last executing test programs: 12m33.713702313s ago: executing program 3 (id=992): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0}) 12m33.526358565s ago: executing program 3 (id=996): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 12m33.244312595s ago: executing program 3 (id=1001): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) readv(r0, &(0x7f0000004840)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) 12m33.034251905s ago: executing program 3 (id=1006): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe910) 12m32.807552151s ago: executing program 3 (id=1011): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) 12m32.54331404s ago: executing program 3 (id=1016): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffc, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 12m17.453313453s ago: executing program 32 (id=1016): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xfffffffffffffffc, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 7m24.654157706s ago: executing program 4 (id=6002): syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0}) 7m23.217386983s ago: executing program 4 (id=6016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 7m22.879946883s ago: executing program 4 (id=6019): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4f22, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) 7m22.668557965s ago: executing program 4 (id=6023): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 7m22.451349076s ago: executing program 4 (id=6028): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) 7m22.367270379s ago: executing program 4 (id=6031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 7m7.242924124s ago: executing program 33 (id=6031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 6m52.010022164s ago: executing program 1 (id=6345): io_setup(0x6, &(0x7f0000001380)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 6m51.661398883s ago: executing program 1 (id=6351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000001cc0)=0xb1e0, 0x4) 6m51.023338332s ago: executing program 1 (id=6358): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x200}}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 6m50.818847473s ago: executing program 1 (id=6362): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x80, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="ae09f9d6e445", 0x0, 0xa, 0x10021, 0xffffffffffffffff, 0x0}) 6m50.522485764s ago: executing program 1 (id=6368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00') 6m50.317708776s ago: executing program 1 (id=6371): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000899000/0x3000)=nil, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00003b7000/0x2000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000605000/0x1000)=nil, &(0x7f00009d9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00003d9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 6m35.153426794s ago: executing program 34 (id=6371): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000899000/0x3000)=nil, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00003b7000/0x2000)=nil, &(0x7f0000273000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000605000/0x1000)=nil, &(0x7f00009d9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00003d9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 4m55.81675788s ago: executing program 2 (id=7738): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511a", 0x5}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 4m55.58109621s ago: executing program 2 (id=7741): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\xa5%\'\\}(,\x00', &(0x7f0000000180)='\'\x00', 0x0) 4m55.232468396s ago: executing program 2 (id=7745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0x1, 0xffffffff, 0x4, 0xfffffff7, 0x4bdf}, {0x7, 0x401, 0x0, 0x6, 0x5c3346c2}, {0xd, 0x4, 0x2, 0xb39, 0x6}]}) 4m54.80266717s ago: executing program 2 (id=7752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 4m54.503367409s ago: executing program 2 (id=7755): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="15c486dd", 0x4, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 4m53.566684701s ago: executing program 2 (id=7767): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=r1, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x24044843}, 0x0) 4m53.243465003s ago: executing program 35 (id=7767): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=r1, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x24044843}, 0x0) 2m42.321070997s ago: executing program 6 (id=9219): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2m41.809068739s ago: executing program 6 (id=9223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) 2m41.316361063s ago: executing program 6 (id=9230): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2m39.261876228s ago: executing program 6 (id=9248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38) 2m39.060997084s ago: executing program 6 (id=9250): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setreuid(0xee01, 0xee01) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8110, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m38.687818973s ago: executing program 6 (id=9252): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000001700)=""/4101) 2m23.615258943s ago: executing program 36 (id=9252): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000001700)=""/4101) 7.348060191s ago: executing program 8 (id=10554): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 5.955781761s ago: executing program 7 (id=10563): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @loopback}}}}}, 0x0) 5.702653224s ago: executing program 7 (id=10564): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 5.487717707s ago: executing program 8 (id=10567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2b25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x48100) 5.298324668s ago: executing program 7 (id=10568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 4.927301144s ago: executing program 8 (id=10570): inotify_init1(0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) sendfile(r1, r0, 0x0, 0x558410e8) 4.617022909s ago: executing program 7 (id=10571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}, {&(0x7f00000012c0)="7f7827835a17650d2182156c2a0a96f10d204b8961fea8381333fa7dbdd66ba8f899351d75d52eb3fb39cc838e11cfafb308379ec5047410d6e1870ba4b15bde18d67586624dea6340ca1dd672d6cf2d6f8adf45ff05a77831a854c6947f493d2d3baa32e3e4740076894cd427293027896097d1975490ad0ea1a508ec2ed214699c84ffffd0200cbeb854ce789efa606aea06e9d9a5b081b988d66b48c770a13c4d4c9dc7352eef5d38fdadafebe2983ec0aa0eee24acd5a51640de462b830566f45af46b0d92ef326ccb87fda09b9a0b264de6e363b2b6b949a23b50240b6f0ef1ba1c351660860e88bbecd766c925c875704b541d8ab528939dfaf221b7b49efb514c7b470ba4cf316520e2358a6435c9f60a7185d553a4e057f7e46a8cc3492aac696db1b78769d7fe4127700e316f59096f7381cec05f40cf7d41bc0b7535fb5a3808adcdfe41fdde26b91acb3ee8328f6cc335a4c0482c12181be134c832d537a185af3e9766436c40d86a67642e42313060ee31c1c49d07ae30d0b4ab3556861e4c12e05f3fcd25f1ddaea81d2003acda780af3620aa8eda0ba48de4399639fb9f93cd4204d46c84a517a97d79fb39abe05ae29a859956b73cb578ec28c877f50229e6719d97014dd2b4d96ce2e710b97e9068e0e2372fcf3979bd0c7df1d69542dfd4837f2b735967af14e8e950e46fb4f8b4b0c900003e9005366c09496b808a30e293cd084b561156c45f3be9002b78d613c4907d422f1cbe4682494294a86b20f266ac72a79e6996737d2f6324581cb1b9e7529e56ee8a87e4578e2b08d80e6903206ce5d8ef3c4679bd2d48aef11f731cacf9480676b7b37ec4bb710b5e9832943c5435e983d23b1d242e97d5e999f2de751ca61c12916431260fe6360a6058ea12dfb912096bfff7f67b46df54b22c122b641c6d9caa3398cc1f395890f27626e332c277f5f768a764ece78a99fbea1b406c8a20d5dca9bb7c41249e57da279ae9f31a56a929cfb7f1823245916a4b24b75ba7f78010cfe61006ab271", 0x2e3}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1}, 0x40002160) 3.984746724s ago: executing program 7 (id=10574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) 3.336731037s ago: executing program 5 (id=10577): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x4fed0) 2.924953938s ago: executing program 5 (id=10578): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='maps\x00') r1 = fanotify_init(0x20, 0x101000) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000840)=""/248, 0xf8}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.919045007s ago: executing program 8 (id=10579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180)) 2.708177743s ago: executing program 8 (id=10580): r0 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 2.576557662s ago: executing program 5 (id=10581): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000900), 0xffffffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000000), 0x1000, r1, 0x0, 0x11000000}, 0x38) 2.539498555s ago: executing program 7 (id=10582): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 2.400220771s ago: executing program 0 (id=10583): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.588243255s ago: executing program 5 (id=10584): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 1.363884626s ago: executing program 8 (id=10587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x400, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.278415265s ago: executing program 0 (id=10588): r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c06000010000d440000fdffffffff0efffe0200f43f4e54311eb33eb77d8f633fe6178ed1def897957c0f00cf79b8508f2329836cf46ade3b8d488453148b0c462e92d4963619144d62f79cf0d67283fd68852f74016c38f15638122399cc39cc2ce7d595b12e91b8873880b14713b7aea861b31b2e02d3c9e8df1c4a7eed2bb1f3ce20848dce9597710ee1bcc5f0b61973ac617386924884"], 0x3c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) 1.09271137s ago: executing program 5 (id=10589): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r0, 0xe) 1.013145125s ago: executing program 0 (id=10590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, r1}, 0xc) 800.438238ms ago: executing program 0 (id=10593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 740.64069ms ago: executing program 9 (id=10594): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) 635.29874ms ago: executing program 9 (id=10595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf68144615", 0x4e}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c4166", 0x92}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 575.203035ms ago: executing program 0 (id=10596): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="bbb29494ea06f471fffdeed30eb43f05d0f66416cc313722b1c6d907", 0x1c, 0x3b00, 0x0, 0x0) 530.989013ms ago: executing program 9 (id=10597): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) 372.431076ms ago: executing program 9 (id=10598): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 349.148234ms ago: executing program 0 (id=10599): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x9000) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x8114c280, 0x0, 0x0, 0x0, 0x0, 0x0) 205.858039ms ago: executing program 9 (id=10600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d00)={0x10, 0x0, &(0x7f0000000b80)=[@request_death], 0x51, 0x0, &(0x7f0000000c00)="98f5509db64c5b7a7ff247ee01abaf427c86ece8b51d5cb98007a78c42491c7735da369b8958e275ad8a371468b18adc0398432e92b57811c98b4d9caa31065c1ee0065aef9e9ab4c31816dc7ed0a14844"}) 43.315847ms ago: executing program 5 (id=10601): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x84 ) failed (rc=-5) [ 759.802393][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 760.101601][ T1949] netlink: 660 bytes leftover after parsing attributes in process `syz.0.9235'. [ 761.596785][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9247'. [ 761.772261][T25001] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 761.922259][T25001] usb 1-1: Using ep0 maxpacket: 32 [ 761.925789][T25001] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.925825][T25001] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.933516][T25001] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 761.933548][T25001] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 761.933570][T25001] usb 1-1: Product: syz [ 761.933586][T25001] usb 1-1: Manufacturer: syz [ 762.049500][T25001] hub 1-1:4.0: USB hub found [ 762.289452][T25001] hub 1-1:4.0: 2 ports detected [ 762.697325][T25001] hub 1-1:4.0: set hub depth failed [ 762.731249][T25001] usb 1-1: USB disconnect, device number 25 [ 764.489412][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 764.489438][ T36] audit: type=1804 audit(1773996646.473:537): pid=2078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.9271" name="/newroot/1820/file0" dev="tmpfs" ino=9207 res=1 errno=0 [ 764.509719][ T36] audit: type=1804 audit(1773996646.493:538): pid=2078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.9271" name="/newroot/1820/file0" dev="tmpfs" ino=9207 res=1 errno=0 [ 764.651683][ T2081] loop2: detected capacity change from 0 to 7 [ 764.669293][ T2081] Dev loop2: unable to read RDB block 7 [ 764.669342][ T2081] loop2: unable to read partition table [ 764.669550][ T2081] loop2: partition table beyond EOD, truncated [ 764.669596][ T2081] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 765.210506][ T36] audit: type=1326 audit(1773996647.203:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2099 comm="syz.0.9279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd9fcac799 code=0x0 [ 766.211999][ T2150] netlink: 'syz.7.9292': attribute type 10 has an invalid length. [ 766.230054][ T2150] team0: Port device dummy0 added [ 766.250008][ T2150] netlink: 'syz.7.9292': attribute type 10 has an invalid length. [ 766.298181][ T2150] team0: Port device dummy0 removed [ 766.315758][ T2150] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 766.595005][ T2166] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.9297'. [ 766.672575][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 766.822982][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 766.825264][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 766.825312][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 766.825358][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 766.825387][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 766.825417][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 766.828103][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 766.828122][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 766.828135][ T10] usb 1-1: Product: syz [ 766.828143][ T10] usb 1-1: Manufacturer: syz [ 766.828152][ T10] usb 1-1: SerialNumber: syz [ 766.836735][ T10] usb 1-1: config 0 descriptor?? [ 766.854434][ T2175] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9300'. [ 766.916613][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 766.936650][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 767.071816][ T2188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9302'. [ 767.071842][ T2188] netlink: 'syz.5.9302': attribute type 7 has an invalid length. [ 767.071851][ T2188] netlink: 'syz.5.9302': attribute type 8 has an invalid length. [ 767.071859][ T2188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9302'. [ 767.094266][ T2188] erspan0: entered promiscuous mode [ 767.143127][ T2188] erspan0: left promiscuous mode [ 767.229846][ T6011] usb 1-1: USB disconnect, device number 26 [ 767.229916][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 767.234283][ T2155] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 767.252248][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 767.268667][ T6011] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 767.432655][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 767.438892][ T10] usb 9-1: config 2 has an invalid interface number: 88 but max is 0 [ 767.438923][ T10] usb 9-1: config 2 has no interface number 0 [ 767.438974][ T10] usb 9-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 767.439002][ T10] usb 9-1: config 2 interface 88 has no altsetting 0 [ 767.442751][ T10] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 767.442780][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.442801][ T10] usb 9-1: Product: syz [ 767.442815][ T10] usb 9-1: Manufacturer: syz [ 767.442828][ T10] usb 9-1: SerialNumber: syz [ 767.474621][ T2183] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 767.693302][ T2183] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 767.898161][ T10] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 767.898486][ T10] asix 9-1:2.88: probe with driver asix failed with error -71 [ 767.929738][ T10] usb 9-1: USB disconnect, device number 11 [ 769.652824][ T2294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.366087][ T5113] Bluetooth: hci2: link tx timeout [ 774.366411][ T5113] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 774.410039][ T2462] netlink: 'syz.7.9384': attribute type 6 has an invalid length. [ 774.544408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d557000: rx timeout, send abort [ 774.549663][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803d557000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 774.865182][ T2483] 9pnet: p9_errstr2errno: server reported unknown error [ 775.272617][ T6011] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 775.437455][ T6011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.438303][ T6011] usb 6-1: not running at top speed; connect to a high speed hub [ 775.439847][ T6011] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 775.456479][ T6011] usb 6-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 775.456509][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.456529][ T6011] usb 6-1: Product: syz [ 775.456543][ T6011] usb 6-1: Manufacturer: syz [ 775.456557][ T6011] usb 6-1: SerialNumber: syz [ 775.501520][ T2496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 775.501827][ T2496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 775.793636][ T6011] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.793703][ T6011] usb 6-1: MIDIStreaming interface descriptor not found [ 775.793722][ T6011] usb 6-1: too many endpoints [ 775.841425][ T2540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9405'. [ 776.050421][ T6011] usb 6-1: USB disconnect, device number 57 [ 776.320468][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.442577][ T1841] Bluetooth: hci2: command 0x0406 tx timeout [ 777.353206][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9420'. [ 777.500051][ T1841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.513823][ T1841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 777.530681][ T1841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 777.531959][ T1841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 777.534174][ T1841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 777.762722][ T2643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9424'. [ 778.246738][ T2657] loop8: detected capacity change from 0 to 8 [ 778.255812][ T1849] Dev loop8: unable to read RDB block 8 [ 778.255857][ T1849] loop8: unable to read partition table [ 778.256134][ T1849] loop8: partition table beyond EOD, truncated [ 778.282675][ T2657] Dev loop8: unable to read RDB block 8 [ 778.282707][ T2657] loop8: unable to read partition table [ 778.282859][ T2657] loop8: partition table beyond EOD, truncated [ 778.282872][ T2657] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 778.362323][ T1841] Bluetooth: hci3: command 0x1003 tx timeout [ 778.362391][ T5113] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 779.171451][ T2623] chnl_net:caif_netlink_parms(): no params data found [ 779.642234][ T5113] Bluetooth: hci6: command tx timeout [ 779.912574][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 780.037066][ T2623] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.037143][ T2623] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.037281][ T2623] bridge_slave_0: entered allmulticast mode [ 780.038901][ T2623] bridge_slave_0: entered promiscuous mode [ 780.041027][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.041105][ T2623] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.041220][ T2623] bridge_slave_1: entered allmulticast mode [ 780.058010][ T2623] bridge_slave_1: entered promiscuous mode [ 780.072566][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 780.092695][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 780.092725][ T10] usb 9-1: config 0 has no interface number 0 [ 780.121202][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 780.121245][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.121268][ T10] usb 9-1: Product: syz [ 780.121283][ T10] usb 9-1: Manufacturer: syz [ 780.121299][ T10] usb 9-1: SerialNumber: syz [ 780.162572][ T102] block nbd1: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 90 seconds [ 780.162618][ T102] block nbd1: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 780.162638][ T102] block nbd1: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 90 seconds [ 780.162655][ T102] block nbd1: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 90 seconds [ 780.361792][ T10] usb 9-1: config 0 descriptor?? [ 780.385330][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 780.422714][ T2872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.563355][ T2623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.603564][ T2623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.641309][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 780.700180][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 780.781029][ T2924] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9448'. [ 781.015523][ T43] usb 9-1: USB disconnect, device number 12 [ 781.016246][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 781.047512][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 781.182996][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 781.184192][ T43] quatech2 9-1:0.51: device disconnected [ 781.193153][ T2623] team0: Port device team_slave_0 added [ 781.252777][ T2623] team0: Port device team_slave_1 added [ 781.351446][ T2974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9452'. [ 781.435970][ T2974] vlan0: entered allmulticast mode [ 781.435994][ T2974] bridge_slave_0: entered allmulticast mode [ 781.722301][ T5113] Bluetooth: hci6: command tx timeout [ 781.817927][ T2623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.817948][ T2623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.817978][ T2623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.855598][ T3015] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9456'. [ 782.357599][ T2623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.357613][ T2623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.357631][ T2623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.358335][ T3044] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 782.690888][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9465'. [ 782.690914][ T3061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9465'. [ 782.837964][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9465'. [ 782.837990][ T3061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9465'. [ 783.067239][ T3082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9467'. [ 783.297056][ T2623] hsr_slave_0: entered promiscuous mode [ 783.309932][ T2623] hsr_slave_1: entered promiscuous mode [ 783.587347][ T3095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9469'. [ 783.809050][ T5113] Bluetooth: hci6: command tx timeout [ 785.003216][ T3205] vcan0: tx drop: invalid sa for name 0x0000000000002000 [ 785.124348][ T2623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 785.142360][ T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 785.193744][ T2623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 785.237503][ T2623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 785.302310][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 785.304709][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.304742][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.304785][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 785.304811][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.324983][ T43] usb 6-1: config 0 descriptor?? [ 785.345062][ T43] hub 6-1:0.0: USB hub found [ 785.375724][ T2623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 785.592404][ T43] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 785.816272][ T2623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.857676][ T2623] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.882645][ T5113] Bluetooth: hci6: command tx timeout [ 785.931146][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.931755][ T7290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.997567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.997716][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.023807][ T43] hid_parser_main: 5 callbacks suppressed [ 786.023825][ T43] hid-generic 0003:046D:C31C.0034: unknown main item tag 0x0 [ 786.092287][ T43] hid-generic 0003:046D:C31C.0034: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 786.218225][ T3254] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.9490'. [ 786.553899][ T5783] usb 6-1: USB disconnect, device number 58 [ 787.039731][ T2623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.775586][ T2623] veth0_vlan: entered promiscuous mode [ 787.794901][ T2623] veth1_vlan: entered promiscuous mode [ 787.878821][ T2623] veth0_macvtap: entered promiscuous mode [ 787.898172][ T2623] veth1_macvtap: entered promiscuous mode [ 787.929891][ T2623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.979418][ T2623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.041622][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.060176][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.067450][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.089106][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.513579][T19441] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 788.563375][ T3340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 788.667736][T19441] usb 1-1: Using ep0 maxpacket: 8 [ 788.671536][T19441] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 788.671574][T19441] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 788.671603][T19441] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.671628][T19441] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.671676][T19441] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 788.671702][T19441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.910920][T19441] usb 1-1: GET_CAPABILITIES returned 0 [ 788.910989][T19441] usbtmc 1-1:16.0: can't read capabilities [ 789.131565][ T10] usb 1-1: USB disconnect, device number 27 [ 789.340328][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.340353][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.573678][ T7290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.573702][ T7290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.718702][ T3453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.059794][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9541'. [ 791.059818][ T3472] netlink: 252 bytes leftover after parsing attributes in process `syz.5.9541'. [ 791.059833][ T3472] netlink: 440 bytes leftover after parsing attributes in process `syz.5.9541'. [ 791.059854][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9541'. [ 791.564192][ T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 791.676461][ T3495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9550'. [ 791.724909][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 791.739386][ T43] usb 6-1: config 0 has no interfaces? [ 791.746399][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.746430][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.746449][ T43] usb 6-1: Product: syz [ 791.746462][ T43] usb 6-1: Manufacturer: syz [ 791.746477][ T43] usb 6-1: SerialNumber: syz [ 791.774259][ T43] usb 6-1: config 0 descriptor?? [ 791.925918][ T3505] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.008532][ T43] usb 6-1: USB disconnect, device number 59 [ 792.520274][ T3532] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9561'. [ 793.726762][ T3586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 793.726794][ T3586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.727161][ T3586] vhci_hcd vhci_hcd.0: Device attached [ 793.767384][ T3586] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 793.767414][ T3586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.767512][ T3586] vhci_hcd vhci_hcd.0: Device attached [ 793.811520][ T3586] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 793.811554][ T3586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.811609][ T3586] vhci_hcd vhci_hcd.0: Device attached [ 793.817767][ T3586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 793.833529][ T3586] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 793.833560][ T3586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 793.833711][ T3586] vhci_hcd vhci_hcd.0: Device attached [ 793.855327][ T3590] vhci_hcd: connection closed [ 793.855642][ T3593] vhci_hcd: connection closed [ 793.863368][ T3587] vhci_hcd: connection closed [ 793.900578][ T3596] vhci_hcd: connection closed [ 793.922534][ T7289] vhci_hcd vhci_hcd.0: stop threads [ 793.922564][ T7289] vhci_hcd vhci_hcd.0: release socket [ 793.922648][ T7289] vhci_hcd vhci_hcd.0: disconnect device [ 793.924343][ T7289] vhci_hcd vhci_hcd.0: stop threads [ 793.924357][ T7289] vhci_hcd vhci_hcd.0: release socket [ 793.924400][ T7289] vhci_hcd vhci_hcd.0: disconnect device [ 793.934596][ T7289] vhci_hcd vhci_hcd.0: stop threads [ 793.934616][ T7289] vhci_hcd vhci_hcd.0: release socket [ 793.934693][ T7289] vhci_hcd vhci_hcd.0: disconnect device [ 793.941889][ T7289] vhci_hcd vhci_hcd.0: stop threads [ 793.941908][ T7289] vhci_hcd vhci_hcd.0: release socket [ 793.941953][ T7289] vhci_hcd vhci_hcd.0: disconnect device [ 793.962645][ T5884] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 793.962716][ T5884] usb 33-1: enqueue for inactive port 0 [ 794.032520][ T5884] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 794.352980][T25001] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 794.505593][T25001] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.529417][T25001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.529454][T25001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.529476][T25001] usb 6-1: Product: syz [ 794.529492][T25001] usb 6-1: Manufacturer: syz [ 794.529508][T25001] usb 6-1: SerialNumber: syz [ 794.573123][T25001] cdc_ncm 6-1:1.0: skipping garbage [ 795.142319][T19441] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 795.307099][T19441] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 795.307246][T19441] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 795.307278][T19441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 795.307307][T19441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 795.307397][T19441] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.307446][T19441] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.307473][T19441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.364312][T19441] usb 9-1: config 0 descriptor?? [ 795.369689][ T3627] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 795.596027][T25001] cdc_ncm 6-1:1.0: bind() failure [ 795.709877][ T3650] input: syz1 as /devices/virtual/input/input55 [ 795.861541][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861582][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861609][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861636][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861663][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861690][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861716][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861743][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861771][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.861798][T19441] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 795.862308][T25001] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 795.863184][T25001] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 795.885634][T25001] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 796.072374][T19441] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 796.129709][T25001] usb 6-1: USB disconnect, device number 60 [ 796.268167][ T10] usb 9-1: USB disconnect, device number 13 [ 796.423352][ T3671] fido_id[3671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 796.669186][ T3699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.940821][ T3706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 797.800511][ T3750] loop7: detected capacity change from 0 to 7 [ 797.801561][ T3750] Dev loop7: unable to read RDB block 7 [ 797.801605][ T3750] loop7: unable to read partition table [ 797.801833][ T3750] loop7: partition table beyond EOD, truncated [ 797.801856][ T3750] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 797.856198][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 797.950173][ T36] audit: type=1326 audit(1773996679.943:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3746 comm="syz.8.9609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3575afc799 code=0x0 [ 798.912352][ T5803] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 799.062231][ T5803] usb 9-1: Using ep0 maxpacket: 32 [ 799.064554][ T5803] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 799.064586][ T5803] usb 9-1: config 0 has no interface number 0 [ 799.067419][ T5803] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 799.067451][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.067473][ T5803] usb 9-1: Product: syz [ 799.067489][ T5803] usb 9-1: Manufacturer: syz [ 799.067506][ T5803] usb 9-1: SerialNumber: syz [ 799.080332][ T5803] usb 9-1: config 0 descriptor?? [ 799.943184][ T5803] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 800.151636][ T5803] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 800.151975][ T5803] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 800.170921][ T5803] usb 9-1: USB disconnect, device number 14 [ 800.550790][ T3844] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9635'. [ 800.550942][ T3844] openvswitch: netlink: Message has 3 unknown bytes. [ 800.819127][ T3857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.199473][ T3880] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9646'. [ 801.677248][ T3889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input56 [ 801.982400][ T5803] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 802.147936][ T5803] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 802.147972][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.147996][ T5803] usb 6-1: Product: syz [ 802.148012][ T5803] usb 6-1: Manufacturer: syz [ 802.148029][ T5803] usb 6-1: SerialNumber: syz [ 802.165864][ T5803] usb 6-1: config 0 descriptor?? [ 802.214078][ T5803] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 802.981815][ T5803] gspca_stk1135: reg_w 0x5 err -71 [ 802.982859][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.982876][ T5803] gspca_stk1135: Sensor write failed [ 802.982903][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.982912][ T5803] gspca_stk1135: Sensor write failed [ 802.982938][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.982948][ T5803] gspca_stk1135: Sensor read failed [ 802.982974][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.982983][ T5803] gspca_stk1135: Sensor read failed [ 802.982990][ T5803] gspca_stk1135: Detected sensor type unknown (0x0) [ 802.983021][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.983031][ T5803] gspca_stk1135: Sensor read failed [ 802.983064][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.983073][ T5803] gspca_stk1135: Sensor read failed [ 802.983099][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.983108][ T5803] gspca_stk1135: Sensor write failed [ 802.983132][ T5803] gspca_stk1135: serial bus timeout: status=0x00 [ 802.983142][ T5803] gspca_stk1135: Sensor write failed [ 802.983230][ T5803] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 802.986346][ T5803] usb 6-1: USB disconnect, device number 61 [ 803.968982][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9673'. [ 806.452256][ T43] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 806.607228][ T43] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.607260][ T43] usb 10-1: config 0 has no interface number 0 [ 806.607310][ T43] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 806.607340][ T43] usb 10-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.607364][ T43] usb 10-1: config 0 interface 1 has no altsetting 0 [ 806.607401][ T43] usb 10-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 806.607425][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.624628][ T43] usb 10-1: config 0 descriptor?? [ 807.260142][ T43] uclogic 0003:2179:0053.0036: pen parameters not found [ 807.260173][ T43] uclogic 0003:2179:0053.0036: interface is invalid, ignoring [ 807.362252][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 807.476524][ T5783] usb 10-1: USB disconnect, device number 2 [ 807.563771][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 807.568783][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 807.568814][ T10] usb 6-1: config 0 has no interface number 0 [ 807.568874][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.568906][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 807.614056][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 807.614093][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.614115][ T10] usb 6-1: Product: syz [ 807.614132][ T10] usb 6-1: Manufacturer: syz [ 807.614149][ T10] usb 6-1: SerialNumber: syz [ 807.620276][ T10] usb 6-1: config 0 descriptor?? [ 808.241604][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 808.256232][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input57 [ 808.540030][ T43] usb 6-1: USB disconnect, device number 62 [ 808.721416][ T4127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.834484][ T43] appletouch 6-1:0.85: input: appletouch disconnected [ 808.930444][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.930528][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.911635][ T4189] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9739'. [ 809.925068][ T4189] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9739'. [ 810.226645][ T5783] kernel read not supported for file /4097/attr (pid: 5783 comm: kworker/0:4) [ 810.242272][ T102] block nbd1: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 120 seconds [ 810.242325][ T102] block nbd1: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 810.242359][ T102] block nbd1: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 120 seconds [ 810.242393][ T102] block nbd1: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 120 seconds [ 810.536102][ T4211] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9746'. [ 810.627674][T19441] IPVS: starting estimator thread 0... [ 810.627952][ T4212] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 810.722364][ T4220] IPVS: using max 7 ests per chain, 16800 per kthread [ 811.362709][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 811.524907][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.524945][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 811.525044][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 811.525074][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.525121][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.525146][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.531189][ T43] usb 1-1: config 0 descriptor?? [ 811.542486][ T4237] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 812.077281][ T43] hid_parser_main: 5 callbacks suppressed [ 812.077308][ T43] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 812.077337][ T43] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 812.077366][ T43] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 812.077394][ T43] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 812.077422][ T43] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 812.098568][ T43] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 812.450169][ T4275] loop5: detected capacity change from 0 to 7 [ 812.486877][ T1852] Dev loop5: unable to read RDB block 7 [ 812.486937][ T1852] loop5: unable to read partition table [ 812.487211][ T1852] loop5: partition table beyond EOD, truncated [ 812.526497][ T4275] Dev loop5: unable to read RDB block 7 [ 812.526547][ T4275] loop5: unable to read partition table [ 812.526806][ T4275] loop5: partition table beyond EOD, truncated [ 812.528269][ T4275] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 814.292310][ T5803] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 814.394749][T19441] usb 1-1: USB disconnect, device number 28 [ 814.448833][ T5803] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.448864][ T5803] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.500396][ T5803] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.500433][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.500457][ T5803] usb 9-1: Product: syz [ 814.500473][ T5803] usb 9-1: Manufacturer: syz [ 814.500489][ T5803] usb 9-1: SerialNumber: syz [ 814.767363][ T5803] usb 9-1: 0:2 : does not exist [ 814.782593][ T5803] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 815.031540][ T5803] usb 9-1: USB disconnect, device number 15 [ 815.321940][ T1849] udevd[1849]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.526419][ T4380] random: crng reseeded on system resumption [ 815.576154][ T4383] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9790'. [ 816.074343][ T4398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 816.248782][ T4441] loop8: detected capacity change from 0 to 8 [ 816.276638][T28697] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 816.276681][T28697] loop8: partition table partially beyond EOD, truncated [ 816.277024][T28697] loop8: p1 size 1204205415 extends beyond EOD, truncated [ 816.380162][ T4441] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 816.380198][ T4441] loop8: partition table partially beyond EOD, truncated [ 816.380563][ T4441] loop8: p1 size 1204205415 extends beyond EOD, truncated [ 816.651638][ T1849] udevd[1849]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 816.686226][ T1849] udevd[1849]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 818.482523][ T5803] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 818.634100][ T5803] usb 10-1: Using ep0 maxpacket: 32 [ 818.636514][ T5803] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 818.636543][ T5803] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 818.636567][ T5803] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 818.636623][ T5803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 818.636648][ T5803] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 818.636677][ T5803] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 818.636724][ T5803] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 818.636751][ T5803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.667271][ T5803] usb 10-1: config 0 descriptor?? [ 818.912590][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 818.967773][ T5803] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 819.077047][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.077088][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.077131][ T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 819.077158][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.125201][ T10] usb 9-1: config 0 descriptor?? [ 819.298421][ T43] usb 10-1: USB disconnect, device number 3 [ 819.318694][ T43] usblp0: removed [ 819.364476][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 819.364614][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 819.390225][ T10] usb 9-1: USB disconnect, device number 16 [ 819.482550][ T5113] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 819.858069][ T4573] loop6: detected capacity change from 0 to 7 [ 819.868499][ T4573] Dev loop6: unable to read RDB block 7 [ 819.868543][ T4573] loop6: unable to read partition table [ 819.868769][ T4573] loop6: partition table beyond EOD, truncated [ 819.868787][ T4573] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 819.932514][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 820.085170][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.085207][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.085233][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 820.085278][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.085304][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.147007][ T10] usb 9-1: config 0 descriptor?? [ 820.242274][ T4588] loop8: detected capacity change from 0 to 8 [ 820.327698][ T1855] Dev loop8: unable to read RDB block 8 [ 820.327753][ T1855] loop8: unable to read partition table [ 820.327973][ T1855] loop8: partition table beyond EOD, truncated [ 820.335233][ T4588] Dev loop8: unable to read RDB block 8 [ 820.335278][ T4588] loop8: unable to read partition table [ 820.335495][ T4588] loop8: partition table beyond EOD, truncated [ 820.335513][ T4588] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 820.391069][ T5783] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 820.499663][ T5783] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 820.613044][ T10] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 820.642668][ T4603] netlink: 'syz.9.9830': attribute type 1 has an invalid length. [ 820.642694][ T4603] netlink: 'syz.9.9830': attribute type 2 has an invalid length. [ 820.897659][ T10] usb 9-1: USB disconnect, device number 17 [ 821.344350][ T4640] fido_id[4640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 821.763805][ T4661] loop1: detected capacity change from 0 to 4096 [ 822.385947][ T4675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 822.632978][ T4685] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9846'. [ 822.755918][ T5803] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 822.903669][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 822.907332][ T5803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.907363][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.907390][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.907417][ T5803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.907464][ T5803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 822.907490][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.142587][ T5803] usb 1-1: GET_CAPABILITIES returned 0 [ 823.142651][ T5803] usbtmc 1-1:16.0: can't read capabilities [ 823.347655][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.349003][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.349090][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.351247][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.351331][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.351633][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.351710][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.351788][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.352188][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.352264][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.382673][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.382764][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.382830][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.383125][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.383438][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.383505][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.419145][ T5803] usb 1-1: USB disconnect, device number 29 [ 824.591211][ T4743] bond_slave_0: entered promiscuous mode [ 824.591275][ T4743] bond_slave_1: entered promiscuous mode [ 824.607643][ T4743] macsec1: entered promiscuous mode [ 824.607670][ T4743] bond0: entered promiscuous mode [ 824.608377][ T4743] macsec1: entered allmulticast mode [ 824.608394][ T4743] bond0: entered allmulticast mode [ 824.608408][ T4743] bond_slave_0: entered allmulticast mode [ 824.608429][ T4743] bond_slave_1: entered allmulticast mode [ 824.775120][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 824.959865][ T43] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 824.959895][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.959912][ T43] usb 1-1: Product: syz [ 824.959924][ T43] usb 1-1: Manufacturer: syz [ 824.959946][ T43] usb 1-1: SerialNumber: syz [ 825.342269][ T5783] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 825.462751][ T43] rtl8150 1-1:1.0: couldn't reset the device [ 825.463174][ T43] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 825.507410][ T5783] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.507441][ T5783] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.509284][ T5783] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 825.509315][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.509338][ T5783] usb 6-1: SerialNumber: syz [ 825.541445][ T43] usb 1-1: USB disconnect, device number 30 [ 825.873852][ T5783] usb 6-1: 0:2 : does not exist [ 826.001184][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9870'. [ 826.001231][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9870'. [ 826.076799][ T5783] usb 6-1: USB disconnect, device number 63 [ 826.080671][ T4818] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9870'. [ 826.080705][ T4818] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9870'. [ 826.116443][ T4810] erspan0: entered promiscuous mode [ 826.128877][ T4810] gretap0: entered promiscuous mode [ 826.281921][ T1849] udevd[1849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.385835][ T4899] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 828.883665][ T4912] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9893'. [ 829.016543][ T4916] Invalid argument reading file caps for ./file0 [ 829.262103][ T4923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9896'. [ 829.337011][ T4924] netlink: 'syz.8.9897': attribute type 2 has an invalid length. [ 829.337041][ T4924] netlink: 'syz.8.9897': attribute type 2 has an invalid length. [ 831.362297][ T5884] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 831.493229][ T36] audit: type=1800 audit(1773996713.453:541): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.9919" name="bus" dev="tmpfs" ino=2562 res=0 errno=0 [ 831.528559][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.528587][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.530465][ T5884] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 831.530493][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 831.530513][ T5884] usb 6-1: SerialNumber: syz [ 831.814615][ T5884] usb 6-1: 0:2 : does not exist [ 831.905693][ T5032] loop8: detected capacity change from 0 to 7 [ 831.911438][ T5032] Dev loop8: unable to read RDB block 7 [ 831.911494][ T5032] loop8: unable to read partition table [ 831.911754][ T5032] loop8: partition table beyond EOD, truncated [ 831.911776][ T5032] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 832.101478][ T5884] usb 6-1: USB disconnect, device number 64 [ 832.345374][ T1849] udevd[1849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.731459][ T5076] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9931'. [ 832.937329][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9936'. [ 833.162015][ T5089] nbd4: detected capacity change from 0 to 127 [ 833.169778][ T5113] block nbd4: Receive control failed (result -32) [ 833.210422][ T1855] block nbd4: Dead connection, failed to find a fallback [ 833.210452][ T1855] block nbd4: shutting down sockets [ 833.210468][ T1855] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210498][ T1855] buffer_io_error: 5 callbacks suppressed [ 833.210510][ T1855] Buffer I/O error on dev nbd4, logical block 0, async page read [ 833.210580][ T1855] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210605][ T1855] Buffer I/O error on dev nbd4, logical block 1, async page read [ 833.210659][ T1855] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210684][ T1855] Buffer I/O error on dev nbd4, logical block 2, async page read [ 833.210734][ T1855] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210759][ T1855] Buffer I/O error on dev nbd4, logical block 3, async page read [ 833.210820][ T1855] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210845][ T1855] Buffer I/O error on dev nbd4, logical block 0, async page read [ 833.210895][ T1855] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.210919][ T1855] Buffer I/O error on dev nbd4, logical block 1, async page read [ 833.210978][ T1855] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.211003][ T1855] Buffer I/O error on dev nbd4, logical block 2, async page read [ 833.211053][ T1855] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.211078][ T1855] Buffer I/O error on dev nbd4, logical block 3, async page read [ 833.211155][ T1855] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.211180][ T1855] Buffer I/O error on dev nbd4, logical block 0, async page read [ 833.211231][ T1855] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.211256][ T1855] Buffer I/O error on dev nbd4, logical block 1, async page read [ 833.252211][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 833.406128][ T5116] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 833.425033][ T1855] ldm_validate_partition_table(): Disk read failed. [ 833.425869][ T1855] Dev nbd4: unable to read RDB block 0 [ 833.426857][ T1855] nbd4: unable to read partition table [ 833.442156][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 833.444868][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 833.444898][ T10] usb 6-1: config 0 has no interface number 0 [ 833.444965][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.444996][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 833.493589][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 833.493625][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 833.493649][ T10] usb 6-1: Product: syz [ 833.493664][ T10] usb 6-1: SerialNumber: syz [ 833.500748][ T1855] ldm_validate_partition_table(): Disk read failed. [ 833.501405][ T1855] Dev nbd4: unable to read RDB block 0 [ 833.544141][ T10] usb 6-1: config 0 descriptor?? [ 833.544777][ T1855] nbd4: unable to read partition table [ 833.550507][ T10] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 833.572028][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input60 [ 833.862781][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 834.343991][ C0] cm109_urb_ctl_callback: 335 callbacks suppressed [ 834.344024][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.344330][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.344640][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.344888][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.345136][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.345375][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.345624][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.349154][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 834.349189][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 834.357739][ T10] usb 6-1: USB disconnect, device number 65 [ 834.478279][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 834.687902][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9949'. [ 834.690151][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9949'. [ 834.942247][ T5177] netlink: 'syz.0.9952': attribute type 10 has an invalid length. [ 834.979878][ T5177] batadv0: left promiscuous mode [ 834.979906][ T5177] batadv0: left allmulticast mode [ 834.997309][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.013461][ T5177] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 835.812509][T25026] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 835.972473][T25026] usb 6-1: Using ep0 maxpacket: 32 [ 835.976832][T25026] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.976871][T25026] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.978769][T25026] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 835.978799][T25026] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 835.978821][T25026] usb 6-1: Product: syz [ 835.978835][T25026] usb 6-1: Manufacturer: syz [ 836.108222][T25026] hub 6-1:4.0: USB hub found [ 836.328503][T25026] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 836.675831][ T5803] usb 6-1: USB disconnect, device number 66 [ 840.322213][ T102] block nbd1: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 150 seconds [ 840.322267][ T102] block nbd1: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 840.322304][ T102] block nbd1: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 150 seconds [ 840.322338][ T102] block nbd1: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 150 seconds [ 841.935498][ T5386] netlink: 'syz.8.10008': attribute type 6 has an invalid length. [ 844.287589][ T5479] loop8: detected capacity change from 0 to 7 [ 844.289296][ T5479] Dev loop8: unable to read RDB block 7 [ 844.289343][ T5479] loop8: unable to read partition table [ 844.289601][ T5479] loop8: partition table beyond EOD, truncated [ 844.289621][ T5479] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 845.282035][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.291932][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.425365][ T5519] pimreg: entered allmulticast mode [ 845.458563][ T5517] pimreg: left allmulticast mode [ 845.651700][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10034'. [ 846.129176][ T5544] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 846.432358][ T5803] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 846.531221][ T5566] bpf: Bad value for 'gid' [ 846.594728][ T5803] usb 6-1: Using ep0 maxpacket: 16 [ 846.599285][ T5803] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 846.599316][ T5803] usb 6-1: config 0 has no interface number 0 [ 846.599369][ T5803] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 846.599397][ T5803] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 846.599425][ T5803] usb 6-1: config 0 interface 41 has no altsetting 0 [ 846.606149][ T5803] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 846.606180][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.606199][ T5803] usb 6-1: Product: syz [ 846.606214][ T5803] usb 6-1: Manufacturer: syz [ 846.606228][ T5803] usb 6-1: SerialNumber: syz [ 846.615763][ T5803] usb 6-1: config 0 descriptor?? [ 846.626342][ T5553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 846.626523][ T5553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 846.772253][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 846.837841][ T5553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 846.838072][ T5553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 846.890675][ T5579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10049'. [ 846.922325][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 846.925568][ T5579] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 846.942946][ T43] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 846.943032][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.943053][ T43] usb 1-1: Product: syz [ 846.943067][ T43] usb 1-1: Manufacturer: syz [ 846.943082][ T43] usb 1-1: SerialNumber: syz [ 847.040509][ T5803] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 847.040837][ T5803] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 847.095293][ T43] usb 1-1: config 0 descriptor?? [ 847.104102][ T5803] usb 6-1: USB disconnect, device number 67 [ 847.556729][ T43] airspy 1-1:0.0: Board ID: 00 [ 847.556756][ T43] airspy 1-1:0.0: Firmware version: [ 848.196688][ T43] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 848.244419][ T43] airspy 1-1:0.0: Registered as swradio24 [ 848.244446][ T43] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 848.271735][ T43] usb 1-1: USB disconnect, device number 31 [ 848.349088][ T5789] udevd[5789]: setting owner of /dev/bus/usb/001/031 to uid=0, gid=0 failed: No such file or directory [ 849.139670][ T5662] netlink: 83 bytes leftover after parsing attributes in process `syz.0.10066'. [ 849.424321][ T5672] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.532302][T25026] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 850.702270][T25026] usb 6-1: Using ep0 maxpacket: 32 [ 850.710971][T25026] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 850.711004][T25026] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 850.711028][T25026] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 850.711085][T25026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 850.711111][T25026] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 850.711140][T25026] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 850.711187][T25026] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 850.711214][T25026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.832521][T25026] usb 6-1: config 0 descriptor?? [ 851.071432][T25026] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 851.303232][ C0] usblp0: nonzero read bulk status received: -71 [ 851.304221][T25026] usb 6-1: USB disconnect, device number 68 [ 851.575118][ T5714] usblp0: removed [ 851.679064][ T5781] input: syz0 as /devices/virtual/input/input61 [ 851.681969][ T5778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 852.242543][T30448] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 852.392573][T30448] usb 10-1: Using ep0 maxpacket: 8 [ 852.395340][T30448] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.395371][T30448] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 852.395397][T30448] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 852.395424][T30448] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.395465][T30448] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 852.395491][T30448] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.532265][ T5884] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 852.692589][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 852.697010][ T5884] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 852.697121][ T5884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.697149][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 852.697177][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 852.697204][ T5884] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.697251][ T5884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 852.697277][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.739896][ T5860] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 852.787497][T30448] usb 10-1: GET_CAPABILITIES returned 0 [ 852.787546][T30448] usbtmc 10-1:16.0: can't read capabilities [ 852.837576][ T5860] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.10108'. [ 852.872723][ T43] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 852.931102][ T5884] usb 1-1: usb_control_msg returned -32 [ 852.931158][ T5884] usbtmc 1-1:16.0: can't read capabilities [ 852.982340][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 852.996566][ T5884] usb 10-1: USB disconnect, device number 4 [ 853.038822][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.038862][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.038889][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 853.038938][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 853.038963][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.106819][ T43] usb 6-1: config 0 descriptor?? [ 853.537427][ T43] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xd [ 853.577364][ T43] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 853.824549][T30448] usb 6-1: USB disconnect, device number 69 [ 854.270377][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10115'. [ 854.292381][ T5924] bond0: Unable to set down delay as MII monitoring is disabled [ 854.442493][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 854.448324][T25026] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 854.448353][T25026] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 855.012387][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 855.267739][T30448] usb 1-1: USB disconnect, device number 32 [ 855.958084][ T6000] netlink: 11 bytes leftover after parsing attributes in process `syz.8.10133'. [ 855.958114][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10133'. [ 855.958136][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10133'. [ 856.603036][ T5960] tipc: can't start tipc receive workqueue [ 856.628662][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10141'. [ 856.874159][ T43] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 857.032562][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 857.040610][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.040674][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.040707][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 857.040736][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 857.040760][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.041963][ T43] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.041994][ T43] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.042016][ T43] usb 9-1: Manufacturer: syz [ 857.054514][ T43] usb 9-1: config 0 descriptor?? [ 857.164541][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 857.182925][T25026] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 857.182950][T25026] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 857.348482][ T6087] evm: overlay not supported [ 857.602191][ T43] rc_core: IR keymap rc-hauppauge not found [ 857.602218][ T43] Registered IR keymap rc-empty [ 857.602381][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.622328][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.661385][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 857.736242][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input63 [ 857.802473][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.823486][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.842455][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.862407][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.882838][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.902411][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.905984][ T6103] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.10147'. [ 857.924544][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.946000][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.962473][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 857.982624][ T43] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 858.035071][ T43] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 858.036143][ T43] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 858.194478][ T43] usb 9-1: USB disconnect, device number 18 [ 859.195408][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10156'. [ 859.402298][ T6011] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 859.555071][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 859.555112][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 859.555141][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 859.555164][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 859.555210][ T6011] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 859.555237][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.631374][ T6011] usb 6-1: config 0 descriptor?? [ 859.882238][ T5113] Bluetooth: hci6: command 0x0c1a tx timeout [ 859.896135][T25026] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 859.896163][T25026] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 860.094256][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094297][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094325][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094353][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094381][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094408][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094435][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094462][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094490][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.094518][ T6011] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 860.208041][ T6011] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 860.284819][ T36] audit: type=1400 audit(1773996742.273:542): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=6198 comm="syz.0.10170" saddr=100.1.0.1 daddr=172.20.20.170 dest=20002 netif=gretap0 [ 860.339840][ T6011] usb 6-1: USB disconnect, device number 70 [ 860.500588][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 861.100979][ T6247] sctp: [Deprecated]: syz.7.10179 (pid 6247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 861.100979][ T6247] Use struct sctp_sack_info instead [ 861.727098][ T6269] loop3: detected capacity change from 0 to 7 [ 861.766843][ T6269] Dev loop3: unable to read RDB block 7 [ 861.766900][ T6269] loop3: unable to read partition table [ 861.767147][ T6269] loop3: partition table beyond EOD, truncated [ 861.767194][ T6269] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 862.340180][T25026] kernel write not supported for file /sg0 (pid: 25026 comm: kworker/0:0) [ 864.293980][ T6353] netlink: 'syz.9.10207': attribute type 2 has an invalid length. [ 864.294004][ T6353] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10207'. [ 864.442818][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 864.624606][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 864.624643][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 864.624664][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 864.624718][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 864.624746][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 864.627305][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 864.627339][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 864.627362][ T10] usb 9-1: Product: syz [ 864.627377][ T10] usb 9-1: Manufacturer: syz [ 864.728231][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 864.728254][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 864.749160][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 864.749185][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 865.012845][ T6392] macsec0: entered allmulticast mode [ 865.012872][ T6392] veth1_macvtap: entered allmulticast mode [ 865.418479][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 865.558668][ T6011] usb 9-1: USB disconnect, device number 19 [ 866.285440][ T6436] loop2: detected capacity change from 0 to 7 [ 866.316925][ T6436] Dev loop2: unable to read RDB block 7 [ 866.316977][ T6436] loop2: unable to read partition table [ 866.317237][ T6436] loop2: partition table beyond EOD, truncated [ 866.317280][ T6436] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 866.927829][ T6451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 867.292223][ T6451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 867.655904][ T6451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 867.979366][ T6451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 868.407840][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10248'. [ 868.630095][ T117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 868.679130][ T6522] loop8: detected capacity change from 0 to 8 [ 868.680953][ T1554] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 868.743849][ T1849] Dev loop8: unable to read RDB block 8 [ 868.743895][ T1849] loop8: unable to read partition table [ 868.744134][ T1849] loop8: partition table beyond EOD, truncated [ 868.745661][ T1554] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 868.749383][ T6522] Dev loop8: unable to read RDB block 8 [ 868.749428][ T6522] loop8: unable to read partition table [ 868.749651][ T6522] loop8: partition table beyond EOD, truncated [ 868.749671][ T6522] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 868.883073][ T117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 869.058074][ T6539] netlink: 236 bytes leftover after parsing attributes in process `syz.5.10253'. [ 869.058104][ T6539] netlink: 236 bytes leftover after parsing attributes in process `syz.5.10253'. [ 869.909863][ T6572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.402819][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.403041][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.410541][ T102] block nbd1: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 180 seconds [ 870.410598][ T102] block nbd1: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 180 seconds [ 870.410632][ T102] block nbd1: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 180 seconds [ 870.410664][ T102] block nbd1: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 180 seconds [ 870.480296][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10268'. [ 871.724922][ T6623] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.10281'. [ 872.083246][ T6633] netlink: 'syz.5.10283': attribute type 11 has an invalid length. [ 874.765743][ T6709] binder: 6698:6709 ioctl c0306201 0 returned -14 [ 874.766019][ T6709] binder: 6698:6709 ioctl 40087602 0 returned -22 [ 875.083706][ T5803] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 875.245313][ T5803] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 875.245456][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.247323][ T5803] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 875.247353][ T5803] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 875.247376][ T5803] usb 1-1: Manufacturer: syz [ 875.303312][ T5803] usb 1-1: config 0 descriptor?? [ 875.412239][ T5803] rc_core: IR keymap rc-hauppauge not found [ 875.412264][ T5803] Registered IR keymap rc-empty [ 875.416662][ T5803] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 875.452910][ T5803] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input64 [ 875.520712][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 875.625784][ T6741] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 875.663023][ T6011] usb 1-1: USB disconnect, device number 33 [ 875.736425][ T36] audit: type=1326 audit(1773996757.733:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.5.10315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e3820c799 code=0x0 [ 876.285927][ T6774] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10319'. [ 877.211441][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10329'. [ 877.512697][ T6011] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 877.665638][ T6011] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 877.665682][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.712893][ T6011] usb 1-1: config 0 descriptor?? [ 877.738805][ T6011] cp210x 1-1:0.0: cp210x converter detected [ 878.137943][ T6011] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 878.185667][ T6011] usb 1-1: cp210x converter now attached to ttyUSB0 [ 878.189681][ T6858] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 878.379678][ T5884] usb 1-1: USB disconnect, device number 34 [ 878.428444][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 878.548910][ T5884] cp210x 1-1:0.0: device disconnected [ 880.229961][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10357'. [ 880.229992][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10357'. [ 881.734581][ T7018] overlay: filesystem on ./bus not supported as upperdir [ 881.752222][ T6011] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 881.932741][ T6011] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 881.932779][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.932802][ T6011] usb 6-1: Product: syz [ 881.932819][ T6011] usb 6-1: Manufacturer: syz [ 881.932835][ T6011] usb 6-1: SerialNumber: syz [ 881.949711][ T6011] usb 6-1: config 0 descriptor?? [ 881.989436][ T6011] hub 6-1:0.0: bad descriptor, ignoring hub [ 881.989480][ T6011] hub 6-1:0.0: probe with driver hub failed with error -5 [ 882.172243][ T6011] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 882.191980][ T6011] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 882.202685][ T6011] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 882.202752][ T6011] usb 6-1: media controller created [ 882.263805][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.455652][ T6011] DVB: Unable to find symbol dib7000p_attach() [ 882.455673][ T6011] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 882.607727][ T6011] rc_core: IR keymap rc-dib0700-rc5 not found [ 882.607752][ T6011] Registered IR keymap rc-empty [ 882.608107][ T6011] dvb-usb: could not initialize remote control. [ 882.608118][ T6011] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 883.052954][ T7042] i2c i2c-1: Invalid block size returned: 58 [ 883.130092][ T7045] netlink: 'syz.0.10378': attribute type 83 has an invalid length. [ 883.248064][ T43] usb 6-1: USB disconnect, device number 71 [ 883.349788][ T1841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.380051][ T1841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.415092][ T1841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.438111][ T1841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.442721][ T1841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.460710][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.524697][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 883.536832][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.545909][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.547087][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.548454][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.903746][ T7287] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.237404][ T36] audit: type=1326 audit(1773996766.233:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7106 comm="syz.0.10384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd9fcac799 code=0x0 [ 884.645195][ T7287] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.842783][ T6011] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 884.998922][ T6011] usb 6-1: Using ep0 maxpacket: 32 [ 885.052651][ T6011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 885.070292][ T6011] usb 6-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 885.070325][ T6011] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.098424][ T6011] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 885.098461][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.098484][ T6011] usb 6-1: Product: syz [ 885.098501][ T6011] usb 6-1: Manufacturer: syz [ 885.098518][ T6011] usb 6-1: SerialNumber: syz [ 885.158589][ T7287] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.565444][ T6011] usb 6-1: cannot find UAC_HEADER [ 885.566614][ T7287] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.652326][ T5113] Bluetooth: hci3: command tx timeout [ 885.748678][ T6011] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 885.763192][ T6011] usb 6-1: USB disconnect, device number 72 [ 885.821957][ T1849] udevd[1849]: setting mode of /dev/bus/usb/006/072 to 020664 failed: No such file or directory [ 885.822337][ T1849] udevd[1849]: setting owner of /dev/bus/usb/006/072 to uid=0, gid=0 failed: No such file or directory [ 885.932318][ T1849] udevd[1849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.994117][ T7186] hugetlbfs: syz.8.10397 (7186): Using mlock ulimits for SHM_HUGETLB is obsolete [ 887.296826][ T7287] bridge_slave_1: left allmulticast mode [ 887.296862][ T7287] bridge_slave_1: left promiscuous mode [ 887.297156][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.410493][ T7287] bridge_slave_0: left allmulticast mode [ 887.410529][ T7287] bridge_slave_0: left promiscuous mode [ 887.431950][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.662672][ T43] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 887.733192][ T5113] Bluetooth: hci3: command tx timeout [ 887.822686][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.822723][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.822747][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.822793][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.822816][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.830031][ T43] usb 6-1: config 0 descriptor?? [ 888.441236][ T43] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 888.703295][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.837504][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.905176][ T7287] bond0 (unregistering): Released all slaves [ 889.128077][ T7279] 8021q: VLANs not supported on ip6gre0 [ 889.439833][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 889.713011][ C1] plantronics 0003:047F:FFFF.003C: usb_submit_urb(ctrl) failed: -1 [ 889.817431][ T5113] Bluetooth: hci3: command tx timeout [ 890.533741][T30448] usb 6-1: USB disconnect, device number 73 [ 891.275447][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.275685][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.277119][ T7049] bridge_slave_0: entered allmulticast mode [ 891.317783][ T7049] bridge_slave_0: entered promiscuous mode [ 891.330658][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.331044][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.331816][ T7049] bridge_slave_1: entered allmulticast mode [ 891.405480][ T7049] bridge_slave_1: entered promiscuous mode [ 891.882555][ T5113] Bluetooth: hci3: command tx timeout [ 892.201573][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.236863][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.435077][ T7287] hsr_slave_0: left promiscuous mode [ 892.479011][ T7287] hsr_slave_1: left promiscuous mode [ 892.480203][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.480234][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.552278][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.552369][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.756617][ T7287] veth1_macvtap: left allmulticast mode [ 892.756674][ T7287] veth1_macvtap: left promiscuous mode [ 892.780119][ T7287] veth0_macvtap: left promiscuous mode [ 892.780423][ T7287] veth1_vlan: left promiscuous mode [ 892.780637][ T7287] veth0_vlan: left promiscuous mode [ 892.957545][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056893000: rx timeout, send abort [ 893.235525][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10440'. [ 893.329866][ T7287] macsec0 (unregistering): left allmulticast mode [ 893.457627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056893000: abort rx timeout. Force session deactivation [ 893.464476][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056892000: rx timeout, send abort [ 893.952930][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 893.968613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056892000: abort rx timeout. Force session deactivation [ 894.015757][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 894.691838][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 894.848905][ T7049] team0: Port device team_slave_0 added [ 894.865204][ T7049] team0: Port device team_slave_1 added [ 894.945124][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.945143][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.945174][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.947749][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.947768][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.947799][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.321879][ T7049] hsr_slave_0: entered promiscuous mode [ 895.327813][ T7049] hsr_slave_1: entered promiscuous mode [ 896.796941][ T7287] IPVS: stop unused estimator thread 0... [ 898.907576][ T7049] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 899.097862][ T7049] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 899.129458][ T7049] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 899.170693][ T7049] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 899.532501][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.569543][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.590281][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.590436][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.617203][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.632422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.467380][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.482514][ T102] block nbd1: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 210 seconds [ 900.482569][ T102] block nbd1: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 210 seconds [ 900.482604][ T102] block nbd1: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 210 seconds [ 900.482638][ T102] block nbd1: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 210 seconds [ 900.547423][ T7873] kvm: user requested TSC rate below hardware speed [ 901.317074][ T7910] netlink: 2292 bytes leftover after parsing attributes in process `syz.8.10476'. [ 901.719461][ T7049] veth0_vlan: entered promiscuous mode [ 901.754194][ T7049] veth1_vlan: entered promiscuous mode [ 901.943559][ T7049] veth0_macvtap: entered promiscuous mode [ 901.976004][ T7049] veth1_macvtap: entered promiscuous mode [ 902.070067][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.095637][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.180231][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.227204][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.230688][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.306092][ T7289] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.512254][ T7949] netlink: 'syz.5.10484': attribute type 1 has an invalid length. [ 902.898853][ T7953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 902.941754][ T7953] bond5: (slave bond6): making interface the new active one [ 902.943072][ T7953] bond5: (slave bond6): Enslaving as an active interface with an up link [ 903.482748][ T6011] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 903.572615][ T5803] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 903.653732][ T6011] usb 1-1: Using ep0 maxpacket: 32 [ 903.656215][ T6011] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.656278][ T6011] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.656308][ T6011] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.656335][ T6011] usb 1-1: config 0 interface 0 has no altsetting 0 [ 903.656366][ T6011] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 903.656391][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.737751][ T1554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.737775][ T1554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.765947][ T6011] usb 1-1: config 0 descriptor?? [ 903.794911][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.794950][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.794994][ T5803] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 903.795021][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.903552][ T5803] usb 6-1: config 0 descriptor?? [ 904.239298][ T6011] hid_parser_main: 5 callbacks suppressed [ 904.239325][ T6011] corsair-psu 0003:1B1C:1C09.003D: unknown main item tag 0x0 [ 904.239362][ T6011] corsair-psu 0003:1B1C:1C09.003D: unknown main item tag 0x0 [ 904.293121][ T6011] corsair-psu 0003:1B1C:1C09.003D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 904.352828][ T6011] corsair-psu 0003:1B1C:1C09.003D: unable to initialize device (-38) [ 904.397040][ T5803] hid-steam 0003:28DE:1142.003E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 904.410941][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.410964][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.445838][ T6011] corsair-psu 0003:1B1C:1C09.003D: probe with driver corsair-psu failed with error -38 [ 904.466942][ T6011] usb 1-1: USB disconnect, device number 35 [ 904.494800][ T5803] hid-steam 0003:28DE:1142.003E: Steam wireless receiver connected [ 904.561959][ T8067] fido_id[8067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 904.916048][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 905.069501][ T5803] hid-steam 0003:28DE:1142.003F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 905.084003][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 905.086817][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.086856][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 905.086903][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 905.086929][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.221902][ T10] usb 9-1: config 0 descriptor?? [ 905.223689][ T5803] usb 6-1: USB disconnect, device number 74 [ 905.251793][ T8088] fido_id[8088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 905.525813][ T5803] hid-steam 0003:28DE:1142.003E: Steam wireless receiver disconnected [ 905.685199][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 905.720698][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0040/input/input66 [ 905.785265][ T10] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 906.507836][ T10] usb 9-1: USB disconnect, device number 20 [ 906.595319][ T8135] fido_id[8135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 907.009216][ T8159] netlink: 'syz.7.10504': attribute type 4 has an invalid length. [ 907.080535][ T8162] netlink: 'syz.7.10504': attribute type 4 has an invalid length. [ 907.752189][ T5803] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 907.902248][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 907.905835][ T5803] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.905869][ T5803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.905896][ T5803] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.905921][ T5803] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.905969][ T5803] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 907.905995][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.152588][ T5803] usb 6-1: GET_CAPABILITIES returned 0 [ 908.152643][ T5803] usbtmc 6-1:16.0: can't read capabilities [ 908.379068][T25001] usb 6-1: USB disconnect, device number 75 [ 908.393204][T25026] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 908.555761][T25026] usb 9-1: Using ep0 maxpacket: 8 [ 908.567405][T25026] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.567451][T25026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.567479][T25026] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.567507][T25026] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.567557][T25026] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 908.567584][T25026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.858114][T25026] usb 9-1: GET_CAPABILITIES returned 0 [ 908.858172][T25026] usbtmc 9-1:16.0: can't read capabilities [ 909.074027][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 909.081571][T25001] usb 9-1: USB disconnect, device number 21 [ 910.885165][ T8280] random: crng reseeded on system resumption [ 911.124693][ T8270] bridge0: port 4(syz_tun) entered disabled state [ 911.210288][ T8270] bridge0: port 3(netdevsim0) entered disabled state [ 911.210452][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.210918][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.501691][T25026] IPVS: starting estimator thread 0... [ 912.567396][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10547'. [ 912.585152][ T8327] IPVS: using max 8 ests per chain, 19200 per kthread [ 912.590114][ T8333] netlink: 'syz.0.10548': attribute type 4 has an invalid length. [ 912.642938][ T8335] netlink: 'syz.0.10548': attribute type 4 has an invalid length. [ 912.715286][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.743265][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.725759][ T8360] netlink: 'syz.8.10554': attribute type 10 has an invalid length. [ 914.075698][ T8328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.437343][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.441893][ T8357] veth0_to_hsr: entered promiscuous mode [ 915.029206][ T8360] team0 (unregistering): Port device team_slave_0 removed [ 915.078484][ T8360] team0 (unregistering): Port device team_slave_1 removed [ 915.113437][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.113817][ T8356] veth0_to_hsr: left promiscuous mode [ 915.135669][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.136367][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.246471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.247446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.282226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.285130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.324903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.325688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.600683][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10576'. [ 917.801820][ T8455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.985816][ T8475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.986344][ T8475] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 917.987552][ T8475] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 918.362360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.365617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.737565][T25026] libceph: connect (1)[c::]:6789 error -101 [ 918.738770][T25026] libceph: mon0 (1)[c::]:6789 connect error [ 918.806175][ T8518] ceph: No mds server is up or the cluster is laggy [ 919.051160][T25026] libceph: connect (1)[c::]:6789 error -101 [ 919.051406][T25026] libceph: mon0 (1)[c::]:6789 connect error [ 919.405124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.405575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.442243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.445336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.932347][ T37] INFO: task syz.6.9252:2001 blocked for more than 143 seconds. [ 920.932376][ T37] Tainted: G L syzkaller #0 [ 920.932390][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 920.932402][ T37] task:syz.6.9252 state:D stack:26848 pid:2001 tgid:1999 ppid:22665 task_flags:0x400140 flags:0x00080002 [ 920.932478][ T37] Call Trace: [ 920.932487][ T37] [ 920.932503][ T37] __schedule+0x1553/0x5240 [ 920.932558][ T37] ? __pfx_sched_clock_cpu+0x10/0x10 [ 920.932603][ T37] ? __pfx___schedule+0x10/0x10 [ 920.932656][ T37] rt_mutex_schedule+0x76/0xf0 [ 920.932685][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 920.932732][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 920.932765][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 920.932797][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 920.932827][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 920.932878][ T37] ? sync_bdevs+0x27e/0x470 [ 920.932915][ T37] ? sync_bdevs+0x27e/0x470 [ 920.932941][ T37] mutex_lock_nested+0x168/0x1d0 [ 920.932977][ T37] sync_bdevs+0x27e/0x470 [ 920.933012][ T37] __ia32_sys_sync+0xc5/0x120 [ 920.933046][ T37] ? __pfx___ia32_sys_sync+0x10/0x10 [ 920.933090][ T37] do_syscall_64+0x14d/0xf80 [ 920.933133][ T37] ? trace_irq_disable+0x3b/0x150 [ 920.933160][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.933186][ T37] ? clear_bhb_loop+0x40/0x90 [ 920.933216][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.933241][ T37] RIP: 0033:0x7f5daeb3c799 [ 920.933263][ T37] RSP: 002b:00007f5dacd8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 920.933288][ T37] RAX: ffffffffffffffda RBX: 00007f5daedb5fa0 RCX: 00007f5daeb3c799 [ 920.933306][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 920.933321][ T37] RBP: 00007f5daedb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 920.933336][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.933349][ T37] R13: 00007f5daedb6038 R14: 00007f5daedb5fa0 R15: 00007ffeb9707e08 [ 920.933389][ T37] [ 920.933412][ T37] [ 920.933412][ T37] Showing all locks held in the system: [ 920.933424][ T37] 1 lock held by khungtaskd/37: [ 920.933437][ T37] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 920.933502][ T37] 3 locks held by kworker/u8:7/770: [ 920.933520][ T37] 3 locks held by kworker/u8:12/1554: [ 920.933533][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 920.933596][ T37] #1: ffffc90006547c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 920.933656][ T37] #2: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 920.933720][ T37] 3 locks held by udevd/5163: [ 920.933734][ T37] 2 locks held by getty/5549: [ 920.933747][ T37] #0: ffff888037a8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 920.933806][ T37] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 920.933862][ T37] 1 lock held by udevd/5946: [ 920.933874][ T37] #0: ffff8880267994c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 920.933936][ T37] 3 locks held by kworker/1:6/25001: [ 920.933954][ T37] 1 lock held by syz.6.9252/2001: [ 920.933966][ T37] #0: ffff8880267994c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 920.934022][ T37] 9 locks held by syz-executor/7049: [ 920.934038][ T37] 1 lock held by syz.7.10582/8516: [ 920.934051][ T37] 1 lock held by syz.8.10587/8542: [ 920.934063][ T37] #0: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 920.934134][ T37] 1 lock held by syz.0.10599/8575: [ 920.934147][ T37] #0: ffff888034285cf0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 920.934209][ T37] 3 locks held by syz.0.10599/8576: [ 920.934223][ T37] 1 lock held by syz.5.10601/8584: [ 920.934237][ T37] [ 920.934244][ T37] ============================================= [ 920.934244][ T37] [ 920.934254][ T37] NMI backtrace for cpu 1 [ 920.934273][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.934303][ T37] Tainted: [L]=SOFTLOCKUP [ 920.934311][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.934324][ T37] Call Trace: [ 920.934333][ T37] [ 920.934343][ T37] dump_stack_lvl+0xe8/0x150 [ 920.934378][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 920.934407][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.934442][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 920.934475][ T37] sys_info+0x135/0x170 [ 920.934499][ T37] watchdog+0xfd9/0x1030 [ 920.934534][ T37] ? watchdog+0x21a/0x1030 [ 920.934571][ T37] kthread+0x388/0x470 [ 920.934596][ T37] ? __pfx_watchdog+0x10/0x10 [ 920.934621][ T37] ? __pfx_kthread+0x10/0x10 [ 920.934648][ T37] ret_from_fork+0x51e/0xb90 [ 920.934684][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 920.934714][ T37] ? __switch_to+0xc7d/0x1450 [ 920.934747][ T37] ? __pfx_kthread+0x10/0x10 [ 920.934772][ T37] ret_from_fork_asm+0x1a/0x30 [ 920.934811][ T37] [ 920.934821][ T37] Sending NMI from CPU 1 to CPUs 0: [ 920.934850][ C0] NMI backtrace for cpu 0 [ 920.934869][ C0] CPU: 0 UID: 0 PID: 7049 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.934894][ C0] Tainted: [L]=SOFTLOCKUP [ 920.934901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.934911][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 920.934933][ C0] Code: 04 eb 92 4d 01 f3 49 83 c3 05 eb 89 bb 06 00 00 00 e9 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 [ 920.934948][ C0] RSP: 0018:ffffc9000d6e7430 EFLAGS: 00000202 [ 920.934965][ C0] RAX: 0000000000000001 RBX: ffffffff8b25680c RCX: 0000000080000001 [ 920.934978][ C0] RDX: 0000000000000001 RSI: ffffffff8b25680c RDI: ffff8880b883d198 [ 920.934991][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 920.935002][ C0] R10: dffffc0000000000 R11: fffffbfff1ed48b7 R12: 0000000000000000 [ 920.935014][ C0] R13: ffff8880b883d198 R14: ffff8880b883d198 R15: 0000000000000001 [ 920.935026][ C0] FS: 000055557eda5500(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 920.935042][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.935054][ C0] CR2: 0000001b2d821ff8 CR3: 0000000083478000 CR4: 00000000003526f0 [ 920.935072][ C0] Call Trace: [ 920.935078][ C0] [ 920.935085][ C0] __kasan_check_byte+0x12/0x40 [ 920.935112][ C0] lock_acquire+0x79/0x2e0 [ 920.935130][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 920.935157][ C0] rt_spin_trylock+0xfc/0x2b0 [ 920.935177][ C0] ? obj_cgroup_charge_account+0x133/0x780 [ 920.935203][ C0] obj_cgroup_charge_account+0x133/0x780 [ 920.935229][ C0] __memcg_slab_post_alloc_hook+0x5c6/0xa20 [ 920.935261][ C0] kmem_cache_alloc_noprof+0x3f4/0x680 [ 920.935286][ C0] ? anon_vma_clone+0x412/0xa00 [ 920.935312][ C0] anon_vma_clone+0x412/0xa00 [ 920.935341][ C0] anon_vma_fork+0x16a/0x570 [ 920.935377][ C0] dup_mmap+0x997/0x1d50 [ 920.935403][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 920.935419][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 920.935445][ C0] ? rt_spin_unlock+0x160/0x200 [ 920.935474][ C0] copy_mm+0x13b/0x4a0 [ 920.935499][ C0] copy_process+0x18be/0x3cd0 [ 920.935528][ C0] ? copy_process+0x921/0x3cd0 [ 920.935557][ C0] ? __pfx_copy_process+0x10/0x10 [ 920.935585][ C0] kernel_clone+0x249/0x840 [ 920.935611][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 920.935644][ C0] __x64_sys_clone+0x1b6/0x230 [ 920.935662][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 920.935686][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 920.935714][ C0] do_syscall_64+0x14d/0xf80 [ 920.935738][ C0] ? trace_irq_disable+0x3b/0x150 [ 920.935758][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.935775][ C0] ? clear_bhb_loop+0x40/0x90 [ 920.935794][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.935811][ C0] RIP: 0033:0x7fde8df95212 [ 920.935827][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 920.935841][ C0] RSP: 002b:00007ffc98b06630 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 920.935858][ C0] RAX: ffffffffffffffda RBX: 00007ffc98b06630 RCX: 00007fde8df95212 [ 920.935871][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 920.935882][ C0] RBP: 00007ffc98b067bc R08: 0000000000000000 R09: 0000000000000001 [ 920.935893][ C0] R10: 000055557eda57d0 R11: 0000000000000246 R12: 0000000000000001 [ 920.935904][ C0] R13: 00000000000927c0 R14: 00000000000e0b8d R15: 00007ffc98b06810 [ 920.935925][ C0] [ 920.936849][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 920.936870][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.936899][ T37] Tainted: [L]=SOFTLOCKUP [ 920.936908][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.936921][ T37] Call Trace: [ 920.936930][ T37] [ 920.936940][ T37] vpanic+0x56c/0xa60 [ 920.936980][ T37] ? __pfx_vpanic+0x10/0x10 [ 920.937023][ T37] panic+0xc5/0xd0 [ 920.937055][ T37] ? __pfx_panic+0x10/0x10 [ 920.937083][ T37] ? printk_trigger_flush+0x117/0x180 [ 920.937124][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.937163][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 920.937196][ T37] watchdog+0x1023/0x1030 [ 920.937231][ T37] ? watchdog+0x21a/0x1030 [ 920.937268][ T37] kthread+0x388/0x470 [ 920.937293][ T37] ? __pfx_watchdog+0x10/0x10 [ 920.937317][ T37] ? __pfx_kthread+0x10/0x10 [ 920.937343][ T37] ret_from_fork+0x51e/0xb90 [ 920.937378][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 920.937408][ T37] ? __switch_to+0xc7d/0x1450 [ 920.937440][ T37] ? __pfx_kthread+0x10/0x10 [ 920.937465][ T37] ret_from_fork_asm+0x1a/0x30 [ 920.937503][ T37] [ 920.937893][ T37] Kernel Offset: disabled