m43.962905514s ago: executing program 4 (id=2822): syz_usb_connect(0x0, 0x5b, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x7, 0xdb, 0xe2, 0x8, 0xb48, 0x2003, 0xd41b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x2, 0x5, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x23, 0xa, 0x2, 0x2e, 0xb9, 0x69, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x52}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xc3, "451d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xd9c, 0x8}]}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x8, 0xf8}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x3, 0x2, 0x8}}]}}, {{0x9, 0x4, 0x4, 0xc0, 0x0, 0xe6, 0x63, 0xe8, 0x80}}]}}]}}, 0x0) 31m30.312461906s ago: executing program 32 (id=2817): syz_usb_connect$cdc_ecm(0x0, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025e00010100200009040000ff02020000052407000005"], 0x0) 31m30.007152942s ago: executing program 33 (id=2813): syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabe3cdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) 31m29.629701565s ago: executing program 34 (id=2818): syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) 31m29.249182107s ago: executing program 35 (id=2820): syz_usb_connect(0x0, 0x24, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0x5, 0x5e, 0xa0, 0x8, 0xe41, 0x4159, 0xea77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xeb, 0x34}}]}}]}}, 0x0) 31m28.247960635s ago: executing program 36 (id=2822): syz_usb_connect(0x0, 0x5b, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x7, 0xdb, 0xe2, 0x8, 0xb48, 0x2003, 0xd41b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x2, 0x5, 0x9, 0x30, 0x2, [{{0x9, 0x4, 0x23, 0xa, 0x2, 0x2e, 0xb9, 0x69, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x52}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0xc3, "451d"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xd9c, 0x8}]}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0x8, 0xf8}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x3, 0x2, 0x8}}]}}, {{0x9, 0x4, 0x4, 0xc0, 0x0, 0xe6, 0x63, 0xe8, 0x80}}]}}]}}, 0x0) 14m28.039133351s ago: executing program 7 (id=22630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) 14m27.934226937s ago: executing program 7 (id=22631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x40000080) 14m27.768381231s ago: executing program 7 (id=22632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x300}, 0x24) syz_usb_connect(0x1, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000099473089911216859980000000109023f000100002000090403"], 0x0) 14m24.67574129s ago: executing program 7 (id=22675): mknod$loop(&(0x7f000000db40)='./file0\x00', 0x400, 0x1) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x3beb44c, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0xd) 14m24.573691487s ago: executing program 7 (id=22678): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' ', 0x1}]) 14m24.199396913s ago: executing program 7 (id=22686): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x44, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14m23.855481324s ago: executing program 37 (id=22686): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x44, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 9m8.803979211s ago: executing program 0 (id=28608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) 9m8.696734154s ago: executing program 0 (id=28611): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 9m7.564596129s ago: executing program 0 (id=28631): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001280)={0x3, {{0xa, 0x4e00, 0xc, @mcast1, 0x7fffffff}}, 0x1, 0x1, [{{0xa, 0x4e25, 0x7, @local, 0x9}}]}, 0x110) 9m7.437371496s ago: executing program 0 (id=28634): creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8800, &(0x7f0000000100)={0x1, 0x2, 0x100000}, 0x20) 9m7.298989706s ago: executing program 0 (id=28638): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6049, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x40, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='@!\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m6.742862296s ago: executing program 0 (id=28651): unshare(0x2c020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x25, 0x6c, 0x4) 9m6.503521374s ago: executing program 38 (id=28651): unshare(0x2c020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x25, 0x6c, 0x4) 5.277373393s ago: executing program 8 (id=36687): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x7, 0x0) 4.475134036s ago: executing program 8 (id=36696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.989681441s ago: executing program 6 (id=36702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.886604738s ago: executing program 6 (id=36713): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @empty, 0x2}, {0xa, 0x4e23, 0x8, @mcast2, 0x1}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x9, 0x5, {"beabb9a2b39e3b6bc10efa362b23a36d"}, 0x24dc, 0x1, 0x7}}}, 0x90) 2.65010747s ago: executing program 6 (id=36718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) 2.126148314s ago: executing program 5 (id=36726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000300)) 1.989705313s ago: executing program 5 (id=36729): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) unshare(0x20000400) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 1.894619703s ago: executing program 6 (id=36730): openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x4, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x2, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x37, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x100001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0x6e115ce9, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.711982394s ago: executing program 6 (id=36733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r2, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 1.544080638s ago: executing program 1 (id=36737): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x40, 0x7, 0x2, @time={0x3, 0x4}, {0xee, 0x1}, {0x0, 0xfd}, @connect={{0x6, 0xa}, {0xd, 0x4}}}, {0xfb, 0x0, 0x1, 0x81, @time={0x10, 0x408}, {0x8, 0x30}, {0x2}, @note={0x7, 0xe, 0x7, 0xd9, 0x9}}], 0x38) 1.465235308s ago: executing program 1 (id=36738): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9) 1.298702616s ago: executing program 8 (id=36740): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 1.245822356s ago: executing program 9 (id=36741): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.19818903s ago: executing program 6 (id=36742): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, 0x0, 0x8) 1.038994684s ago: executing program 5 (id=36743): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 950.493231ms ago: executing program 8 (id=36744): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) 876.923388ms ago: executing program 9 (id=36745): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3000, 0x2}) 724.673515ms ago: executing program 8 (id=36746): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}, 0x0, {0xfd}, 0x0, 0x2}) 715.608342ms ago: executing program 9 (id=36747): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) 564.105855ms ago: executing program 1 (id=36748): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e25, 0x1, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 418.324841ms ago: executing program 5 (id=36749): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000002180)="92", 0x1}, {&(0x7f0000000080)='#', 0x1}, {&(0x7f0000002240)="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"/3521, 0xfe93}, {&(0x7f0000003240)='w', 0x1}, {&(0x7f0000000140)='^', 0x1}, {&(0x7f00000002c0)="dd", 0x1}, {&(0x7f0000000000)="14", 0x1}], 0x7, 0x6) write$FUSE_ATTR(r1, &(0x7f00000004c0)={0x78, 0x0, 0x0, {0x8, 0x4, 0x0, {0x1, 0x0, 0x4, 0x5, 0x6, 0x3, 0xfffffffe, 0x4b, 0x80000000, 0x6000, 0x200, 0x0, 0x0, 0x3, 0x3}}}, 0x78) read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2020) 417.178761ms ago: executing program 9 (id=36750): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) 384.068977ms ago: executing program 1 (id=36751): r0 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fchown(r1, 0x0, 0x0) 335.763223ms ago: executing program 8 (id=36752): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000061) 204.773589ms ago: executing program 5 (id=36753): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x14) 167.608125ms ago: executing program 9 (id=36754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) 156.660465ms ago: executing program 1 (id=36755): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1b, 0x1, {0x8f, 0x5, 0x400, 0x6, 0x0, 0x0, 0x7fff}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 98.703737ms ago: executing program 5 (id=36756): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) write$FUSE_STATX(r0, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x5, 0xba92, 0x0, '\x00', {0x1000, 0xf, 0x2, 0x8, 0xee01, 0x0, 0x2000, '\x00', 0x80000000, 0x10000, 0xf, 0xde, {0x63, 0x9}, {0xcb, 0x2}, {0x5, 0x6}, {0x1000}, 0x4, 0x4, 0x80000000, 0xa}}}, 0x130) 29.365352ms ago: executing program 1 (id=36757): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 0s ago: executing program 9 (id=36758): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): T2494] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2097.076545][ T2494] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2097.122035][ T2494] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2097.144628][ T2494] mceusb 10-1:0.0: Registered   with mce emulator interface version 1 [ 2097.172512][ T2494] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2097.196744][ T2494] usb 10-1: USB disconnect, device number 90 [ 2097.889774][T18491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2097.900583][T18491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2097.909819][T18491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2097.924900][T18491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2097.933142][T18491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2098.259014][T14945] chnl_net:caif_netlink_parms(): no params data found [ 2098.492390][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.499916][T14945] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.509029][T14945] bridge_slave_0: entered allmulticast mode [ 2098.517932][T14945] bridge_slave_0: entered promiscuous mode [ 2098.527768][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.535484][T14945] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.543622][T14945] bridge_slave_1: entered allmulticast mode [ 2098.553316][T14945] bridge_slave_1: entered promiscuous mode [ 2098.600569][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2098.615476][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2098.668114][T14945] team0: Port device team_slave_0 added [ 2098.677674][T14945] team0: Port device team_slave_1 added [ 2098.714910][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2098.722318][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2098.749098][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2098.766174][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2098.773578][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2098.810261][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2098.925725][T14945] hsr_slave_0: entered promiscuous mode [ 2098.934724][T14945] hsr_slave_1: entered promiscuous mode [ 2098.942843][T14945] debugfs: 'hsr0' already exists in 'hsr' [ 2098.948714][T14945] Cannot create hsr debugfs directory [ 2099.477584][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.484817][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.559231][T14989] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.34296'. [ 2099.716722][T14945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2099.763580][T14945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2099.777413][T14945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2099.789975][T14945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2099.926943][T14945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2099.951557][T18491] Bluetooth: hci1: command tx timeout [ 2099.973938][T14945] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.038799][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.046055][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2100.088257][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.095514][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2100.232970][T14945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.320572][T14945] veth0_vlan: entered promiscuous mode [ 2100.338989][T14945] veth1_vlan: entered promiscuous mode [ 2100.413716][T14945] veth0_macvtap: entered promiscuous mode [ 2100.430861][T14945] veth1_macvtap: entered promiscuous mode [ 2100.458574][T14945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2100.483086][T14945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2100.510136][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.530884][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.568928][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.579249][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.906503][T12244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.947497][T12244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.018901][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34307'. [ 2101.051542][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2101.081825][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.378012][T15036] loop7: detected capacity change from 0 to 7 [ 2101.386263][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.395971][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.412450][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.422133][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.431345][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.441014][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.451325][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.461007][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.469199][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.478912][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.488485][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.498179][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.512071][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.521790][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.532945][T15036] ldm_validate_partition_table(): Disk read failed. [ 2101.540760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.550517][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.561576][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.571293][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.579412][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2101.589121][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2101.598736][T15036] Dev loop7: unable to read RDB block 0 [ 2101.606448][T15036] loop7: unable to read partition table [ 2101.622758][T15036] loop7: partition table beyond EOD, truncated [ 2101.629105][T15036] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2101.797172][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.34314'. [ 2102.032198][T18491] Bluetooth: hci1: command tx timeout [ 2102.870636][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.34337'. [ 2103.291352][T21273] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2103.446147][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.34350'. [ 2103.463874][T21273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.475928][T21273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2103.501538][T21273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2103.523604][T21273] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2103.558246][T21273] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2103.568694][T21273] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2103.576941][T21273] usb 2-1: Manufacturer: syz [ 2103.587461][T21273] usb 2-1: config 0 descriptor?? [ 2103.592814][T15017] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 2103.764245][T15017] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2103.785253][T15017] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2103.797358][T15017] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2103.807053][T15017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.921584][T21273] rc_core: IR keymap rc-hauppauge not found [ 2103.928617][T21273] Registered IR keymap rc-empty [ 2103.935790][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2103.962002][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.008036][T21273] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2104.024979][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2104.025581][T21273] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input219 [ 2104.056669][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.060391][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2104.081612][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.112896][T18491] Bluetooth: hci1: command tx timeout [ 2104.122656][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.161716][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.200537][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.231527][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.251607][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.271980][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.311555][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.331978][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2104.355317][T21273] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2104.376165][T21273] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2104.395649][T21273] usb 2-1: USB disconnect, device number 68 [ 2104.646802][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.34360'. [ 2104.656248][T15146] netem: incorrect ge model size [ 2104.667370][T15146] netem: change failed [ 2104.685036][T15017] hid-led 0003:27B8:01ED.00AF: probe with driver hid-led failed with error -71 [ 2104.697720][T15017] usb 10-1: USB disconnect, device number 91 [ 2106.073944][T15203] sctp: [Deprecated]: syz.1.34383 (pid 15203) Use of int in maxseg socket option. [ 2106.073944][T15203] Use struct sctp_assoc_value instead [ 2106.192936][T18491] Bluetooth: hci1: command tx timeout [ 2106.262422][T15211] misc userio: Can't change port type on an already running userio instance [ 2106.645173][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.9.34397'. [ 2107.555525][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34412'. [ 2107.954249][T15017] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 2108.126008][T15017] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.138242][T15017] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2108.150834][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2108.168174][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 170, setting to 64 [ 2108.189628][T15017] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2108.216945][T15017] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2108.232881][T15017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2108.251954][T15017] usb 10-1: Product: syz [ 2108.261609][T15017] usb 10-1: Manufacturer: syz [ 2108.278937][T15017] usb 10-1: SerialNumber: syz [ 2108.289229][T15017] usb 10-1: config 0 descriptor?? [ 2108.299819][T15278] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2108.517646][T15017] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2108.541155][T15017] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2108.720167][T15017] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 2108.767196][T15017] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2108.801445][T15017] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2108.892780][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.34435'. [ 2108.918787][T15017] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2108.937939][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.945015][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.951869][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.958628][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.966119][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.973146][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.979894][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.986612][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2108.993468][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.000193][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.006991][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.013728][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.020486][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.027252][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.034241][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.041003][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.047754][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.056644][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.063440][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.070250][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.077149][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.083940][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.090701][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.093785][T15315] netlink: 72 bytes leftover after parsing attributes in process `syz.8.34435'. [ 2109.098049][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.113440][T15017] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2109.122214][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.128964][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.135734][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.142459][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.149150][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.156055][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.162760][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.169411][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.176105][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.183137][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.189804][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.196698][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.203533][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.210196][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.216985][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.223681][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.230351][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.237245][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.244006][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.250684][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.257412][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.264152][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.270834][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.277601][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.284494][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.291148][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.297874][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.304669][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.311606][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.318303][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.325147][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.331920][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.338618][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.345322][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.352061][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.358718][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.365462][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.372203][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.378858][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.385778][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.392724][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.399403][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.406117][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.412901][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.419696][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.426430][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.433144][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.439807][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.446536][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.453287][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.459927][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.466657][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.473700][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.480354][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.487349][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.494102][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.500772][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.507475][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.514371][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.521050][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.527777][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.534583][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.541243][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.548107][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.554971][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.561700][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.568382][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.575197][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.581906][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.588752][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.595495][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.602335][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.609047][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.615815][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.622520][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.629230][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.636038][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.642751][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.649469][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.656215][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.662991][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.669697][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.676460][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.683209][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.690329][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.697150][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.703969][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.710722][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.717646][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.724458][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.731180][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.737949][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.744694][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.751500][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.758261][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.765015][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.771787][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.778628][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.789940][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.796879][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.803626][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.810375][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.817143][ C0] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 2109.824439][T15017] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 2109.844895][T15017] usb 10-1: USB disconnect, device number 92 [ 2110.411454][T15017] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2110.564184][ T30] audit: type=1326 audit(1771070309.529:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.587137][T15017] usb 2-1: Using ep0 maxpacket: 16 [ 2110.612006][T15017] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.622486][T15017] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2110.631748][ T30] audit: type=1326 audit(1771070309.529:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.665412][T15017] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2110.674809][T15017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.691457][T15017] usb 2-1: Product: syz [ 2110.695783][ T30] audit: type=1326 audit(1771070309.549:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.728583][T15017] usb 2-1: Manufacturer: syz [ 2110.733394][T15017] usb 2-1: SerialNumber: syz [ 2110.756410][ T30] audit: type=1326 audit(1771070309.549:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.801556][ T30] audit: type=1326 audit(1771070309.549:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.852157][ T30] audit: type=1326 audit(1771070309.549:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.884790][ T30] audit: type=1326 audit(1771070309.549:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.941366][ T30] audit: type=1326 audit(1771070309.549:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2110.991156][T15017] usb 2-1: 0:2 : does not exist [ 2111.011357][ T30] audit: type=1326 audit(1771070309.559:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2111.103863][ T30] audit: type=1326 audit(1771070309.559:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.6.34458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 2111.146219][T15017] usb 2-1: USB disconnect, device number 69 [ 2111.380304][T15364] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.34460'. [ 2113.451910][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.34483'. [ 2113.945906][T15436] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2115.049279][T15479] netlink: 48 bytes leftover after parsing attributes in process `syz.5.34521'. [ 2115.298241][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34514'. [ 2115.333657][T15491] netlink: 'syz.5.34516': attribute type 2 has an invalid length. [ 2115.988824][T15506] syz.5.34525 (15506): drop_caches: 2 [ 2116.640208][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34537'. [ 2116.666262][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34537'. [ 2117.260205][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.9.34545'. [ 2117.773265][T15568] syz.9.34553 (15568): drop_caches: 2 [ 2118.969430][T15606] dummy0: entered allmulticast mode [ 2118.977659][T15606] dummy0: left allmulticast mode [ 2119.006901][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.34569'. [ 2119.031602][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.34569'. [ 2119.359871][T15617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2120.834830][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.34601'. [ 2120.846496][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.34601'. [ 2120.912370][T11230] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2121.066525][T11230] usb 6-1: Using ep0 maxpacket: 16 [ 2121.080764][T11230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.103377][T11230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.115424][T11230] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2121.127118][T11230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.139292][T11230] usb 6-1: config 0 descriptor?? [ 2121.208513][ T30] audit: type=1326 audit(1771070320.169:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.265033][ T30] audit: type=1326 audit(1771070320.199:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.302373][ T30] audit: type=1326 audit(1771070320.199:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.328070][ T30] audit: type=1326 audit(1771070320.199:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.352284][ T30] audit: type=1326 audit(1771070320.199:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.383924][ T30] audit: type=1326 audit(1771070320.199:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.415288][ T30] audit: type=1326 audit(1771070320.199:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.440766][ T30] audit: type=1326 audit(1771070320.199:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.490739][ T30] audit: type=1326 audit(1771070320.199:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.589313][T11230] apple 0003:05AC:024B.00B0: fixing up MacBook JIS keyboard report descriptor [ 2121.605820][T11230] apple 0003:05AC:024B.00B0: unknown global tag 0xe [ 2121.618550][ T30] audit: type=1326 audit(1771070320.199:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.8.34605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2121.642463][T11230] apple 0003:05AC:024B.00B0: item 0 1 1 14 parsing failed [ 2121.650511][T11230] apple 0003:05AC:024B.00B0: parse failed [ 2121.657226][T11230] apple 0003:05AC:024B.00B0: probe with driver apple failed with error -22 [ 2121.807154][T11230] usb 6-1: USB disconnect, device number 76 [ 2122.052270][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34618'. [ 2123.691566][T15017] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2123.761832][T11277] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 2123.853582][T15017] usb 2-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.870989][T15017] usb 2-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 2123.884291][T15017] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2123.893938][T15017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.904610][T15017] usb 2-1: Product: syz [ 2123.909026][T15017] usb 2-1: Manufacturer: syz [ 2123.916692][T15017] usb 2-1: SerialNumber: syz [ 2123.924891][T11277] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2123.934929][T11277] usb 10-1: not running at top speed; connect to a high speed hub [ 2123.951132][T11277] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.997300][T11277] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2124.011967][T11277] usb 10-1: string descriptor 0 read error: -22 [ 2124.018744][T11277] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2124.032548][T11277] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.063949][T11277] usb 10-1: 0:2 : does not exist [ 2124.362379][T11230] usb 2-1: USB disconnect, device number 70 [ 2124.892700][T11277] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 2124.910315][T11277] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2124.924798][T11277] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 2124.972278][T11277] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2125.038603][T11277] usb 10-1: USB disconnect, device number 93 [ 2125.542310][T21276] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2125.704568][T21276] usb 6-1: Using ep0 maxpacket: 32 [ 2125.716519][T21276] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 2125.726274][T21276] usb 6-1: config 0 has no interface number 0 [ 2125.733305][T21276] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2125.744405][T21276] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2125.755836][T21276] usb 6-1: config 0 interface 126 has no altsetting 0 [ 2125.768209][T21276] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2125.792009][T21276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.800392][T21276] usb 6-1: Product: syz [ 2125.805428][T21276] usb 6-1: Manufacturer: syz [ 2125.810084][T21276] usb 6-1: SerialNumber: syz [ 2125.835377][T21276] usb 6-1: config 0 descriptor?? [ 2125.844235][T15821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2125.871160][T15821] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2126.316563][T21276] ir_usb 6-1:0.126: IR Dongle converter detected [ 2126.514678][T21276] usb 6-1: IRDA class descriptor not found, device not bound [ 2126.748019][T21276] usb 6-1: USB disconnect, device number 77 [ 2130.035676][T15975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.34731'. [ 2130.267103][T15986] netlink: 'syz.6.34736': attribute type 11 has an invalid length. [ 2132.561686][T21273] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 2132.721568][T21273] usb 10-1: Using ep0 maxpacket: 8 [ 2132.739452][T21273] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.762603][T21273] usb 10-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 2132.781360][T21273] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.803029][T21273] usb 10-1: config 0 descriptor?? [ 2132.871014][T16088] pimreg: tun_chr_ioctl cmd 1074025677 [ 2132.978123][T16088] pimreg: linktype set to 773 [ 2133.217816][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.224927][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.242058][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.249112][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.291615][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.309837][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.329382][T21273] belkin 0003:050D:3201.00B1: unknown main item tag 0x0 [ 2133.378353][T21273] belkin 0003:050D:3201.00B1: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.9-1/input0 [ 2133.432377][T21273] usb 10-1: USB disconnect, device number 94 [ 2133.568155][T16106] fido_id[16106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2134.170059][T16124] cgroup: fork rejected by pids controller in /syz9 [ 2135.703223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 2136.127786][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34816'. [ 2136.990222][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34835'. [ 2137.022176][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34835'. [ 2137.031784][T11277] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2137.224179][T11277] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.248035][T11277] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2137.289547][T11277] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2137.321689][T11277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.330776][T11277] usb 6-1: Product: syz [ 2137.335458][T11277] usb 6-1: Manufacturer: syz [ 2137.361358][T11277] usb 6-1: SerialNumber: syz [ 2137.604912][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.633199][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.684838][T11277] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2137.713874][T11277] usb 6-1: USB disconnect, device number 78 [ 2137.744199][ T7648] udevd[7648]: setting mode of /dev/bus/usb/006/078 to 020664 failed: No such file or directory [ 2137.780811][ T7648] udevd[7648]: setting owner of /dev/bus/usb/006/078 to uid=0, gid=0 failed: No such file or directory [ 2138.231492][T11277] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 2138.335540][T17821] vivid-006: disconnect [ 2138.414300][T11277] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 2138.438199][T11277] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.474770][T11277] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2138.493554][T11277] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 2138.523467][T11277] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2138.535093][T11277] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2138.607271][T11277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.840890][T11277] usb 6-1: usb_control_msg returned -71 [ 2138.855498][T11277] usbtmc 6-1:16.0: can't read capabilities [ 2138.882976][T11277] usb 6-1: USB disconnect, device number 79 [ 2139.092749][T17818] vivid-006: reconnect [ 2139.753017][T21276] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2139.793843][T17876] loop4: detected capacity change from 0 to 1 [ 2139.808246][T17876] Dev loop4: unable to read RDB block 1 [ 2139.815062][T17876] loop4: unable to read partition table [ 2139.823849][T17876] loop4: partition table beyond EOD, truncated [ 2139.830461][T17876] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 2139.855795][ T5190] Dev loop4: unable to read RDB block 1 [ 2139.874688][ T5190] loop4: unable to read partition table [ 2139.880799][T17878] loop3: detected capacity change from 0 to 7 [ 2139.884598][ T5190] loop4: partition table beyond EOD, truncated [ 2139.894757][T17878] Dev loop3: unable to read RDB block 7 [ 2139.900401][T17878] loop3: AHDI p1 p2 [ 2139.906783][T17878] loop3: partition table partially beyond EOD, truncated [ 2139.914375][T17878] loop3: p1 start 1702000233 is beyond EOD, truncated [ 2139.921894][T21276] usb 2-1: Using ep0 maxpacket: 16 [ 2139.934188][T21276] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 2139.945117][T21276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.966588][T21276] usb 2-1: Product: syz [ 2139.977535][T21276] usb 2-1: Manufacturer: syz [ 2139.987180][T21276] usb 2-1: SerialNumber: syz [ 2140.019778][T21276] usb 2-1: config 0 descriptor?? [ 2140.036771][T21276] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 2140.301414][T15017] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 2140.446159][T21276] gspca_sn9c2028: read1 error -71 [ 2140.453076][T21276] gspca_sn9c2028: read1 error -71 [ 2140.458281][T21276] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 2140.469875][T21276] usb 2-1: USB disconnect, device number 71 [ 2140.488773][T15017] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2140.517333][T15017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.532488][T15017] usb 10-1: Product: syz [ 2140.536811][T15017] usb 10-1: Manufacturer: syz [ 2140.542178][T15017] usb 10-1: SerialNumber: syz [ 2140.556239][T15017] usb 10-1: config 0 descriptor?? [ 2140.570943][T15017] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2140.679754][T17893] kvm: kvm [17892]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 2141.391092][T21276] usb 10-1: USB disconnect, device number 95 [ 2141.952440][T21276] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2142.102297][T21276] usb 6-1: Using ep0 maxpacket: 32 [ 2142.109576][T21276] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2142.123246][T21276] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2142.133992][T21276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.143102][T21276] usb 6-1: Product: syz [ 2142.147646][T21276] usb 6-1: Manufacturer: syz [ 2142.153248][T21276] usb 6-1: SerialNumber: syz [ 2142.162933][T21276] usb 6-1: config 0 descriptor?? [ 2142.586437][T21276] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 2142.699853][T17969] netlink: 27 bytes leftover after parsing attributes in process `syz.1.34917'. [ 2142.788915][T21276] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 2142.801106][T21276] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 2143.012953][T21276] usb 6-1: USB disconnect, device number 80 [ 2143.183082][T17981] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 2143.512298][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2143.512319][ T30] audit: type=1326 audit(1771070342.469:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.1.34926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57f6c code=0x7ffc0000 [ 2143.596472][ T30] audit: type=1326 audit(1771070342.469:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.1.34926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57f6c code=0x7ffc0000 [ 2143.652997][ T30] audit: type=1326 audit(1771070342.469:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.1.34926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f57f6c code=0x7ffc0000 [ 2143.692429][ T30] audit: type=1326 audit(1771070342.469:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.1.34926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57f6c code=0x7ffc0000 [ 2144.167517][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.34938'. [ 2145.175158][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.9.34957'. [ 2145.218385][T18057] tun0: tun_chr_ioctl cmd 1074025673 [ 2146.050389][T18099] vivid-002: disconnect [ 2146.058126][T18098] vivid-002: reconnect [ 2147.165360][ T30] audit: type=1326 audit(1771070346.129:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.231548][ T30] audit: type=1326 audit(1771070346.129:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.283394][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34997'. [ 2147.299749][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34997'. [ 2147.320765][ T30] audit: type=1326 audit(1771070346.159:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.348930][ T30] audit: type=1326 audit(1771070346.159:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.412148][ T30] audit: type=1326 audit(1771070346.159:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.462322][ T30] audit: type=1326 audit(1771070346.159:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.8.34996" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2147.652326][T15017] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2147.815802][T15017] usb 2-1: Using ep0 maxpacket: 32 [ 2147.824972][T15017] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2147.841703][T15017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.863483][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35007'. [ 2147.873460][T15017] usb 2-1: config 0 descriptor?? [ 2147.904605][T15017] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2148.072283][T18174] netlink: 'syz.9.35010': attribute type 1 has an invalid length. [ 2148.100610][T18174] netlink: 'syz.9.35010': attribute type 2 has an invalid length. [ 2148.282966][T18182] netlink: 16386 bytes leftover after parsing attributes in process `syz.6.35009'. [ 2148.719318][T15017] gspca_sunplus: reg_w_riv err -71 [ 2148.732137][T15017] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 2148.763788][T15017] usb 2-1: USB disconnect, device number 72 [ 2150.240512][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2150.240534][ T30] audit: type=1326 audit(1771070349.199:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.322236][ T30] audit: type=1326 audit(1771070349.199:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.392075][ T30] audit: type=1326 audit(1771070349.239:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.455483][ T30] audit: type=1326 audit(1771070349.239:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.512251][ T30] audit: type=1326 audit(1771070349.239:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.558545][ T30] audit: type=1326 audit(1771070349.239:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.611158][ T30] audit: type=1326 audit(1771070349.239:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.649782][ T30] audit: type=1326 audit(1771070349.239:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.752142][ T30] audit: type=1326 audit(1771070349.239:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.816263][ T30] audit: type=1326 audit(1771070349.239:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18234 comm="syz.9.35038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2150.977038][T18255] netem: incorrect ge model size [ 2152.512883][T21276] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2152.673792][T21276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.690081][T21276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.706026][T21276] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2152.717448][T21276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.730262][T21276] usb 2-1: config 0 descriptor?? [ 2153.401459][T11230] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2153.551956][T11230] usb 6-1: Using ep0 maxpacket: 32 [ 2153.558865][T11230] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.570782][T11230] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.582508][T21276] hid-led 0003:0FC5:B080.00B2: probe with driver hid-led failed with error -71 [ 2153.598214][T21276] usb 2-1: USB disconnect, device number 73 [ 2153.607025][T11230] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2153.617069][T11230] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2153.628693][T11230] usb 6-1: Product: syz [ 2153.634192][T11230] usb 6-1: Manufacturer: syz [ 2153.655325][T11230] hub 6-1:4.0: USB hub found [ 2153.868984][T11230] hub 6-1:4.0: 5 ports detected [ 2153.876145][T11230] hub 6-1:4.0: insufficient power available to use all downstream ports [ 2153.929515][T18343] netlink: 'syz.9.35083': attribute type 3 has an invalid length. [ 2153.937558][T18343] netlink: 776 bytes leftover after parsing attributes in process `syz.9.35083'. [ 2154.076349][T11230] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 2154.084669][T11230] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 2154.133178][T11230] usb 6-1: USB disconnect, device number 81 [ 2154.954408][T18377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35100'. [ 2155.218966][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35105'. [ 2155.666517][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2155.666539][ T30] audit: type=1326 audit(1771070354.629:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.718859][ T30] audit: type=1326 audit(1771070354.629:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.742080][ T30] audit: type=1326 audit(1771070354.639:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.766393][ T30] audit: type=1326 audit(1771070354.639:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.790350][ T30] audit: type=1326 audit(1771070354.639:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.891049][ T30] audit: type=1326 audit(1771070354.649:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.923767][T18406] loop6: detected capacity change from 0 to 524288000 [ 2155.939738][ T30] audit: type=1326 audit(1771070354.649:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.963366][ T30] audit: type=1326 audit(1771070354.649:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2155.986396][ T30] audit: type=1326 audit(1771070354.649:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2156.034416][ T30] audit: type=1326 audit(1771070354.649:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18401 comm="syz.8.35110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2157.352918][T18450] tipc: New replicast peer: 255.255.255.255 [ 2157.379869][T18450] tipc: Enabled bearer , priority 20 [ 2158.025471][T18467] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2158.036770][T18467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2158.596357][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35151'. [ 2158.624025][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35151'. [ 2159.083198][T18507] loop6: detected capacity change from 0 to 2640 [ 2159.094406][T18507] buffer_io_error: 10 callbacks suppressed [ 2159.094424][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.116386][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.141421][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.153726][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.194640][T18510] loop6: detected capacity change from 2640 to 524288000 [ 2159.201442][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.210202][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.251765][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.259709][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.286662][T18507] ldm_validate_partition_table(): Disk read failed. [ 2159.294061][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.302293][T18507] Buffer I/O error on dev loop6, logical block 0, async page read [ 2159.310232][T18507] Dev loop6: unable to read RDB block 0 [ 2159.317242][T18507] loop6: unable to read partition table [ 2159.325051][T18514] netlink: 'syz.1.35161': attribute type 1 has an invalid length. [ 2159.337345][T18514] netlink: 'syz.1.35161': attribute type 2 has an invalid length. [ 2159.359209][T18507] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 2159.381568][T18514] netlink: 'syz.1.35161': attribute type 1 has an invalid length. [ 2159.412563][ T5190] ldm_validate_partition_table(): Disk read failed. [ 2159.432738][ T5190] Dev loop6: unable to read RDB block 0 [ 2159.438518][ T5190] loop6: unable to read partition table [ 2160.917083][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.941894][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.201638][T15017] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 2161.353842][T18577] netlink: 'syz.1.35187': attribute type 2 has an invalid length. [ 2161.373193][T15017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2161.392414][T15017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.412212][T15017] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 2161.431444][T15017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.461026][T15017] usb 6-1: config 0 descriptor?? [ 2161.667332][T18586] random: crng reseeded on system resumption [ 2161.902543][T15017] uclogic 0003:2179:0077.00B3: interface is invalid, ignoring [ 2162.105709][T15017] usb 6-1: USB disconnect, device number 82 [ 2163.795600][T11230] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2163.958930][T11230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.992189][T11230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.012328][T11230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2164.026177][T11230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2164.037385][T11230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.054345][T11230] usb 6-1: config 0 descriptor?? [ 2164.500385][T11230] plantronics 0003:047F:FFFF.00B4: unbalanced delimiter at end of report description [ 2164.553679][T11230] plantronics 0003:047F:FFFF.00B4: parse failed [ 2164.560104][T11230] plantronics 0003:047F:FFFF.00B4: probe with driver plantronics failed with error -22 [ 2164.583432][ T2494] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2164.710317][T11230] usb 6-1: USB disconnect, device number 83 [ 2164.741925][ T2494] usb 2-1: Using ep0 maxpacket: 16 [ 2164.754262][ T2494] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2164.768832][ T2494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2164.792740][ T2494] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2164.831711][ T2494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.845312][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2164.845348][ T30] audit: type=1326 audit(1771070363.809:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.867887][ T2494] usb 2-1: Product: syz [ 2164.895373][ T2494] usb 2-1: Manufacturer: syz [ 2164.900149][ T2494] usb 2-1: SerialNumber: syz [ 2164.905193][ T30] audit: type=1326 audit(1771070363.849:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905246][ T30] audit: type=1326 audit(1771070363.849:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905293][ T30] audit: type=1326 audit(1771070363.849:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905338][ T30] audit: type=1326 audit(1771070363.849:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905382][ T30] audit: type=1326 audit(1771070363.849:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905434][ T30] audit: type=1326 audit(1771070363.849:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905479][ T30] audit: type=1326 audit(1771070363.849:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2164.905525][ T30] audit: type=1326 audit(1771070363.849:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2165.073701][T18681] IPVS: Scheduler module ip_vs_ not found [ 2165.099866][ T30] audit: type=1326 audit(1771070364.059:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.9.35234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2165.177332][ T2494] usb 2-1: config 0 descriptor?? [ 2165.190513][ T2494] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2165.201038][ T2494] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2165.463476][T18693] tipc: Enabling of bearer rejected, already enabled [ 2165.805926][ T2494] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2166.007414][ T2494] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2166.007794][ T2494] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2166.007830][ T2494] em28xx 2-1:0.0: No AC97 audio processor [ 2166.017775][ T2494] usb 2-1: USB disconnect, device number 74 [ 2166.019281][ T2494] em28xx 2-1:0.0: Disconnecting em28xx [ 2166.033101][ T2494] em28xx 2-1:0.0: Freeing device [ 2167.995985][T18775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.35276'. [ 2168.191414][T21273] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 2168.242084][T18786] : renamed from bond0 [ 2168.353439][T21273] usb 10-1: Using ep0 maxpacket: 16 [ 2168.374758][T21273] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2168.392169][T21273] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.402699][T21273] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2168.416297][T21273] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2168.443529][T21273] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.461940][T21273] usb 10-1: config 0 descriptor?? [ 2168.849043][T18808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2168.856388][T18808] IPv6: NLM_F_CREATE should be set when creating new route [ 2168.863730][T18808] IPv6: NLM_F_CREATE should be set when creating new route [ 2168.871002][T18808] IPv6: NLM_F_CREATE should be set when creating new route [ 2168.905333][T21273] input: HID 0955:7214 Haptics as /devices/virtual/input/input221 [ 2169.035183][T21273] shield 0003:0955:7214.00B5: Registered Thunderstrike controller [ 2169.056042][T21273] shield 0003:0955:7214.00B5: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 2169.084926][T18773] random: crng reseeded on system resumption [ 2169.144781][T15017] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2169.168115][T21273] usb 10-1: USB disconnect, device number 96 [ 2169.188805][T15017] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2169.207142][T15017] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2169.251375][T15017] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2169.424300][T18821] netlink: 'syz.1.35298': attribute type 9 has an invalid length. [ 2169.433236][T18821] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.35298'. [ 2171.494789][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.35328'. [ 2171.807987][T18904] netlink: 28 bytes leftover after parsing attributes in process `syz.8.35334'. [ 2172.007609][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35338'. [ 2172.049381][T18914] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.35331'. [ 2172.391202][T18927] "syz.1.35344" (18927) uses obsolete ecb(arc4) skcipher [ 2172.408999][T18927] "syz.1.35344" (18927) uses obsolete ecb(arc4) skcipher [ 2174.105312][T18988] netlink: 'syz.9.35372': attribute type 15 has an invalid length. [ 2175.205063][T21276] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2175.373657][T21276] usb 2-1: Using ep0 maxpacket: 32 [ 2175.387462][T21276] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 2175.400132][T21276] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2175.439197][T21276] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 2175.465346][T21276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.475532][T21276] usb 2-1: Product: syz [ 2175.479767][T21276] usb 2-1: Manufacturer: syz [ 2175.492252][T21276] usb 2-1: SerialNumber: syz [ 2175.913655][T21276] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input222 [ 2176.002232][T21276] usb 2-1: USB disconnect, device number 75 [ 2176.002261][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 2176.057854][T21276] appletouch 2-1:1.0: input: appletouch disconnected [ 2176.844541][T19083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2178.468342][T19128] loop9: detected capacity change from 0 to 7 [ 2178.476971][T19128] Dev loop9: unable to read RDB block 7 [ 2178.484173][T19128] loop9: unable to read partition table [ 2178.490235][T19128] loop9: partition table beyond EOD, truncated [ 2178.497893][T19128] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2179.155292][T19148] VFS: Mount too revealing [ 2179.169338][T19147] batman_adv: batadv0: Adding interface: gretap1 [ 2179.184109][T19147] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2179.235916][T19147] batman_adv: batadv0: Interface activated: gretap1 [ 2179.720706][ T30] audit: type=1326 audit(1771070378.679:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2179.759471][ T30] audit: type=1326 audit(1771070378.679:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2179.793454][ T30] audit: type=1326 audit(1771070378.679:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2179.841568][ T30] audit: type=1326 audit(1771070378.679:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2179.913890][ T30] audit: type=1326 audit(1771070378.679:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2179.968758][ T30] audit: type=1326 audit(1771070378.689:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2180.015104][ T30] audit: type=1326 audit(1771070378.689:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2180.074653][ T30] audit: type=1326 audit(1771070378.689:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19168 comm="syz.5.35456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2181.122024][T19210] pimreg: entered allmulticast mode [ 2181.138392][T19210] pimreg: left allmulticast mode [ 2181.701651][T15017] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 2181.871466][T15017] usb 10-1: Using ep0 maxpacket: 16 [ 2181.883554][T15017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.901380][T15017] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2181.910619][T15017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.944429][T15017] usb 10-1: config 0 descriptor?? [ 2182.369630][T15017] mcp2221 0003:04D8:00DD.00B6: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 2182.550514][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35493'. [ 2182.792976][ T2494] usb 10-1: USB disconnect, device number 97 [ 2183.274966][T19279] tipc: Started in network mode [ 2183.279946][T19279] tipc: Node identity ac14140f, cluster identity 4711 [ 2183.292355][T19279] tipc: New replicast peer: 255.255.255.255 [ 2183.299063][T19279] tipc: Enabled bearer , priority 20 [ 2183.678523][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35508'. [ 2183.846551][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35511'. [ 2183.880249][T19297] netlink: 'syz.1.35511': attribute type 15 has an invalid length. [ 2183.957720][ T30] audit: type=1326 audit(1771070382.919:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19299 comm="syz.8.35512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2184.001461][ T30] audit: type=1326 audit(1771070382.919:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19299 comm="syz.8.35512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2184.102123][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35513'. [ 2184.233118][T19308] netlink: 'syz.5.35515': attribute type 6 has an invalid length. [ 2184.252033][T19308] netlink: 14623 bytes leftover after parsing attributes in process `syz.5.35515'. [ 2184.411919][T21276] tipc: Node number set to 2886997007 [ 2184.440182][T19304] netlink: 40 bytes leftover after parsing attributes in process `syz.6.35503'. [ 2185.531079][T19354] vivid-003: disconnect [ 2185.543491][T19354] vivid-003: reconnect [ 2186.220628][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35542'. [ 2186.234082][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35542'. [ 2188.520314][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.35576'. [ 2188.551943][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.8.35576'. [ 2188.732968][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35579'. [ 2188.745403][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35579'. [ 2189.474362][T19481] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.35594'. [ 2189.757844][T19493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35600'. [ 2189.868196][T19497] input: syz1 as /devices/virtual/input/input224 [ 2190.312413][ T2494] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2190.475342][ T2494] usb 6-1: Using ep0 maxpacket: 16 [ 2190.485893][ T2494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.499234][ T2494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2190.514736][ T2494] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2190.534993][ T2494] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2190.545986][ T2494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.566752][ T2494] usb 6-1: config 0 descriptor?? [ 2190.907813][T19526] dlm: non-version read from control device 34 [ 2191.019941][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.048988][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.080763][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.090083][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.098630][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.107062][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.117645][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.126078][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.146098][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.162040][ T2494] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x0 [ 2191.245905][ T2494] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.00B7/input/input225 [ 2191.294493][ T2494] microsoft 0003:045E:07DA.00B7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2191.347036][ T2494] usb 6-1: USB disconnect, device number 84 [ 2191.484494][T19537] fido_id[19537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2192.142944][T19559] netlink: 40 bytes leftover after parsing attributes in process `syz.8.35626'. [ 2193.281923][T21276] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 2193.454760][T21276] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2193.463763][T21276] usb 6-1: config 0 has no interface number 0 [ 2193.475899][T21276] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2193.491064][T21276] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2193.502760][T21276] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2193.513107][T21276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.525164][T21276] usb 6-1: config 0 descriptor?? [ 2193.532847][T19583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2193.565113][T21276] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2193.802331][T21276] usb 6-1: USB disconnect, device number 85 [ 2195.501395][T21273] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2195.661346][T21273] usb 6-1: Using ep0 maxpacket: 16 [ 2195.671770][T21273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2195.691333][T21273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2195.702055][T21273] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2195.721334][T21273] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2195.741148][T21273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.756130][T21273] usb 6-1: config 0 descriptor?? [ 2196.194630][T21273] microsoft 0003:045E:07DA.00B8: ignoring exceeding usage max [ 2196.227454][T21273] microsoft 0003:045E:07DA.00B8: unsupported Resolution Multiplier 0 [ 2196.239789][T21273] microsoft 0003:045E:07DA.00B8: implement() called with n (152) > 32! (kworker/0:16) [ 2196.378292][T21273] microsoft 0003:045E:07DA.00B8: unsupported Resolution Multiplier 0 [ 2196.388482][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35686'. [ 2196.397869][T21273] microsoft 0003:045E:07DA.00B8: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2196.397907][T21273] microsoft 0003:045E:07DA.00B8: no inputs found [ 2196.397923][T21273] microsoft 0003:045E:07DA.00B8: could not initialize ff, continuing anyway [ 2196.635477][T21273] usb 6-1: USB disconnect, device number 86 [ 2196.853319][T19700] bond8 (unregistering): Released all slaves [ 2197.012345][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35694'. [ 2197.045151][T19710] kvm: kvm [19708]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 2197.434352][T19725] hub 1-0:1.0: USB hub found [ 2197.454436][T19725] hub 1-0:1.0: 1 port detected [ 2197.708285][T19739] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35709'. [ 2197.719018][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.35709'. [ 2198.112934][T11277] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2198.295165][T11277] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2198.312327][T11277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.325126][T11277] usb 2-1: config 0 descriptor?? [ 2198.344888][T11277] cp210x 2-1:0.0: cp210x converter detected [ 2198.365688][T19757] sctp: [Deprecated]: syz.6.35717 (pid 19757) Use of int in maxseg socket option. [ 2198.365688][T19757] Use struct sctp_assoc_value instead [ 2198.451585][T21273] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2198.624190][T21273] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2198.633325][T21273] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2198.662239][T21273] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2198.674422][T21273] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2198.689995][T21273] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2198.707751][T21273] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2198.717971][T21273] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2198.726981][T21273] usb 6-1: Product: syz [ 2198.731857][T21273] usb 6-1: Manufacturer: syz [ 2198.744544][T21273] cdc_wdm 6-1:1.0: skipping garbage [ 2198.749889][T21273] cdc_wdm 6-1:1.0: skipping garbage [ 2198.762351][T11277] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2198.779842][T11277] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2198.801669][T21273] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2198.817071][T21273] cdc_wdm 6-1:1.0: Unknown control protocol [ 2198.969245][T21273] usb 6-1: USB disconnect, device number 87 [ 2199.006676][T21264] usb 2-1: USB disconnect, device number 76 [ 2199.062015][T21264] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2199.079097][T21264] cp210x 2-1:0.0: device disconnected [ 2200.102479][T21273] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2200.271744][T21273] usb 6-1: Using ep0 maxpacket: 32 [ 2200.299212][T21273] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2200.315933][T21273] usb 6-1: config 0 has no interface number 0 [ 2200.351494][T21273] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.392181][T21273] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2200.417054][T21273] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2200.468507][T21273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.516719][T21273] usb 6-1: config 0 descriptor?? [ 2201.170833][T21273] uclogic 0003:28BD:0094.00B9: pen parameters not found [ 2201.182181][T19817] input: syz1 as /devices/virtual/input/input226 [ 2201.188903][T21273] uclogic 0003:28BD:0094.00B9: interface is invalid, ignoring [ 2201.394236][T21273] usb 6-1: USB disconnect, device number 88 [ 2202.256426][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35758'. [ 2202.268731][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35758'. [ 2202.561672][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35761'. [ 2202.591434][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35761'. [ 2203.091372][T21273] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2203.251338][T21273] usb 2-1: Using ep0 maxpacket: 16 [ 2203.262891][T21273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.274020][T21273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2203.285831][T21273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2203.304286][T21273] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2203.316357][T21273] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2203.331116][T21273] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2203.351670][T21273] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2203.359897][T21273] usb 2-1: Manufacturer: syz [ 2203.367865][T21273] usb 2-1: config 0 descriptor?? [ 2203.410927][T12279] syz_tun (unregistering): left allmulticast mode [ 2203.450606][T19876] macvlan0: entered promiscuous mode [ 2203.456421][T19876] netlink: 'syz.6.35766': attribute type 2 has an invalid length. [ 2203.721723][T21273] rc_core: IR keymap rc-hauppauge not found [ 2203.728285][T21273] Registered IR keymap rc-empty [ 2203.733857][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.751589][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.772986][T21273] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2203.784810][T21264] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2203.796253][T21273] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input227 [ 2203.821591][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.873807][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.931526][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.952966][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.971582][T21264] usb 6-1: Using ep0 maxpacket: 32 [ 2203.976956][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2203.997419][T21264] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2204.010000][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2204.024959][T19886] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 2204.032440][T21264] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2204.042351][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2204.051309][T21264] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2204.059660][T21264] usb 6-1: Product: syz [ 2204.064474][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2204.071830][T21264] usb 6-1: Manufacturer: syz [ 2204.076761][T21264] usb 6-1: SerialNumber: syz [ 2204.087551][T21264] usb 6-1: config 0 descriptor?? [ 2204.092961][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2204.101920][T19879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2204.124216][T21264] hub 6-1:0.0: bad descriptor, ignoring hub [ 2204.130309][T21264] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2204.137827][T21273] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2204.156521][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2204.168724][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2204.181380][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2204.189560][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2204.207544][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2204.218910][T21273] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2204.238478][T21273] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2204.269082][T21273] usb 2-1: USB disconnect, device number 77 [ 2204.533306][T21276] usb 6-1: USB disconnect, device number 89 [ 2204.887732][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2204.887753][ T30] audit: type=1326 audit(1771070403.839:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.8.35786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2205.016264][ T30] audit: type=1326 audit(1771070403.839:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.8.35786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2205.039476][ T30] audit: type=1326 audit(1771070403.839:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.8.35786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2205.062860][ T30] audit: type=1326 audit(1771070403.839:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.8.35786" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f6c code=0x7ffc0000 [ 2205.112095][T19890] chnl_net:caif_netlink_parms(): no params data found [ 2205.370188][T19890] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.379078][T19890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.387263][T19890] bridge_slave_0: entered allmulticast mode [ 2205.395743][T19890] bridge_slave_0: entered promiscuous mode [ 2205.404960][T19890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.412568][T19890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.419886][T19890] bridge_slave_1: entered allmulticast mode [ 2205.433262][T19890] bridge_slave_1: entered promiscuous mode [ 2205.503221][T19890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.557241][T19890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.647050][T19890] team0: Port device team_slave_0 added [ 2205.657594][T19890] team0: Port device team_slave_1 added [ 2205.767606][T19890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.775719][T19890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2205.849108][T19890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2205.878882][T19890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2205.899188][T19890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2205.953776][T19890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.098500][T19890] hsr_slave_0: entered promiscuous mode [ 2206.122451][T19890] hsr_slave_1: entered promiscuous mode [ 2206.139340][T19890] debugfs: 'hsr0' already exists in 'hsr' [ 2206.154860][T19890] Cannot create hsr debugfs directory [ 2206.272129][T18491] Bluetooth: hci4: command tx timeout [ 2207.228950][T19890] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2207.256616][T19890] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2207.285971][T19890] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2207.325358][T19890] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2207.534646][T19890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.560715][T19890] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.576396][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.583634][T11604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.626251][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.633561][T11604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.738874][T19890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2207.825592][T19890] veth0_vlan: entered promiscuous mode [ 2207.880117][T19890] veth1_vlan: entered promiscuous mode [ 2207.934547][T19890] veth0_macvtap: entered promiscuous mode [ 2207.956943][T19890] veth1_macvtap: entered promiscuous mode [ 2208.015883][T19890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2208.093094][T20002] netlink: 'syz.5.35825': attribute type 1 has an invalid length. [ 2208.101085][T20002] netlink: 'syz.5.35825': attribute type 2 has an invalid length. [ 2208.126216][T19890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2208.147807][ T146] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.174743][ T146] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.199036][T12244] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.273082][T12244] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.352922][T18491] Bluetooth: hci4: command tx timeout [ 2208.718870][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.740241][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.836751][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.862858][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.146083][T20025] netlink: 'syz.9.35836': attribute type 1 has an invalid length. [ 2209.172696][T20025] netlink: 'syz.9.35836': attribute type 2 has an invalid length. [ 2209.664942][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35841'. [ 2209.679607][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35841'. [ 2210.433269][T18491] Bluetooth: hci4: command tx timeout [ 2210.937394][T20080] Set syz1 is full, maxelem 6117 reached [ 2211.359660][T20094] loop6: detected capacity change from 0 to 524287999 [ 2211.632472][T21276] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2211.802297][T21276] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2211.825390][T21276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.856874][T21276] usb 6-1: config 0 descriptor?? [ 2211.878231][T21276] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2212.102525][T21276] gspca_spca508: reg_read err -32 [ 2212.108673][T21276] gspca_spca508: reg_read err -32 [ 2212.154737][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35876'. [ 2212.329333][T21276] gspca_spca508: reg_read err -71 [ 2212.352151][T21276] gspca_spca508: reg_read err -71 [ 2212.359250][T21276] gspca_spca508: reg write: error -71 [ 2212.367892][T21276] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 2212.397215][T21276] usb 6-1: USB disconnect, device number 90 [ 2212.513169][T18491] Bluetooth: hci4: command tx timeout [ 2213.721993][T21276] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 2213.892008][T21276] usb 10-1: Using ep0 maxpacket: 32 [ 2213.903024][T21276] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 2213.924614][T21276] usb 10-1: config 0 has no interface number 0 [ 2213.930886][T21276] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2213.954837][T21276] usb 10-1: config 0 interface 85 has no altsetting 0 [ 2213.965197][T21276] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2213.975741][T21276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.985576][T21276] usb 10-1: Product: syz [ 2213.990015][T21276] usb 10-1: Manufacturer: syz [ 2213.996460][T21276] usb 10-1: SerialNumber: syz [ 2214.005847][T21276] usb 10-1: config 0 descriptor?? [ 2214.795352][T21276] appletouch 10-1:0.85: Geyser mode initialized. [ 2214.806356][T21276] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input228 [ 2214.818767][ C1] appletouch 10-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2215.023993][T11277] usb 10-1: USB disconnect, device number 98 [ 2215.040270][T11277] appletouch 10-1:0.85: input: appletouch disconnected [ 2215.478547][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.35918'. [ 2215.608796][T20211] binder: 20210:20211 ioctl c018620c 80000900 returned -1 [ 2215.962324][ T2494] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2216.123473][ T2494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.142577][ T2494] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2216.161962][ T2494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.183912][ T2494] usb 2-1: config 0 descriptor?? [ 2216.204784][ T2494] pwc: Askey VC010 type 2 USB webcam detected. [ 2216.317441][T20226] IPv6: addrconf: prefix option has invalid lifetime [ 2216.329123][T20226] IPv6: addrconf: prefix option has invalid lifetime [ 2216.341792][T21264] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 2216.513548][T21264] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2216.538851][T21264] usb 6-1: config 0 has no interface number 0 [ 2216.557054][T21264] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2216.568443][T21264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.578057][T21264] usb 6-1: Product: syz [ 2216.582737][T21264] usb 6-1: Manufacturer: syz [ 2216.588544][T21264] usb 6-1: SerialNumber: syz [ 2216.599773][ T2494] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2216.600764][T21264] usb 6-1: config 0 descriptor?? [ 2216.832313][ T2494] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2216.850415][ T2494] pwc: recv_control_msg error -71 req 04 val 1000 [ 2216.861103][ T2494] pwc: recv_control_msg error -71 req 04 val 1300 [ 2216.871094][ T2494] pwc: recv_control_msg error -71 req 04 val 1400 [ 2216.879158][ T2494] pwc: recv_control_msg error -71 req 02 val 2000 [ 2216.899212][ T2494] pwc: recv_control_msg error -71 req 02 val 2100 [ 2216.919627][ T2494] pwc: recv_control_msg error -71 req 04 val 1500 [ 2216.929631][ T2494] pwc: recv_control_msg error -71 req 02 val 2500 [ 2216.960055][ T2494] pwc: recv_control_msg error -71 req 02 val 2400 [ 2216.980618][ T2494] pwc: recv_control_msg error -71 req 02 val 2600 [ 2217.000931][ T2494] pwc: recv_control_msg error -71 req 02 val 2900 [ 2217.020024][ T2494] pwc: recv_control_msg error -71 req 02 val 2800 [ 2217.029295][ T2494] pwc: recv_control_msg error -71 req 04 val 1100 [ 2217.040070][ T2494] pwc: recv_control_msg error -71 req 04 val 1200 [ 2217.065159][T21264] usb 6-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 2217.065339][ T2494] pwc: Registered as video103. [ 2217.100647][ T2494] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input229 [ 2217.146994][ T2494] usb 2-1: USB disconnect, device number 78 [ 2217.269340][T21264] usb 6-1: failed to fetch extended address, random address set [ 2217.365078][T21264] usb 6-1: USB disconnect, device number 91 [ 2217.993364][T20266] netlink: 'syz.6.35944': attribute type 6 has an invalid length. [ 2218.004524][T20266] netlink: 'syz.6.35944': attribute type 6 has an invalid length. [ 2218.782036][ T2494] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 2218.945833][ T2494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2218.970844][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2218.992687][ T2494] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2219.007850][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2219.022274][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2219.036893][ T2494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2219.046147][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2219.059196][ T2494] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2219.105388][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2219.120400][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2219.134181][ T2494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2219.157278][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2219.169285][ T2494] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2219.182216][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2219.195122][ T2494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2219.213017][ T2494] usb 6-1: string descriptor 0 read error: -22 [ 2219.219543][ T2494] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2219.230021][ T2494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.270176][ T2494] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2219.600071][T21264] usb 6-1: USB disconnect, device number 92 [ 2220.112030][T20322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35972'. [ 2220.154782][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35973'. [ 2220.176963][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35973'. [ 2220.287742][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.35970'. [ 2220.556417][T20339] loop4: detected capacity change from 0 to 7 [ 2220.565617][T20339] buffer_io_error: 24 callbacks suppressed [ 2220.565636][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.580327][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.589420][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.598495][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.634043][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.643861][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.654420][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.663672][T20339] ldm_validate_partition_table(): Disk read failed. [ 2220.679860][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.690882][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.703369][T20339] Buffer I/O error on dev loop4, logical block 0, async page read [ 2220.736042][T20339] Dev loop4: unable to read RDB block 0 [ 2220.774125][T20339] loop4: unable to read partition table [ 2220.794516][T20339] loop4: partition table beyond EOD, truncated [ 2220.814036][T20339] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 2221.723303][T20374] batman_adv: batadv0: Adding interface: dummy0 [ 2221.729879][T20374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2221.756723][T20374] batman_adv: batadv0: Interface activated: dummy0 [ 2222.021929][T21276] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2222.211957][T21276] usb 6-1: Using ep0 maxpacket: 8 [ 2222.229408][T21276] usb 6-1: config 0 has no interfaces? [ 2222.282097][T21276] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2222.292258][T21276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.300303][T21276] usb 6-1: Product: syz [ 2222.332193][T21276] usb 6-1: Manufacturer: syz [ 2222.336878][T21276] usb 6-1: SerialNumber: syz [ 2222.366292][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.378064][T21276] usb 6-1: config 0 descriptor?? [ 2222.384073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.626540][T21264] usb 6-1: USB disconnect, device number 93 [ 2223.265765][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36015'. [ 2223.289206][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36015'. [ 2223.313137][T20423] netlink: 428 bytes leftover after parsing attributes in process `syz.9.36016'. [ 2223.342408][T20423] netlink: 32 bytes leftover after parsing attributes in process `syz.9.36016'. [ 2223.989417][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.6.36018'. [ 2224.105314][T20445] netlink: 44 bytes leftover after parsing attributes in process `syz.8.36026'. [ 2224.441825][T18491] Bluetooth: hci1: command 0x0406 tx timeout [ 2225.402544][T20495] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 2225.409666][T20495] mac80211_hwsim hwsim71 wlan0: entered allmulticast mode [ 2225.465776][T20495] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2225.764596][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36056'. [ 2227.325263][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36079'. [ 2227.436396][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36081'. [ 2227.746219][T20572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36084'. [ 2228.969965][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36101'. [ 2229.002033][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.36101'. [ 2229.020060][T20610] netlink: 'syz.9.36101': attribute type 20 has an invalid length. [ 2229.421559][T21264] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2229.547554][T20630] loop5: detected capacity change from 0 to 7 [ 2229.583991][T21264] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2229.594280][T21264] usb 6-1: config 0 has no interface number 0 [ 2229.603702][T21264] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2229.613920][T21264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.675814][T21264] usb 6-1: Product: syz [ 2229.681644][T21264] usb 6-1: Manufacturer: syz [ 2229.692503][T21264] usb 6-1: SerialNumber: syz [ 2229.747742][T21264] usb 6-1: config 0 descriptor?? [ 2229.969043][ C0] blk_print_req_error: 10 callbacks suppressed [ 2229.969068][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 2229.985533][ C0] buffer_io_error: 14 callbacks suppressed [ 2229.985551][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2230.006876][T21264] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2230.035305][T21264] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2230.084651][T21264] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2230.111707][T21264] usb 6-1: media controller created [ 2230.144635][T21264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2230.228241][T21264] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2230.308063][T21264] usb 6-1: USB disconnect, device number 94 [ 2231.003266][T20656] netlink: 60 bytes leftover after parsing attributes in process `syz.9.36124'. [ 2231.297184][T20670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.36128'. [ 2232.225801][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36143'. [ 2232.943182][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.36155'. [ 2233.145520][T20739] delete_channel: no stack [ 2234.071487][T21264] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2234.242584][T21264] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2234.269935][T21264] usb 2-1: config 0 has no interface number 0 [ 2234.279570][T21264] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2234.321257][T21264] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2234.332976][T21264] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2234.352773][T21264] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2234.364378][T21264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.375725][T21264] usb 2-1: config 0 descriptor?? [ 2234.611510][T11277] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 2234.813516][T11277] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2234.824412][T11277] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2234.837464][T11277] usb 6-1: Product: syz [ 2234.841870][T11277] usb 6-1: Manufacturer: syz [ 2234.846832][T11277] usb 6-1: SerialNumber: syz [ 2234.889891][T11277] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2234.960094][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36184'. [ 2234.996338][T21264] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.00BA/input/input230 [ 2235.140426][T21264] uclogic 0003:28BD:0042.00BA: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 2235.177440][T21264] usb 2-1: USB disconnect, device number 79 [ 2235.287998][T11277] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2235.315987][T20799] fido_id[20799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2235.326448][T11277] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2235.511258][T11277] usb 6-1: USB disconnect, device number 95 [ 2235.942321][T11277] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 2236.130382][T11277] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2236.162549][T11277] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2236.181320][T11277] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2236.196710][T11277] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2236.207685][T11277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.219257][T11277] usb 10-1: config 0 descriptor?? [ 2236.686660][T11277] hid_parser_main: 5 callbacks suppressed [ 2236.686687][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.704554][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.721431][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.728925][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.751369][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.769124][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.813539][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.821052][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.863344][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.871416][T11277] plantronics 0003:047F:FFFF.00BB: unknown main item tag 0x0 [ 2236.896524][T11277] plantronics 0003:047F:FFFF.00BB: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2236.955351][T11277] usb 10-1: USB disconnect, device number 99 [ 2237.039421][T20851] fido_id[20851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2241.104435][T20981] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.36269'. [ 2241.532519][T11230] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2241.586941][T21001] netlink: 52 bytes leftover after parsing attributes in process `syz.9.36278'. [ 2241.705433][T11230] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2241.715349][T11230] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.755591][T11230] usb 6-1: config 220 has no interface number 2 [ 2241.772317][T11230] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2241.797923][T11230] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2241.807016][T11230] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2241.815735][T11230] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2241.834208][T11230] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2241.846270][T11230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.855107][T11230] usb 6-1: Product: syz [ 2241.859469][T11230] usb 6-1: Manufacturer: syz [ 2241.864843][T11230] usb 6-1: SerialNumber: syz [ 2242.113098][T11230] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2242.120506][T11230] uvcvideo 6-1:220.0: No valid video chain found. [ 2242.131981][T11230] usb 6-1: selecting invalid altsetting 0 [ 2242.260660][T11230] usb 6-1: selecting invalid altsetting 0 [ 2242.267529][T11230] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2242.292209][T11230] usb 6-1: USB disconnect, device number 96 [ 2246.292965][T21139] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2246.307638][T21139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2247.430300][ T30] audit: type=1326 audit(1771070446.389:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.506753][ T30] audit: type=1326 audit(1771070446.389:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.552248][ T30] audit: type=1326 audit(1771070446.389:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.576071][ T30] audit: type=1326 audit(1771070446.389:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.622437][ T30] audit: type=1326 audit(1771070446.389:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.648769][ T30] audit: type=1326 audit(1771070446.389:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.673571][ T30] audit: type=1326 audit(1771070446.389:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.698332][ T30] audit: type=1326 audit(1771070446.389:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.722188][ T30] audit: type=1326 audit(1771070446.389:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2247.746932][ T30] audit: type=1326 audit(1771070446.389:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.5.36362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f27f6c code=0x7ffc0000 [ 2248.041516][T21264] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2248.212042][T21264] usb 6-1: Using ep0 maxpacket: 8 [ 2248.219185][T21264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2248.236257][T21264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2248.261265][T21264] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2248.280724][T21264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.297036][T21264] usb 6-1: config 0 descriptor?? [ 2248.754982][T21264] cherry 0003:046A:0027.00BC: fixing up Cherry Cymotion report descriptor [ 2248.777289][T21264] hid_parser_main: 28 callbacks suppressed [ 2248.777316][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x2 [ 2248.804958][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.821258][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.835895][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.851307][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.866619][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.883919][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.903933][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.914382][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.924921][T21264] cherry 0003:046A:0027.00BC: unknown main item tag 0x0 [ 2248.959443][T21264] cherry 0003:046A:0027.00BC: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 2248.998257][T21264] usb 6-1: USB disconnect, device number 97 [ 2249.116639][T21218] fido_id[21218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2249.280769][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.36376'. [ 2249.849694][T21246] netlink: 'syz.5.36389': attribute type 7 has an invalid length. [ 2250.119783][T21257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.36393'. [ 2251.208862][T15017] IPVS: starting estimator thread 0... [ 2251.321752][T21306] IPVS: using max 25 ests per chain, 60000 per kthread [ 2253.513611][T21368] macvtap0: entered promiscuous mode [ 2253.545155][T21368] macvtap0: entered allmulticast mode [ 2253.552601][T21368] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 2253.560325][T21368] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 2253.571100][T21368] team0: Device macvtap0 failed to register rx_handler [ 2253.664176][T21368] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 2253.733994][T21368] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 2254.309022][T21405] input: syz0 as /devices/virtual/input/input231 [ 2254.871926][T15017] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2255.033399][T15017] usb 6-1: Using ep0 maxpacket: 8 [ 2255.040190][T15017] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2255.046590][T21429] cifs: Unknown parameter 'f' [ 2255.052819][T15017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2255.068459][T15017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2255.080100][T15017] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2255.094640][T15017] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2255.104121][T15017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.341468][T15017] usb 6-1: GET_CAPABILITIES returned 0 [ 2255.346076][T21436] netlink: 260 bytes leftover after parsing attributes in process `syz.1.36472'. [ 2255.357000][T15017] usbtmc 6-1:16.0: can't read capabilities [ 2255.575086][T21415] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2255.603681][T11230] usb 6-1: USB disconnect, device number 98 [ 2255.888128][T21456] netlink: 92 bytes leftover after parsing attributes in process `syz.9.36482'. [ 2256.044250][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.36485'. [ 2256.054536][T21460] netlink: 'syz.9.36485': attribute type 5 has an invalid length. [ 2256.071754][T15017] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2256.235522][T15017] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2256.246841][T15017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.257105][T15017] usb 2-1: Product: syz [ 2256.261543][T15017] usb 2-1: Manufacturer: syz [ 2256.266235][T15017] usb 2-1: SerialNumber: syz [ 2256.275011][T15017] usb 2-1: config 0 descriptor?? [ 2256.444985][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.36489'. [ 2256.513396][T21276] usb 2-1: USB disconnect, device number 80 [ 2257.505552][T21494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.36500'. [ 2257.516799][T21494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.36500'. [ 2261.723548][T21620] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.36555'. [ 2262.049178][T21635] input: syz1 as /devices/virtual/input/input232 [ 2262.347104][T21649] netlink: 16 bytes leftover after parsing attributes in process `syz.6.36566'. [ 2262.359413][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36566'. [ 2262.370253][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.36566'. [ 2262.442734][ T2494] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2262.602018][ T2494] usb 6-1: Using ep0 maxpacket: 32 [ 2262.616445][ T2494] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2262.632305][ T2494] usb 6-1: config 0 has no interface number 0 [ 2262.646402][ T2494] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2262.665869][ T2494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.691988][ T2494] usb 6-1: Product: syz [ 2262.696225][ T2494] usb 6-1: Manufacturer: syz [ 2262.700862][ T2494] usb 6-1: SerialNumber: syz [ 2262.724766][ T2494] usb 6-1: config 0 descriptor?? [ 2262.734592][ T2494] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2262.762216][ T2494] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 2262.808703][T21664] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2262.815293][T21664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2262.852234][T21664] vhci_hcd vhci_hcd.0: Device attached [ 2262.965177][T21642] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2262.975308][ T2494] usb 6-1: USB disconnect, device number 99 [ 2263.102593][T21264] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2263.111317][T15017] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2263.284211][T15017] usb 2-1: config 0 has no interfaces? [ 2263.292667][T15017] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 2263.302157][T15017] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 2263.310397][T15017] usb 2-1: Manufacturer: syz [ 2263.321147][T15017] usb 2-1: config 0 descriptor?? [ 2263.550139][T15017] usb 2-1: USB disconnect, device number 81 [ 2263.557291][T21665] vhci_hcd: connection closed [ 2263.560794][ T49] vhci_hcd vhci_hcd.1: stop threads [ 2263.591142][ T49] vhci_hcd vhci_hcd.1: release socket [ 2263.607859][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 2263.624609][T21264] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2263.642158][ T2494] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 2263.796273][ T2494] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 2263.805894][ T2494] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2263.818852][ T2494] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.840277][ T2494] usb 10-1: config 220 has no interface number 2 [ 2263.852090][ T2494] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2263.878212][ T2494] usb 10-1: config 220 interface 0 has no altsetting 0 [ 2263.886439][ T2494] usb 10-1: config 220 interface 76 has no altsetting 0 [ 2263.893985][ T2494] usb 10-1: config 220 interface 1 has no altsetting 0 [ 2263.903804][ T2494] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2263.921916][ T2494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.930147][ T2494] usb 10-1: Product: syz [ 2263.935295][ T2494] usb 10-1: Manufacturer: syz [ 2263.940025][ T2494] usb 10-1: SerialNumber: syz [ 2264.082377][T21273] hid_parser_main: 40 callbacks suppressed [ 2264.082404][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.105207][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.114330][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.123027][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.130624][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.138550][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.154381][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.162283][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.169756][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.185511][T21273] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 2264.197149][T21273] hid-generic 0000:0000:0000.00BD: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2264.219023][ T2494] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2264.237305][ T2494] uvcvideo 10-1:220.0: No valid video chain found. [ 2264.249772][T21699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36587'. [ 2264.259807][ T2494] usb 10-1: selecting invalid altsetting 0 [ 2264.289498][ T2494] usb 10-1: selecting invalid altsetting 0 [ 2264.322042][ T2494] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 2264.363303][ T2494] usb 10-1: USB disconnect, device number 100 [ 2264.407592][T21697] fido_id[21697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2266.191931][T21765] input: syz1 as /devices/virtual/input/input233 [ 2267.014463][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36630'. [ 2268.923163][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.36650'. [ 2268.952161][T21839] sch_tbf: burst 0 is lower than device lo mtu (65511) ! [ 2269.417332][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36656'. [ 2269.446194][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36656'. [ 2269.721334][T21264] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 2269.905139][T21264] usb 10-1: Using ep0 maxpacket: 16 [ 2269.954882][T21264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.966799][T21264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.978501][T21264] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2269.998047][T21264] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.022350][T21264] usb 10-1: config 0 descriptor?? [ 2270.456170][T21264] hid_parser_main: 73 callbacks suppressed [ 2270.456196][T21264] corsair 0003:1B1C:1B02.00BE: unknown main item tag 0x0 [ 2270.490085][T21264] corsair 0003:1B1C:1B02.00BE: unknown main item tag 0x0 [ 2270.506879][T21264] corsair 0003:1B1C:1B02.00BE: unknown main item tag 0x0 [ 2270.526762][T21264] corsair 0003:1B1C:1B02.00BE: unknown main item tag 0x0 [ 2270.534635][T21264] corsair 0003:1B1C:1B02.00BE: unknown main item tag 0x0 [ 2270.547459][T21264] corsair 0003:1B1C:1B02.00BE: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.9-1/input0 [ 2270.878123][T11230] usb 10-1: USB disconnect, device number 101 [ 2271.797897][T21919] sch_fq: defrate 0 ignored. [ 2271.987508][T21896] program syz.5.36677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2272.215501][T21930] cifs: Unknown parameter '/sys/kernel/mm/ksm/run' [ 2274.280739][T21985] dummy0: mtu less than device minimum [ 2274.406799][T21989] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 2274.462379][T21991] team0: Device gtp0 is of different type [ 2274.681527][T21997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2274.764847][T22000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2275.080194][T22014] bond0: Caught tx_queue_len zero misconfig [ 2275.339382][T22023] netlink: 'syz.9.36734': attribute type 29 has an invalid length. [ 2275.354159][T22025] netlink: 'syz.1.36735': attribute type 11 has an invalid length. [ 2275.363138][T22025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.36735'. [ 2276.337443][T22054] loop9: detected capacity change from 0 to 7 [ 2276.359938][T22054] Dev loop9: unable to read RDB block 7 [ 2276.384333][T22054] loop9: unable to read partition table [ 2276.401918][T22054] loop9: partition table beyond EOD, truncated [ 2276.431457][T22054] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2276.972689][T22076] [ 2276.975088][T22076] ===================================================== [ 2276.982054][T22076] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2276.989566][T22076] syzkaller #0 Tainted: G L [ 2276.995575][T22076] ----------------------------------------------------- [ 2277.002539][T22076] syz.5.36756/22076 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2277.010399][T22076] ffff88804b4a8558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2277.019190][T22076] [ 2277.019190][T22076] and this task is already holding: [ 2277.026587][T22076] ffff88807794f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2277.036403][T22076] which would create a new lock dependency: [ 2277.042324][T22076] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2277.050475][T22076] [ 2277.050475][T22076] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2277.059966][T22076] (&dev->event_lock#2){..-.}-{3:3} [ 2277.060015][T22076] [ 2277.060015][T22076] ... which became SOFTIRQ-irq-safe at: [ 2277.072960][T22076] lock_acquire+0xf0/0x2e0 [ 2277.077497][T22076] _raw_spin_lock_irqsave+0x40/0x60 [ 2277.082805][T22076] input_inject_event+0xa5/0x340 [ 2277.087856][T22076] led_trigger_event+0x138/0x210 [ 2277.092895][T22076] kbd_bh+0x1f3/0x300 [ 2277.096989][T22076] tasklet_action_common+0x2da/0x4b0 [ 2277.102390][T22076] handle_softirqs+0x22a/0x870 [ 2277.107266][T22076] run_ksoftirqd+0x36/0x60 [ 2277.111792][T22076] smpboot_thread_fn+0x541/0xa50 [ 2277.116837][T22076] kthread+0x388/0x470 [ 2277.121007][T22076] ret_from_fork+0x51e/0xb90 [ 2277.125711][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.130608][T22076] [ 2277.130608][T22076] to a SOFTIRQ-irq-unsafe lock: [ 2277.137636][T22076] (tasklist_lock){.+.+}-{3:3} [ 2277.137665][T22076] [ 2277.137665][T22076] ... which became SOFTIRQ-irq-unsafe at: [ 2277.150338][T22076] ... [ 2277.150349][T22076] lock_acquire+0xf0/0x2e0 [ 2277.157497][T22076] _raw_read_lock+0x36/0x50 [ 2277.162112][T22076] __do_wait+0xde/0x740 [ 2277.166382][T22076] do_wait+0x1e7/0x540 [ 2277.170554][T22076] kernel_wait+0xd6/0x1c0 [ 2277.174997][T22076] call_usermodehelper_exec_work+0xbe/0x230 [ 2277.180992][T22076] process_scheduled_works+0xb02/0x1830 [ 2277.186664][T22076] worker_thread+0xa50/0xfc0 [ 2277.191363][T22076] kthread+0x388/0x470 [ 2277.195540][T22076] ret_from_fork+0x51e/0xb90 [ 2277.200236][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.205114][T22076] [ 2277.205114][T22076] other info that might help us debug this: [ 2277.205114][T22076] [ 2277.215375][T22076] Chain exists of: [ 2277.215375][T22076] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2277.215375][T22076] [ 2277.228967][T22076] Possible interrupt unsafe locking scenario: [ 2277.228967][T22076] [ 2277.237311][T22076] CPU0 CPU1 [ 2277.242863][T22076] ---- ---- [ 2277.248242][T22076] lock(tasklist_lock); [ 2277.252510][T22076] local_irq_disable(); [ 2277.259321][T22076] lock(&dev->event_lock#2); [ 2277.266543][T22076] lock(&client->buffer_lock); [ 2277.273949][T22076] [ 2277.277432][T22076] lock(&dev->event_lock#2); [ 2277.282305][T22076] [ 2277.282305][T22076] *** DEADLOCK *** [ 2277.282305][T22076] [ 2277.290462][T22076] 7 locks held by syz.5.36756/22076: [ 2277.295761][T22076] #0: ffff88802c0f1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 2277.304946][T22076] #1: ffff88801ef15230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2277.315084][T22076] #2: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2277.324781][T22076] #3: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2277.334392][T22076] #4: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2277.343555][T22076] #5: ffff88807794f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2277.353765][T22076] #6: ffffffff8e7603e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2277.362850][T22076] [ 2277.362850][T22076] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2277.373285][T22076] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2277.378957][T22076] IN-SOFTIRQ-W at: [ 2277.383041][T22076] lock_acquire+0xf0/0x2e0 [ 2277.389300][T22076] _raw_spin_lock_irqsave+0x40/0x60 [ 2277.396347][T22076] input_inject_event+0xa5/0x340 [ 2277.403133][T22076] led_trigger_event+0x138/0x210 [ 2277.409916][T22076] kbd_bh+0x1f3/0x300 [ 2277.415737][T22076] tasklet_action_common+0x2da/0x4b0 [ 2277.422878][T22076] handle_softirqs+0x22a/0x870 [ 2277.429499][T22076] run_ksoftirqd+0x36/0x60 [ 2277.435780][T22076] smpboot_thread_fn+0x541/0xa50 [ 2277.442582][T22076] kthread+0x388/0x470 [ 2277.448488][T22076] ret_from_fork+0x51e/0xb90 [ 2277.454924][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.461543][T22076] INITIAL USE at: [ 2277.465538][T22076] lock_acquire+0xf0/0x2e0 [ 2277.471710][T22076] _raw_spin_lock_irqsave+0x40/0x60 [ 2277.478678][T22076] input_inject_event+0xa5/0x340 [ 2277.485388][T22076] kbd_led_trigger_activate+0xbc/0x100 [ 2277.492618][T22076] led_trigger_set+0x535/0x960 [ 2277.499228][T22076] led_trigger_set_default+0x260/0x2a0 [ 2277.506447][T22076] led_classdev_register_ext+0x787/0x9c0 [ 2277.513842][T22076] input_leds_connect+0x517/0x790 [ 2277.520621][T22076] input_register_device+0xd00/0x1160 [ 2277.527756][T22076] atkbd_connect+0x731/0xa50 [ 2277.534223][T22076] serio_driver_probe+0x82/0xd0 [ 2277.540837][T22076] really_probe+0x267/0xaf0 [ 2277.547100][T22076] __driver_probe_device+0x18c/0x320 [ 2277.554178][T22076] driver_probe_device+0x4f/0x240 [ 2277.560961][T22076] __driver_attach+0x3e7/0x710 [ 2277.567482][T22076] bus_for_each_dev+0x23b/0x2c0 [ 2277.574094][T22076] serio_handle_event+0x20a/0xdd0 [ 2277.580885][T22076] process_scheduled_works+0xb02/0x1830 [ 2277.588196][T22076] worker_thread+0xa50/0xfc0 [ 2277.594581][T22076] kthread+0x388/0x470 [ 2277.600403][T22076] ret_from_fork+0x51e/0xb90 [ 2277.606749][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.613300][T22076] } [ 2277.615896][T22076] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2277.625029][T22076] -> (&client->buffer_lock){....}-{3:3} { [ 2277.630787][T22076] INITIAL USE at: [ 2277.634699][T22076] lock_acquire+0xf0/0x2e0 [ 2277.640702][T22076] _raw_spin_lock+0x2e/0x40 [ 2277.646798][T22076] evdev_pass_values+0xb9/0xbd0 [ 2277.653342][T22076] evdev_events+0x1e6/0x340 [ 2277.659475][T22076] input_pass_values+0x288/0x890 [ 2277.665995][T22076] input_event_dispose+0x330/0x6b0 [ 2277.672692][T22076] input_inject_event+0x1dd/0x340 [ 2277.679390][T22076] evdev_write+0x325/0x4c0 [ 2277.685389][T22076] vfs_write+0x29a/0xb90 [ 2277.691230][T22076] ksys_write+0x150/0x270 [ 2277.697151][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2277.703971][T22076] do_fast_syscall_32+0x33/0x70 [ 2277.710401][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2277.718315][T22076] } [ 2277.720829][T22076] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2277.729028][T22076] ... acquired at: [ 2277.732852][T22076] _raw_spin_lock+0x2e/0x40 [ 2277.737551][T22076] evdev_pass_values+0xb9/0xbd0 [ 2277.742596][T22076] evdev_events+0x1e6/0x340 [ 2277.747296][T22076] input_pass_values+0x288/0x890 [ 2277.752434][T22076] input_event_dispose+0x330/0x6b0 [ 2277.757756][T22076] input_inject_event+0x1dd/0x340 [ 2277.762990][T22076] evdev_write+0x325/0x4c0 [ 2277.767607][T22076] vfs_write+0x29a/0xb90 [ 2277.772054][T22076] ksys_write+0x150/0x270 [ 2277.776584][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2277.781968][T22076] do_fast_syscall_32+0x33/0x70 [ 2277.787011][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2277.793532][T22076] [ 2277.795865][T22076] [ 2277.795865][T22076] the dependencies between the lock to be acquired [ 2277.795874][T22076] and SOFTIRQ-irq-unsafe lock: [ 2277.809495][T22076] -> (tasklist_lock){.+.+}-{3:3} { [ 2277.814838][T22076] HARDIRQ-ON-R at: [ 2277.819005][T22076] lock_acquire+0xf0/0x2e0 [ 2277.825443][T22076] _raw_read_lock+0x36/0x50 [ 2277.831967][T22076] __do_wait+0xde/0x740 [ 2277.838154][T22076] do_wait+0x1e7/0x540 [ 2277.844244][T22076] kernel_wait+0xd6/0x1c0 [ 2277.850600][T22076] call_usermodehelper_exec_work+0xbe/0x230 [ 2277.858508][T22076] process_scheduled_works+0xb02/0x1830 [ 2277.866079][T22076] worker_thread+0xa50/0xfc0 [ 2277.872703][T22076] kthread+0x388/0x470 [ 2277.878784][T22076] ret_from_fork+0x51e/0xb90 [ 2277.885391][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.892272][T22076] SOFTIRQ-ON-R at: [ 2277.896444][T22076] lock_acquire+0xf0/0x2e0 [ 2277.902879][T22076] _raw_read_lock+0x36/0x50 [ 2277.909401][T22076] __do_wait+0xde/0x740 [ 2277.915573][T22076] do_wait+0x1e7/0x540 [ 2277.921656][T22076] kernel_wait+0xd6/0x1c0 [ 2277.928004][T22076] call_usermodehelper_exec_work+0xbe/0x230 [ 2277.936016][T22076] process_scheduled_works+0xb02/0x1830 [ 2277.943591][T22076] worker_thread+0xa50/0xfc0 [ 2277.950205][T22076] kthread+0x388/0x470 [ 2277.956285][T22076] ret_from_fork+0x51e/0xb90 [ 2277.962900][T22076] ret_from_fork_asm+0x1a/0x30 [ 2277.969693][T22076] INITIAL USE at: [ 2277.973786][T22076] lock_acquire+0xf0/0x2e0 [ 2277.980142][T22076] _raw_write_lock_irq+0x3d/0x50 [ 2277.987016][T22076] copy_process+0x247a/0x3cf0 [ 2277.993632][T22076] kernel_clone+0x248/0x8e0 [ 2278.000069][T22076] user_mode_thread+0x110/0x180 [ 2278.006862][T22076] rest_init+0x23/0x300 [ 2278.012951][T22076] start_kernel+0x385/0x3d0 [ 2278.019414][T22076] x86_64_start_reservations+0x24/0x30 [ 2278.026797][T22076] x86_64_start_kernel+0x143/0x1c0 [ 2278.033837][T22076] common_startup_64+0x13e/0x147 [ 2278.040797][T22076] INITIAL READ USE at: [ 2278.045414][T22076] lock_acquire+0xf0/0x2e0 [ 2278.052268][T22076] _raw_read_lock+0x36/0x50 [ 2278.059227][T22076] __do_wait+0xde/0x740 [ 2278.065745][T22076] do_wait+0x1e7/0x540 [ 2278.072174][T22076] kernel_wait+0xd6/0x1c0 [ 2278.078865][T22076] call_usermodehelper_exec_work+0xbe/0x230 [ 2278.087138][T22076] process_scheduled_works+0xb02/0x1830 [ 2278.095057][T22076] worker_thread+0xa50/0xfc0 [ 2278.102015][T22076] kthread+0x388/0x470 [ 2278.108445][T22076] ret_from_fork+0x51e/0xb90 [ 2278.115399][T22076] ret_from_fork_asm+0x1a/0x30 [ 2278.122533][T22076] } [ 2278.125220][T22076] ... key at: [] tasklist_lock+0x18/0x40 [ 2278.133252][T22076] ... acquired at: [ 2278.137247][T22076] _raw_read_lock+0x36/0x50 [ 2278.141947][T22076] send_sigurg+0x12b/0x420 [ 2278.146571][T22076] sk_send_sigurg+0x6c/0x2e0 [ 2278.151361][T22076] queue_oob+0x42c/0x4f0 [ 2278.155821][T22076] unix_stream_sendmsg+0xcb1/0xe80 [ 2278.161126][T22076] ____sys_sendmsg+0xa68/0xad0 [ 2278.166117][T22076] ___sys_sendmsg+0x2a5/0x360 [ 2278.171078][T22076] __sys_sendmsg+0x183/0x260 [ 2278.175868][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.181260][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.186320][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.192842][T22076] [ 2278.195196][T22076] -> (&f_owner->lock){....}-{3:3} { [ 2278.200521][T22076] INITIAL USE at: [ 2278.204522][T22076] lock_acquire+0xf0/0x2e0 [ 2278.210693][T22076] _raw_write_lock_irq+0x3d/0x50 [ 2278.217412][T22076] __f_setown+0x67/0x370 [ 2278.223428][T22076] tun_chr_fasync+0x127/0x1a0 [ 2278.229889][T22076] do_fcntl+0x1201/0x1a20 [ 2278.235995][T22076] do_compat_fcntl64+0x51e/0x7e0 [ 2278.242792][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.249752][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.256357][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.264443][T22076] INITIAL READ USE at: [ 2278.269309][T22076] lock_acquire+0xf0/0x2e0 [ 2278.275924][T22076] _raw_read_lock_irqsave+0x48/0x60 [ 2278.283320][T22076] send_sigurg+0x55/0x420 [ 2278.289855][T22076] sk_send_sigurg+0x6c/0x2e0 [ 2278.296638][T22076] queue_oob+0x42c/0x4f0 [ 2278.303114][T22076] unix_stream_sendmsg+0xcb1/0xe80 [ 2278.310417][T22076] ____sys_sendmsg+0xa68/0xad0 [ 2278.317379][T22076] ___sys_sendmsg+0x2a5/0x360 [ 2278.324338][T22076] __sys_sendmmsg+0x2e7/0x4e0 [ 2278.331244][T22076] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2278.339000][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.346395][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.353442][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.361966][T22076] } [ 2278.364565][T22076] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2278.373531][T22076] ... acquired at: [ 2278.377460][T22076] _raw_read_lock_irqsave+0x48/0x60 [ 2278.382858][T22076] send_sigio+0x38/0x370 [ 2278.387305][T22076] kill_fasync+0x24d/0x4d0 [ 2278.391924][T22076] lease_break_callback+0x26/0x30 [ 2278.397150][T22076] __break_lease+0x81c/0x1e80 [ 2278.402036][T22076] vfs_truncate+0x449/0x540 [ 2278.406728][T22076] do_sys_truncate+0xf3/0x1c0 [ 2278.411601][T22076] __ia32_compat_sys_truncate+0x5b/0x70 [ 2278.417362][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.422744][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.427779][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.434312][T22076] [ 2278.436648][T22076] -> (&new->fa_lock){....}-{3:3} { [ 2278.441796][T22076] INITIAL USE at: [ 2278.445703][T22076] lock_acquire+0xf0/0x2e0 [ 2278.451702][T22076] _raw_write_lock_irq+0x3d/0x50 [ 2278.458227][T22076] fasync_remove_entry+0xf1/0x1c0 [ 2278.464853][T22076] __fput+0x8a5/0xa70 [ 2278.470422][T22076] task_work_run+0x1d9/0x270 [ 2278.476606][T22076] exit_to_user_mode_loop+0xed/0x480 [ 2278.483479][T22076] __do_fast_syscall_32+0x415/0x640 [ 2278.490271][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.496703][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.504615][T22076] INITIAL READ USE at: [ 2278.508956][T22076] lock_acquire+0xf0/0x2e0 [ 2278.515398][T22076] _raw_read_lock_irqsave+0x48/0x60 [ 2278.522635][T22076] kill_fasync+0x199/0x4d0 [ 2278.529077][T22076] pipe_release+0x19c/0x330 [ 2278.535618][T22076] __fput+0x44f/0xa70 [ 2278.541646][T22076] task_work_run+0x1d9/0x270 [ 2278.548279][T22076] exit_to_user_mode_loop+0xed/0x480 [ 2278.555590][T22076] __do_fast_syscall_32+0x415/0x640 [ 2278.562804][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.569672][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.578065][T22076] } [ 2278.580588][T22076] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2278.589291][T22076] ... acquired at: [ 2278.593106][T22076] _raw_read_lock_irqsave+0x48/0x60 [ 2278.598512][T22076] kill_fasync+0x199/0x4d0 [ 2278.603132][T22076] evdev_pass_values+0x627/0xbd0 [ 2278.608261][T22076] evdev_events+0x1e6/0x340 [ 2278.612975][T22076] input_pass_values+0x288/0x890 [ 2278.618123][T22076] input_event_dispose+0x330/0x6b0 [ 2278.623432][T22076] input_inject_event+0x1dd/0x340 [ 2278.628660][T22076] evdev_write+0x325/0x4c0 [ 2278.633274][T22076] vfs_write+0x29a/0xb90 [ 2278.637743][T22076] ksys_write+0x150/0x270 [ 2278.642277][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.647674][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.652717][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.659248][T22076] [ 2278.661599][T22076] [ 2278.661599][T22076] stack backtrace: [ 2278.667505][T22076] CPU: 1 UID: 0 PID: 22076 Comm: syz.5.36756 Tainted: G L syzkaller #0 PREEMPT(full) [ 2278.667531][T22076] Tainted: [L]=SOFTLOCKUP [ 2278.667538][T22076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2278.667550][T22076] Call Trace: [ 2278.667558][T22076] [ 2278.667565][T22076] dump_stack_lvl+0xe8/0x150 [ 2278.667593][T22076] __lock_acquire+0x2a94/0x2cf0 [ 2278.667625][T22076] lock_acquire+0xf0/0x2e0 [ 2278.667646][T22076] ? kill_fasync+0x199/0x4d0 [ 2278.667678][T22076] _raw_read_lock_irqsave+0x48/0x60 [ 2278.667704][T22076] ? kill_fasync+0x199/0x4d0 [ 2278.667731][T22076] kill_fasync+0x199/0x4d0 [ 2278.667757][T22076] ? kill_fasync+0x53/0x4d0 [ 2278.667786][T22076] evdev_pass_values+0x627/0xbd0 [ 2278.667810][T22076] ? evdev_pass_values+0x631/0xbd0 [ 2278.667834][T22076] evdev_events+0x1e6/0x340 [ 2278.667854][T22076] ? evdev_events+0x79/0x340 [ 2278.667874][T22076] ? input_pass_values+0x8d/0x890 [ 2278.667893][T22076] input_pass_values+0x288/0x890 [ 2278.667916][T22076] ? input_handle_event+0x70c/0xf30 [ 2278.667944][T22076] input_event_dispose+0x330/0x6b0 [ 2278.667973][T22076] input_inject_event+0x1dd/0x340 [ 2278.668001][T22076] ? input_inject_event+0xb6/0x340 [ 2278.668035][T22076] evdev_write+0x325/0x4c0 [ 2278.668058][T22076] ? __pfx_evdev_write+0x10/0x10 [ 2278.668084][T22076] ? bpf_lsm_file_permission+0x9/0x20 [ 2278.668104][T22076] ? security_file_permission+0x75/0x260 [ 2278.668126][T22076] ? rw_verify_area+0x255/0x4d0 [ 2278.668152][T22076] ? __pfx_evdev_write+0x10/0x10 [ 2278.668174][T22076] vfs_write+0x29a/0xb90 [ 2278.668204][T22076] ? __pfx_vfs_write+0x10/0x10 [ 2278.668231][T22076] ? __fget_files+0x2a/0x420 [ 2278.668255][T22076] ? __fget_files+0x2a/0x420 [ 2278.668279][T22076] ? __fget_files+0x3a0/0x420 [ 2278.668301][T22076] ? __fget_files+0x2a/0x420 [ 2278.668327][T22076] ksys_write+0x150/0x270 [ 2278.668355][T22076] ? __pfx_ksys_write+0x10/0x10 [ 2278.668385][T22076] __do_fast_syscall_32+0x20d/0x640 [ 2278.668403][T22076] ? do_fast_syscall_32+0x33/0x70 [ 2278.668419][T22076] ? asm_int80_emulation+0x1a/0x20 [ 2278.668436][T22076] ? do_int80_emulation+0x274/0x4d0 [ 2278.668464][T22076] ? trace_irq_disable+0x3b/0x150 [ 2278.668491][T22076] do_fast_syscall_32+0x33/0x70 [ 2278.668507][T22076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2278.668530][T22076] RIP: 0023:0xf7f27f6c [ 2278.668546][T22076] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2278.668563][T22076] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2278.668583][T22076] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002200 [ 2278.668597][T22076] RDX: 0000000000000130 RSI: 0000000000000000 RDI: 0000000000000000 [ 2278.668608][T22076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2278.668619][T22076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2278.668631][T22076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2278.668649][T22076] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2279.984111][ T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.100154][ T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.151061][ T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.196013][T12093] syz_tun (unregistering): left allmulticast mode [ 2280.216660][ T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.387272][ T165] bridge_slave_1: left allmulticast mode [ 2280.393234][ T165] bridge_slave_1: left promiscuous mode [ 2280.398975][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.408170][ T165] bridge_slave_0: left allmulticast mode [ 2280.414593][ T165] bridge_slave_0: left promiscuous mode [ 2280.420353][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.431076][ T165] batman_adv: batadv0: Interface deactivated: gretap1 [ 2280.515132][ T165] batman_adv: batadv0: Removing interface: gretap1 [ 2280.577760][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2280.589573][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2280.604011][ T165] bond0 (unregistering): Released all slaves [ 2280.674968][ T165] tipc: Disabling bearer [ 2280.680494][ T165] tipc: Left network mode [ 2280.748716][ T165] hsr_slave_0: left promiscuous mode [ 2280.758223][ T165] hsr_slave_1: left promiscuous mode [ 2280.764995][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2280.773391][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.783273][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2280.790722][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.800232][ T165] batman_adv: batadv0: Interface deactivated: dummy0 [ 2280.809580][ T165] batman_adv: batadv0: Removing interface: dummy0 [ 2280.823269][ T165] veth1_macvtap: left promiscuous mode [ 2280.828805][ T165] veth0_macvtap: left promiscuous mode [ 2280.834671][ T165] veth1_vlan: left promiscuous mode [ 2280.839963][ T165] veth0_vlan: left promiscuous mode [ 2281.016207][ T165] team0 (unregistering): Port device team_slave_1 removed [ 2281.040941][ T165] team0 (unregistering): Port device team_slave_0 removed [ 2281.473000][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.544193][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.585984][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.645391][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.223598][ T58] bond0: (slave netdevsim0): Releasing backup interface [ 2282.335704][ T58] bridge_slave_1: left allmulticast mode [ 2282.342526][ T58] bridge_slave_1: left promiscuous mode [ 2282.348286][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.359691][ T58] bridge_slave_0: left allmulticast mode [ 2282.367437][ T58] bridge_slave_0: left promiscuous mode [ 2282.374337][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.393640][ T58] bridge_slave_1: left allmulticast mode [ 2282.399428][ T58] bridge_slave_1: left promiscuous mode [ 2282.406151][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.415625][ T58] bridge_slave_0: left allmulticast mode [ 2282.425164][ T58] bridge_slave_0: left promiscuous mode [ 2282.430879][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.622503][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.638901][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.649196][ T58] bond0 (unregistering): Released all slaves [ 2282.657764][ T58] tipc: Disabling bearer [ 2282.834979][ T58] tipc: Disabling bearer [ 2283.144937][ T58]  (unregistering): Released all slaves [ 2283.154765][ T58] bond1 (unregistering): Released all slaves [ 2283.165027][ T58] bond2 (unregistering): Released all slaves [ 2283.175425][ T58] bond3 (unregistering): Released all slaves [ 2283.187707][ T58] bond4 (unregistering): Released all slaves [ 2283.197501][ T58] bond5 (unregistering): Released all slaves [ 2283.207717][ T58] bond6 (unregistering): Released all slaves [ 2283.217993][ T58] team0: Port device bond7 removed [ 2283.229864][ T58] bond7 (unregistering): Released all slaves [ 2283.240454][ T58] bond8 (unregistering): Released all slaves [ 2283.250729][ T58] bond9 (unregistering): Released all slaves [ 2283.432683][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.441842][ T58] bond0 (unregistering): Released all slaves [ 2283.449827][ T58] bond1 (unregistering): Released all slaves [ 2283.459993][ T58] bond2 (unregistering): Released all slaves [ 2283.625779][ T58] hma(sha224): left promiscuous mode [ 2283.683595][ T58] : left promiscuous mode [ 2283.752044][ T58] : left promiscuous mode [ 2283.786906][ T58] : left promiscuous mode [ 2283.795228][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.801748][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.833946][ T58] tipc: Disabling bearer [ 2283.851097][ T58] tipc: Left network mode [ 2283.866619][ T58] tipc: Disabling bearer [ 2283.872586][ T58] tipc: Left network mode [ 2283.929305][ T58] IPVS: stopping backup sync thread 2500 ... [ 2284.596381][ T58] hsr_slave_0: left promiscuous mode [ 2284.603655][ T58] hsr_slave_1: left promiscuous mode [ 2284.609532][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.617997][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.627304][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2284.635069][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.645487][ T58] hsr_slave_0: left promiscuous mode [ 2284.652626][ T58] hsr_slave_1: left promiscuous mode [ 2284.662960][ T58] hsr_slave_0: left promiscuous mode [ 2284.668881][ T58] hsr_slave_1: left promiscuous mode [ 2284.675006][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.683239][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.696141][ T58] veth1_macvtap: left promiscuous mode [ 2284.702598][ T58] veth0_macvtap: left promiscuous mode [ 2284.708159][ T58] veth1_vlan: left promiscuous mode [ 2284.713690][ T58] veth0_vlan: left promiscuous mode [ 2284.837310][ T58] team0 (unregistering): Port device team_slave_1 removed [ 2284.850618][ T58] team0 (unregistering): Port device team_slave_0 removed [ 2285.559960][ T58] pim6reg9 (unregistering): left allmulticast mode [ 2285.640112][ T58] team0 (unregistering): Port device team_slave_1 removed [ 2285.672691][ T58] team0 (unregistering): Port device team_slave_0 removed