last executing test programs: 9.466966846s ago: executing program 0 (id=1100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r7, 0x3ff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800"/28], 0x0) 5.840296904s ago: executing program 1 (id=1123): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) 5.20052461s ago: executing program 1 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0x6c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000180)={0x0, [0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8], 0xa}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x23, 0x0, 0x80ae) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500c7000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0500000000000000e5ff0e00000008000300", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf251000000018000180140002006e657464657673696d300000000000f9080006000000010008000700001000"], 0x3c}}, 0x0) 4.703933564s ago: executing program 4 (id=1127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x4}) 4.477730573s ago: executing program 4 (id=1128): r0 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x208000, 0x0, 0x1, 0x0, &(0x7f00000003c0)="700823b007770b6e361d633c92179f5a14450cbac35ed2497399ce34fbc6f47655f14746ac52a395089367401c657da8138392691a8bcbd5464731eb5885b1cd6f4f72a4d0435d00a07fe3c685a69a71ef64f371e21c8ea717b036359e8c7dea2fc6156c68fa7e5b16f3274ee1") getdents(r0, &(0x7f0000000480), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0000e600000019"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000180)=0x10e55d5, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904000000f575f600"], 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x2, 0x6, 0x8}, 0x3}, 0x20, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_dump={0x40}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000002c0)={0x104}) 4.476658093s ago: executing program 2 (id=1129): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)='\f', 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 3.929487027s ago: executing program 2 (id=1133): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r1 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xe01) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f0000002040), 0x1, 0x42) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3d}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="140001000000000000003f2b6eacb2"], 0x2c}}, 0x0) r9 = syz_open_dev$sndpcmp(0x0, 0xfffffffffffffffd, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000240)={0x0, [[0x1000, 0x0, 0x0, 0x0, 0x4], [0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x2000], [0x1244, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3]], '\x00', [{}, {0xfffffffe}, {0x800, 0x52}, {0x2, 0x100003}, {0x9}, {0xe3a}, {0xfffffffe}, {0x0, 0x80000000}, {}, {0x4}, {}, {0x0, 0xfffffffe}], '\x00', 0xfffffffe, 0x0, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000003c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4010744d, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) 3.463845232s ago: executing program 1 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_open_dev$cec(0x0, 0x0, 0x321001) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x40c32aec156fcff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0x17) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000b40)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x100f5, 0x8, 0x0, 0x0}}, 0x10) 3.171299994s ago: executing program 2 (id=1136): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d537757e7e140e5897a634fedaf0632d", @ANYRES32=r2, @ANYRES64=r3, @ANYBLOB="1800508014000400ec4b87"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = gettid() timer_create(0x0, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x30) r7 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) 2.617688849s ago: executing program 3 (id=1137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x3, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x2a, 0x26, 0x8}) 2.480771518s ago: executing program 3 (id=1138): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 2.32005667s ago: executing program 1 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) 2.058268812s ago: executing program 3 (id=1140): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x30000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000700)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000e80)={{@local, 0x4}, {@host}, 0x400, "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"}, 0x418}) 1.939988628s ago: executing program 3 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="050029"], 0x2c}}, 0x0) 1.768638651s ago: executing program 3 (id=1142): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) socket(0x23, 0x6, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}, {0x0, 0x1, 0x3}]}) open(0x0, 0x800042, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@x={0x94, 0x0, "00dd000400"}) socket$inet_sctp(0x2, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r6, &(0x7f00000004c0), 0x0) shutdown(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.389508091s ago: executing program 4 (id=1143): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x0, 0x14, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) 196.181286ms ago: executing program 3 (id=1144): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 0s ago: executing program 1 (id=1145): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) socket(0x23, 0x6, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}, {0x0, 0x1, 0x3}]}) open(0x0, 0x800042, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@x={0x94, 0x0, "00dd000400"}) socket$inet_sctp(0x2, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000003c80)="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", 0x1000}], 0x1) shutdown(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 68014][ T7506] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 187.135907][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.140476][ T7506] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 187.152869][ T7527] netlink: 'syz.2.552': attribute type 21 has an invalid length. [ 187.169249][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'. [ 187.180126][ T5339] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 187.195425][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.222819][ T7314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.233786][ T5339] usb 2-1: config 0 descriptor?? [ 187.252493][ T7314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.269879][ T5339] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 187.295141][ T7314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.304545][ T7314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.377371][ T7530] fuse: Bad value for 'fd' [ 187.475172][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.549082][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.576424][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.589010][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.686534][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.727284][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.871826][ T5339] gspca_stv06xx: vv6410 sensor detected [ 188.114591][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.136621][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.194325][ T5339] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 188.226508][ T5339] usb 2-1: USB disconnect, device number 25 [ 189.008768][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 189.181232][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 189.223943][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.245275][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.276401][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 189.305402][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.328093][ T8] usb 2-1: config 0 descriptor?? [ 189.765964][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.773388][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.794167][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.801988][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.814003][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.822453][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.868740][ T8] wacom 0003:056A:0302.0004: unknown main item tag 0x0 [ 189.881276][ T8] wacom 0003:056A:0302.0004: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 189.904254][ T8] wacom 0003:056A:0302.0004: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.1-1/input0 [ 189.925762][ T8] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0302.0004/input/input11 [ 190.028406][ T8] usb 2-1: USB disconnect, device number 26 [ 190.714470][ T7576] loop7: detected capacity change from 0 to 16384 [ 190.771182][ T7576] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 190.839330][ T5287] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 190.862020][ T7577] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 190.998762][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 191.017336][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.042353][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.083267][ T5287] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 191.117218][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.127135][ T5287] usb 2-1: config 0 descriptor?? [ 191.230048][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.240987][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.556863][ T5287] pantherlord 0003:0810:0001.0005: unbalanced collection at end of report description [ 191.571234][ T5287] pantherlord 0003:0810:0001.0005: parse failed [ 191.577975][ T5287] pantherlord 0003:0810:0001.0005: probe with driver pantherlord failed with error -22 [ 191.769268][ T5285] usb 2-1: USB disconnect, device number 27 [ 191.859016][ T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 192.020648][ T47] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 192.029999][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.048273][ T47] usb 3-1: config 0 descriptor?? [ 192.466397][ T47] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 192.473328][ T47] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 192.480411][ T47] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 192.487230][ T47] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 192.494218][ T47] nti 0003:0757:0A00.0006: unknown main item tag 0x0 [ 192.504359][ T47] nti 0003:0757:0A00.0006: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 192.548757][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 192.672511][ T5287] usb 3-1: USB disconnect, device number 19 [ 192.705563][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.716820][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.728190][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 192.750448][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.769763][ T8] usb 2-1: config 0 descriptor?? [ 192.786919][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.796626][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.189000][ T8] hid-retrode 0003:0403:97C1.0007: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 193.366796][ T7602] loop7: detected capacity change from 0 to 16384 [ 193.389285][ T8] usb 2-1: USB disconnect, device number 28 [ 193.411335][ T7602] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 193.428381][ T7602] buffer_io_error: 26 callbacks suppressed [ 193.428399][ T7602] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 193.538895][ T5285] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.720377][ T5285] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.728996][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.740486][ T5285] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.750097][ T5285] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.758145][ T5285] usb 3-1: Manufacturer: syz [ 193.765323][ T5285] usb 3-1: config 0 descriptor?? [ 193.820096][ T5285] rc_core: IR keymap rc-hauppauge not found [ 193.826198][ T5285] Registered IR keymap rc-empty [ 193.833780][ T5285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 193.844806][ T5285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 194.199822][ C1] igorplugusb 3-1:0.0: receive overflow, at least 7 lost [ 194.353193][ T7617] tipc: Started in network mode [ 194.358472][ T7617] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 194.369205][ T7617] tipc: Enabling of bearer rejected, failed to enable media [ 194.412304][ T8] usb 3-1: USB disconnect, device number 20 [ 194.521727][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.528284][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.590450][ T7621] fuse: Bad value for 'fd' [ 194.612871][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 194.612889][ T29] audit: type=1326 audit(1728622301.291:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.651093][ T29] audit: type=1326 audit(1728622301.321:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.727134][ T29] audit: type=1326 audit(1728622301.321:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.785288][ T29] audit: type=1326 audit(1728622301.321:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.846498][ T29] audit: type=1326 audit(1728622301.331:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.885821][ T29] audit: type=1326 audit(1728622301.331:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.910312][ T29] audit: type=1326 audit(1728622301.331:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 194.966823][ T29] audit: type=1326 audit(1728622301.331:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 195.229960][ T7635] atomic_op ffff88807e8e6198 conn xmit_atomic 0000000000000000 [ 195.270520][ T29] audit: type=1326 audit(1728622301.331:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 195.292939][ T29] audit: type=1326 audit(1728622301.461:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 195.403453][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.413143][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.424255][ T7644] batadv0: entered promiscuous mode [ 195.434763][ T7642] batadv0: left promiscuous mode [ 195.568804][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.718876][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 195.725985][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.737312][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.747368][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.762135][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.771312][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.780669][ T8] usb 2-1: config 0 descriptor?? [ 195.790136][ T5285] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 195.948763][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 195.955708][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.978974][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.004453][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.025422][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 196.037723][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.064796][ T5285] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.078092][ T5285] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.094573][ T5285] usb 3-1: Manufacturer: syz [ 196.102910][ T5285] usb 3-1: config 0 descriptor?? [ 196.113133][ T5285] usbhid 3-1:0.0: can't add hid device: -22 [ 196.119867][ T5285] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 196.182413][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 196.206080][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.218955][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.226604][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.235087][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.252952][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.263174][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.274316][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.288086][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.303377][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.313108][ T8] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 196.350477][ T5287] usb 3-1: USB disconnect, device number 21 [ 196.361370][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input15 [ 196.485478][ T8] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 196.507917][ T8] usb 2-1: USB disconnect, device number 29 [ 197.729373][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 197.918253][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.946001][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.972043][ T25] usb 2-1: config 0 descriptor?? [ 197.984317][ T25] cp210x 2-1:0.0: cp210x converter detected [ 198.226925][ T7699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 198.596180][ T25] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 198.632388][ T25] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 198.645191][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 198.655346][ T25] usb 2-1: USB disconnect, device number 30 [ 198.664582][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.673070][ T25] cp210x 2-1:0.0: device disconnected [ 198.796880][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.820666][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.200889][ T7715] fuse: Bad value for 'fd' [ 199.268754][ T5284] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 199.421535][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 199.443856][ T5284] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 199.467811][ T5284] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 199.494260][ T5287] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 199.502035][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.533212][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.550051][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.568306][ T5284] usb 3-1: Product: syz [ 199.573434][ T5284] usb 3-1: Manufacturer: syz [ 199.578089][ T5284] usb 3-1: SerialNumber: syz [ 199.612118][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.626516][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.669836][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 199.669853][ T29] audit: type=1326 audit(1728622306.351:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.699609][ T29] audit: type=1326 audit(1728622306.381:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.725509][ T5287] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 199.729803][ T29] audit: type=1326 audit(1728622306.411:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.735866][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.758202][ T29] audit: type=1326 audit(1728622306.411:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.797702][ T29] audit: type=1326 audit(1728622306.411:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.833282][ T5287] usb 2-1: config 0 descriptor?? [ 199.858573][ T29] audit: type=1326 audit(1728622306.421:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.888446][ T5287] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 199.902370][ T7736] netlink: 'syz.0.624': attribute type 21 has an invalid length. [ 199.910279][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.624'. [ 199.935686][ T29] audit: type=1326 audit(1728622306.561:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.963949][ T29] audit: type=1326 audit(1728622306.561:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 199.994464][ T29] audit: type=1326 audit(1728622306.561:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b917dbfb code=0x7ffc0000 [ 200.018845][ T29] audit: type=1326 audit(1728622306.561:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2b91b00e5 code=0x7ffc0000 [ 200.243463][ T5284] usb 3-1: 0:2 : does not exist [ 200.275492][ T5284] usb 3-1: USB disconnect, device number 22 [ 200.318584][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.498214][ T5287] gspca_stv06xx: vv6410 sensor detected [ 200.706505][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.715347][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.764520][ T5287] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 200.777867][ T5287] usb 2-1: USB disconnect, device number 31 [ 201.233074][ T7752] loop7: detected capacity change from 0 to 16384 [ 201.305100][ T7752] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 201.322894][ T7752] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 201.399458][ T7753] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 201.422116][ T7753] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 201.438793][ T7753] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 201.449996][ T7753] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 201.466606][ T7753] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 201.477630][ T7753] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 201.493029][ T7753] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 201.505531][ T7753] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 201.518831][ T7753] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 201.527518][ T7753] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 202.136849][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.155781][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.269651][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 202.431560][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.446585][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.473245][ T25] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 202.484845][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.501279][ T25] usb 3-1: config 0 descriptor?? [ 202.756310][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.778426][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.935850][ T25] steelseries 0003:1038:1410.0009: item fetching failed at offset 3/7 [ 202.946340][ T25] steelseries 0003:1038:1410.0009: parse failed [ 202.975109][ T25] steelseries 0003:1038:1410.0009: probe with driver steelseries failed with error -22 [ 203.144694][ T25] usb 3-1: USB disconnect, device number 23 [ 203.351277][ T7781] fuse: Bad value for 'fd' [ 203.416504][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.441606][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.470783][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.502135][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.061357][ T5285] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 204.227508][ T7794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.645'. [ 204.238072][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 204.270741][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.281843][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.292122][ T5285] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 204.301367][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.327434][ T5285] usb 3-1: config 0 descriptor?? [ 204.790691][ T5285] stadia 0003:18D1:9400.000A: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 204.802173][ T5285] stadia 0003:18D1:9400.000A: no inputs found [ 204.808997][ T5285] stadia 0003:18D1:9400.000A: force feedback init failed [ 204.966356][ T7807] netlink: 'syz.4.649': attribute type 21 has an invalid length. [ 204.988168][ T5285] usb 3-1: USB disconnect, device number 24 [ 204.999436][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 204.999450][ T29] audit: type=1326 audit(1728622311.631:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 205.050477][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.649'. [ 205.355195][ T7821] fuse: Bad value for 'fd' [ 205.668816][ T5285] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 205.681905][ T29] audit: type=1326 audit(1728622312.361:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7801 comm="syz.3.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 205.751105][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.762518][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.849133][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 205.858507][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.876332][ T5285] usb 2-1: config 0 descriptor?? [ 205.885005][ T5285] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 206.129277][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 206.279336][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 206.290964][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.302314][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.313042][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.326166][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 206.335355][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.347446][ T47] usb 3-1: config 0 descriptor?? [ 206.487859][ T5285] gspca_stv06xx: vv6410 sensor detected [ 206.691339][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.735580][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.772183][ T5285] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 206.793309][ T7840] netlink: 'syz.3.663': attribute type 21 has an invalid length. [ 206.818825][ T7840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.663'. [ 206.834572][ T5285] usb 2-1: USB disconnect, device number 32 [ 206.994176][ T47] usb 3-1: USB disconnect, device number 25 [ 207.037188][ T7849] netlink: 'syz.3.665': attribute type 29 has an invalid length. [ 207.053541][ T7849] netlink: 'syz.3.665': attribute type 29 has an invalid length. [ 207.253187][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.262971][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.391343][ T29] audit: type=1326 audit(1728622314.071:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 207.423963][ T29] audit: type=1326 audit(1728622314.101:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 208.164154][ T29] audit: type=1326 audit(1728622314.841:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 208.332953][ T7878] netlink: 'syz.3.675': attribute type 21 has an invalid length. [ 208.344234][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.675'. [ 208.427369][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.677'. [ 208.808725][ T47] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 209.079017][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 209.153856][ T47] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.179379][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.213435][ T47] usb 2-1: config 0 descriptor?? [ 209.252725][ T7892] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.262082][ T7892] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.271006][ T7892] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.279838][ T7892] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.680091][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.693713][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.703732][ T7899] loop7: detected capacity change from 0 to 16384 [ 209.760753][ T7899] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 209.771238][ T7899] buffer_io_error: 7 callbacks suppressed [ 209.771596][ T7899] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 209.843667][ T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 209.851966][ T7906] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 209.858146][ T47] asix 2-1:0.0: probe with driver asix failed with error -71 [ 209.868519][ T7906] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 209.881756][ T7906] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 209.890557][ T7906] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 209.898797][ T5241] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.906733][ T7906] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 209.919760][ T47] usb 2-1: USB disconnect, device number 33 [ 209.928777][ T7906] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 209.944363][ T7906] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 209.954008][ T7906] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 209.963121][ T7906] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 209.971588][ T7906] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 210.068745][ T5241] usb 3-1: Using ep0 maxpacket: 16 [ 210.075953][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.087194][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.097319][ T5241] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 210.106468][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.116805][ T5241] usb 3-1: config 0 descriptor?? [ 210.538039][ T5241] bigben 0003:146B:0902.000C: unexpected rdesc, please submit for review [ 210.559720][ T5241] bigben 0003:146B:0902.000C: unknown main item tag 0x2 [ 210.577850][ T5241] bigben 0003:146B:0902.000C: unbalanced collection at end of report description [ 210.589626][ T5241] bigben 0003:146B:0902.000C: parse failed [ 210.595535][ T5241] bigben 0003:146B:0902.000C: probe with driver bigben failed with error -22 [ 210.605354][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.4.689'. [ 210.746637][ T5241] usb 3-1: USB disconnect, device number 26 [ 210.829422][ T7916] netlink: 'syz.1.691': attribute type 21 has an invalid length. [ 210.837435][ T7916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.691'. [ 211.324560][ T7929] netlink: 'syz.2.695': attribute type 2 has an invalid length. [ 211.658780][ T5284] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 211.838899][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 211.853012][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 211.884133][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 211.942485][ T5284] usb 3-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 211.972179][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.999332][ T5284] usb 3-1: Product: syz [ 212.018348][ T5284] usb 3-1: Manufacturer: syz [ 212.030579][ T5284] usb 3-1: SerialNumber: syz [ 212.052603][ T5284] usb 3-1: config 0 descriptor?? [ 212.321239][ T5284] kaweth 3-1:0.0: Firmware present in device. [ 212.512378][ T5284] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 212.536424][ T5284] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 212.571153][ T5284] usb 3-1: USB disconnect, device number 27 [ 212.963952][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.701'. [ 213.253176][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.302265][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.544529][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 213.669213][ T5241] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 213.835251][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 213.846167][ T5241] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 213.876373][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 213.888201][ T7975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.716'. [ 213.898056][ T5241] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 213.910903][ T5241] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 213.932706][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.999209][ T5241] usb 3-1: Product: syz [ 214.003655][ T5241] usb 3-1: Manufacturer: syz [ 214.009050][ T5241] usb 3-1: SerialNumber: syz [ 214.027332][ T5241] usb 3-1: config 0 descriptor?? [ 214.036997][ T5241] usb 3-1: NFC: Unable to get FW version [ 214.044753][ T5241] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 214.091027][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.182552][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.296744][ T5284] usb 3-1: USB disconnect, device number 28 [ 215.197584][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 215.218753][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 215.423322][ T8011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.731'. [ 215.640559][ T5241] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 215.807610][ T5241] usb 3-1: Using ep0 maxpacket: 8 [ 215.826034][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.919761][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.938729][ T5241] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.968753][ T5241] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 215.978194][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.998174][ T5241] usb 3-1: config 0 descriptor?? [ 216.019166][ T8015] netlink: 'syz.1.734': attribute type 21 has an invalid length. [ 216.028375][ T8015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.292519][ T8021] kernel profiling enabled (shift: 9) [ 216.317516][ T8023] fuse: Bad value for 'fd' [ 216.326008][ T29] audit: type=1326 audit(1728622323.001:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.351214][ T29] audit: type=1326 audit(1728622323.001:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.374186][ T29] audit: type=1326 audit(1728622323.001:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.401101][ T29] audit: type=1326 audit(1728622323.001:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.413349][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.424747][ T29] audit: type=1326 audit(1728622323.001:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.474971][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.483451][ T29] audit: type=1326 audit(1728622323.001:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.510786][ T5241] belkin 0003:050D:3201.000D: unknown main item tag 0x0 [ 216.518852][ T5241] belkin 0003:050D:3201.000D: unknown main item tag 0x0 [ 216.536681][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.539363][ T5241] belkin 0003:050D:3201.000D: hiddev1,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 216.557152][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.565788][ T29] audit: type=1326 audit(1728622323.001:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.594079][ T29] audit: type=1326 audit(1728622323.001:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.617109][ T29] audit: type=1326 audit(1728622323.001:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.650270][ T29] audit: type=1326 audit(1728622323.001:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 216.749258][ T5241] usb 3-1: USB disconnect, device number 29 [ 217.359213][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.376482][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.689613][ T8057] netlink: 'syz.2.745': attribute type 21 has an invalid length. [ 217.707273][ T8057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.745'. [ 218.111076][ T8071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.747'. [ 218.230283][ T8076] capability: warning: `syz.1.752' uses deprecated v2 capabilities in a way that may be insecure [ 218.602767][ T8090] netlink: 'syz.4.753': attribute type 21 has an invalid length. [ 218.815514][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.753'. [ 219.324503][ T8098] netlink: 'syz.0.757': attribute type 21 has an invalid length. [ 219.401595][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.757'. [ 219.687929][ T8112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.762'. [ 219.746369][ T8115] tipc: Cannot configure node identity twice [ 219.769285][ T5285] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 219.926641][ T5285] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.935211][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.948879][ T5285] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.957984][ T5285] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.966429][ T5285] usb 3-1: Manufacturer: syz [ 219.974617][ T5285] usb 3-1: config 0 descriptor?? [ 220.049974][ T5285] rc_core: IR keymap rc-hauppauge not found [ 220.066300][ T5285] Registered IR keymap rc-empty [ 220.077183][ T5285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 220.088433][ T5285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 220.272557][ T5282] usb 3-1: USB disconnect, device number 30 [ 220.616251][ T8138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.769'. [ 220.969899][ T8142] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 221.012021][ T8142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 221.223807][ T5282] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 221.560259][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 221.615028][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 221.625024][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 221.636485][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 221.649235][ T5282] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 221.658481][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.666558][ T5282] usb 3-1: Product: syz [ 221.685663][ T5282] usb 3-1: Manufacturer: syz [ 221.691079][ T5282] usb 3-1: SerialNumber: syz [ 221.710513][ T5282] usb 3-1: config 0 descriptor?? [ 221.722192][ T5282] usb 3-1: NFC: Unable to get FW version [ 221.736891][ T5282] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 221.782774][ T8153] netlink: 'syz.0.773': attribute type 21 has an invalid length. [ 221.869875][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.773'. [ 222.813916][ T5285] usb 3-1: USB disconnect, device number 31 [ 222.844673][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 222.844691][ T29] audit: type=1326 audit(1728622329.521:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 222.947310][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 223.129796][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.141888][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.539702][ T29] audit: type=1326 audit(1728622330.221:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 223.569511][ T8190] loop7: detected capacity change from 0 to 16384 [ 223.636439][ T8190] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.636469][ T8193] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 223.645741][ T8190] buffer_io_error: 7 callbacks suppressed [ 223.645761][ T8190] Buffer I/O error on dev loop7, logical block 1, async page read [ 223.645824][ T8190] Dev loop7: unable to read RDB block 8 [ 223.676061][ T8193] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 223.695368][ T8190] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.704906][ T8190] Buffer I/O error on dev loop7, logical block 3, async page read [ 223.720828][ T8190] loop7: unable to read partition table [ 223.727751][ T8190] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 223.823341][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.835693][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.594491][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.619816][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.028782][ T5282] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 225.181499][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 225.191467][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 225.201889][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 225.211672][ T47] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 225.212003][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 225.231421][ T5282] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 225.243573][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.251736][ T5282] usb 2-1: Product: syz [ 225.255921][ T5282] usb 2-1: Manufacturer: syz [ 225.261166][ T5282] usb 2-1: SerialNumber: syz [ 225.267264][ T5282] usb 2-1: config 0 descriptor?? [ 225.274878][ T5282] usb 2-1: NFC: Unable to get FW version [ 225.281413][ T5282] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 225.401468][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 225.422593][ T47] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 225.431815][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.439960][ T47] usb 3-1: Product: syz [ 225.444420][ T47] usb 3-1: Manufacturer: syz [ 225.449578][ T47] usb 3-1: SerialNumber: syz [ 225.456466][ T47] usb 3-1: config 0 descriptor?? [ 225.465575][ T47] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 225.514543][ T8222] loop7: detected capacity change from 0 to 16384 [ 225.585798][ T8222] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 225.636269][ T8222] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 225.831981][ T8223] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 225.848005][ T5241] usb 2-1: USB disconnect, device number 34 [ 225.866108][ T8223] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 225.898716][ T8223] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 225.907713][ T8223] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 225.920353][ T8223] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 225.930361][ T8223] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 225.943012][ T8223] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 225.953101][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.964245][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.178181][ T47] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 226.188991][ T47] usb 3-1: USB disconnect, device number 32 [ 226.767537][ T5287] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 226.812366][ T29] audit: type=1326 audit(1728622333.491:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7fc00000 [ 226.846733][ T29] audit: type=1326 audit(1728622333.521:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6f17dff9 code=0x7fc00000 [ 226.854806][ T8270] loop7: detected capacity change from 0 to 16384 [ 226.931579][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.945609][ T8270] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 226.955516][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.962427][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.979301][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.988072][ T5287] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 227.004701][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.015120][ T5287] usb 2-1: config 0 descriptor?? [ 227.045276][ T8273] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 227.431736][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.439808][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x6 [ 227.446940][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x5 [ 227.454524][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x4 [ 227.462369][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.470560][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.477552][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.485028][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.492928][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.500304][ T5287] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 227.507421][ T5287] elecom 0003:056E:00FE.000E: unknown global tag 0xd [ 227.514627][ T5287] elecom 0003:056E:00FE.000E: item 0 4 1 13 parsing failed [ 227.522724][ T5287] elecom 0003:056E:00FE.000E: probe with driver elecom failed with error -22 [ 227.536050][ T29] audit: type=1326 audit(1728622334.221:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.0.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7fc00000 [ 227.610575][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.627283][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.657290][ T5287] usb 2-1: USB disconnect, device number 35 [ 228.202292][ T8294] netlink: 'syz.0.833': attribute type 11 has an invalid length. [ 228.220511][ T8294] netlink: 80 bytes leftover after parsing attributes in process `syz.0.833'. [ 228.289022][ T47] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 228.468923][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.480114][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.499005][ T47] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 228.528100][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.567554][ T47] usb 3-1: config 0 descriptor?? [ 228.589022][ T5241] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 228.617655][ T8305] netlink: 'syz.4.837': attribute type 21 has an invalid length. [ 228.648417][ T8305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.837'. [ 228.748715][ T5241] usb 2-1: Using ep0 maxpacket: 16 [ 228.763971][ T5241] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.779702][ T5241] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.798841][ T5241] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.813889][ T5241] usb 2-1: config 0 interface 0 has no altsetting 0 [ 228.822562][ T5241] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 228.832026][ T5241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.872986][ T5241] usb 2-1: config 0 descriptor?? [ 229.234338][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.252384][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.298017][ T5241] hid-generic 0003:045E:05DA.000F: item fetching failed at offset 30/34 [ 229.401005][ T5241] hid-generic 0003:045E:05DA.000F: probe with driver hid-generic failed with error -22 [ 229.506584][ T29] audit: type=1326 audit(1728622336.181:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.549821][ T5241] usb 2-1: USB disconnect, device number 36 [ 229.599056][ T29] audit: type=1326 audit(1728622336.181:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.667524][ T29] audit: type=1326 audit(1728622336.221:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.763474][ T29] audit: type=1326 audit(1728622336.221:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.788829][ T29] audit: type=1326 audit(1728622336.221:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.816296][ T8323] loop7: detected capacity change from 0 to 16384 [ 229.839749][ T29] audit: type=1326 audit(1728622336.221:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.867646][ T29] audit: type=1326 audit(1728622336.221:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.904505][ T8324] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 229.904596][ T8323] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.923702][ T29] audit: type=1326 audit(1728622336.221:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7ffc0000 [ 229.947226][ T8323] buffer_io_error: 27 callbacks suppressed [ 229.947243][ T8323] Buffer I/O error on dev loop7, logical block 1, async page read [ 229.973052][ T8323] Dev loop7: unable to read RDB block 8 [ 229.979512][ T8323] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.990905][ T8323] Buffer I/O error on dev loop7, logical block 3, async page read [ 230.002503][ T8323] loop7: unable to read partition table [ 230.008437][ T8323] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 230.062106][ T8323] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 230.080069][ T8323] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 230.100930][ T8323] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 230.111478][ T8323] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 230.131889][ T8323] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 230.144065][ T8323] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 230.153357][ T8323] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 230.162377][ T8323] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 230.172232][ T8323] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 230.314852][ T29] audit: type=1326 audit(1728622336.991:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8326 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 230.352942][ T29] audit: type=1326 audit(1728622337.021:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8326 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2b917dff9 code=0x7fc00000 [ 230.666942][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.682507][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.925009][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 230.932452][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 230.957959][ T47] usb 3-1: USB disconnect, device number 33 [ 231.077568][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.848'. [ 231.273466][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.315951][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.657890][ T8344] netlink: 'syz.1.853': attribute type 6 has an invalid length. [ 232.142098][ T8361] loop7: detected capacity change from 0 to 16384 [ 232.159067][ T47] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 232.211037][ T5339] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.219510][ T8361] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 232.311385][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 232.321602][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.327124][ T8369] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 232.332591][ T47] usb 2-1: config 0 descriptor?? [ 232.355053][ T47] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 232.384661][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.406176][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.426471][ T5339] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 232.445982][ T5339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.459568][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 232.479336][ T5339] usb 3-1: config 0 descriptor?? [ 232.530429][ T8371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.862'. [ 232.888926][ T8382] netlink: 'syz.3.867': attribute type 6 has an invalid length. [ 232.896828][ T8382] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 232.904977][ T5339] appletouch 3-1:0.0: Geyser mode initialized. [ 232.912106][ T5339] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 232.944055][ T8382] netlink: 197020 bytes leftover after parsing attributes in process `syz.3.867'. [ 232.968673][ T47] gspca_stv06xx: vv6410 sensor detected [ 233.059265][ T7666] udevd[7666]: Error opening device "/dev/input/event4": Input/output error [ 233.086320][ T7666] udevd[7666]: Unable to EVIOCGABS device "/dev/input/event4" [ 233.098116][ T7666] udevd[7666]: Unable to EVIOCGABS device "/dev/input/event4" [ 233.117830][ T5282] usb 3-1: USB disconnect, device number 34 [ 233.154578][ T5282] appletouch 3-1:0.0: input: appletouch disconnected [ 233.178099][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.231876][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.329630][ T47] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 233.350431][ T47] usb 2-1: USB disconnect, device number 37 [ 233.756856][ T8392] netlink: 292 bytes leftover after parsing attributes in process `syz.2.871'. [ 234.199451][ T5282] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 234.249460][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 234.370399][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.393421][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.396106][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.413873][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.421670][ T5282] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 234.436370][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.446031][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 234.456569][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 234.467306][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 234.478671][ T5282] usb 2-1: config 0 descriptor?? [ 234.483884][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 234.499929][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 234.509328][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.517444][ T9] usb 3-1: Product: syz [ 234.523835][ T9] usb 3-1: Manufacturer: syz [ 234.528531][ T9] usb 3-1: SerialNumber: syz [ 234.538280][ T9] usb 3-1: config 0 descriptor?? [ 234.545259][ T9] usb 3-1: NFC: Unable to get FW version [ 234.551607][ T9] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 234.761729][ T9] usb 3-1: USB disconnect, device number 35 [ 234.896689][ T5282] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 235.025399][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.034403][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.106112][ T9] usb 2-1: USB disconnect, device number 38 [ 235.552760][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 235.552778][ T29] audit: type=1326 audit(1728622342.231:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7fc00000 [ 235.586435][ T29] audit: type=1326 audit(1728622342.261:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa18f57dff9 code=0x7fc00000 [ 235.586875][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.888'. [ 236.266433][ T29] audit: type=1326 audit(1728622342.941:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8426 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7fc00000 [ 236.889177][ T29] audit: type=1326 audit(1728622343.571:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 236.921568][ T29] audit: type=1326 audit(1728622343.591:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 236.969018][ T5339] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 237.141143][ T5339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.152634][ T5339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.160687][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 237.163932][ T5339] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 237.179587][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.197300][ T5339] usb 2-1: config 0 descriptor?? [ 237.319284][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 237.345260][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.372591][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.398031][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.421439][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.437277][ T9] usb 3-1: Product: syz [ 237.441818][ T9] usb 3-1: Manufacturer: syz [ 237.446449][ T9] usb 3-1: SerialNumber: syz [ 237.621403][ T5339] asus 0003:0B05:17E0.0011: unknown main item tag 0x0 [ 237.628254][ T5339] asus 0003:0B05:17E0.0011: unknown main item tag 0x0 [ 237.638161][ T5339] asus 0003:0B05:17E0.0011: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.1-1/input0 [ 237.650445][ T5339] asus 0003:0B05:17E0.0011: Asus input not registered [ 237.658971][ T29] audit: type=1326 audit(1728622344.331:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 237.681550][ T5339] asus 0003:0B05:17E0.0011: probe with driver asus failed with error -12 [ 237.716320][ T9] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.885886][ T9] usb 2-1: USB disconnect, device number 39 [ 237.913589][ T8508] loop7: detected capacity change from 0 to 16384 [ 237.981172][ T8508] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 237.998831][ T8508] buffer_io_error: 25 callbacks suppressed [ 238.002630][ T8508] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 238.134066][ T8515] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 238.159487][ T8515] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 238.168141][ T8515] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 238.183512][ T8515] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 238.193958][ T8515] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 238.207532][ T8515] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 238.218529][ T8515] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 238.230835][ T8515] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 238.243234][ T8515] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 238.253232][ T8515] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 239.174630][ T8523] netlink: 'syz.3.924': attribute type 21 has an invalid length. [ 239.191406][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.924'. [ 239.782312][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.792567][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.889612][ T5339] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 239.921111][ T9] usb 3-1: USB disconnect, device number 36 [ 239.940039][ T9] usblp1: removed [ 240.053677][ T5339] usb 2-1: config 0 has no interfaces? [ 240.061264][ T5339] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 240.070738][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.078954][ T5339] usb 2-1: Product: syz [ 240.083145][ T5339] usb 2-1: Manufacturer: syz [ 240.087726][ T5339] usb 2-1: SerialNumber: syz [ 240.094585][ T5339] usb 2-1: config 0 descriptor?? [ 240.278910][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 240.309875][ T5282] usb 2-1: USB disconnect, device number 40 [ 240.388398][ T8548] loop7: detected capacity change from 0 to 16384 [ 240.442157][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.453231][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.464421][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.473958][ T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 240.483289][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.495372][ T8549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.504504][ T9] usb 3-1: config 0 descriptor?? [ 240.525304][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.537809][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.554479][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.565923][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.577633][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.587407][ T8548] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.597241][ T8548] ldm_validate_partition_table(): Disk read failed. [ 240.612838][ T8548] loop7: unable to read partition table [ 240.619279][ T8552] xfrm0: entered promiscuous mode [ 240.627378][ T8552] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 240.636496][ T8548] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 240.935520][ T9] chicony 0003:04F2:1236.0012: unbalanced collection at end of report description [ 240.948701][ T9] chicony 0003:04F2:1236.0012: Chicony hid parse failed: -22 [ 240.956216][ T9] chicony 0003:04F2:1236.0012: probe with driver chicony failed with error -22 [ 241.136649][ T5282] usb 3-1: USB disconnect, device number 37 [ 241.298739][ T5284] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 241.381073][ T29] audit: type=1326 audit(1728622348.061:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 241.404347][ T29] audit: type=1326 audit(1728622348.071:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 241.420744][ T8573] loop7: detected capacity change from 0 to 16384 [ 241.450226][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 241.466948][ T5284] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=29.8c [ 241.476387][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.486239][ T5284] usb 2-1: Product: syz [ 241.491469][ T5284] usb 2-1: Manufacturer: syz [ 241.496528][ T5284] usb 2-1: SerialNumber: syz [ 241.504115][ T5284] usb 2-1: config 0 descriptor?? [ 241.511603][ T5284] gspca_main: se401-2.14.0 probing 047d:5003 [ 242.097958][ T8582] netem: change failed [ 242.112427][ T29] audit: type=1326 audit(1728622348.781:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e917dff9 code=0x7fc00000 [ 242.360361][ T5284] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 242.389934][ T5284] usb 2-1: device reset changed ep0 maxpacket size! [ 242.439288][ T5284] gspca_se401: read req failed req 0x06 error -19 [ 242.476942][ T5284] usb 2-1: USB disconnect, device number 41 [ 242.502946][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.951'. [ 242.628880][ T5284] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 242.711772][ T8603] use of bytesused == 0 is deprecated and will be removed in the future, [ 242.728678][ T29] audit: type=1326 audit(1728622349.411:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 242.737113][ T8603] use the actual size instead. [ 242.808677][ T29] audit: type=1326 audit(1728622349.411:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 242.812117][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 242.831520][ T29] audit: type=1326 audit(1728622349.411:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 242.870091][ T5284] usb 2-1: config 0 has no interfaces? [ 242.878051][ T5284] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 242.897366][ T29] audit: type=1326 audit(1728622349.411:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 242.920117][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.920145][ T5284] usb 2-1: Product: syz [ 242.920161][ T5284] usb 2-1: Manufacturer: syz [ 242.920177][ T5284] usb 2-1: SerialNumber: syz [ 242.944261][ T5284] usb 2-1: config 0 descriptor?? [ 243.018846][ T29] audit: type=1326 audit(1728622349.411:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 243.087605][ T29] audit: type=1326 audit(1728622349.411:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 243.138926][ T29] audit: type=1326 audit(1728622349.411:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8602 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6f17dff9 code=0x7ffc0000 [ 243.221963][ T5285] usb 2-1: USB disconnect, device number 42 [ 243.479647][ T5284] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 243.628754][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 243.635340][ T5284] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 243.643878][ T5284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.654274][ T5284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.664106][ T5284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.674137][ T5284] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.687206][ T5284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.697581][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.854051][ T8621] loop7: detected capacity change from 0 to 16384 [ 243.902956][ T8621] blk_print_req_error: 5 callbacks suppressed [ 243.903004][ T8621] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 243.919140][ T8621] buffer_io_error: 49 callbacks suppressed [ 243.919156][ T8621] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 243.921314][ T5284] usb 3-1: GET_CAPABILITIES returned 0 [ 243.939744][ T5284] usbtmc 3-1:16.0: can't read capabilities [ 243.981438][ T8622] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 243.991440][ T8622] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 244.000632][ T8622] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 244.009594][ T8622] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 244.018017][ T8622] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 244.026754][ T8622] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 244.035788][ T8622] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 244.049439][ T8622] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 244.066537][ T8622] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 244.075442][ T8622] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 244.141673][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.154594][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.752404][ T8630] tun0: tun_chr_ioctl cmd 1074025677 [ 244.758057][ T8630] tun0: linktype set to 0 [ 244.770677][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.964'. [ 244.820902][ T5234] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 245.058757][ T5284] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 245.232341][ T5284] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 245.242203][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.253196][ T5284] usb 2-1: Product: syz [ 245.257401][ T5284] usb 2-1: Manufacturer: syz [ 245.262632][ T5284] usb 2-1: SerialNumber: syz [ 245.269507][ T5284] usb 2-1: config 0 descriptor?? [ 245.279250][ T5284] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 245.790510][ T5284] gspca_vc032x: reg_r err -110 [ 245.813488][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.873220][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.917042][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.944546][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.980634][ T8654] fuse: Bad value for 'fd' [ 246.007445][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.025937][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.044532][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.066195][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.079106][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.084441][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.106778][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.113288][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.123893][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.157380][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.183730][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.208276][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.222851][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.253834][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.328868][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.383524][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.389201][ T5282] usb 3-1: USB disconnect, device number 38 [ 246.424838][ T5284] gspca_vc032x: I2c Bus Busy Wait 00 [ 246.477579][ T5284] gspca_vc032x: Unknown sensor... [ 246.528760][ T5284] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 246.701866][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 246.701884][ T29] audit: type=1326 audit(1728622353.381:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 246.730211][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.741039][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 246.799011][ T29] audit: type=1326 audit(1728622353.421:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 246.868357][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 246.917879][ T29] audit: type=1326 audit(1728622353.421:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 246.940651][ T29] audit: type=1326 audit(1728622353.421:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 246.962946][ T29] audit: type=1326 audit(1728622353.421:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 246.985440][ T29] audit: type=1326 audit(1728622353.421:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 247.008195][ T29] audit: type=1326 audit(1728622353.421:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 247.030998][ T29] audit: type=1326 audit(1728622353.421:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 247.053285][ T29] audit: type=1326 audit(1728622353.421:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 247.075575][ T29] audit: type=1326 audit(1728622353.421:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f7dff9 code=0x7ffc0000 [ 247.430936][ T5282] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 247.612053][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 247.647785][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.705908][ T5282] usb 3-1: config 0 descriptor?? [ 247.762127][ T5282] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 247.984165][ T9] usb 2-1: USB disconnect, device number 43 [ 248.127667][ T8699] sctp: [Deprecated]: syz.1.989 (pid 8699) Use of int in maxseg socket option. [ 248.127667][ T8699] Use struct sctp_assoc_value instead [ 248.515143][ T5282] gspca_stv06xx: vv6410 sensor detected [ 248.539646][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 248.622991][ T8719] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 248.645068][ T8719] macsec1: entered promiscuous mode [ 248.655596][ T8719] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 248.721591][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.745514][ T8724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1000'. [ 248.790209][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.905999][ T5282] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 248.915720][ T5282] usb 3-1: USB disconnect, device number 39 [ 249.367829][ T8731] veth0_vlan: entered allmulticast mode [ 249.432648][ T8731] veth0_vlan: left promiscuous mode [ 249.448346][ T8731] veth0_vlan: entered promiscuous mode [ 249.909047][ T5282] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 249.931887][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.942699][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.955475][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.969751][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.014633][ T8752] loop7: detected capacity change from 0 to 16384 [ 250.060497][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.071810][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.072221][ T8752] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 250.082260][ T5282] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 250.104299][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.113608][ T8752] buffer_io_error: 7 callbacks suppressed [ 250.113624][ T8752] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 250.131069][ T5282] usb 2-1: config 0 descriptor?? [ 250.210809][ T8753] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 250.220636][ T8753] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 250.230715][ T8753] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 250.239340][ T8753] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 250.247814][ T8753] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 250.258854][ T8753] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 250.269797][ T8753] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 250.283268][ T8753] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 250.292285][ T8753] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 250.301302][ T8753] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 250.568107][ T5282] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 250.957973][ T5282] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 250.967647][ T5282] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 250.983103][ T5282] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 251.004009][ T5282] usb 2-1: USB disconnect, device number 44 [ 251.020192][ T8763] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1015'. [ 251.878944][ T5285] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 252.073105][ T5285] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 252.088198][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.115096][ T5285] usb 2-1: Product: syz [ 252.138680][ T5285] usb 2-1: Manufacturer: syz [ 252.166450][ T5285] usb 2-1: SerialNumber: syz [ 252.210130][ T5285] usb 2-1: config 0 descriptor?? [ 252.365164][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.390435][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.422395][ T5282] usb 2-1: USB disconnect, device number 45 [ 252.573309][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.604309][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.761842][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.778818][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.842271][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.873002][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.885009][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 252.888876][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.901496][ T5285] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 252.914480][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.939513][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.947103][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.985552][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.038385][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.059704][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 253.071653][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.088874][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.098972][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.113108][ T5285] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.128780][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.142178][ T5285] usb 3-1: config 0 descriptor?? [ 253.280606][ T8793] loop7: detected capacity change from 0 to 16384 [ 253.326371][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1029'. [ 253.332748][ T8793] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.482050][ T8802] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 253.572299][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.600485][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.621210][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.640910][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.648359][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.656816][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.664461][ T5285] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 253.714631][ T5285] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 253.729898][ T5285] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 253.741700][ T5285] microsoft 0003:045E:07DA.0014: no inputs found [ 253.748080][ T5285] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 253.796684][ T35] bridge_slave_1: left allmulticast mode [ 253.826430][ T35] bridge_slave_1: left promiscuous mode [ 253.905018][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.072681][ T5285] usb 3-1: USB disconnect, device number 40 [ 254.146290][ T35] bridge_slave_0: left allmulticast mode [ 254.156658][ T35] bridge_slave_0: left promiscuous mode [ 254.176613][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.999924][ T5243] Bluetooth: hci4: command tx timeout [ 255.201648][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.213910][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.225521][ T35] bond0 (unregistering): Released all slaves [ 255.361872][ T35] tipc: Left network mode [ 255.556317][ T8786] chnl_net:caif_netlink_parms(): no params data found [ 255.848715][ T47] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 255.972057][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978817][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.072807][ T47] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.081636][ T35] hsr_slave_0: left promiscuous mode [ 256.097970][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.132375][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.142220][ T35] hsr_slave_1: left promiscuous mode [ 256.169619][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.189932][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.199978][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.210536][ T47] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.225019][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.244979][ T47] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.263684][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.291287][ T47] usb 3-1: Product: syz [ 256.295496][ T47] usb 3-1: Manufacturer: syz [ 256.357413][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 256.377786][ T35] veth1_macvtap: left promiscuous mode [ 256.383470][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 256.402002][ T35] veth0_macvtap: left promiscuous mode [ 256.417964][ T35] veth1_vlan: left promiscuous mode [ 256.424252][ T47] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 256.430463][ T35] veth0_vlan: left promiscuous mode [ 256.444360][ T47] cdc_wdm 3-1:1.0: Unknown control protocol [ 256.618231][ T5285] usb 3-1: USB disconnect, device number 41 [ 257.079530][ T5243] Bluetooth: hci4: command tx timeout [ 257.562676][ T35] team0 (unregistering): Port device team_slave_1 removed [ 257.613770][ T35] team0 (unregistering): Port device team_slave_0 removed [ 258.084741][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.101093][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.108526][ T8786] bridge_slave_0: entered allmulticast mode [ 258.139609][ T8786] bridge_slave_0: entered promiscuous mode [ 258.201628][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.228719][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.236012][ T8786] bridge_slave_1: entered allmulticast mode [ 258.265627][ T8786] bridge_slave_1: entered promiscuous mode [ 258.352939][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.397661][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 258.548176][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.628904][ T5282] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 258.682123][ T8899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1054'. [ 258.791161][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.815344][ T8786] team0: Port device team_slave_0 added [ 258.823338][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.861495][ T8786] team0: Port device team_slave_1 added [ 258.885652][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.928747][ T5282] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 258.963240][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.994933][ T8909] loop7: detected capacity change from 0 to 16384 [ 259.016273][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 259.031833][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.050965][ T8909] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.070973][ T5282] usb 2-1: config 0 descriptor?? [ 259.078288][ T8909] buffer_io_error: 24 callbacks suppressed [ 259.078306][ T8909] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 259.085941][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.155377][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.173662][ T5243] Bluetooth: hci4: command tx timeout [ 259.250274][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.274013][ T8913] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 259.288228][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.323134][ T8913] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 259.354049][ T8913] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 259.388335][ T8913] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 259.397250][ T8913] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 259.423385][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.504379][ T8913] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 259.527538][ T8913] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 259.545738][ T8913] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 259.583853][ T8913] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 259.595854][ T8913] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 259.605995][ T5282] zydacron 0003:13EC:0006.0015: unknown main item tag 0x0 [ 259.614224][ T5282] zydacron 0003:13EC:0006.0015: unknown main item tag 0x0 [ 259.622541][ T5282] zydacron 0003:13EC:0006.0015: unexpected long global item [ 259.633932][ T5282] zydacron 0003:13EC:0006.0015: parse failed [ 259.653263][ T5282] zydacron 0003:13EC:0006.0015: probe with driver zydacron failed with error -22 [ 259.748103][ T8786] hsr_slave_0: entered promiscuous mode [ 259.756111][ T8786] hsr_slave_1: entered promiscuous mode [ 259.824716][ T5282] usb 2-1: USB disconnect, device number 46 [ 260.279696][ T5282] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 260.470585][ T5282] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 260.495766][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.526563][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.574807][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.588460][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.606636][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.622758][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.664070][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.687133][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.699097][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.714375][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.749397][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.829121][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.855146][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.902677][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.913764][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.937171][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.949622][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.961241][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.977914][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.984330][ T8960] netlink: 'syz.1.1067': attribute type 46 has an invalid length. [ 260.987430][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.002035][ T8960] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1067'. [ 261.019749][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.045527][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.075917][ T5282] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.150442][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.177402][ T5282] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 261.188774][ T8963] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1068'. [ 261.201066][ T5282] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.226495][ T8786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.238903][ T5243] Bluetooth: hci4: command tx timeout [ 261.258129][ T8786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.272862][ T5282] usb 3-1: Product: syz [ 261.283501][ T8786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.299202][ T8786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.306625][ T5282] usb 3-1: Manufacturer: syz [ 261.350203][ T5282] usb 3-1: SerialNumber: syz [ 261.400959][ T5282] usb 3-1: config 0 descriptor?? [ 261.451832][ T5282] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 261.456615][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.521125][ T8786] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.533636][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.540792][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.589320][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.596502][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.633253][ T47] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 261.717372][ T5282] usb 3-1: USB disconnect, device number 42 [ 261.756894][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.791263][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 261.811484][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 261.843684][ T8786] veth0_vlan: entered promiscuous mode [ 261.848790][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 261.855903][ T8786] veth1_vlan: entered promiscuous mode [ 261.888976][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 261.911773][ T8786] veth0_macvtap: entered promiscuous mode [ 261.928891][ T47] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 261.930597][ T8786] veth1_macvtap: entered promiscuous mode [ 261.948525][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.957860][ T47] usb 2-1: Product: syz [ 261.968652][ T47] usb 2-1: Manufacturer: syz [ 261.974552][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.978133][ T47] usb 2-1: SerialNumber: syz [ 261.999450][ T47] usb 2-1: config 0 descriptor?? [ 262.009131][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.020799][ T47] usb 2-1: NFC: Unable to get FW version [ 262.036614][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.047835][ T47] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 262.056448][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.096065][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.125309][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.153940][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.178776][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.189076][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.199991][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.210472][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.222203][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.244210][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.284988][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.316738][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.338759][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.361133][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.373358][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.384964][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.397279][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.415843][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.426115][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.446215][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.457599][ T8786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.476522][ T8786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.510897][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.545408][ T8786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.559172][ T8786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.567911][ T8786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.587634][ T8786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.737794][ T5488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.745883][ T5488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.814746][ T5488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.840961][ T5488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.944268][ T9] usb 2-1: USB disconnect, device number 47 [ 263.046908][ T5282] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 263.479870][ T47] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 263.644912][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.683479][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.735608][ T47] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 263.766507][ T9027] fuse: Bad value for 'fd' [ 263.774042][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.814331][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 263.814348][ T29] audit: type=1326 audit(1728622370.491:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 263.832632][ T47] usb 3-1: config 0 descriptor?? [ 263.887305][ T29] audit: type=1326 audit(1728622370.491:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.004358][ T29] audit: type=1326 audit(1728622370.591:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.058291][ T29] audit: type=1326 audit(1728622370.591:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.151184][ T29] audit: type=1326 audit(1728622370.591:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.218653][ T29] audit: type=1326 audit(1728622370.601:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.241696][ T5339] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 264.253195][ T29] audit: type=1326 audit(1728622370.601:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.300704][ T9044] netlink: 'syz.3.1079': attribute type 21 has an invalid length. [ 264.311706][ T29] audit: type=1326 audit(1728622370.601:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.337725][ T9044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1079'. [ 264.356080][ T29] audit: type=1326 audit(1728622370.621:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.410395][ T29] audit: type=1326 audit(1728622370.971:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b917dff9 code=0x7ffc0000 [ 264.450592][ T5339] usb 2-1: no configurations [ 264.455474][ T5339] usb 2-1: can't read configurations, error -22 [ 264.560345][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.585611][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.594602][ T5339] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 264.749301][ T5339] usb 2-1: no configurations [ 264.755088][ T5339] usb 2-1: can't read configurations, error -22 [ 264.774763][ T5339] usb usb2-port1: attempt power cycle [ 265.131307][ T5339] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 265.173422][ T5339] usb 2-1: no configurations [ 265.178067][ T5339] usb 2-1: can't read configurations, error -22 [ 265.328833][ T5339] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 265.370133][ T5339] usb 2-1: no configurations [ 265.381255][ T5339] usb 2-1: can't read configurations, error -22 [ 265.404882][ T5339] usb usb2-port1: unable to enumerate USB device [ 266.074541][ T9096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1084'. [ 266.231880][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 266.237910][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.253006][ T47] usb 3-1: USB disconnect, device number 43 [ 266.511312][ T9106] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1087'. [ 266.521071][ T9106] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1087'. [ 266.938673][ T5243] Bluetooth: hci1: Malformed LE Event: 0x1b [ 267.330676][ T9122] loop7: detected capacity change from 0 to 16384 [ 267.370874][ T9125] syz_tun: entered promiscuous mode [ 267.402842][ T9125] batadv_slave_0: entered promiscuous mode [ 267.440083][ T9126] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 267.455750][ T9122] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.474299][ T9122] buffer_io_error: 7 callbacks suppressed [ 267.474317][ T9122] Buffer I/O error on dev loop7, logical block 1, async page read [ 267.474325][ T9126] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 267.522317][ T9122] Dev loop7: unable to read RDB block 8 [ 267.528096][ T9122] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.546502][ T9122] Buffer I/O error on dev loop7, logical block 3, async page read [ 267.593787][ T9122] loop7: unable to read partition table [ 267.612146][ T9122] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 267.669888][ T9125] syz_tun: left promiscuous mode [ 267.970971][ T9125] batadv_slave_0: left promiscuous mode [ 268.141653][ T9135] ip6gretap1: entered promiscuous mode [ 268.147277][ T9135] ip6gretap1: entered allmulticast mode [ 268.188964][ T9143] tun0: tun_chr_ioctl cmd 1074025677 [ 268.204831][ T9143] tun0: linktype set to 6 [ 268.333433][ T9145] loop7: detected capacity change from 0 to 16384 [ 268.400177][ T9147] fuse: Bad value for 'fd' [ 268.432152][ T9145] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.432237][ T9148] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 268.476758][ T9148] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 268.476771][ T9145] Buffer I/O error on dev loop7, logical block 3, async page read [ 268.476943][ T9145] loop7: unable to read partition table [ 268.503339][ T9145] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 268.622495][ T9148] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 268.641667][ T9148] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 268.666725][ T9148] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 268.696070][ T9148] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 268.733276][ T9148] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 268.794317][ T9148] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 268.805285][ T9156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1103'. [ 268.808834][ T5285] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 268.981183][ T5285] usb 3-1: no configurations [ 269.004010][ T5285] usb 3-1: can't read configurations, error -22 [ 269.109780][ T9162] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 269.135782][ T9162] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1105'. [ 269.168865][ T5285] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 269.370448][ T5285] usb 3-1: no configurations [ 269.375259][ T5285] usb 3-1: can't read configurations, error -22 [ 269.382084][ T5285] usb usb3-port1: attempt power cycle [ 269.538969][ T9168] loop7: detected capacity change from 0 to 16384 [ 269.599240][ T9171] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.608799][ T9168] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.638204][ T9168] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.669642][ T9168] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.699524][ T9168] ldm_validate_partition_table(): Disk read failed. [ 269.719026][ T5285] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 269.749783][ T5285] usb 3-1: no configurations [ 269.765259][ T9168] loop7: unable to read partition table [ 269.771212][ T5285] usb 3-1: can't read configurations, error -22 [ 269.787876][ T9168] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 269.885051][ T5282] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 269.897288][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.914170][ T5285] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 269.938408][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.953721][ T5285] usb 3-1: no configurations [ 269.959451][ T5285] usb 3-1: can't read configurations, error -22 [ 269.970777][ T5285] usb usb3-port1: unable to enumerate USB device [ 270.041333][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 270.056541][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 270.076961][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 270.093489][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 270.107452][ T5282] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 270.117163][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.126172][ T5282] usb 2-1: Product: syz [ 270.130970][ T5282] usb 2-1: Manufacturer: syz [ 270.135764][ T5282] usb 2-1: SerialNumber: syz [ 270.150606][ T5282] usb 2-1: config 0 descriptor?? [ 270.157615][ T5282] usb 2-1: NFC: Unable to get FW version [ 270.167163][ T5282] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 271.153927][ T5339] usb 2-1: USB disconnect, device number 52 [ 271.235337][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.476430][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.580718][ T9199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1121'. [ 271.751681][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.857115][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.870625][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.899550][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.914403][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.922515][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.932406][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.344773][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.427724][ T9205] chnl_net:caif_netlink_parms(): no params data found [ 272.473394][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 272.765961][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.789483][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.818871][ T9205] bridge_slave_0: entered allmulticast mode [ 272.827074][ T9205] bridge_slave_0: entered promiscuous mode [ 272.839824][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.848723][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.857408][ T9205] bridge_slave_1: entered allmulticast mode [ 272.865588][ T9205] bridge_slave_1: entered promiscuous mode [ 272.922125][ T9222] loop7: detected capacity change from 0 to 16384 [ 272.940047][ T12] bridge_slave_1: left allmulticast mode [ 272.956348][ T12] bridge_slave_1: left promiscuous mode [ 272.983743][ T9222] blk_print_req_error: 6 callbacks suppressed [ 272.983757][ T9222] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 273.012494][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.056750][ T9222] buffer_io_error: 35 callbacks suppressed [ 273.056770][ T9222] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 273.084371][ T12] bridge_slave_0: left allmulticast mode [ 273.104060][ T12] bridge_slave_0: left promiscuous mode [ 273.119929][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.151599][ T9225] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 273.180283][ T9225] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 273.195038][ T9225] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 273.239601][ T9225] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 273.264831][ T9225] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 273.279496][ T9225] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 273.303438][ T9225] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 273.315978][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 273.315991][ T29] audit: type=1326 audit(1728622379.991:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.358696][ T9225] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 273.381744][ T9225] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 273.401817][ T9225] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 273.419161][ T29] audit: type=1326 audit(1728622379.991:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.449454][ T29] audit: type=1326 audit(1728622379.991:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.505371][ T29] audit: type=1326 audit(1728622379.991:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.528040][ T29] audit: type=1326 audit(1728622379.991:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.560730][ T29] audit: type=1326 audit(1728622379.991:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.590612][ T29] audit: type=1326 audit(1728622379.991:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.632836][ T29] audit: type=1326 audit(1728622379.991:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.655963][ T29] audit: type=1326 audit(1728622379.991:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.679077][ T29] audit: type=1326 audit(1728622379.991:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18f57dff9 code=0x7ffc0000 [ 273.870895][ T12] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 274.044523][ T5234] Bluetooth: hci0: command tx timeout [ 274.144234][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.155987][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.167067][ T12] bond0 (unregistering): Released all slaves [ 274.219378][ T9205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.266184][ T9205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.344986][ T9250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1134'. [ 274.426609][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.452339][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.638319][ T9205] team0: Port device team_slave_0 added [ 274.858523][ T9205] team0: Port device team_slave_1 added [ 275.040762][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.099765][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.125767][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.231949][ T9205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.334040][ T12] hsr_slave_0: left promiscuous mode [ 275.356726][ T12] hsr_slave_1: left promiscuous mode [ 275.393195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.408766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.434652][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.458840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.498805][ T12] veth1_macvtap: left promiscuous mode [ 275.504439][ T12] veth0_macvtap: left promiscuous mode [ 275.536632][ T12] veth1_vlan: left promiscuous mode [ 275.574855][ T12] veth0_vlan: left promiscuous mode [ 275.846545][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 276.120335][ T5234] Bluetooth: hci0: command tx timeout [ 276.633468][ T12] team0 (unregistering): Port device team_slave_1 removed [ 276.688019][ T12] team0 (unregistering): Port device team_slave_0 removed [ 277.336706][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.344211][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.370110][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.382439][ T9205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.422686][ T9289] netlink: 'syz.3.1142': attribute type 21 has an invalid length. [ 277.449710][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1142'. [ 277.640648][ T9205] hsr_slave_0: entered promiscuous mode [ 277.671174][ T9205] hsr_slave_1: entered promiscuous mode [ 277.719198][ T30] INFO: task kworker/0:7:5288 blocked for more than 143 seconds. [ 277.727195][ T9205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.751009][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.788738][ T9205] Cannot create hsr debugfs directory [ 277.810305][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.921563][ T30] task:kworker/0:7 state:D stack:22448 pid:5288 tgid:5288 ppid:2 flags:0x00004000 [ 278.010924][ T30] Workqueue: usb_hub_wq hub_event [ 278.016020][ T30] Call Trace: [ 278.059811][ T30] [ 278.062811][ T30] __schedule+0x1895/0x4b30 [ 278.067369][ T30] ? __pfx___schedule+0x10/0x10 [ 278.074483][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.108671][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.113778][ T30] ? kick_pool+0x1bd/0x620 [ 278.118235][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.138633][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 278.143902][ T30] ? schedule+0x90/0x320 [ 278.148167][ T30] schedule+0x14b/0x320 [ 278.188722][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.194417][ T30] __mutex_lock+0x6a7/0xd70 [ 278.218855][ T5234] Bluetooth: hci0: command tx timeout [ 278.243363][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.248071][ T30] ? adu_disconnect+0xca/0x2b0 [ 278.268862][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.273993][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 278.328145][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 278.346053][ T30] adu_disconnect+0xca/0x2b0 [ 278.363073][ T30] usb_unbind_interface+0x25e/0x940 [ 278.368348][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 278.388088][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 278.396222][ T30] device_release_driver_internal+0x503/0x7c0 [ 278.402707][ T30] bus_remove_device+0x34f/0x420 [ 278.407733][ T30] device_del+0x57a/0x9b0 [ 278.415471][ T30] ? kobject_put+0x272/0x480 [ 278.420618][ T30] ? __pfx_device_del+0x10/0x10 [ 278.425501][ T30] ? kobject_put+0x44d/0x480 [ 278.430618][ T30] usb_disable_device+0x3bf/0x850 [ 278.437888][ T30] usb_disconnect+0x340/0x950 [ 278.443284][ T30] hub_event+0x1ebc/0x5150 [ 278.447764][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 278.454167][ T30] ? __pfx_hub_event+0x10/0x10 [ 278.460330][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 278.465403][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.471905][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.478282][ T30] ? process_scheduled_works+0x976/0x1850 [ 278.488764][ T30] process_scheduled_works+0xa63/0x1850 [ 278.494386][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.504804][ T30] ? assign_work+0x364/0x3d0 [ 278.515008][ T30] worker_thread+0x870/0xd30 [ 278.522279][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 278.528219][ T30] ? __kthread_parkme+0x169/0x1d0 [ 278.537471][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.544659][ T30] kthread+0x2f0/0x390 [ 278.549529][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.554716][ T30] ? __pfx_kthread+0x10/0x10 [ 278.559858][ T30] ret_from_fork+0x4b/0x80 [ 278.564446][ T30] ? __pfx_kthread+0x10/0x10 [ 278.569933][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.574750][ T30] [ 278.587215][ T30] [ 278.587215][ T30] Showing all locks held in the system: [ 278.595303][ T30] 5 locks held by kworker/u8:1/12: [ 278.619835][ T30] 1 lock held by khungtaskd/30: [ 278.624747][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 278.668907][ T30] 3 locks held by kworker/u8:5/945: [ 278.674199][ T30] #0: ffff88814b786948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.701961][ T30] #1: ffffc90003bafd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.724060][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 278.748682][ T30] 3 locks held by kworker/u8:8/3012: [ 278.754068][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.798837][ T30] #1: ffffc9000a09fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.818664][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 278.828009][ T30] 2 locks held by dhcpcd/4899: [ 278.847358][ T30] #0: ffffffff8fcb6bc8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 278.877675][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 278.918507][ T30] 2 locks held by getty/4985: [ 278.923518][ T30] #0: ffff88802e64f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 278.945433][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 278.957136][ T30] 5 locks held by kworker/1:4/5285: [ 278.965420][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 278.975650][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 278.987153][ T30] #2: ffff8880b872c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 278.997872][ T30] #3: ffffffff9a5e0d28 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 279.008776][ T30] #4: ffffffff9a6a4bf8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 279.020360][ T30] 6 locks held by kworker/0:7/5288: [ 279.025590][ T30] #0: ffff8881442c5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 279.037003][ T30] #1: ffffc900045afd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 279.048995][ T30] #2: ffff888144b51190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 279.057934][ T30] #3: ffff88805ef69190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 279.067261][ T30] #4: ffff88807c17a160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 279.078092][ T30] #5: ffffffff8f6856a8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 279.087810][ T30] 1 lock held by syz.3.132/6042: [ 279.092866][ T30] #0: ffffffff8f6856a8 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 279.101963][ T30] 3 locks held by syz.2.673/7871: [ 279.106992][ T30] #0: ffff88806b5f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 279.117095][ T30] #1: ffff88806b5f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 279.126859][ T30] #2: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 279.137291][ T30] 3 locks held by syz.4.913/8493: [ 279.142740][ T30] #0: ffff888011d48d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 279.152858][ T30] #1: ffff888011d48078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 279.163832][ T30] #2: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 279.174287][ T30] 1 lock held by syz-executor/9205: [ 279.179761][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.189539][ T30] 3 locks held by syz.3.1144/9293: [ 279.194676][ T30] #0: ffff88805ede8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 279.204791][ T30] #1: ffff88805ede8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 279.214562][ T30] #2: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 279.224705][ T30] 1 lock held by syz.1.1145/9302: [ 279.229808][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.240177][ T30] [ 279.248480][ T9302] netlink: 'syz.1.1145': attribute type 21 has an invalid length. [ 279.256811][ T30] ============================================= [ 279.256811][ T30] [ 279.284534][ T9302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1145'. [ 279.295449][ T30] NMI backtrace for cpu 1 [ 279.299823][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 279.310355][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.320440][ T30] Call Trace: [ 279.323730][ T30] [ 279.326655][ T30] dump_stack_lvl+0x241/0x360 [ 279.331335][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.336531][ T30] ? __pfx__printk+0x10/0x10 [ 279.341129][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 279.346066][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.351523][ T30] ? _printk+0xd5/0x120 [ 279.355680][ T30] ? __pfx__printk+0x10/0x10 [ 279.360272][ T30] ? __wake_up_klogd+0xcc/0x110 [ 279.365120][ T30] ? __pfx__printk+0x10/0x10 [ 279.369710][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 279.374736][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 279.380715][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 279.386702][ T30] watchdog+0xff4/0x1040 [ 279.390968][ T30] ? watchdog+0x1ea/0x1040 [ 279.395389][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.400065][ T30] kthread+0x2f0/0x390 [ 279.404127][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.408803][ T30] ? __pfx_kthread+0x10/0x10 [ 279.413389][ T30] ret_from_fork+0x4b/0x80 [ 279.417804][ T30] ? __pfx_kthread+0x10/0x10 [ 279.422387][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.427158][ T30] [ 279.430934][ T30] Sending NMI from CPU 1 to CPUs 0: [ 279.436197][ C0] NMI backtrace for cpu 0 [ 279.436212][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 279.436231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.436243][ C0] Workqueue: events_unbound toggle_allocation_gate [ 279.436273][ C0] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2ca0 [ 279.436293][ C0] Code: 89 e6 83 e6 01 31 ff e8 56 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 ef 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 ee 0b 00 eb e4 44 [ 279.436307][ C0] RSP: 0018:ffffc90000ab76e0 EFLAGS: 00000293 [ 279.436321][ C0] RAX: 0000000000000000 RBX: 1ffff110170e8919 RCX: ffff888020ee1e00 [ 279.436333][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 279.436343][ C0] RBP: ffffc90000ab78e0 R08: ffffffff8188f83a R09: 1ffffffff2858f00 [ 279.436356][ C0] R10: dffffc0000000000 R11: fffffbfff2858f01 R12: dffffc0000000000 [ 279.436367][ C0] R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001 [ 279.436379][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 279.436393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.436405][ C0] CR2: 0000000020046000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 279.436419][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.436429][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.436440][ C0] Call Trace: [ 279.436446][ C0] [ 279.436454][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 279.436476][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 279.436498][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.436515][ C0] ? nmi_handle+0x2a/0x5a0 [ 279.436538][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 279.436557][ C0] ? nmi_handle+0x14f/0x5a0 [ 279.436572][ C0] ? nmi_handle+0x2a/0x5a0 [ 279.436588][ C0] ? smp_call_function_many_cond+0x19f8/0x2ca0 [ 279.436604][ C0] ? default_do_nmi+0x63/0x160 [ 279.436622][ C0] ? exc_nmi+0x123/0x1f0 [ 279.436644][ C0] ? end_repeat_nmi+0xf/0x53 [ 279.436662][ C0] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 279.436680][ C0] ? smp_call_function_many_cond+0x19f8/0x2ca0 [ 279.436696][ C0] ? smp_call_function_many_cond+0x19f8/0x2ca0 [ 279.436713][ C0] ? smp_call_function_many_cond+0x19f8/0x2ca0 [ 279.436730][ C0] [ 279.436735][ C0] [ 279.436744][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 279.436765][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 279.436787][ C0] ? __pfx___text_poke+0x10/0x10 [ 279.436803][ C0] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 279.436825][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 279.436842][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 279.436859][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 279.436877][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 279.436893][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 279.436911][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 279.436927][ C0] text_poke_bp_batch+0x9ef/0xb30 [ 279.436949][ C0] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 279.436968][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 279.436989][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 279.437011][ C0] ? process_scheduled_works+0x976/0x1850 [ 279.437031][ C0] text_poke_finish+0x30/0x50 [ 279.437047][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 279.437065][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 279.437086][ C0] static_key_enable+0x1a/0x20 [ 279.437104][ C0] toggle_allocation_gate+0xbc/0x260 [ 279.437121][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 279.437138][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.437165][ C0] process_scheduled_works+0xa63/0x1850 [ 279.437195][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.437217][ C0] ? assign_work+0x364/0x3d0 [ 279.437238][ C0] worker_thread+0x870/0xd30 [ 279.437259][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.437281][ C0] ? __kthread_parkme+0x169/0x1d0 [ 279.437302][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.437320][ C0] kthread+0x2f0/0x390 [ 279.437335][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.437352][ C0] ? __pfx_kthread+0x10/0x10 [ 279.437367][ C0] ret_from_fork+0x4b/0x80 [ 279.437386][ C0] ? __pfx_kthread+0x10/0x10 [ 279.437400][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.437426][ C0] [ 279.862062][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.890058][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 279.897049][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 279.907587][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.917676][ T30] Call Trace: [ 279.920988][ T30] [ 279.923966][ T30] dump_stack_lvl+0x241/0x360 [ 279.928661][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.933870][ T30] ? __pfx__printk+0x10/0x10 [ 279.938458][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.944530][ T30] ? vscnprintf+0x5d/0x90 [ 279.948859][ T30] panic+0x349/0x880 [ 279.952754][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 279.958907][ T30] ? __pfx_panic+0x10/0x10 [ 279.963326][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 279.968691][ T30] ? __irq_work_queue_local+0x137/0x410 [ 279.974235][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 279.979601][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 279.985751][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 279.991901][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 279.998061][ T30] watchdog+0x1033/0x1040 [ 280.002393][ T30] ? watchdog+0x1ea/0x1040 [ 280.006897][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.011578][ T30] kthread+0x2f0/0x390 [ 280.015648][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.020325][ T30] ? __pfx_kthread+0x10/0x10 [ 280.024905][ T30] ret_from_fork+0x4b/0x80 [ 280.029323][ T30] ? __pfx_kthread+0x10/0x10 [ 280.033907][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.038687][ T30] [ 280.041838][ T30] Kernel Offset: disabled [ 280.046151][ T30] Rebooting in 86400 seconds..