last executing test programs: 8.189027283s ago: executing program 1 (id=2998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="6a685a1064e64a36d2002f5f6f47415830f757b8", 0x8) r1 = dup2(r0, r0) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup2(r2, r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x14}, 0x14}}, 0x8041) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, {0xece, "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"}}, 0xed4) 8.025817828s ago: executing program 1 (id=2999): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x2) 7.336041873s ago: executing program 1 (id=3002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fb", 0x1}, {&(0x7f0000000000)="7df96d9198953cb7bf2bc0a3b28751a17667747bf62dafef6c44dea0dced0e08e913609f0855b08d40dce3dab2b4dba3e7968c75bd8e836f872d7e7e9b7d649d812081f4501010ac1699d51e3d309adebcfe6e3b5a5ac334596e74bc2ef9c906ce5e02091d98ec5ed07633f3", 0x6c}], 0x2}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) 7.09413103s ago: executing program 1 (id=3004): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) fcntl$setstatus(r0, 0x4, 0x2000) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f0000000600)=ANY=[@ANYBLOB="17010000020000102505a1a440000102030109027e00020100c0000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c08241c03000900000e2407320300060009020008c900202e174354dd490905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000004000"/154], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, 0x0) fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b) lseek(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063510800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x101, 0x0, r5, 0xffffc000, '\x00', r6, r5, 0x4, 0x3, 0x1, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x20) 6.165170441s ago: executing program 3 (id=3006): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 6.117251788s ago: executing program 2 (id=3007): unshare(0x400) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x4004743b, 0x0) 5.988062628s ago: executing program 2 (id=3008): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000200000000000000000fc010000000000000000000000000000fc01000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 5.237063622s ago: executing program 3 (id=3011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "0e9d28fe"}]}}, 0x0}, 0x0) 4.678682457s ago: executing program 2 (id=3016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp6(0xa, 0x3, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000004000)=ANY=[@ANYBLOB="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"/3323], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="000a00000000000007300000000000000000102dcc00001100000000000000000000000000000000000000000720000000000600000000000000000000000000000000000200feffff07000000000000000047d7a9"], 0x60) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.370107477s ago: executing program 2 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x545d, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @private}}, @sadb_x_filter={0x5, 0x1b, @in=@broadcast, @in=@local}]}, 0x60}}, 0x0) 2.988742605s ago: executing program 0 (id=3023): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x80c406, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0xff, 0x2a9, &(0x7f0000000a40)="$eJzs3M9rE0EUwPGX3TabVvrjJOjFh170stR4VMEoLYgBJe2KehC2dKshMSm7QRMRzNlT/47i0Zsg/gO9+wd4K4L01JMrTTbrJqYVa0w0+X6g7My8nXZmXwtvCpu9B9vPSpuBvenWxMioGCJNORBZlKJ0pKJrutVOx+NyPStNubT0fP/N6sNHd3L5/HJBdSW3diWrqvPnPrx49fb8x9qp++/mLUt2Fx/vfc1+3j29e2bv29rTYqDFQCvVmrq6Xq3W3PWypxvFoGSr3it7buBpsRJ4fld8s1zd2mqoW9mYm93yvSBQt9JQQxpaq2omWlVFbdvWudnDdkYmSPq3Zzg7hYKb6xuaqCc33nw/55oiMvNTTp2d0awIAACM0tH1vxHf06n/jd76X+QX9f/r6K759wOv/02J6/+S16r/a35D3SduMVn/41jOjSPr/2MYf2cx+BOpZqJzsyvk+7mZ/pOo/wEAAAAAAAAAAAAAAAAAAAAA+B8chOFCGIYLh1dDRMKob4mImej3mcob4mMgmf8w8WVFCT4m/xgDiRf3MiJfmnWn7qRa13Z85XZ+eUlbEi/+7dfrjhnHL7fj2h2fltkonu0bT8vFC+34YezW3Xwyvl13ZmSjZ61mV685yMcAAAAAAMBYszW2GA9mJD7f27Za0htvnd9bjSkR6fx/oOd8PyVnp4a4EQAAAAAAcKSg8bLklsueP5yGOcSfdeKGyMmmXw2tgSzDFJHEiBWlKnlPYVVkcFtOy0m33NOwxOusdriJ+5Qb/a/NcBrXBvYNw5RIe2Q6ylnPXwEAAACA8fLjPDDqlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMLmG8dFlo94jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K/4HgAA///iILNY") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) 2.514964167s ago: executing program 0 (id=3024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4a}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) 2.409239473s ago: executing program 0 (id=3025): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/212, 0xd4}], 0xc}, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 2.352938952s ago: executing program 1 (id=3026): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000200000000000000000fc010000000000000000000000000000fc01000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 2.301100329s ago: executing program 2 (id=3027): memfd_create(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x0, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) 2.256403156s ago: executing program 4 (id=3028): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0xfc, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xfc}}, 0x0) 2.150348503s ago: executing program 4 (id=3029): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f0000001940), 0x6, 0x588, &(0x7f0000000300)="$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") setrlimit(0xf, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffe}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20048001) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x24000804) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) memfd_create(&(0x7f0000000000)='\x06', 0x6) lseek(0xffffffffffffffff, 0x8000000000000001, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) unshare(0x20000600) mremap(&(0x7f00008c4000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000e2e000/0x1000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a80)={0x0, 0x300, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000900000005000800040000000800010000000000050007"], 0x2c}}, 0x0) 2.03898881s ago: executing program 3 (id=3030): unshare(0x400) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x4004743b, 0x0) 1.952009452s ago: executing program 3 (id=3031): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="6a685a1064e64a36d2002f5f6f47415830f757b8", 0x8) r1 = dup2(r0, r0) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup2(r2, r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x14}, 0x14}}, 0x8041) write$UHID_INPUT2(r3, 0x0, 0x0) 1.939284304s ago: executing program 3 (id=3032): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r4 = openat$userio(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0x4}, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0xa1112}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x0, 0x0) 1.804166045s ago: executing program 4 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 1.690497023s ago: executing program 4 (id=3034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.482015614s ago: executing program 0 (id=3035): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x80c406, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0xff, 0x2a9, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) 1.120349309s ago: executing program 2 (id=3036): getitimer(0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="001f37ae4c98f0e8dd887900004c5cb10811c584172da7fa6c0a459c5dc19f4d4683ed506f49e10e437f91962a1acd79c684955f47c819a44d28bcb480b17ee932d560e91352bafc053eab1071fee81cda3811f943a8e09fecfbcbb14eb028b5bce097ad07dabe7331a28c18d347f9", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x824, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) stat(0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0x2, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup=r2, 0x22, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@cgroup=r2, r2, 0x19, 0x0, r1, @prog_id=r8, r9}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r11, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSND(r11, 0x40044581, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x93c, 0x4) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r6, 0x0, 0x2, 0x2100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61127000000000006113500000000000bf20000000000000070000001800000035030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2463e1c1e762400"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc90}, 0x48) 876.225966ms ago: executing program 4 (id=3037): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 864.004058ms ago: executing program 3 (id=3038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x545d, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @private}}, @sadb_x_filter={0x5, 0x1b, @in=@broadcast, @in=@local}]}, 0x60}}, 0x0) 797.808888ms ago: executing program 0 (id=3039): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) unshare(0x28020480) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x80045505, 0x0) 646.100382ms ago: executing program 0 (id=3040): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000022c0)={0x24, 0x0, 0x0, &(0x7f0000002240)={0x0, 0x22, 0x8, {[@main, @global=@item_4={0x3, 0x1, 0x0, "bf51eaed"}, @global=@item_012={0x1, 0x1, 0x0, "bc"}]}}, 0x0}, 0x0) 535.603368ms ago: executing program 4 (id=3041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setresuid(0xee00, 0xee00, 0x0) 0s ago: executing program 1 (id=3042): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f00040000"], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r5, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}, {&(0x7f0000007240)=ANY=[@ANYBLOB="202500003e0010002dbd7000fddbdf2545014880102fedc43fe616f7dd01969fdbe8d375db0aad59bd06c1f0cbde9594dd5a7f5b52d9ba85f1ac49495960ce24807c9fc4c83772b5c132398c6eeb5804799957cc5e0b853516bf5d2cb922c28bedacbb69a1ecf99bf62c0ecadacfd0faf79ba4486feb5125af281f013f4b4e315d1c5df1326d58286b632ec3ca753a71a4bcf8daf69617874c7cc1b712969bf32a39863a21b9163c8e6a2a9f77f9f30ec1ce4c53ea1b8105e7f32b645caddc5f06c916345c076c17e6a357e17ec9c0529127b59365ee721849ff5efa68d35654c9a4d523d1b8ff11533ccbca5cc65529831d1c08000d00", @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=0x0], 0x2520}, {&(0x7f0000000600)=ANY=[@ANYBLOB="55d900003200010026bd700000c5175a57800e33584f9787902812d99af36610434c70af2900c68008001b00"/55, @ANYRES32, @ANYBLOB="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"], 0x200}], 0x3}, 0x0) kernel console output (not intermixed with test programs): 8.903679][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 568.941865][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 568.978057][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.018868][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.061628][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.104898][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.137929][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.167959][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.197928][T10755] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 569.238988][T10755] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 569.257097][T10755] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 569.405526][ T26] audit: type=1326 audit(1719575048.672:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17797 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8d75b29 code=0x7fc00000 [ 569.450622][ T3598] usb 1-1: USB disconnect, device number 85 [ 569.638502][ T3552] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 569.692158][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 570.028132][ T26] audit: type=1326 audit(1719575049.242:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17827 comm="syz.1.2425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2d775b29 code=0x0 [ 570.051020][ T3552] Bluetooth: hci5: command 0x0406 tx timeout [ 571.213009][T17844] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2423'. [ 571.626350][T17815] loop4: detected capacity change from 0 to 40427 [ 571.890760][T17815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 572.098013][T17815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 572.137516][T17815] syz.4.2422: attempt to access beyond end of device [ 572.137516][T17815] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 572.259241][T14267] syz-executor: attempt to access beyond end of device [ 572.259241][T14267] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 572.298874][T17855] netlink: 'syz.1.2433': attribute type 10 has an invalid length. [ 572.373933][T17855] team0: Device ipvlan1 failed to register rx_handler [ 572.408965][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 572.469336][T17859] hpfs: Bad magic ... probably not HPFS [ 572.523061][T17855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 572.581889][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 572.634157][T17855] netlink: 'syz.1.2433': attribute type 2 has an invalid length. [ 573.367925][T10755] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 573.657953][T10755] usb 2-1: Using ep0 maxpacket: 16 [ 573.788255][T10755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 573.815254][T10755] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 573.844797][T10755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.877051][T10755] usb 2-1: config 0 descriptor?? [ 574.130820][T17863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.158237][T17863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.211105][T17863] syz.1.2435 (17863): drop_caches: 2 [ 574.295586][ T3564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 574.304912][ T26] audit: type=1326 audit(1719575053.562:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.4.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fbf75b29 code=0x7fc00000 [ 574.338228][ T3559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 574.347364][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 574.355759][ T3559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 574.363980][ T3559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 574.371486][ T3559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 574.458942][T17863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.482072][T17863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.539097][T10755] hid (null): invalid report_size 12141 [ 574.551221][T10755] hid (null): unknown global tag 0xd [ 574.574778][T10755] hid (null): unknown global tag 0xd [ 574.618697][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.656821][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.689819][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.742147][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.800881][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.871511][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 574.995861][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.174501][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.435844][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.612938][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.628321][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x4 [ 575.644015][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.676003][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.716325][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.739343][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.747627][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.763774][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.789647][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.802020][T18006] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 575.807396][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.844818][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.848544][T18006] team0: Device ipvlan1 failed to register rx_handler [ 575.862559][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.882804][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.904225][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.922306][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.937973][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.955712][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 575.968010][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.005938][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.022958][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.040934][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.058008][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.079516][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2445'. [ 576.089575][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.097103][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.114824][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2445'. [ 576.134366][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.152120][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.162216][T18010] netlink: 'syz.1.2445': attribute type 2 has an invalid length. [ 576.172350][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.192709][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.210677][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.227942][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.235493][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.243121][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.250682][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.258248][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.265769][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.274982][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.290089][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.302543][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.312661][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.325096][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.335225][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.347691][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.366789][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.390183][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.413293][T10755] hid-generic 0003:0158:0100.004C: unknown main item tag 0x0 [ 576.432814][T10755] hid-generic 0003:0158:0100.004C: invalid report_size 12141 [ 576.440824][T10755] hid-generic 0003:0158:0100.004C: item 0 2 1 7 parsing failed [ 576.443577][ T3559] Bluetooth: hci6: command tx timeout [ 576.459379][T10755] hid-generic: probe of 0003:0158:0100.004C failed with error -22 [ 576.477161][T10755] usb 2-1: USB disconnect, device number 99 [ 576.538316][T18020] hpfs: Bad magic ... probably not HPFS [ 576.875800][T17890] chnl_net:caif_netlink_parms(): no params data found [ 576.915683][T18003] loop3: detected capacity change from 0 to 40427 [ 576.981012][T18003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 577.194510][T17890] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.205161][T17890] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.215334][T17890] device bridge_slave_0 entered promiscuous mode [ 577.231436][T17890] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.255822][T18003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 577.258089][T17890] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.292360][T17890] device bridge_slave_1 entered promiscuous mode [ 577.343833][T18003] syz.3.2444: attempt to access beyond end of device [ 577.343833][T18003] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 577.497731][ T5123] syz-executor: attempt to access beyond end of device [ 577.497731][ T5123] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 577.519784][T17890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.532645][T17890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.577030][T18153] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2447'. [ 577.597340][T17890] team0: Port device team_slave_0 added [ 577.621077][T17890] team0: Port device team_slave_1 added [ 577.693446][T13039] syz-executor (13039) used greatest stack depth: 19864 bytes left [ 577.707124][T17890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.719847][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.746959][T17890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.758010][ T3595] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 577.766706][T17890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.776541][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.816281][T17890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.937047][ T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.078937][T17890] device hsr_slave_0 entered promiscuous mode [ 578.095773][T17890] device hsr_slave_1 entered promiscuous mode [ 578.104348][T17890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.121108][T17890] Cannot create hsr debugfs directory [ 578.192245][ T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.288184][ T3595] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 578.299819][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.326991][ T3595] usb 1-1: Product: syz [ 578.337423][ T3595] usb 1-1: Manufacturer: syz [ 578.357551][ T3595] usb 1-1: SerialNumber: syz [ 578.375480][ T3595] usb 1-1: config 0 descriptor?? [ 578.417226][ T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.442479][ T3595] usb 1-1: bad CDC descriptors [ 578.449220][ T3595] usb 1-1: bad CDC descriptors [ 578.462222][ T3595] option 1-1:0.0: GSM modem (1-port) converter detected [ 578.508094][ T3559] Bluetooth: hci6: command tx timeout [ 578.582153][ T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.906112][ T3597] usb 1-1: USB disconnect, device number 86 [ 578.975167][ T3597] option 1-1:0.0: device disconnected [ 580.057585][T18318] hpfs: Bad magic ... probably not HPFS [ 580.097768][ T26] audit: type=1800 audit(1719575059.352:153): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2462" name="bus" dev="sda1" ino=1997 res=0 errno=0 [ 581.125018][ T3559] Bluetooth: hci6: command tx timeout [ 581.900979][T17890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 582.242395][T17890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 582.585072][T17890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 582.622138][T17890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.148210][ T3559] Bluetooth: hci6: command tx timeout [ 583.302031][T17890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.563835][T17890] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.619147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 583.627194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.751137][ T102] device hsr_slave_0 left promiscuous mode [ 583.768102][ T102] device hsr_slave_1 left promiscuous mode [ 583.806505][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.817935][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.837914][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.855662][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.877788][ T102] device bridge_slave_1 left promiscuous mode [ 583.894636][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.956648][ T102] device bridge_slave_0 left promiscuous mode [ 583.968133][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.992392][ T3600] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 584.040130][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 584.081888][ T102] device veth1_macvtap left promiscuous mode [ 584.097967][ T102] device veth0_macvtap left promiscuous mode [ 584.124629][ T102] device veth1_vlan left promiscuous mode [ 584.130628][ T102] device veth0_vlan left promiscuous mode [ 584.534521][T18385] hpfs: Bad magic ... probably not HPFS [ 585.048144][ T3600] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 585.147890][ T3600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.155984][ T3600] usb 1-1: Product: syz [ 585.177914][ T3600] usb 1-1: Manufacturer: syz [ 585.182621][ T3600] usb 1-1: SerialNumber: syz [ 585.202445][ T3600] usb 1-1: config 0 descriptor?? [ 585.208371][T18387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2469'. [ 585.260693][ T3600] usb 1-1: bad CDC descriptors [ 585.272901][ T3600] usb 1-1: bad CDC descriptors [ 585.288655][ T3600] option 1-1:0.0: GSM modem (1-port) converter detected [ 585.532571][ T3600] usb 1-1: USB disconnect, device number 87 [ 585.548725][ T3600] option 1-1:0.0: device disconnected [ 585.905144][ T26] audit: type=1326 audit(1719575065.172:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18409 comm="syz.3.2475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08a8d75b29 code=0x0 [ 587.117225][ T102] team0 (unregistering): Port device team_slave_1 removed [ 587.673232][ T102] team0 (unregistering): Port device team_slave_0 removed [ 587.928476][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.114632][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.635870][ T26] audit: type=1800 audit(1719575067.902:155): pid=18432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2481" name=".pending_reads" dev="sda1" ino=2007 res=0 errno=0 [ 589.403802][T18424] loop1: detected capacity change from 0 to 40427 [ 589.502586][T18424] F2FS-fs (loop1): Found nat_bits in checkpoint [ 589.827964][T18424] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 589.866706][ T102] bond0 (unregistering): Released all slaves [ 589.891365][T18424] syz.1.2480: attempt to access beyond end of device [ 589.891365][T18424] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 590.045949][ T3551] syz-executor: attempt to access beyond end of device [ 590.045949][ T3551] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 590.069594][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 590.103133][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 590.131264][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.138690][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.218888][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.240586][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.278943][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.315097][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.322379][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.393500][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.409704][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.436062][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.460523][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.506998][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 590.527669][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.553724][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.576251][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.599922][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.623451][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.646776][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.672539][T17890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.298052][ T3605] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 591.452461][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.475327][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.511739][T17890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.615011][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 591.626034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.704771][ T3605] usb 5-1: Using ep0 maxpacket: 16 [ 591.744583][T17890] device veth0_vlan entered promiscuous mode [ 591.865157][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.951666][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 592.222872][T17890] device veth1_vlan entered promiscuous mode [ 592.468677][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.476982][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.545320][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 592.688015][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.699460][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.728467][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 592.797016][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 592.883888][T17890] device veth0_macvtap entered promiscuous mode [ 592.952294][T17890] device veth1_macvtap entered promiscuous mode [ 593.094121][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.169942][T18478] fuse: Bad value for 'fd' [ 593.188019][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.190489][ T26] audit: type=1800 audit(1719575072.432:156): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2494" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 593.219491][ T3605] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.232882][ T3605] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.242015][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.253879][ T26] audit: type=1804 audit(1719575072.522:157): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2494" name="/root/syzkaller.Tf1XvG/415/file0" dev="sda1" ino=1952 res=1 errno=0 [ 593.259768][ T3605] usb 5-1: config 0 descriptor?? [ 593.289396][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.327892][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.367998][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.407867][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.417732][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.439199][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.449127][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.470158][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.481615][T17890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.558651][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.577266][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 593.598937][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.608442][T10755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.619231][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.633375][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.644774][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.655425][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.665637][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.676354][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.686445][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.697550][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.707679][ T3293] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 593.725635][T17890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.746414][T17890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.759689][T17890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.768891][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.788226][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 593.805315][T17890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.824706][T17890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.844957][T17890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.860794][ T3605] microsoft 0003:045E:07DA.004D: ignoring exceeding usage max [ 593.884809][T17890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.887493][ T3605] microsoft 0003:045E:07DA.004D: global environment stack underflow [ 593.912669][ T3605] microsoft 0003:045E:07DA.004D: item 0 4 1 11 parsing failed [ 593.929900][ T3605] microsoft 0003:045E:07DA.004D: parse failed [ 593.946351][ T3605] microsoft: probe of 0003:045E:07DA.004D failed with error -22 [ 594.078400][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.108269][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.144219][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 594.162447][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.176045][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.194350][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.283900][ T3293] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 594.306036][ T3293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.320178][ T3293] usb 4-1: Product: syz [ 594.324592][ T3293] usb 4-1: Manufacturer: syz [ 594.335212][ T3293] usb 4-1: SerialNumber: syz [ 594.360165][ T3293] usb 4-1: config 0 descriptor?? [ 594.406815][ T3293] usb 4-1: bad CDC descriptors [ 594.424191][ T3293] usb 4-1: bad CDC descriptors [ 594.438823][ T3293] option 4-1:0.0: GSM modem (1-port) converter detected [ 594.538035][ T3605] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 594.684151][T10755] usb 4-1: USB disconnect, device number 106 [ 594.698541][T10755] option 4-1:0.0: device disconnected [ 594.777942][ T3605] usb 2-1: Using ep0 maxpacket: 8 [ 594.949541][ T3605] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 594.972265][ T3605] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 595.031550][ T3605] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 595.045643][T18545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2498'. [ 595.156864][ T3605] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 595.169255][ T3605] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 595.235081][ T3605] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 595.329573][ T3595] usb 5-1: USB disconnect, device number 86 [ 595.398043][ T3605] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 595.405550][ T3605] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 595.445276][ T3605] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 595.680864][T18568] process 'syz.2.2504' launched './file0' with NULL argv: empty string added [ 595.717129][ T3605] usb 2-1: string descriptor 0 read error: -22 [ 595.725878][ T3605] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 595.753872][ T3605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.810126][ T3605] adutux 2-1:168.0: interrupt endpoints not found [ 596.026637][ T3605] usb 2-1: USB disconnect, device number 100 [ 596.406203][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2509'. [ 596.777989][ T3595] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 597.204791][T18642] mmap: syz.1.2518 (18642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 597.309136][ T3595] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 597.334403][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.366876][ T3595] usb 4-1: Product: syz [ 597.407232][ T3595] usb 4-1: Manufacturer: syz [ 597.447973][ T3595] usb 4-1: SerialNumber: syz [ 597.476945][ T3595] usb 4-1: config 0 descriptor?? [ 597.574657][ T3595] usb 4-1: bad CDC descriptors [ 597.580912][ T3595] usb 4-1: bad CDC descriptors [ 597.587186][ T3595] option 4-1:0.0: GSM modem (1-port) converter detected [ 597.942255][ T3600] usb 4-1: USB disconnect, device number 107 [ 597.979188][ T3600] option 4-1:0.0: device disconnected [ 598.025252][T18661] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2521'. [ 598.477901][ T3293] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 598.748218][ T3293] usb 3-1: Using ep0 maxpacket: 16 [ 598.828191][ T11] wlan1: Trigger new scan to find an IBSS to join [ 598.878719][ T3293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 598.914085][ T3293] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 598.940765][ T3293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.967280][ T3293] usb 3-1: config 0 descriptor?? [ 599.058125][ T3595] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 599.221982][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2526'. [ 599.310245][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 599.428403][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 599.470407][ T3595] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 599.504988][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.534719][ T3595] usb 4-1: config 0 descriptor?? [ 599.610413][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.619671][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.649613][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.678156][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.698171][ T3600] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 599.732153][ T3293] hid-generic 0003:0158:0100.004E: unknown main item tag 0x1 [ 599.757931][ T3293] hid-generic 0003:0158:0100.004E: unexpected long global item [ 599.766114][ T3293] hid-generic: probe of 0003:0158:0100.004E failed with error -22 [ 599.804704][T18705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.828224][T18705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.861924][T18705] syz.3.2534 (18705): drop_caches: 2 [ 599.931148][ T3293] usb 3-1: USB disconnect, device number 73 [ 600.058393][ T3600] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 600.074541][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.115820][ T3600] usb 1-1: config 0 descriptor?? [ 600.130713][T18705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.152027][T18705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.189062][ T3595] hid (null): invalid report_size 12141 [ 600.198373][ T3595] hid (null): unknown global tag 0xd [ 600.203760][ T3595] hid (null): unknown global tag 0xd [ 600.254746][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.280815][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.294187][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.303047][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.316718][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.325480][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.333362][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.340994][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.349912][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.357456][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.371832][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x4 [ 600.382144][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.391491][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.400537][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.408160][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.415599][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.423267][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.431161][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.438853][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.446525][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.455562][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.463564][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.471197][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.478731][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.486275][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.499428][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.517308][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.527442][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.544850][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.556067][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.565743][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.580127][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.587577][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.604289][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.612087][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.626491][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.634010][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.648016][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.655456][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.673016][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.684038][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.695113][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.706027][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.716886][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.731603][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.742626][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.756632][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.771862][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.781765][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.793778][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.803955][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.816156][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.826421][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.842010][ T3595] hid-generic 0003:0158:0100.004F: unknown main item tag 0x0 [ 600.851882][ T3595] hid-generic 0003:0158:0100.004F: invalid report_size 12141 [ 600.864586][ T3595] hid-generic 0003:0158:0100.004F: item 0 2 1 7 parsing failed [ 600.875110][ T3595] hid-generic: probe of 0003:0158:0100.004F failed with error -22 [ 600.893680][ T3595] usb 4-1: USB disconnect, device number 108 [ 601.344183][T18777] hpfs: Bad magic ... probably not HPFS [ 601.354765][ T1166] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 601.362742][ T155] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 601.618302][ T155] usb 3-1: Using ep0 maxpacket: 8 [ 601.739435][ T155] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 601.747659][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.766959][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.788275][ T46] wlan1: Trigger new scan to find an IBSS to join [ 601.806404][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.849556][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 601.871119][ T1166] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 601.893700][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 601.904226][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.018207][ T3600] usb 1-1: Cannot set autoneg [ 602.023130][ T3600] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 602.036837][ T1166] usb 2-1: config 0 descriptor?? [ 602.045657][ T3600] usb 1-1: USB disconnect, device number 88 [ 602.118282][ T155] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 602.126244][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 602.138367][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 602.149725][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 602.238107][ T155] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 602.245687][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 602.258255][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 602.269471][ T155] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 602.518078][ T155] usb 3-1: string descriptor 0 read error: -22 [ 602.524631][ T155] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 602.536016][ T1166] belkin 0003:1020:0006.0050: item fetching failed at offset 2/5 [ 602.543966][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.552913][ T1166] belkin 0003:1020:0006.0050: parse failed [ 602.561588][ T1166] belkin: probe of 0003:1020:0006.0050 failed with error -22 [ 602.604068][ T155] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.738363][ T3293] usb 2-1: USB disconnect, device number 101 [ 602.805231][ T3605] usb 3-1: USB disconnect, device number 74 [ 602.848208][ T1166] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 602.991383][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2549'. [ 604.198151][ T155] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 604.288313][ T1166] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 604.298764][ T1166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.306913][ T1166] usb 1-1: Product: syz [ 604.311851][ T1166] usb 1-1: Manufacturer: syz [ 604.316584][ T1166] usb 1-1: SerialNumber: syz [ 604.448082][ T155] usb 4-1: Using ep0 maxpacket: 16 [ 604.455966][ T1166] usb 1-1: config 0 descriptor?? [ 604.568310][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 604.585502][ T1166] usb-storage 1-1:0.0: USB Mass Storage device detected [ 604.663033][ T155] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 604.838261][ T155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.866050][ T155] usb 4-1: config 0 descriptor?? [ 604.960154][ T3577] wlan1: Trigger new scan to find an IBSS to join [ 605.037686][ T1166] usb 1-1: USB disconnect, device number 89 [ 605.078318][ T3552] Bluetooth: hci4: command 0x0406 tx timeout [ 605.129701][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.143482][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.168272][T18842] syz.3.2550 (18842): drop_caches: 2 [ 605.452488][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.471689][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.508897][ T155] hid (null): invalid report_size 12141 [ 605.515124][ T155] hid (null): unknown global tag 0xd [ 605.520642][ T155] hid (null): unknown global tag 0xd [ 605.529485][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 605.959393][ T46] wlan1: Creating new IBSS network, BSSID 26:74:8f:fa:99:b1 [ 606.326191][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.333778][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.341278][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.351428][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.369582][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.377614][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.385260][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.403770][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.417768][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.437479][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x4 [ 606.449971][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.457550][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.465344][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.476764][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.496371][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.547939][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.572462][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.643043][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.811096][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 606.879198][T18945] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 606.950064][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.063502][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.098126][ T3559] Bluetooth: hci6: command tx timeout [ 607.141807][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.183825][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.217992][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.259426][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.298564][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.341546][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.365122][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.386034][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.403829][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.412265][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.421279][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.437517][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.446369][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.460908][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.468782][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.476314][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.484037][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.492768][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.506431][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.515362][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.531667][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.541749][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.554148][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.564329][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.576955][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.587184][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.602180][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.626822][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.663392][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.671564][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.686246][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.693830][ T155] hid-generic 0003:0158:0100.0051: unknown main item tag 0x0 [ 607.701605][ T155] hid-generic 0003:0158:0100.0051: invalid report_size 12141 [ 607.709425][ T155] hid-generic 0003:0158:0100.0051: item 0 2 1 7 parsing failed [ 607.720562][ T155] hid-generic: probe of 0003:0158:0100.0051 failed with error -22 [ 607.745231][ T155] usb 4-1: USB disconnect, device number 109 [ 608.085883][T18945] team0: Port device netdevsim0 added [ 608.176439][T18950] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 608.282470][T18945] syz.4.2575 (18945) used greatest stack depth: 19800 bytes left [ 608.374601][T18950] team0: Port device netdevsim0 removed [ 608.396308][T18950] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 608.459735][ T3595] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 610.287865][ T26] audit: type=1326 audit(1719575088.092:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18999 comm="syz.4.2590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36fbf75b29 code=0x0 [ 610.657940][ T7] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 610.738076][ T3595] usb 2-1: device not accepting address 102, error -71 [ 610.858826][T19035] netlink: 'syz.4.2600': attribute type 10 has an invalid length. [ 610.884634][T19035] bond0: (slave netdevsim0): Releasing backup interface [ 610.899389][T19035] team0: Port device netdevsim0 added [ 610.917442][T19035] netlink: 'syz.4.2600': attribute type 10 has an invalid length. [ 610.927615][T19035] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 610.965934][T19035] team0: Failed to send options change via netlink (err -105) [ 610.974311][T19035] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 610.985043][T19035] team0: Port device netdevsim0 removed [ 611.000275][T19035] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 611.188289][ T7] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 611.202750][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.214420][ T7] usb 4-1: Product: syz [ 611.227385][ T7] usb 4-1: Manufacturer: syz [ 611.237462][ T7] usb 4-1: SerialNumber: syz [ 611.249291][ T7] usb 4-1: config 0 descriptor?? [ 611.289557][ T7] usb 4-1: bad CDC descriptors [ 611.295799][ T7] usb 4-1: bad CDC descriptors [ 611.308425][ T7] option 4-1:0.0: GSM modem (1-port) converter detected [ 611.514365][ T7] usb 4-1: USB disconnect, device number 110 [ 611.528363][ T7] option 4-1:0.0: device disconnected [ 611.556456][ T26] audit: type=1326 audit(1719575090.822:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.579544][ T3293] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 611.619040][ T26] audit: type=1326 audit(1719575090.822:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.648124][ T26] audit: type=1326 audit(1719575090.822:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.678087][ T26] audit: type=1326 audit(1719575090.822:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.710588][ T26] audit: type=1326 audit(1719575090.822:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.741134][ T26] audit: type=1326 audit(1719575090.822:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.778358][ T26] audit: type=1326 audit(1719575090.822:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.809498][ T26] audit: type=1326 audit(1719575090.822:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.836510][ T26] audit: type=1326 audit(1719575090.822:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19016 comm="syz.2.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x7fc00000 [ 611.859299][ T3595] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 611.868236][ T3293] usb 5-1: Using ep0 maxpacket: 16 [ 612.018707][ T3293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.075039][ T3293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.097992][ T3595] usb 2-1: Using ep0 maxpacket: 32 [ 612.117889][ T3293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.148106][ T3293] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 612.157214][ T3293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.195898][ T3293] usb 5-1: config 0 descriptor?? [ 612.218523][ T3595] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.247923][ T3595] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.272270][ T3595] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.297407][ T3595] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 612.323435][ T3595] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 612.349110][ T3595] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 612.528211][ T3595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.544628][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.563399][ T3595] usb 2-1: Product: syz [ 612.573539][ T3595] usb 2-1: Manufacturer: syz [ 612.578303][ T3595] usb 2-1: SerialNumber: syz [ 612.716812][ T3293] microsoft 0003:045E:07DA.0052: ignoring exceeding usage max [ 612.727287][ T3293] microsoft 0003:045E:07DA.0052: global environment stack underflow [ 612.746005][ T3293] microsoft 0003:045E:07DA.0052: item 0 4 1 11 parsing failed [ 612.755379][ T3293] microsoft 0003:045E:07DA.0052: parse failed [ 612.768735][ T3293] microsoft: probe of 0003:045E:07DA.0052 failed with error -22 [ 612.868552][ T3595] cdc_ncm 2-1:1.0: bind() failure [ 612.876921][ T3595] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 612.885222][ T3595] cdc_ncm 2-1:1.1: bind() failure [ 612.900968][ T3595] usb 2-1: USB disconnect, device number 103 [ 612.948150][ T41] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 613.104775][T19121] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2615'. [ 613.508004][ T41] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 613.528340][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.536401][ T41] usb 1-1: Product: syz [ 613.567446][ T41] usb 1-1: Manufacturer: syz [ 613.582500][ T41] usb 1-1: SerialNumber: syz [ 613.598664][ T41] usb 1-1: config 0 descriptor?? [ 613.654347][ T41] usb 1-1: bad CDC descriptors [ 613.665167][ T41] usb 1-1: bad CDC descriptors [ 613.674318][ T41] option 1-1:0.0: GSM modem (1-port) converter detected [ 613.921022][ T3595] usb 1-1: USB disconnect, device number 90 [ 613.938507][ T3595] option 1-1:0.0: device disconnected [ 614.191460][ T41] usb 5-1: USB disconnect, device number 87 [ 614.341441][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2625'. [ 614.637173][T19169] binder: 19168:19169 ioctl c018620c 20000d40 returned -1 [ 615.290235][ T1166] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 615.360347][T19187] syz.1.2635 (19187) used greatest stack depth: 18904 bytes left [ 615.475171][T19191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2633'. [ 615.545739][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 615.545758][ T26] audit: type=1326 audit(1719575094.812:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.633686][ T26] audit: type=1326 audit(1719575094.812:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8748774590 code=0x7fc00000 [ 615.668203][ T1166] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 615.686522][ T1166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.697239][ T26] audit: type=1326 audit(1719575094.812:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.727066][ T1166] usb 3-1: config 0 descriptor?? [ 615.766329][ T26] audit: type=1326 audit(1719575094.812:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.838275][ T26] audit: type=1326 audit(1719575094.812:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.886456][ T26] audit: type=1326 audit(1719575094.812:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.917104][ T26] audit: type=1326 audit(1719575094.812:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.941689][ T26] audit: type=1326 audit(1719575094.812:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 615.965961][ T26] audit: type=1326 audit(1719575094.812:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 616.033213][ T26] audit: type=1326 audit(1719575094.812:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.0.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8748775b29 code=0x7fc00000 [ 617.261126][T19239] netlink: 'syz.0.2652': attribute type 4 has an invalid length. [ 617.947212][T19239] syz.0.2652 (19239) used greatest stack depth: 18168 bytes left [ 618.035820][T19245] netlink: 'syz.3.2653': attribute type 10 has an invalid length. [ 618.079681][T19245] team0: Device ipvlan1 failed to register rx_handler [ 618.099096][ T1166] usb 3-1: Cannot set autoneg [ 618.104412][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 618.107388][ T1166] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 618.166099][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2653'. [ 618.175923][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2653'. [ 618.185212][T19245] netlink: 'syz.3.2653': attribute type 2 has an invalid length. [ 618.304598][ T3605] usb 3-1: USB disconnect, device number 75 [ 618.422198][ T41] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 618.668096][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 618.690918][T19272] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2656'. [ 618.701121][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 618.798161][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 618.816292][ T41] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 618.847966][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.893161][ T41] usb 1-1: config 0 descriptor?? [ 619.193327][T19252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.286426][T19252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.806410][T19252] syz.0.2655 (19252): drop_caches: 2 [ 619.903732][T19252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.944032][T19252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.014565][ T41] hid (null): invalid report_size 12141 [ 620.023890][ T41] hid (null): unknown global tag 0xd [ 620.057903][ T41] hid (null): unknown global tag 0xd [ 620.066627][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.104678][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.108259][ T3559] Bluetooth: hci1: command tx timeout [ 620.118366][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.136548][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.331832][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.360026][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.367527][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.385361][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.400212][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.502791][T19308] netlink: 'syz.1.2666': attribute type 4 has an invalid length. [ 620.553284][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.566606][T19309] hpfs: Bad magic ... probably not HPFS [ 620.665529][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x4 [ 620.762022][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.828089][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 620.926935][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.215004][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.222612][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.231753][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.242097][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.250376][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.257949][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.265375][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.272840][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.280314][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.288140][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.296540][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.304212][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.350516][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.383144][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.400494][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.413369][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.423834][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.436220][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.447414][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.459867][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.467506][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.484070][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.517953][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.554959][T19320] device wlan0 entered promiscuous mode [ 621.562975][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.603200][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.624818][T19320] team0: Port device macvlan2 added [ 621.638180][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.663472][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.719403][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.786328][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 621.907264][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.001293][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.096777][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.191114][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.262678][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.297898][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.334852][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.363098][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.393437][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.447939][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.465737][ T41] hid-generic 0003:0158:0100.0053: unknown main item tag 0x0 [ 622.496182][ T41] hid-generic 0003:0158:0100.0053: invalid report_size 12141 [ 622.515387][ T41] hid-generic 0003:0158:0100.0053: item 0 2 1 7 parsing failed [ 622.541430][ T41] hid-generic: probe of 0003:0158:0100.0053 failed with error -22 [ 622.559973][ T41] usb 1-1: USB disconnect, device number 91 [ 623.736711][T19357] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 623.744718][T19356] netlink: 'syz.4.2678': attribute type 7 has an invalid length. [ 623.769577][T19357] netlink: 'syz.3.2679': attribute type 11 has an invalid length. [ 623.776825][ T3605] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 623.785283][ T3597] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 623.795284][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2678'. [ 623.825748][T19357] netlink: 'syz.3.2679': attribute type 11 has an invalid length. [ 623.834565][T19357] debugfs: Directory 'netdev:' with parent 'phy21' already present! [ 624.072938][T19362] hpfs: Bad magic ... probably not HPFS [ 624.188269][ T3597] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 624.201709][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.223233][ T3597] usb 2-1: config 0 descriptor?? [ 624.271078][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.279636][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.128305][ T1166] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 625.438343][ T1166] usb 1-1: Using ep0 maxpacket: 16 [ 625.558866][ T1166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 625.632929][ T1166] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 625.802594][ T1166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.935118][ T1166] usb 1-1: config 0 descriptor?? [ 625.952599][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 625.952616][ T26] audit: type=1804 audit(1719575105.222:282): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2692" name="/root/syzkaller.t3sTmc/36/bus" dev="sda1" ino=2007 res=1 errno=0 [ 625.992649][ T26] audit: type=1800 audit(1719575105.252:283): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2692" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 626.185275][T19384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2689'. [ 626.240608][T19414] sctp: [Deprecated]: syz.2.2695 (pid 19414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.240608][T19414] Use struct sctp_sack_info instead [ 626.338246][ T3597] usb 2-1: Cannot set autoneg [ 626.343557][ T3597] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -61 [ 626.544964][ T3597] usb 2-1: USB disconnect, device number 104 [ 626.676955][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.716250][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.764813][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.796420][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.833736][ T1166] hid-generic 0003:0158:0100.0054: unknown main item tag 0x1 [ 626.955224][T19469] input: syz0 as /devices/virtual/input/input36 [ 627.622666][ T1166] hid-generic 0003:0158:0100.0054: unexpected long global item [ 627.631100][ T1166] hid-generic: probe of 0003:0158:0100.0054 failed with error -22 [ 627.635346][T19480] loop1: detected capacity change from 0 to 256 [ 627.641262][ T1166] usb 1-1: USB disconnect, device number 92 [ 628.817917][ T7] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 628.999592][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 629.067925][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 629.190313][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.208510][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.226638][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.438071][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.448000][ T14] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 629.462131][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.473093][ T7] usb 3-1: Product: syz [ 629.477313][ T7] usb 3-1: Manufacturer: syz [ 629.486629][ T7] usb 3-1: SerialNumber: syz [ 629.551219][ T7] cdc_ncm 3-1:1.0: skipping garbage [ 629.557022][ T7] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 629.572369][ T7] cdc_ncm 3-1:1.0: bind() failure [ 629.808200][ T14] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 629.827698][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.848795][ T14] usb 4-1: config 0 descriptor?? [ 629.867987][ T3559] Bluetooth: hci6: command tx timeout [ 630.297969][ T3597] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 630.559299][ T3597] usb 2-1: Using ep0 maxpacket: 8 [ 630.688160][ T3597] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 630.699614][ T3597] usb 2-1: config 0 has no interface number 0 [ 630.715593][ T3597] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 630.744623][ T3597] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 630.774761][ T3597] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 630.798329][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.822726][ T3597] usb 2-1: config 0 descriptor?? [ 630.858226][T19556] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 630.892946][ T3597] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 631.067925][ T3552] Bluetooth: hci2: command 0x0406 tx timeout [ 631.113723][ T3597] usb 2-1: USB disconnect, device number 105 [ 631.131821][ T3597] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 631.254650][ T3605] usb 3-1: USB disconnect, device number 76 [ 631.377009][T19602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2731'. [ 631.678084][ T14] usb 4-1: Cannot set autoneg [ 631.683024][ T14] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 631.935855][ T3596] usb 4-1: USB disconnect, device number 112 [ 632.662631][T19630] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 632.746184][T19630] netlink: 'syz.1.2738': attribute type 11 has an invalid length. [ 632.768553][T19634] netlink: 'syz.3.2739': attribute type 10 has an invalid length. [ 632.801088][T19634] team0: Device ipvlan1 failed to register rx_handler [ 632.820160][T19637] netlink: 'syz.1.2738': attribute type 11 has an invalid length. [ 632.900529][T19634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2739'. [ 632.919903][T19634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 632.936677][T19637] debugfs: Directory 'netdev:' with parent 'phy8' already present! [ 632.958855][T19634] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 633.357992][ T7] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 633.376786][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2743'. [ 633.655662][ T26] audit: type=1326 audit(1719575112.922:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19658 comm="syz.1.2745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2d775b29 code=0x0 [ 634.527030][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 634.648136][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.677888][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 634.687016][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.908501][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.917599][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.946124][ T7] usb 5-1: Product: syz [ 634.950462][ T7] usb 5-1: Manufacturer: syz [ 634.955100][ T7] usb 5-1: SerialNumber: syz [ 635.042007][ T7] cdc_ncm 5-1:1.0: skipping garbage [ 635.047367][ T7] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 635.054385][ T14] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 635.104011][ T7] cdc_ncm 5-1:1.0: bind() failure [ 635.379878][T19666] loop2: detected capacity change from 0 to 32768 [ 635.438116][ T14] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 635.445615][T19666] XFS (loop2): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 635.457772][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.469796][ T14] usb 2-1: config 0 descriptor?? [ 635.480855][T19666] XFS (loop2): SB validate failed with error -22. [ 636.130601][ T3552] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 636.162708][T19695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2753'. [ 636.331829][T19699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2755'. [ 636.691656][ T26] audit: type=1800 audit(1719575115.952:285): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2752" name=".pending_reads" dev="sda1" ino=2008 res=0 errno=0 [ 636.768205][T10755] usb 5-1: USB disconnect, device number 88 [ 637.593453][ T14] usb 2-1: Cannot set autoneg [ 637.598476][ T14] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -61 [ 637.621057][ T14] usb 2-1: USB disconnect, device number 106 [ 637.763825][ T3559] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 637.786087][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 637.897173][T19743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2767'. [ 639.177235][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 639.480329][T19775] sctp: [Deprecated]: syz.1.2775 (pid 19775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.480329][T19775] Use struct sctp_sack_info instead [ 639.563817][T19780] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 639.589890][T19780] team0: Device ipvlan1 failed to register rx_handler [ 639.646935][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 639.686526][T19785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2778'. [ 639.690890][T19780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 639.721151][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 639.739805][T19780] netlink: 'syz.0.2777': attribute type 2 has an invalid length. [ 640.059289][ T153] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 640.238022][ T14] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 640.612126][ T14] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 640.635189][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.668193][ T153] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 640.677475][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.685381][ T14] usb 3-1: config 0 descriptor?? [ 640.706261][ T153] usb 4-1: Product: syz [ 640.710715][ T153] usb 4-1: Manufacturer: syz [ 640.723145][ T153] usb 4-1: SerialNumber: syz [ 640.741108][ T153] usb 4-1: config 0 descriptor?? [ 640.781678][ T153] usb 4-1: bad CDC descriptors [ 640.787631][ T153] usb 4-1: bad CDC descriptors [ 640.803500][ T153] option 4-1:0.0: GSM modem (1-port) converter detected [ 641.113710][ T153] usb 4-1: USB disconnect, device number 113 [ 641.128755][ T153] option 4-1:0.0: device disconnected [ 642.243092][ T26] audit: type=1800 audit(1719575121.512:286): pid=19881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2789" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 642.262362][T19881] 9pnet_fd: Insufficient options for proto=fd [ 642.593414][T19899] sctp: [Deprecated]: syz.1.2794 (pid 19899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.593414][T19899] Use struct sctp_sack_info instead [ 642.757923][ T3595] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 642.808168][ T14] usb 3-1: Cannot set autoneg [ 642.813124][ T14] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 642.998011][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 643.016328][ T14] usb 3-1: USB disconnect, device number 77 [ 643.118274][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.144092][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.174656][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.228143][ T3595] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 643.245429][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.272330][ T3595] usb 4-1: config 0 descriptor?? [ 643.756738][ T3595] microsoft 0003:045E:07DA.0055: ignoring exceeding usage max [ 643.786417][ T3595] microsoft 0003:045E:07DA.0055: global environment stack underflow [ 643.811406][ T26] audit: type=1800 audit(1719575123.082:287): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2797" name=".pending_reads" dev="sda1" ino=2008 res=0 errno=0 [ 643.853660][ T3595] microsoft 0003:045E:07DA.0055: item 0 4 1 11 parsing failed [ 643.888453][ T3595] microsoft 0003:045E:07DA.0055: parse failed [ 643.917924][ T3595] microsoft: probe of 0003:045E:07DA.0055 failed with error -22 [ 645.302537][ T1166] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 645.408245][ T3595] usb 4-1: USB disconnect, device number 114 [ 645.561316][ T1166] usb 3-1: Using ep0 maxpacket: 16 [ 645.678233][ T1166] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.709981][ T1166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.750649][ T1166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 645.760704][ T3552] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 645.771017][ T1166] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 645.780835][ T1166] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.816646][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'. [ 645.868275][ T1166] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 645.879706][ T1166] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 645.898127][ T1166] usb 3-1: Manufacturer: syz [ 645.909781][ T1166] usb 3-1: config 0 descriptor?? [ 646.020418][T19970] kvm [19969]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0x187 data 0x5efffffc18 [ 646.329089][ T1166] rc_core: IR keymap rc-hauppauge not found [ 646.335240][ T1166] Registered IR keymap rc-empty [ 646.355659][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.408098][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.468797][ T1166] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 646.504464][T19991] netlink: 'syz.1.2814': attribute type 29 has an invalid length. [ 646.512477][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 646.521782][T19991] netlink: 'syz.1.2814': attribute type 29 has an invalid length. [ 646.522411][ T1166] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 646.529635][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 646.639185][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.679119][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.718197][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.758750][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.798098][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.839333][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.879273][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.918157][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.948025][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.978086][ T1166] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.010034][ T1166] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 647.022890][ T1166] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.327953][ T1166] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 647.553118][ T3552] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 647.572552][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'. [ 647.598004][ T1166] usb 1-1: Using ep0 maxpacket: 16 [ 647.718308][ T1166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.743441][ T1166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.771283][ T1166] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 647.775329][T20026] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 647.802144][ T1166] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 647.822724][ T1166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.847108][ T1166] usb 1-1: config 0 descriptor?? [ 647.877478][T20026] team0: Device ipvlan1 failed to register rx_handler [ 647.945182][T20030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2824'. [ 647.955716][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 647.965778][T20030] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 647.998391][ T22] usb 3-1: USB disconnect, device number 78 [ 648.282722][ T26] audit: type=1326 audit(1719575127.552:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.3.2826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08a8d75b29 code=0x0 [ 649.041946][ T1166] microsoft 0003:045E:07DA.0056: ignoring exceeding usage max [ 649.054299][ T1166] microsoft 0003:045E:07DA.0056: global environment stack underflow [ 649.062415][ T1166] microsoft 0003:045E:07DA.0056: item 0 4 1 11 parsing failed [ 649.070890][ T1166] microsoft 0003:045E:07DA.0056: parse failed [ 649.077020][ T1166] microsoft: probe of 0003:045E:07DA.0056 failed with error -22 [ 649.552762][ T26] audit: type=1800 audit(1719575128.822:289): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2833" name="bus" dev="sda1" ino=1994 res=0 errno=0 [ 649.807766][ T3552] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 649.839666][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'. [ 650.022855][T10755] usb 1-1: USB disconnect, device number 93 [ 650.165039][T20097] loop0: detected capacity change from 0 to 256 [ 650.209202][T20097] exfat: Deprecated parameter 'utf8' [ 650.214610][T20097] exfat: Deprecated parameter 'namecase' [ 650.227472][T20097] exfat: Deprecated parameter 'utf8' [ 650.253442][T20097] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 650.321488][T20099] netlink: 'syz.1.2837': attribute type 10 has an invalid length. [ 650.322558][T20097] syz.0.2836: attempt to access beyond end of device [ 650.322558][T20097] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 650.358750][T20099] team0: Device ipvlan1 failed to register rx_handler [ 650.418914][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2837'. [ 650.449807][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2837'. [ 650.455965][T20097] syz.0.2836: attempt to access beyond end of device [ 650.455965][T20097] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 650.474846][T20099] netlink: 'syz.1.2837': attribute type 2 has an invalid length. [ 650.516020][ T26] audit: type=1800 audit(1719575129.782:290): pid=20097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2836" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 650.548699][T20097] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 650.777901][ T153] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 650.938375][T10755] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 651.058130][ T153] usb 5-1: Using ep0 maxpacket: 16 [ 651.198299][ T153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.238391][T10755] usb 2-1: Using ep0 maxpacket: 16 [ 651.277136][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.388614][T10755] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 651.461527][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 651.606376][ T153] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 651.657927][ T153] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.718213][T10755] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 651.741733][T10755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.785757][T10755] usb 2-1: Product: syz [ 651.801877][T10755] usb 2-1: Manufacturer: syz [ 651.809798][T10755] usb 2-1: SerialNumber: syz [ 651.838267][ T153] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.857675][ T153] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.869277][T10755] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38 [ 651.893668][ T153] usb 5-1: Manufacturer: syz [ 651.921140][ T153] usb 5-1: config 0 descriptor?? [ 652.095304][ T2988] bcm5974 2-1:1.0: could not read from device [ 652.107235][T10755] usb 2-1: USB disconnect, device number 107 [ 652.316644][ T3552] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 652.328086][ T153] rc_core: IR keymap rc-hauppauge not found [ 652.337180][ T153] Registered IR keymap rc-empty [ 652.356399][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.368107][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2845'. [ 652.429302][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.464168][ T153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 652.503358][ T153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 652.563467][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.598047][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.638062][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.688075][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.738133][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.787985][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.833075][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.868124][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.919592][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 652.960421][ T153] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 653.013330][ T153] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 653.022153][ T153] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 653.038604][ T3595] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 653.078521][ T1166] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 653.277957][ T3595] usb 2-1: Using ep0 maxpacket: 16 [ 653.324802][T20185] netlink: 'syz.2.2850': attribute type 10 has an invalid length. [ 653.338023][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 653.366348][T20185] team0: Device ipvlan1 failed to register rx_handler [ 653.378259][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'. [ 653.398291][ T3595] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.426654][ T3595] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.443926][ T3595] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.458194][ T1166] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 653.466321][ T1166] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 653.475960][ T1166] usb 4-1: config 0 has no interface number 1 [ 653.482294][ T1166] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 653.482380][T20185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2850'. [ 653.496234][ T1166] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 653.535203][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'. [ 653.555266][T20185] netlink: 'syz.2.2850': attribute type 2 has an invalid length. [ 653.612142][ T3595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.633152][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.646992][ T3595] usb 2-1: Product: syz [ 653.653612][ T3595] usb 2-1: Manufacturer: syz [ 653.663157][ T3595] usb 2-1: SerialNumber: syz [ 653.698114][ T1166] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=c8.7d [ 653.707652][ T1166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.717233][ T3595] cdc_ncm 2-1:1.0: skipping garbage [ 653.722842][ T3595] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 653.738003][ T3595] cdc_ncm 2-1:1.0: bind() failure [ 653.745458][ T1166] usb 4-1: Product: syz [ 653.749751][ T1166] usb 4-1: Manufacturer: syz [ 653.754561][ T1166] usb 4-1: SerialNumber: syz [ 653.768821][ T1166] usb 4-1: config 0 descriptor?? [ 653.928224][ T153] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 653.948313][T10755] usb 5-1: USB disconnect, device number 89 [ 654.048212][ T1166] usb 4-1: USB disconnect, device number 115 [ 654.127164][T20235] tmpfs: Unknown parameter 'grpquota' [ 654.198538][ T153] usb 1-1: Using ep0 maxpacket: 16 [ 654.349579][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.366122][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.386025][ T153] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 654.404184][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.427428][ T153] usb 1-1: config 0 descriptor?? [ 654.638100][ T3552] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 654.654771][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 655.052047][ T153] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0057/input/input40 [ 655.152743][ T153] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0057/input/input41 [ 655.180179][T10755] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 655.192863][ T153] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0057/input/input42 [ 655.214837][ T153] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0057/input/input43 [ 655.234600][ T153] hid-udraw 0003:20D6:CB17.0057: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 655.269952][ T153] usb 1-1: USB disconnect, device number 94 [ 655.371677][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.428106][ T7793] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 655.478014][T10755] usb 4-1: Using ep0 maxpacket: 16 [ 655.608145][T10755] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 655.692588][ T153] usb 2-1: USB disconnect, device number 108 [ 655.788304][T10755] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 655.797414][T10755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.818296][ T7793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.835704][T10755] usb 4-1: Product: syz [ 655.841857][T10755] usb 4-1: Manufacturer: syz [ 655.846581][T10755] usb 4-1: SerialNumber: syz [ 655.852072][ T7793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.864801][ T7793] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 655.875304][ T7793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.890125][ T7793] usb 5-1: config 0 descriptor?? [ 655.911898][T10755] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input44 [ 656.144944][ T2988] bcm5974 4-1:1.0: could not read from device [ 656.176017][T10755] usb 4-1: USB disconnect, device number 116 [ 656.188179][ T2988] bcm5974 4-1:1.0: could not read from device [ 656.199555][ T2988] bcm5974 4-1:1.0: could not read from device [ 656.395162][ T7793] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0058/input/input45 [ 656.503468][ T7793] uclogic 0003:28BD:0933.0058: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 656.593411][ T7793] usb 5-1: USB disconnect, device number 90 [ 657.723929][T20379] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 658.038897][T10755] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 658.117283][ T26] audit: type=1800 audit(1719575137.382:291): pid=20405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2880" name="bus" dev="sda1" ino=2008 res=0 errno=0 [ 658.388155][T10755] usb 3-1: Using ep0 maxpacket: 16 [ 658.467959][ T153] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 658.538232][T10755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.553199][T10755] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.565205][T10755] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.768805][T10755] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.785060][T10755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.794033][T10755] usb 3-1: Product: syz [ 658.814506][T10755] usb 3-1: Manufacturer: syz [ 658.829845][T10755] usb 3-1: SerialNumber: syz [ 658.858323][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.884683][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.899020][T10755] cdc_ncm 3-1:1.0: skipping garbage [ 658.917990][T10755] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 658.929189][T10755] cdc_ncm 3-1:1.0: bind() failure [ 658.935489][ T153] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 658.953412][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.998154][ T7793] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 659.008914][ T153] usb 2-1: config 0 descriptor?? [ 659.298080][ T7793] usb 1-1: Using ep0 maxpacket: 32 [ 659.438714][ T7793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.485888][ T7793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.579853][ T153] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0059/input/input46 [ 659.663169][ T7793] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 659.741548][ T7793] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 659.779348][ T7793] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 659.804409][ T7793] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 659.816740][ T153] uclogic 0003:28BD:0933.0059: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 659.832051][ T153] usb 2-1: USB disconnect, device number 109 [ 660.016016][T20456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2887'. [ 660.032503][ T7793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.052383][ T7793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.073923][ T7793] usb 1-1: Product: syz [ 660.089467][ T7793] usb 1-1: Manufacturer: syz [ 660.100340][ T7793] usb 1-1: SerialNumber: syz [ 660.408032][ T7793] cdc_ncm 1-1:1.0: bind() failure [ 660.416361][ T7793] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 660.435049][ T7793] cdc_ncm 1-1:1.1: bind() failure [ 660.454872][ T7793] usb 1-1: USB disconnect, device number 95 [ 660.497509][ T26] audit: type=1800 audit(1719575139.762:292): pid=20477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2890" name=".pending_reads" dev="sda1" ino=1971 res=0 errno=0 [ 660.767255][T20486] loop1: detected capacity change from 0 to 512 [ 660.823094][T20486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.871958][ T14] usb 3-1: USB disconnect, device number 79 [ 660.919538][T20486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 660.957532][T20486] ext4 filesystem being mounted at /root/syzkaller.1V9lNB/604/file0 supports timestamps until 2038 (0x7fffffff) [ 661.073230][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 661.120228][T20505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2898'. [ 661.242823][T20517] loop1: detected capacity change from 0 to 256 [ 661.467914][ T153] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 661.727893][ T153] usb 1-1: Using ep0 maxpacket: 16 [ 661.860921][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.893202][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.929276][ T153] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 661.964858][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.000062][ T153] usb 1-1: config 0 descriptor?? [ 662.591190][ T153] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.005A/input/input47 [ 662.840672][ T153] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.005A/input/input48 [ 662.907012][ T153] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.005A/input/input49 [ 662.985457][ T153] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.005A/input/input50 [ 663.069216][ T153] hid-udraw 0003:20D6:CB17.005A: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 663.107110][ T153] usb 1-1: USB disconnect, device number 96 [ 664.219886][T20590] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2912'. [ 664.866996][T20636] loop0: detected capacity change from 0 to 164 [ 664.955714][T20636] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 664.979342][T20636] capability: warning: `syz.0.2921' uses deprecated v2 capabilities in a way that may be insecure [ 664.993556][T20639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2922'. [ 665.027251][T20636] 9pnet_fd: p9_fd_create_tcp (20636): problem binding to privport [ 665.338031][T10755] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 665.602681][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 665.988127][T10755] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 666.032712][T10755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.064754][T10755] usb 4-1: Product: syz [ 666.085127][T10755] usb 4-1: Manufacturer: syz [ 666.112106][T10755] usb 4-1: SerialNumber: syz [ 666.151179][T10755] usb 4-1: config 0 descriptor?? [ 666.238718][T10755] usb 4-1: bad CDC descriptors [ 666.245785][T10755] usb 4-1: bad CDC descriptors [ 666.274866][T10755] option 4-1:0.0: GSM modem (1-port) converter detected [ 666.681149][T20687] hpfs: Bad magic ... probably not HPFS [ 667.268305][ T3293] usb 4-1: USB disconnect, device number 117 [ 667.275638][ T3293] option 4-1:0.0: device disconnected [ 667.429038][T20701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2935'. [ 667.737214][T20728] fuse: Bad value for 'fd' [ 667.758021][ T26] audit: type=1800 audit(1719575147.002:293): pid=20728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2938" name="file0" dev="sda1" ino=2004 res=0 errno=0 [ 667.806011][ T26] audit: type=1804 audit(1719575147.052:294): pid=20728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2938" name="/root/syzkaller.t3sTmc/78/file0" dev="sda1" ino=2004 res=1 errno=0 [ 668.645392][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 668.953251][T20752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 668.971469][T20751] loop3: detected capacity change from 0 to 512 [ 668.989066][T20751] EXT4-fs: Ignoring removed mblk_io_submit option [ 669.006868][ T3552] Bluetooth: hci1: unexpected cc 0x0c56 length: 2 > 1 [ 669.032725][T20751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 669.155174][T20751] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 669.195253][T20751] EXT4-fs (loop3): 1 truncate cleaned up [ 669.214567][T20751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 669.308012][T18987] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 669.388087][ T1166] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 669.558162][T18987] usb 5-1: Using ep0 maxpacket: 16 [ 669.638144][ T1166] usb 2-1: Using ep0 maxpacket: 16 [ 669.678537][T18987] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 669.687087][T18987] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 669.726557][T18987] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 669.778349][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.814423][T18987] usb 5-1: config 0 has no interface number 0 [ 669.832821][ T1166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.875449][T18987] usb 5-1: config 0 has no interface number 1 [ 669.922197][ T1166] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 669.939553][T18987] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0xA has invalid maxpacket 80, setting to 64 [ 670.009708][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.023147][ T5123] EXT4-fs (loop3): unmounting filesystem. [ 670.040121][T18987] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 670.062829][ T1166] usb 2-1: config 0 descriptor?? [ 670.071941][T18987] usb 5-1: config 0 interface 186 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 670.097194][T18987] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 670.118840][T18987] usb 5-1: too many endpoints for config 0 interface 90 altsetting 179: 163, using maximum allowed: 30 [ 670.139911][T18987] usb 5-1: config 0 interface 90 altsetting 179 has an invalid endpoint with address 0x0, skipping [ 670.156594][T18987] usb 5-1: config 0 interface 90 altsetting 179 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 670.174747][T18987] usb 5-1: config 0 interface 90 altsetting 179 has a duplicate endpoint with address 0xD, skipping [ 670.186748][T18987] usb 5-1: config 0 interface 90 altsetting 179 has an invalid endpoint with address 0x0, skipping [ 670.204872][T18987] usb 5-1: config 0 interface 90 altsetting 179 bulk endpoint 0x3 has invalid maxpacket 1024 [ 670.215403][T18987] usb 5-1: config 0 interface 90 altsetting 179 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 670.237163][T18987] usb 5-1: config 0 interface 90 altsetting 179 has an invalid endpoint with address 0x80, skipping [ 670.275616][T18987] usb 5-1: config 0 interface 90 altsetting 179 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 670.298022][T18987] usb 5-1: config 0 interface 90 altsetting 179 endpoint 0x88 has invalid maxpacket 13412, setting to 1024 [ 670.319544][T18987] usb 5-1: config 0 interface 90 altsetting 179 bulk endpoint 0x88 has invalid maxpacket 1024 [ 670.336951][T18987] usb 5-1: config 0 interface 90 altsetting 179 has a duplicate endpoint with address 0x3, skipping [ 670.356942][T18987] usb 5-1: config 0 interface 90 altsetting 179 has 13 endpoint descriptors, different from the interface descriptor's value: 163 [ 670.393530][T18987] usb 5-1: config 0 interface 90 has no altsetting 0 [ 670.628331][ T3595] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 670.649891][ T1166] usbhid 2-1:0.0: can't add hid device: -71 [ 670.659237][ T1166] usbhid: probe of 2-1:0.0 failed with error -71 [ 670.680040][T18987] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=f0.e9 [ 670.733721][T18987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.810393][ T1166] usb 2-1: USB disconnect, device number 110 [ 670.862734][T18987] usb 5-1: Product: syz [ 670.928306][ T3595] usb 3-1: Using ep0 maxpacket: 16 [ 670.947398][T18987] usb 5-1: Manufacturer: syz [ 670.988322][ T3578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 671.008176][T18987] usb 5-1: SerialNumber: syz [ 671.024394][T18987] usb 5-1: config 0 descriptor?? [ 671.048285][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 671.060088][ T3595] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 671.071830][T18987] usbhid 5-1:0.186: couldn't find an input interrupt endpoint [ 671.085370][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.095596][ T3595] usb 3-1: config 0 descriptor?? [ 671.318199][T18987] usbtouchscreen: probe of 5-1:0.90 failed with error -71 [ 671.350424][T20771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.368291][T18987] usb 5-1: USB disconnect, device number 91 [ 671.378213][T20771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.386046][ T3600] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 671.421530][T20771] syz.2.2951 (20771): drop_caches: 2 [ 671.465663][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 671.648134][ T3600] usb 1-1: Using ep0 maxpacket: 32 [ 671.676600][T20771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.689333][T20771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.730284][ T3595] hid (null): invalid report_size 12141 [ 671.744044][ T3595] hid (null): unknown global tag 0xd [ 671.757071][ T3595] hid (null): unknown global tag 0xd [ 671.768261][ T3600] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.789221][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.797337][ T3600] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.814751][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.822626][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.838161][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.846788][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.862036][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.872375][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.880630][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.888311][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.897463][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.905579][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x4 [ 671.913436][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.921275][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.931097][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.939021][ T3600] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 671.948562][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.963484][ T3600] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 671.988449][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 671.997097][ T3600] usb 1-1: Product: syz [ 672.003040][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.011336][ T3600] usb 1-1: Manufacturer: syz [ 672.022419][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.038552][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.046193][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.059042][ T3600] hub 1-1:4.0: USB hub found [ 672.064333][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.073193][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.081036][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.088763][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.096197][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.104103][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.121998][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.137759][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.156352][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.167953][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.182914][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.192609][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.207333][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.215539][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.230545][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.242402][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.253964][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.273214][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.281175][ T3600] hub 1-1:4.0: 2 ports detected [ 672.293786][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.305636][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.320314][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.332702][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.343433][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.355866][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.366369][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.374108][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.381967][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.389677][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.397356][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.404957][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.412761][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.420403][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.429082][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.437091][ T3595] hid-generic 0003:0158:0100.005B: unknown main item tag 0x0 [ 672.462006][ T3595] hid-generic 0003:0158:0100.005B: invalid report_size 12141 [ 672.477455][ T3595] hid-generic 0003:0158:0100.005B: item 0 2 1 7 parsing failed [ 672.515649][ T3595] hid-generic: probe of 0003:0158:0100.005B failed with error -22 [ 672.535187][ T3595] usb 3-1: USB disconnect, device number 80 [ 672.600150][T20848] loop2: detected capacity change from 0 to 512 [ 672.607965][T20848] EXT4-fs: Ignoring removed mblk_io_submit option [ 672.615223][T20848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 672.781254][T20848] EXT4-fs (loop2): 1 truncate cleaned up [ 672.798637][T20848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 673.000018][T17890] EXT4-fs (loop2): unmounting filesystem. [ 673.218113][T20866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 675.087898][ T26] audit: type=1800 audit(1719575154.352:295): pid=20891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2976" name="file0" dev="sda1" ino=1997 res=0 errno=0 [ 675.127886][T20891] fuse: Unknown parameter '0x0000000000000004' [ 675.148116][ T3600] hub 1-1:4.0: activate --> -90 [ 675.183773][ T26] audit: type=1804 audit(1719575154.452:296): pid=20891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2976" name="/root/syzkaller.t3sTmc/86/file0" dev="sda1" ino=1997 res=1 errno=0 [ 675.225567][T20895] loop3: detected capacity change from 0 to 512 [ 675.239150][T20895] EXT4-fs: Ignoring removed mblk_io_submit option [ 675.267919][T20895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 675.308202][T20895] EXT4-fs (loop3): 1 truncate cleaned up [ 675.316233][T20895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 675.339352][T20895] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 675.463889][ T5123] EXT4-fs (loop3): unmounting filesystem. [ 675.552994][ T41] usb 1-1: USB disconnect, device number 97 [ 675.564676][T18987] usb 1-1-port2: cannot warm reset (err = -71) [ 675.572871][T18987] usb 1-1-port2: attempt power cycle [ 675.839266][T10755] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 676.128127][T10755] usb 4-1: Using ep0 maxpacket: 16 [ 676.248269][T10755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.284063][T10755] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 676.485045][T10755] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.548222][ T3552] Bluetooth: hci1: command 0x0406 tx timeout [ 678.334339][ T26] audit: type=1800 audit(1719575157.602:297): pid=20986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2990" name="file0" dev="sda1" ino=2008 res=0 errno=0 [ 678.370639][T20986] fuse: Unknown parameter '0x0000000000000004' [ 678.378459][ T153] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 678.387601][T10755] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.398579][T10755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.406655][T10755] usb 4-1: Product: syz [ 678.411200][T10755] usb 4-1: Manufacturer: syz [ 678.415824][T10755] usb 4-1: SerialNumber: syz [ 678.468915][T10755] cdc_ncm 4-1:1.0: skipping garbage [ 678.474276][ T26] audit: type=1804 audit(1719575157.742:298): pid=20986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2990" name="/root/syzkaller.K0woSt/298/file0" dev="sda1" ino=2008 res=1 errno=0 [ 678.504046][T10755] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 678.529084][T10755] cdc_ncm 4-1:1.0: bind() failure [ 678.551084][T10755] usb 4-1: USB disconnect, device number 118 [ 678.636798][T21002] loop3: detected capacity change from 0 to 512 [ 678.658126][ T153] usb 3-1: Using ep0 maxpacket: 16 [ 678.715493][T21002] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 678.747355][T21002] EXT4-fs (loop3): mount failed [ 678.806998][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.840736][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.858340][ T153] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 678.878027][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.907758][ T153] usb 3-1: config 0 descriptor?? [ 679.438029][ T153] usbhid 3-1:0.0: can't add hid device: -71 [ 679.446413][ T153] usbhid: probe of 3-1:0.0 failed with error -71 [ 679.492071][ T153] usb 3-1: USB disconnect, device number 81 [ 680.428106][ T153] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 680.728341][ T153] usb 1-1: Using ep0 maxpacket: 8 [ 680.858488][ T153] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.897384][ T153] usb 1-1: config 0 has no interface number 0 [ 680.993275][ T153] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.096827][ T153] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.158137][ T153] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 681.198495][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.248629][ T153] usb 1-1: config 0 descriptor?? [ 681.315116][ T153] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 681.514504][ T153] usb 1-1: USB disconnect, device number 102 [ 681.529747][ T153] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 681.568084][ T41] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 681.847947][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 682.005561][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.016092][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 682.032366][ T41] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.218497][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.238097][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.246254][ T41] usb 2-1: Product: syz [ 682.283293][ T41] usb 2-1: Manufacturer: syz [ 682.296965][ T41] usb 2-1: SerialNumber: syz [ 682.334128][T21093] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 682.350991][ T41] cdc_ncm 2-1:1.0: skipping garbage [ 682.363639][ T41] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 682.374535][ T41] cdc_ncm 2-1:1.0: bind() failure [ 682.716157][T21134] loop4: detected capacity change from 0 to 512 [ 682.755731][T21134] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 682.761696][ T1166] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 682.778084][T21134] EXT4-fs (loop4): mount failed [ 683.819206][ T26] audit: type=1326 audit(1719575162.822:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21137 comm="syz.2.3016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb57175b29 code=0x0 [ 684.163420][T21148] loop0: detected capacity change from 0 to 2048 [ 684.197978][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 684.231853][T21148] Alternate GPT is invalid, using primary GPT. [ 684.248283][T21148] loop0: p1 p2 p3 [ 684.318246][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.340859][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.360341][ T1166] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 684.374487][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.387294][ T1166] usb 4-1: config 0 descriptor?? [ 684.687093][T21177] loop0: detected capacity change from 0 to 128 [ 684.948291][ T1166] usbhid 4-1:0.0: can't add hid device: -71 [ 684.955476][ T1166] usbhid: probe of 4-1:0.0 failed with error -71 [ 684.965801][ T1166] usb 4-1: USB disconnect, device number 119 [ 684.974140][T21185] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 685.087228][T18987] usb 2-1: USB disconnect, device number 111 [ 685.364801][T21240] loop4: detected capacity change from 0 to 512 [ 685.403018][T21240] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 685.415772][T21240] EXT4-fs (loop4): mount failed [ 685.738094][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.745097][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.866241][T21255] hpfs: Bad magic ... probably not HPFS [ 686.438975][T21260] loop0: detected capacity change from 0 to 128 [ 687.128018][T18987] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 687.498150][T18987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.524068][T18987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.550021][T21287] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 687.550021][T21287] mac=(192,-24) net=(168,20) trans=188 [ 687.550021][T21287] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 687.550021][T21287] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 687.550021][T21287] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 687.583397][T21287] dev name=veth0 feat=0x000061164fdd19e9 [ 687.589112][T21287] skb linear: 00000000: 45 02 29 89 bc d9 00 00 0f 2f 25 3b ac 14 14 18 [ 687.597688][T21287] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 687.606426][T21287] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 687.615017][T21287] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 687.623614][T21287] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 687.632195][T21287] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 25 60 00 00 [ 687.640875][T21287] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.649458][T21287] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.658036][T21287] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.666576][T21287] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.675169][T21287] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.683757][T21287] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.692334][T21287] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.700903][T21287] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.709482][T21287] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.718394][T21287] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.726930][T21287] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.735517][T21287] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.744097][T21287] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.752735][T21287] ------------[ cut here ]------------ [ 687.758259][T21287] offset (10633) >= skb_headlen() (10633) [ 687.764871][T21287] WARNING: CPU: 0 PID: 21287 at net/core/dev.c:3305 skb_checksum_help+0x626/0x740 [ 687.774202][T21287] Modules linked in: [ 687.778173][T21287] CPU: 0 PID: 21287 Comm: syz.1.3042 Not tainted 6.1.96-syzkaller #0 [ 687.786266][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 687.796429][T21287] RIP: 0010:skb_checksum_help+0x626/0x740 [ 687.802249][T21287] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 687.821948][T21287] RSP: 0018:ffffc90003dfef28 EFLAGS: 00010246 [ 687.828092][T21287] RAX: 59a7fc95519bf900 RBX: 0000000000002989 RCX: 0000000000040000 [ 687.836105][T21287] RDX: ffffc9000495a000 RSI: 000000000003ab44 RDI: 000000000003ab45 [ 687.844176][T21287] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffff520007bfd45 [ 687.852238][T21287] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 687.860293][T21287] R13: ffff8880607b7430 R14: ffff8880607b73c0 R15: 0000000000002989 [ 687.868360][T21287] FS: 00007f2d2e4bd6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 687.877326][T21287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.883992][T21287] CR2: 000000002000e000 CR3: 000000005df7c000 CR4: 00000000003506f0 [ 687.892048][T21287] Call Trace: [ 687.895354][T21287] [ 687.898346][T21287] ? __warn+0x15a/0x520 [ 687.902551][T21287] ? skb_checksum_help+0x626/0x740 [ 687.907708][T21287] ? report_bug+0x2af/0x500 [ 687.912313][T21287] ? skb_checksum_help+0x626/0x740 [ 687.917473][T21287] ? handle_bug+0x3d/0x70 [ 687.921877][T21287] ? exc_invalid_op+0x16/0x40 [ 687.926592][T21287] ? asm_exc_invalid_op+0x16/0x20 [ 687.931710][T21287] ? __warn_printk+0x28e/0x350 [ 687.936543][T21287] ? skb_checksum_help+0x626/0x740 [ 687.941763][T21287] ? skb_checksum_help+0x626/0x740 [ 687.947035][T21287] ip_do_fragment+0x209/0x1b20 [ 687.951903][T21287] ? nf_hook+0x392/0x450 [ 687.956197][T21287] ? __ip_local_out+0x4a0/0x4a0 [ 687.961149][T21287] ? ip_fragment+0x220/0x220 [ 687.965791][T21287] ? ip_frag_next+0xb10/0xb10 [ 687.970565][T21287] ? xfrm_lookup_with_ifid+0x1741/0x2430 [ 687.976257][T21287] ? ip_fast_csum+0x1ec/0x2a0 [ 687.981042][T21287] ? __ip_finish_output+0x22f/0x4b0 [ 687.986286][T21287] ? ip_fragment+0x9a/0x220 [ 687.990973][T21287] iptunnel_xmit+0x513/0x920 [ 687.995627][T21287] ip_tunnel_xmit+0x22e4/0x2cc0 [ 688.000605][T21287] ? tnl_update_pmtu+0x10b0/0x10b0 [ 688.005931][T21287] ? print_irqtrace_events+0x210/0x210 [ 688.011483][T21287] ? validate_xmit_xfrm+0xb4/0x10b0 [ 688.016733][T21287] ? gre_build_header+0x25b/0x9a0 [ 688.021870][T21287] ipgre_xmit+0x866/0xc40 [ 688.026791][T21287] dev_hard_start_xmit+0x261/0x8c0 [ 688.032020][T21287] __dev_queue_xmit+0x1bb1/0x3cf0 [ 688.037109][T21287] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 688.042320][T21287] ? netdev_core_pick_tx+0x320/0x320 [ 688.047660][T21287] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 688.053325][T21287] packet_sendmsg+0x4775/0x61a0 [ 688.058273][T21287] ? aa_sk_perm+0xa60/0xa60 [ 688.062852][T21287] ? aa_sk_perm+0x92d/0xa60 [ 688.067396][T21287] ? tomoyo_socket_bind_permission+0x330/0x330 [ 688.073648][T21287] ? packet_getsockopt+0xed0/0xed0 [ 688.078854][T21287] ? __import_iovec+0x316/0x4c0 [ 688.083842][T21287] ? aa_sock_msg_perm+0x91/0x150 [ 688.088880][T21287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 688.094219][T21287] ? security_socket_sendmsg+0x7d/0xa0 [ 688.099780][T21287] ? packet_getsockopt+0xed0/0xed0 [ 688.104948][T21287] ____sys_sendmsg+0x5a5/0x8f0 [ 688.109818][T21287] ? __sys_sendmsg_sock+0x30/0x30 [ 688.114905][T21287] __sys_sendmsg+0x2a9/0x390 [ 688.119589][T21287] ? ____sys_sendmsg+0x8f0/0x8f0 [ 688.124611][T21287] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 688.130709][T21287] ? syscall_enter_from_user_mode+0x2e/0x230 [ 688.136828][T21287] ? lockdep_hardirqs_on+0x94/0x130 [ 688.142142][T21287] ? syscall_enter_from_user_mode+0x2e/0x230 [ 688.148214][T21287] do_syscall_64+0x3b/0xb0 [ 688.152692][T21287] ? clear_bhb_loop+0x45/0xa0 [ 688.157420][T21287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.163514][T21287] RIP: 0033:0x7f2d2d775b29 [ 688.168112][T21287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.187836][T21287] RSP: 002b:00007f2d2e4bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.196304][T21287] RAX: ffffffffffffffda RBX: 00007f2d2d903fa0 RCX: 00007f2d2d775b29 [ 688.204377][T21287] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 688.212441][T21287] RBP: 00007f2d2d7f6756 R08: 0000000000000000 R09: 0000000000000000 [ 688.220584][T21287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.228645][T21287] R13: 000000000000000b R14: 00007f2d2d903fa0 R15: 00007ffdc9620028 [ 688.236677][T21287] [ 688.239774][T21287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 688.247162][T21287] CPU: 0 PID: 21287 Comm: syz.1.3042 Not tainted 6.1.96-syzkaller #0 [ 688.255253][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 688.265339][T21287] Call Trace: [ 688.268666][T21287] [ 688.271629][T21287] dump_stack_lvl+0x1e3/0x2cb [ 688.276351][T21287] ? nf_tcp_handle_invalid+0x642/0x642 [ 688.281866][T21287] ? panic+0x764/0x764 [ 688.285965][T21287] ? 0xffffffffa00038c0 [ 688.290146][T21287] ? vscnprintf+0x59/0x80 [ 688.294509][T21287] panic+0x318/0x764 [ 688.298438][T21287] ? __warn+0x169/0x520 [ 688.302626][T21287] ? memcpy_page_flushcache+0xfc/0xfc [ 688.308045][T21287] __warn+0x348/0x520 [ 688.312059][T21287] ? skb_checksum_help+0x626/0x740 [ 688.317208][T21287] report_bug+0x2af/0x500 [ 688.321563][T21287] ? skb_checksum_help+0x626/0x740 [ 688.326712][T21287] handle_bug+0x3d/0x70 [ 688.330895][T21287] exc_invalid_op+0x16/0x40 [ 688.335437][T21287] asm_exc_invalid_op+0x16/0x20 [ 688.340320][T21287] RIP: 0010:skb_checksum_help+0x626/0x740 [ 688.346073][T21287] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 688.365801][T21287] RSP: 0018:ffffc90003dfef28 EFLAGS: 00010246 [ 688.371901][T21287] RAX: 59a7fc95519bf900 RBX: 0000000000002989 RCX: 0000000000040000 [ 688.379927][T21287] RDX: ffffc9000495a000 RSI: 000000000003ab44 RDI: 000000000003ab45 [ 688.387924][T21287] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffff520007bfd45 [ 688.395919][T21287] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 688.403920][T21287] R13: ffff8880607b7430 R14: ffff8880607b73c0 R15: 0000000000002989 [ 688.411932][T21287] ? __warn_printk+0x28e/0x350 [ 688.416753][T21287] ? skb_checksum_help+0x626/0x740 [ 688.421920][T21287] ip_do_fragment+0x209/0x1b20 [ 688.426723][T21287] ? nf_hook+0x392/0x450 [ 688.431010][T21287] ? __ip_local_out+0x4a0/0x4a0 [ 688.435896][T21287] ? ip_fragment+0x220/0x220 [ 688.440522][T21287] ? ip_frag_next+0xb10/0xb10 [ 688.445232][T21287] ? xfrm_lookup_with_ifid+0x1741/0x2430 [ 688.450905][T21287] ? ip_fast_csum+0x1ec/0x2a0 [ 688.455631][T21287] ? __ip_finish_output+0x22f/0x4b0 [ 688.460868][T21287] ? ip_fragment+0x9a/0x220 [ 688.465411][T21287] iptunnel_xmit+0x513/0x920 [ 688.470068][T21287] ip_tunnel_xmit+0x22e4/0x2cc0 [ 688.474994][T21287] ? tnl_update_pmtu+0x10b0/0x10b0 [ 688.480144][T21287] ? print_irqtrace_events+0x210/0x210 [ 688.485637][T21287] ? validate_xmit_xfrm+0xb4/0x10b0 [ 688.490875][T21287] ? gre_build_header+0x25b/0x9a0 [ 688.495934][T21287] ipgre_xmit+0x866/0xc40 [ 688.500297][T21287] dev_hard_start_xmit+0x261/0x8c0 [ 688.505453][T21287] __dev_queue_xmit+0x1bb1/0x3cf0 [ 688.510552][T21287] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 688.515700][T21287] ? netdev_core_pick_tx+0x320/0x320 [ 688.521036][T21287] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 688.526638][T21287] packet_sendmsg+0x4775/0x61a0 [ 688.531543][T21287] ? aa_sk_perm+0xa60/0xa60 [ 688.536108][T21287] ? aa_sk_perm+0x92d/0xa60 [ 688.540638][T21287] ? tomoyo_socket_bind_permission+0x330/0x330 [ 688.546826][T21287] ? packet_getsockopt+0xed0/0xed0 [ 688.551987][T21287] ? __import_iovec+0x316/0x4c0 [ 688.556880][T21287] ? aa_sock_msg_perm+0x91/0x150 [ 688.561867][T21287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 688.567192][T21287] ? security_socket_sendmsg+0x7d/0xa0 [ 688.572688][T21287] ? packet_getsockopt+0xed0/0xed0 [ 688.577837][T21287] ____sys_sendmsg+0x5a5/0x8f0 [ 688.582651][T21287] ? __sys_sendmsg_sock+0x30/0x30 [ 688.587720][T21287] __sys_sendmsg+0x2a9/0x390 [ 688.592347][T21287] ? ____sys_sendmsg+0x8f0/0x8f0 [ 688.597349][T21287] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 688.603482][T21287] ? syscall_enter_from_user_mode+0x2e/0x230 [ 688.609506][T21287] ? lockdep_hardirqs_on+0x94/0x130 [ 688.614737][T21287] ? syscall_enter_from_user_mode+0x2e/0x230 [ 688.620777][T21287] do_syscall_64+0x3b/0xb0 [ 688.625244][T21287] ? clear_bhb_loop+0x45/0xa0 [ 688.629967][T21287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.635937][T21287] RIP: 0033:0x7f2d2d775b29 [ 688.640379][T21287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.660119][T21287] RSP: 002b:00007f2d2e4bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.668574][T21287] RAX: ffffffffffffffda RBX: 00007f2d2d903fa0 RCX: 00007f2d2d775b29 [ 688.676572][T21287] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 688.684571][T21287] RBP: 00007f2d2d7f6756 R08: 0000000000000000 R09: 0000000000000000 [ 688.692566][T21287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.700573][T21287] R13: 000000000000000b R14: 00007f2d2d903fa0 R15: 00007ffdc9620028 [ 688.708603][T21287] [ 688.711779][T21287] Kernel Offset: disabled [ 688.716166][T21287] Rebooting in 86400 seconds..