last executing test programs: 49.947104851s ago: executing program 2 (id=35015): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="9a0000310067660fc7b60000c0fe660fc734d9ed670f06260ff52464660f3a4274009366b99e00000066b80700000066ba000000000f30660f38814ac536660f38805363", 0x44}], 0x1, 0x74, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 49.777182725s ago: executing program 2 (id=35018): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 49.504157997s ago: executing program 2 (id=35020): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) 49.299530265s ago: executing program 2 (id=35022): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 49.145812754s ago: executing program 2 (id=35024): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x1) 48.918865212s ago: executing program 2 (id=35026): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 33.881341129s ago: executing program 32 (id=35026): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 29.535596771s ago: executing program 3 (id=35237): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x3, 0x0) fcntl$setpipe(r0, 0x4, 0xfffffffffffff000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) 29.183154746s ago: executing program 3 (id=35239): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 28.924729161s ago: executing program 3 (id=35241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1d}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) 28.587164588s ago: executing program 3 (id=35244): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) 21.263810602s ago: executing program 1 (id=35310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) 20.272819364s ago: executing program 3 (id=35320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 20.167809037s ago: executing program 1 (id=35321): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) ppoll(&(0x7f0000000380)=[{r1, 0x120}], 0x1, 0x0, 0x0, 0x0) 19.349252225s ago: executing program 3 (id=35327): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 19.04020647s ago: executing program 4 (id=35329): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 19.023994146s ago: executing program 4 (id=35330): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff}) 18.872719154s ago: executing program 4 (id=35332): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 18.39258802s ago: executing program 1 (id=35333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 18.30987471s ago: executing program 1 (id=35334): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r1, 0x0, 0x0, 0x1, 0x0) 18.308833275s ago: executing program 1 (id=35335): rename(0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 18.264304159s ago: executing program 1 (id=35336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r0) syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$TUNSETNOCSUM(r0, 0xff0a, 0x0) 17.942469208s ago: executing program 4 (id=35338): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000240)={0x0, 0x100, 0x80, 0x2, 0x333}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000140)={0xfff, 0x6}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) 17.635167885s ago: executing program 4 (id=35342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x8, 0x4, 0xfe, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x7a08000, 0x5, 0x4d56, 0xfffe, 0x9, 0x7, 0x8, {r1, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x10001}}, 0x0, 0x6, 0x7, 0xfffffffc, 0xfffff628}}, &(0x7f0000000040)=0xb0) 17.416286979s ago: executing program 4 (id=35344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000060000000100", @ANYRES32], 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006e02"]) 16.796292896s ago: executing program 0 (id=35347): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xb, r2}, 0x10) 16.753961343s ago: executing program 0 (id=35348): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0x1080}, {r0, 0xc200}], 0x2, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 15.788105885s ago: executing program 0 (id=35349): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x6a040000) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 15.679599091s ago: executing program 0 (id=35350): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x25c, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6c, 0xe, 0x3, 0x32}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x6}, {0x2, 0x4, 0x2}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2b8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)='d', 0x2}]) 15.546725173s ago: executing program 0 (id=35351): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x7ff, 0xee01, 0x0, 0x8000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0xf, 0x8}, 0x8000, 0xa, 0x8, 0x6}}}}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 15.453369795s ago: executing program 0 (id=35352): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x21, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x814}}}, 0x0) 3.998871258s ago: executing program 33 (id=35327): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.001792663s ago: executing program 34 (id=35336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r0) syz_clone(0xb00b000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$TUNSETNOCSUM(r0, 0xff0a, 0x0) 2.001739276s ago: executing program 35 (id=35344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000060000000100", @ANYRES32], 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006e02"]) 0s ago: executing program 36 (id=35352): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x21, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x814}}}, 0x0) kernel console output (not intermixed with test programs): rior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2020.251035][T28098] usb 3-1: USB disconnect, device number 42 [ 2020.457996][ T3016] misc userio: Can't change port type on an already running userio instance [ 2020.676675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2020.744485][ T3034] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.33322'. [ 2021.007191][ T3049] vivid-002: disconnect [ 2021.030165][ T3048] vivid-002: reconnect [ 2021.128175][ T3056] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 2021.716756][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2022.542159][ T3121] : renamed from bond0 (while UP) [ 2022.756628][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2022.827459][ T3131] netlink: 3 bytes leftover after parsing attributes in process `syz.4.33358'. [ 2022.854225][ T3131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33358'. [ 2023.372645][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33366'. [ 2023.422424][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33366'. [ 2023.796444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2024.436660][ T5978] Bluetooth: hci0: command 0x0406 tx timeout [ 2024.564862][ T3227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33390'. [ 2024.836670][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2024.865848][ T3255] tun0: tun_chr_ioctl cmd 1074025672 [ 2024.875168][ T3255] tun0: ignored: set checksum enabled [ 2025.077058][T28098] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2025.100979][ T3269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33395'. [ 2025.246616][T28098] usb 3-1: Using ep0 maxpacket: 32 [ 2025.273085][T28098] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2025.289010][T28098] usb 3-1: config 0 has no interface number 0 [ 2025.309972][T28098] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2025.322930][T28098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.344522][ T30] audit: type=1326 audit(1758854493.336:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3276 comm="syz.0.33397" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700e539 code=0x0 [ 2025.345305][T28098] usb 3-1: Product: syz [ 2025.380762][T28098] usb 3-1: Manufacturer: syz [ 2025.385609][T28098] usb 3-1: SerialNumber: syz [ 2025.399406][T28098] usb 3-1: config 0 descriptor?? [ 2025.429416][T28098] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2025.562133][ T3289] netlink: 'syz.1.33400': attribute type 14 has an invalid length. [ 2025.624082][T28098] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2025.655755][T28098] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2025.876589][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2026.030959][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2026.032420][T28064] usb 3-1: USB disconnect, device number 43 [ 2026.067398][T28064] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2026.104695][T28064] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2026.135235][T28064] quatech2 3-1:0.51: device disconnected [ 2026.916653][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2027.956461][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2028.099743][ T3399] ALSA: mixer_oss: invalid index 40000 [ 2028.996515][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2030.011207][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33467'. [ 2030.036476][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2030.326715][T28053] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 2030.492052][ T3560] netlink: 92 bytes leftover after parsing attributes in process `syz.0.33477'. [ 2030.499109][T28053] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 2030.519661][T28053] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.559605][T28053] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 2030.570798][T28053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.587054][T28053] usb 3-1: Product: syz [ 2030.591424][T28053] usb 3-1: Manufacturer: syz [ 2030.596107][T28053] usb 3-1: SerialNumber: syz [ 2030.615655][T28053] usb 3-1: config 0 descriptor?? [ 2030.629529][T28053] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2031.076642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2031.451559][T28053] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 2031.460206][T28053] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2031.488034][T28053] usb 3-1: USB disconnect, device number 44 [ 2031.676568][T28101] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2031.848791][T28101] usb 2-1: Using ep0 maxpacket: 16 [ 2031.859986][T28101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.896198][T28101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.912742][T28101] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2031.922770][T28101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.938455][T28101] usb 2-1: config 0 descriptor?? [ 2032.116606][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2032.405638][T28101] corsair 0003:1B1C:1B02.0092: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 2032.789157][T28101] usb 2-1: USB disconnect, device number 44 [ 2033.156615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2033.982311][ T3766] netlink: 272 bytes leftover after parsing attributes in process `syz.1.33535'. [ 2034.043717][ T3768] fuse: Unknown parameter ' 0 [ 2034.043717][ T3768] tunl0: 0 0 0 0 0 0 0 0 0 0 1002 0 0 0 2 0 [ 2034.043717][ T3768] gre0: 60 1 0 0 0 0 0 1 0 0 7 0 0 0 7 0 [ 2034.043717][ T3768] gretap0: 0 0 0 0 0 0 0 0 0 0 20 2 0 0 0 0 [ 2034.043717][ T3768] erspan0: 0 0 0 0 0 0 0 0 0 0 19 5 0 0 0 0 [ 2034.043717][ T3768] ip_vti0: 0 0 0 0 0 0 0 0 0 0 1001 0 0 0 0 0 [ 2034.043717][ T3768] ip6_vti0: 0 0 0 0 0 0 0 0 0 0 8 8 0 0 8 0 [ 2034.043717][ T3768] sit0: 0 0 0 0 0 0 0 0 0 0 7 1 0 0 0 0 [ 2034.043717][ T3768] ip6tnl0: 0 0 0 0 0 0 0 0 0 0 11 11 0 0 11 0 [ 2034.043717][ T3768] ip6 [ 2034.058885][ T3770] ip6tnl0: Caught tx_queue_len zero misconfig [ 2034.168763][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.169271][T28101] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2034.196871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2034.316653][T28101] usb 3-1: Using ep0 maxpacket: 32 [ 2034.327015][T28101] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2034.343399][T28101] usb 3-1: config 0 has no interface number 0 [ 2034.353783][T28101] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2034.363312][T28101] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2034.380807][T28101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.391587][T28101] usb 3-1: Product: syz [ 2034.395805][T28101] usb 3-1: Manufacturer: syz [ 2034.430076][T28101] usb 3-1: SerialNumber: syz [ 2034.455678][T28101] usb 3-1: config 0 descriptor?? [ 2034.484571][T28101] smsc75xx v1.0.0 [ 2035.236441][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2035.294687][T28101] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2035.313520][T28101] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2035.344213][T28101] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2035.391830][T28101] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2035.442857][T28101] usb 3-1: USB disconnect, device number 45 [ 2035.506812][T28098] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2035.660555][T28098] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2035.675667][T28098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.705244][T28098] usb 2-1: config 0 descriptor?? [ 2035.728083][T28098] cp210x 2-1:0.0: cp210x converter detected [ 2035.797265][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33558'. [ 2036.235867][ T3879] binder: 3877:3879 ioctl c0306201 80000640 returned -22 [ 2036.276638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2036.338180][T28098] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2036.347022][T28098] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2036.374740][T28098] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2036.412426][T28098] usb 2-1: USB disconnect, device number 45 [ 2036.442473][T28098] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2036.463697][T28098] cp210x 2-1:0.0: device disconnected [ 2036.708595][ T3915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33576'. [ 2036.736918][ T3915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33576'. [ 2037.316711][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2037.354743][ T3954] ALSA: mixer_oss: invalid OSS volume '' [ 2037.365523][ T3954] ALSA: mixer_oss: invalid OSS volume '' [ 2038.153034][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33601'. [ 2038.207317][ T3983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.33601'. [ 2038.263592][ T3983] batadv1: entered promiscuous mode [ 2038.280040][ T3983] batadv1: entered allmulticast mode [ 2038.366459][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2038.940639][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33610'. [ 2039.336129][ T4025] veth1_to_team: entered promiscuous mode [ 2039.396698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2039.411201][ T4025] veth1_to_team: left promiscuous mode [ 2040.004160][ T4072] binder: 4071:4072 ioctl c0306201 80000040 returned -14 [ 2040.437708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2040.671220][ T30] audit: type=1326 audit(1758854508.666:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2040.721467][ T30] audit: type=1326 audit(1758854508.666:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2040.806757][ T30] audit: type=1326 audit(1758854508.666:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2040.845359][ T4109] kvm: kvm [4105]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 2040.878767][ T30] audit: type=1326 audit(1758854508.666:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2040.939330][ T30] audit: type=1326 audit(1758854508.666:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.017051][ T30] audit: type=1326 audit(1758854508.666:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.070630][ T30] audit: type=1326 audit(1758854508.666:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.155407][ T30] audit: type=1326 audit(1758854508.666:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.223569][ T30] audit: type=1326 audit(1758854508.666:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.306471][ T30] audit: type=1326 audit(1758854508.666:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.1.33630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2041.476586][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2041.725428][ T4155] ALSA: mixer_oss: invalid OSS volume 'LIN$' [ 2042.126872][T28050] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2042.296897][T28050] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2042.321089][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.349917][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.361556][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.373601][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.387187][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.406523][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.414022][ T4178] sctp: [Deprecated]: syz.1.33658 (pid 4178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2042.414022][ T4178] Use struct sctp_sack_info instead [ 2042.418000][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.450014][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.466479][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.493856][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.516453][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2042.531019][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.552355][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.567913][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.579018][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.601209][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.618676][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.629069][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.646714][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.655028][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.665648][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.697039][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.715959][T28050] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2042.725538][T28050] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2042.755142][T28050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2042.775084][T28050] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2042.784937][T28050] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2042.798117][T28050] usb 4-1: Product: syz [ 2042.810257][T28050] usb 4-1: Manufacturer: syz [ 2042.825282][T28050] usb 4-1: SerialNumber: syz [ 2042.842562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.849117][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.873553][T28050] usb 4-1: config 0 descriptor?? [ 2042.893574][T28050] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2042.956185][ T4198] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.33662'. [ 2043.303846][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 2043.311810][T28064] usb 4-1: USB disconnect, device number 16 [ 2043.331021][T28064] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2043.556456][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2043.914432][ T4274] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 2043.914432][ T4274] program syz.2.33679 not setting count and/or reply_len properly [ 2044.039343][ T4279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2044.469338][ T4294] netlink: 10 bytes leftover after parsing attributes in process `syz.4.33688'. [ 2044.606434][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2045.451015][ T4327] syz.1.33700 (4327): drop_caches: 2 [ 2045.636446][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2045.915156][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33705'. [ 2045.972780][ T4340] netlink: 72 bytes leftover after parsing attributes in process `syz.0.33705'. [ 2046.421474][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33715'. [ 2046.501759][ T4371] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2046.521963][ T4370] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2046.676513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2047.311033][T28050] hid-generic 0000:0004:0000.0093: unknown main item tag 0x0 [ 2047.336856][ T4415] tunl0: Caught tx_queue_len zero misconfig [ 2047.343017][T28050] hid-generic 0000:0004:0000.0093: unknown main item tag 0x0 [ 2047.359931][T28050] hid-generic 0000:0004:0000.0093: unknown main item tag 0x0 [ 2047.388688][T28050] hid-generic 0000:0004:0000.0093: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2047.445609][ T4423] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 2047.573621][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33740'. [ 2047.716497][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2048.145881][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2048.145901][ T30] audit: type=1326 audit(1758854516.136:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.228454][ T30] audit: type=1326 audit(1758854516.136:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.253897][ T30] audit: type=1326 audit(1758854516.186:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.314519][ T30] audit: type=1326 audit(1758854516.186:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.381859][ T30] audit: type=1326 audit(1758854516.186:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.450297][ T30] audit: type=1326 audit(1758854516.206:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.480442][ T30] audit: type=1326 audit(1758854516.206:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.511087][ T30] audit: type=1326 audit(1758854516.206:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.534446][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33755'. [ 2048.547761][ T30] audit: type=1326 audit(1758854516.206:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.572192][ T30] audit: type=1326 audit(1758854516.206:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4454 comm="syz.1.33750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2048.676850][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33757'. [ 2048.756435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2049.560649][ T5235] Dev loop6: unable to read RDB block 1 [ 2049.588116][ T5235] loop6: unable to read partition table [ 2049.614533][ T5235] loop6: partition table beyond EOD, truncated [ 2049.796460][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2050.176293][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33777'. [ 2050.836928][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2051.466799][ T4611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.33806'. [ 2051.877236][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2052.916650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2053.317504][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33840'. [ 2053.956587][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2054.182760][ T4743] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.33856'. [ 2054.193998][ T4743] netlink: zone id is out of range [ 2054.216743][ T4743] netlink: zone id is out of range [ 2054.224860][ T4743] netlink: zone id is out of range [ 2054.230656][ T4743] netlink: zone id is out of range [ 2054.236037][ T4743] netlink: zone id is out of range [ 2054.596162][ T4760] fuse: Unknown parameter '1 [ 2054.596162][ T4760] TracerPid: 0 [ 2054.596162][ T4760] Uid: 0 0 0 0 [ 2054.596162][ T4760] Gid: 0 0 0 0 [ 2054.596162][ T4760] FDSize: 256 [ 2054.596162][ T4760] Groups: 0 65534 [ 2054.596162][ T4760] NStgid: 2169 [ 2054.596162][ T4760] NSpid: 2170 [ 2054.596162][ T4760] NSpgid: 2169 [ 2054.596162][ T4760] NSsid: 0 [ 2054.596162][ T4760] Kthread: 0 [ 2054.596162][ T4760] VmPeak: 101824 kB [ 2054.596162][ T4760] VmSize: 101824 kB [ 2054.596162][ T4760] VmLck: 0 kB [ 2054.596162][ T4760] VmPin: 0 kB [ 2054.596162][ T4760] VmHWM: 23596 kB [ 2054.596162][ T4760] VmRSS: 23596 kB [ 2054.596162][ T4760] RssAnon: 1216 kB [ 2054.596162][ T4760] RssFile: 22380 kB [ 2054.596162][ T4760] RssShmem: 0 kB [ 2054.596162][ T4760] VmData: 36496 kB [ 2054.596162][ T4760] VmStk: 132 kB [ 2054.596162][ T4760] VmExe: 1704 kB [ 2054.596162][ T4760] VmLib: 8 kB [ 2054.596162][ T4760] VmPTE: 108 kB [ 2054.596162][ T4760] VmSwap: 0 kB [ 2054.596162][ T4760] HugetlbPages: 0 kB [ 2054.596162][ T4760] CoreDumping: 0 [ 2054.596162][ T4760] THP_enabled: 1 [ 2054.596162][ T4760] untag_mask: 0xffffffffffffffff [ 2054.596162][ T4760] Threads: 2 [ 2054.596162][ T4760] SigQ: 2/13004 [ 2054.596162][ T4760] SigPnd: 0000000000000000 [ 2054.596162][ T4760] ShdPnd: 0000000000000000 [ 2054.596162][ T4760] SigBlk: 0000000000000000 [ 2054.596162][ T4760] SigIgn: fffffffefffaba35 [ 2054.596162][ T4760] SigCgt: 0000000100010440 [ 2054.596162][ T4760] CapInh: 0000000000000000 [ 2054.596162][ T4760] CapPrm: 000001ffff77ffff [ 2054.596162][ T4760] CapEff: 000001ffff77ffff [ 2054.596162][ T4760] CapBnd: 000001ffffffffff [ 2054.596162][ T4760] CapAmb: 0000000000000000 [ 2054.596162][ T4760] NoNewPrivs: 0 [ 2054.596162][ T4760] Seccomp: 0 [ 2054.596162][ T4760] Seccomp_filters: 0 [ 2054.596162][ T4760] Speculation_Store_Bypass: thread vulnerable [ 2054.596162][ T4760] SpeculationIndirectBranch: conditional enabled [ 2054.873360][ T4766] net_ratelimit: 4057 callbacks suppressed [ 2054.873386][ T4766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2054.950941][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33876'. [ 2054.996597][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2055.059338][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33876'. [ 2055.195082][ T4785] openvswitch: netlink: IP tunnel dst address not specified [ 2056.036722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2056.217726][ T4835] kvm: user requested TSC rate below hardware speed [ 2056.433149][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33901'. [ 2056.676060][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33908'. [ 2056.866556][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33911'. [ 2056.900315][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33911'. [ 2057.076479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2057.354177][ T4899] macvtap1: entered allmulticast mode [ 2057.362071][ T4899] batadv_slave_1: entered allmulticast mode [ 2058.116580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2058.653178][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33940'. [ 2059.156580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2059.436001][ T4997] netlink: 'syz.3.33951': attribute type 9 has an invalid length. [ 2059.457062][ T4997] netlink: 200108 bytes leftover after parsing attributes in process `syz.3.33951'. [ 2059.468476][ T4997] openvswitch: netlink: Message has 5 unknown bytes. [ 2060.196427][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2061.236446][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2061.655735][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33975'. [ 2062.083969][ T5077] netlink: 'syz.4.33982': attribute type 11 has an invalid length. [ 2062.102269][ T5077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.33982'. [ 2062.276654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2062.385722][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33989'. [ 2062.996778][T28098] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2063.150300][T28098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 2063.172735][T28098] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2063.193057][T28098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.207848][T28098] usb 4-1: config 0 descriptor?? [ 2063.317090][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2063.495260][ T5135] ip6tnl0: Caught tx_queue_len zero misconfig [ 2063.630108][T28098] aquacomputer_d5next 0003:0C70:F0BD.0094: item fetching failed at offset 0/3 [ 2063.665842][T28098] aquacomputer_d5next 0003:0C70:F0BD.0094: probe with driver aquacomputer_d5next failed with error -22 [ 2063.830222][T28098] usb 4-1: USB disconnect, device number 17 [ 2064.356668][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2065.396637][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2066.436489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2067.176512][T28101] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2067.355706][T28101] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2067.376281][T28101] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2067.407138][T28101] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 2067.424335][T28101] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 2067.435334][T28101] usb 2-1: config 220 has no interface number 2 [ 2067.459518][T28101] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2067.476921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2067.511610][T28101] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2067.533760][T28101] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2067.543637][T28101] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2067.562223][T28101] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2067.572491][T28101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.587087][T28101] usb 2-1: Product: syz [ 2067.597288][T28101] usb 2-1: Manufacturer: syz [ 2067.605121][T28101] usb 2-1: SerialNumber: syz [ 2067.847627][T28101] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 2067.877472][T28101] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2067.894763][T28101] usb 2-1: No valid video chain found. [ 2067.902765][T28101] usb 2-1: selecting invalid altsetting 0 [ 2067.944788][T28101] usb 2-1: selecting invalid altsetting 0 [ 2067.965726][T28101] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2067.997596][T28101] usb 2-1: USB disconnect, device number 46 [ 2068.035477][ T5344] tun0: tun_chr_ioctl cmd 1074025675 [ 2068.062472][ T5344] tun0: persist enabled [ 2068.073610][ T5344] tun0: tun_chr_ioctl cmd 1074025675 [ 2068.088485][ T5344] tun0: persist enabled [ 2068.206005][ T5359] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.34062'. [ 2068.526425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2069.033962][ T5409] sg_write: data in/out 475/70 bytes for SCSI command 0x5-- guessing data in; [ 2069.033962][ T5409] program syz.0.34079 not setting count and/or reply_len properly [ 2069.126659][T28098] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2069.278276][T28098] usb 3-1: config 0 has no interfaces? [ 2069.287972][T28098] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2069.308198][T28098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.316234][T28098] usb 3-1: Product: syz [ 2069.347433][T28098] usb 3-1: Manufacturer: syz [ 2069.361663][T28098] usb 3-1: SerialNumber: syz [ 2069.380004][T28098] usb 3-1: config 0 descriptor?? [ 2069.556419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2069.609535][T28101] usb 3-1: USB disconnect, device number 46 [ 2070.596487][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2071.096799][T28101] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2071.260622][T28101] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2071.283783][T28101] usb 2-1: config 0 has no interface number 0 [ 2071.315730][T28101] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2071.331110][T28101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.340643][T28101] usb 2-1: Product: syz [ 2071.344932][T28101] usb 2-1: Manufacturer: syz [ 2071.355340][T28101] usb 2-1: SerialNumber: syz [ 2071.372453][T28101] usb 2-1: config 0 descriptor?? [ 2071.487695][ T5535] syzkaller1: entered promiscuous mode [ 2071.493362][ T5535] syzkaller1: entered allmulticast mode [ 2071.598340][T28101] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2071.625404][T28101] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2071.646466][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2071.654878][T28101] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2071.672065][T28101] usb 2-1: media controller created [ 2071.722929][T28101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2071.803675][T28101] i2c i2c-4: ec100: i2c rd failed=-71 reg=33 [ 2071.882746][T28101] usb 2-1: USB disconnect, device number 47 [ 2072.141999][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34121'. [ 2072.156815][ T5569] hsr_slave_0: left promiscuous mode [ 2072.686533][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2072.831990][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.839491][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.121598][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2073.121618][ T30] audit: type=1326 audit(1758854541.116:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.1.34136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2073.159723][ T30] audit: type=1326 audit(1758854541.116:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.1.34136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2073.203081][ T30] audit: type=1326 audit(1758854541.116:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.1.34136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2073.233481][ T30] audit: type=1326 audit(1758854541.116:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.1.34136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2073.255589][ C1] vkms_vblank_simulate: vblank timer overrun [ 2073.463354][ T5631] IPv6: Can't replace route, no match found [ 2073.534475][ T5591] gtp0: left promiscuous mode [ 2073.545330][ T5591] gtp0: left allmulticast mode [ 2073.570430][ T5591] hsr0: left allmulticast mode [ 2073.585537][ T5591] hsr_slave_0: left allmulticast mode [ 2073.598479][ T5591] hsr_slave_1: left allmulticast mode [ 2073.617790][ T5591] macvlan3: left promiscuous mode [ 2073.633803][ T5591] macvlan3: left allmulticast mode [ 2073.645020][ T5591] vlan0: left allmulticast mode [ 2073.658816][ T5591] bond1: left promiscuous mode [ 2073.669600][ T5603] batadv_slave_1: entered promiscuous mode [ 2073.679157][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.701976][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.716560][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2073.738187][ T5602] batadv_slave_1: left promiscuous mode [ 2073.782143][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.816691][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.844480][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.871792][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.923647][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.950215][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.390744][ T5701] binder: 5700:5701 ioctl c0306201 80000540 returned -14 [ 2074.756556][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2074.843233][ T5729] sg_write: data in/out 475/70 bytes for SCSI command 0x5-- guessing data in; [ 2074.843233][ T5729] program syz.3.34161 not setting count and/or reply_len properly [ 2075.237412][T28064] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2075.398561][T28064] usb 3-1: config 0 has no interfaces? [ 2075.408724][T28064] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2075.429253][T28064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.438349][T28064] usb 3-1: Product: syz [ 2075.442724][T28064] usb 3-1: Manufacturer: syz [ 2075.456449][T28064] usb 3-1: SerialNumber: syz [ 2075.474712][T28064] usb 3-1: config 0 descriptor?? [ 2075.581636][ T5800] netlink: 188 bytes leftover after parsing attributes in process `syz.1.34176'. [ 2075.763596][T28064] usb 3-1: USB disconnect, device number 47 [ 2075.796690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2075.886748][T28098] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2076.046722][T28098] usb 2-1: Using ep0 maxpacket: 32 [ 2076.053683][T28098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.072609][T28098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.083527][T28098] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2076.100356][T28098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.112202][T28098] usb 2-1: config 0 descriptor?? [ 2076.597045][T28098] savu 0003:1E7D:2D5A.0095: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2076.636482][T28053] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2076.798497][T28053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.815626][T28053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.830727][T28098] usb 2-1: USB disconnect, device number 48 [ 2076.846637][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2076.853630][T28053] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2076.869201][T28053] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2076.889419][T28053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.907531][T28053] usb 3-1: config 0 descriptor?? [ 2077.337616][T28053] plantronics 0003:047F:FFFF.0096: reserved main item tag 0xd [ 2077.383310][T28053] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2077.626038][T28053] usb 3-1: USB disconnect, device number 48 [ 2077.834715][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34193'. [ 2077.876944][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2078.189125][ T5907] geneve2: left promiscuous mode [ 2078.201919][ T5907] geneve2: left allmulticast mode [ 2078.260386][ T5907] macvlan2: left promiscuous mode [ 2078.280725][T19041] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2078.296618][ T30] audit: type=1326 audit(1758854546.286:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.34197" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x0 [ 2078.324195][T19041] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2078.343026][T19041] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2078.352762][T19041] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 2078.578564][ T5919] pimreg: entered allmulticast mode [ 2078.623464][ T5919] pimreg: left allmulticast mode [ 2078.858057][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34205'. [ 2078.871073][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34205'. [ 2078.892108][ T5942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.34205'. [ 2078.913477][ T5942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.34205'. [ 2078.922999][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2079.709612][ T5999] syz_tun: entered promiscuous mode [ 2079.731862][ T5999] batadv_slave_0: entered promiscuous mode [ 2079.752322][ T5999] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 2079.780936][ T5999] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 2079.813721][ T5999] hsr1: entered allmulticast mode [ 2079.846533][ T5999] syz_tun: entered allmulticast mode [ 2079.860966][ T5999] batadv_slave_0: entered allmulticast mode [ 2079.955815][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34226'. [ 2079.964951][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2080.029567][ T6021] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 2080.075057][ T6021] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (4294967295) [ 2080.347230][ T6039] input: syz1 as /devices/virtual/input/input267 [ 2080.701806][ T6062] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2080.986870][T28049] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2081.006604][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2081.168572][T28049] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 2081.192870][T28049] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.210843][T28049] usb 3-1: config 0 has no interface number 0 [ 2081.235269][T28049] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 2081.250768][T28049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.288211][T28049] usb 3-1: config 0 descriptor?? [ 2081.326842][T28049] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 2081.356763][T28049] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 2081.526565][T28061] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2081.541653][T28053] usb 3-1: USB disconnect, device number 49 [ 2081.699046][T28061] usb 4-1: Using ep0 maxpacket: 32 [ 2081.708298][T28061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.737621][T28061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.749450][T28061] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2081.759971][T28061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.771919][T28061] usb 4-1: config 0 descriptor?? [ 2082.027101][ T30] audit: type=1326 audit(1758854550.026:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.1.34250" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3539 code=0x0 [ 2082.048772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2082.210416][T28061] savu 0003:1E7D:2D5A.0097: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2082.458243][T28061] usb 4-1: USB disconnect, device number 18 [ 2083.076529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2083.464807][ T6202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2084.116426][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2084.500774][ T6227] syzkaller1: entered promiscuous mode [ 2084.522487][ T6227] syzkaller1: entered allmulticast mode [ 2084.883348][ T6247] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.34274'. [ 2085.076297][ T6255] netlink: 164 bytes leftover after parsing attributes in process `syz.2.34279'. [ 2085.156413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2085.807752][T28049] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2085.910024][ T6318] loop7: detected capacity change from 0 to 1 [ 2085.913733][ T6319] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.34296'. [ 2085.948442][T11223] Dev loop7: unable to read RDB block 1 [ 2085.954815][T11223] loop7: unable to read partition table [ 2085.961027][T11223] loop7: partition table beyond EOD, truncated [ 2085.969599][T28049] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2085.983518][ T6318] Dev loop7: unable to read RDB block 1 [ 2085.991800][T28049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2086.003727][ T6318] loop7: unable to read partition table [ 2086.010773][ T6318] loop7: partition table beyond EOD, truncated [ 2086.013834][T28049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2086.018001][ T6318] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 2086.044136][T28049] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2086.060337][T28049] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2086.070693][T28049] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2086.092546][T28049] usb 4-1: Manufacturer: syz [ 2086.107190][T28049] usb 4-1: config 0 descriptor?? [ 2086.196423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2086.523921][ T30] audit: type=1326 audit(1758854554.516:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.534003][T28049] appleir 0003:05AC:8243.0098: unknown main item tag 0x0 [ 2086.558452][ T30] audit: type=1326 audit(1758854554.516:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.583414][ T30] audit: type=1326 audit(1758854554.526:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.605544][ C1] vkms_vblank_simulate: vblank timer overrun [ 2086.615808][ T30] audit: type=1326 audit(1758854554.556:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.637978][ C1] vkms_vblank_simulate: vblank timer overrun [ 2086.645822][T28049] appleir 0003:05AC:8243.0098: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2086.662508][ T30] audit: type=1326 audit(1758854554.556:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.684685][ C1] vkms_vblank_simulate: vblank timer overrun [ 2086.694683][ T30] audit: type=1326 audit(1758854554.556:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.721913][ T30] audit: type=1326 audit(1758854554.556:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.762228][ T30] audit: type=1326 audit(1758854554.556:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.790730][ T30] audit: type=1326 audit(1758854554.556:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.823878][T28061] usb 4-1: USB disconnect, device number 19 [ 2086.855315][ T30] audit: type=1326 audit(1758854554.556:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.2.34307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2086.933249][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2087.236451][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2087.379188][ T6384] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2088.276476][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2088.657445][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34338'. [ 2089.316596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2089.976648][T28052] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2090.076079][ T6537] netlink: 360 bytes leftover after parsing attributes in process `syz.1.34357'. [ 2090.126483][T28052] usb 4-1: Using ep0 maxpacket: 16 [ 2090.142754][T28052] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2090.156492][T28052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.172299][T28052] usb 4-1: Product: syz [ 2090.182285][T28052] usb 4-1: Manufacturer: syz [ 2090.196794][T28052] usb 4-1: SerialNumber: syz [ 2090.212411][T28052] usb 4-1: config 0 descriptor?? [ 2090.238446][T28052] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2090.259489][T28052] usb 4-1: Detected FT-X [ 2090.356594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2090.443602][T28052] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2090.852816][ T6573] input: syz1 as /devices/virtual/input/input269 [ 2090.876765][T28052] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2091.069241][T28052] usb 4-1: USB disconnect, device number 20 [ 2091.148458][T28052] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2091.168315][T28052] ftdi_sio 4-1:0.0: device disconnected [ 2091.396696][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2092.176567][T28061] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2092.336621][T28061] usb 2-1: Using ep0 maxpacket: 32 [ 2092.361746][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2092.393584][T28061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.423363][T28061] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2092.436549][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2092.460409][T28061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.478035][T28061] usb 2-1: config 0 descriptor?? [ 2092.492134][T28061] hub 2-1:0.0: USB hub found [ 2092.709108][T28061] hub 2-1:0.0: 1 port detected [ 2093.119887][T28061] usb 2-1: USB disconnect, device number 49 [ 2093.476581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2093.844852][ T6740] sit0: left promiscuous mode [ 2093.889875][ T6740] veth0_to_team: left promiscuous mode [ 2093.964853][ T6740] geneve5: left promiscuous mode [ 2093.979642][ T6740] macsec1: left promiscuous mode [ 2093.984831][ T6740] macsec1: left allmulticast mode [ 2093.996029][ T6740] vlan4: left allmulticast mode [ 2094.006699][ T6740] bond0: left allmulticast mode [ 2094.012234][ T6740] bond6: left allmulticast mode [ 2094.022016][ T6740] bond10: left allmulticast mode [ 2094.082366][ T6740] ip6gretap4: left allmulticast mode [ 2094.192155][ T6740] gtp2: left promiscuous mode [ 2094.221854][ T6740] gtp2: left allmulticast mode [ 2094.248630][ T6740] batadv_slave_1: left allmulticast mode [ 2094.256584][ T6740] macvtap1: left allmulticast mode [ 2094.271415][T24063] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.321441][T24063] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.359625][T19041] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.397732][T19041] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.490979][T19041] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.516701][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2094.540925][T19041] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.571860][T19041] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2094.591477][T19041] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.557883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2096.307320][ T7758] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2096.483425][ T7758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2096.497332][ T7758] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2096.514840][ T7758] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2096.531101][ T7758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2096.541319][ T7758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.550196][ T7758] usb 4-1: Product: syz [ 2096.554867][ T7758] usb 4-1: Manufacturer: syz [ 2096.575103][ T7758] usb 4-1: SerialNumber: syz [ 2096.596597][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2096.806614][ T6899] input: syz0 as /devices/virtual/input/input270 [ 2096.807051][ T7758] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2096.860475][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34440'. [ 2096.893842][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34440'. [ 2096.911884][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34440'. [ 2097.371472][ T6926] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.34445'. [ 2097.566620][T28052] usb 4-1: USB disconnect, device number 21 [ 2097.588606][T28052] usblp0: removed [ 2097.636561][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2097.884250][ T6958] netlink: 'syz.0.34453': attribute type 29 has an invalid length. [ 2097.894290][ T6958] netlink: 'syz.0.34453': attribute type 29 has an invalid length. [ 2097.909540][ T6958] netlink: 600 bytes leftover after parsing attributes in process `syz.0.34453'. [ 2098.053036][ T6971] sock: sock_set_timeout: `syz.4.34456' (pid 6971) tries to set negative timeout [ 2098.633398][ T7008] input: syz1 as /devices/virtual/input/input271 [ 2098.676416][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2099.716559][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2099.976659][T28052] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2100.147135][T28052] usb 3-1: Using ep0 maxpacket: 32 [ 2100.157867][T28052] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2100.182912][T28052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.204800][T28052] usb 3-1: config 0 descriptor?? [ 2100.425027][T28052] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2100.448612][T28052] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2100.464671][T28052] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2100.472661][T28052] usb 3-1: media controller created [ 2100.509209][T28052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2100.630489][T28052] az6027: usb out operation failed. (-71) [ 2100.647121][T28052] az6027: usb out operation failed. (-71) [ 2100.659505][T28052] stb0899_attach: Driver disabled by Kconfig [ 2100.676149][T28052] az6027: no front-end attached [ 2100.676149][T28052] [ 2100.684009][T28052] az6027: usb out operation failed. (-71) [ 2100.690634][T28052] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2100.707380][T28052] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input272 [ 2100.732053][T28052] dvb-usb: schedule remote query interval to 400 msecs. [ 2100.740423][T28052] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2100.757050][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2100.760214][T28052] usb 3-1: USB disconnect, device number 50 [ 2100.821573][T28052] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2101.217212][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2101.217232][ T30] audit: type=1326 audit(1758854569.216:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.3.34498" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4539 code=0x0 [ 2101.796622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2102.118899][ T7201] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2102.836540][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2103.876630][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2104.280695][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.287158][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.309634][ T7317] netlink: 'syz.2.34539': attribute type 30 has an invalid length. [ 2104.916742][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2105.251669][ T7350] syzkaller1: entered promiscuous mode [ 2105.276692][ T7350] syzkaller1: entered allmulticast mode [ 2105.306718][ T6746] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2105.506718][ T6746] usb 2-1: Using ep0 maxpacket: 8 [ 2105.525287][ T6746] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2105.556459][ T6746] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2105.566250][ T6746] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2105.608315][ T6746] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2105.642558][ T6746] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2105.697002][ T6746] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2105.726780][ T6746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.954794][ T6746] usb 2-1: usb_control_msg returned -32 [ 2105.956575][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2105.986557][ T6746] usbtmc 2-1:16.0: can't read capabilities [ 2106.346041][ T7398] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 2106.553253][T28051] usb 2-1: USB disconnect, device number 50 [ 2106.615690][ T7410] netlink: 104 bytes leftover after parsing attributes in process `syz.2.34565'. [ 2106.740259][ T7419] input: syz1 as /devices/virtual/input/input273 [ 2106.912990][ T7428] loop8: detected capacity change from 0 to 8 [ 2106.953182][ T7428] Dev loop8: unable to read RDB block 8 [ 2106.969976][ T7428] loop8: unable to read partition table [ 2106.975889][ T7428] loop8: partition table beyond EOD, truncated [ 2106.996409][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2107.099824][ T7428] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2107.144135][ T7433] input: syz1 as /devices/virtual/input/input274 [ 2107.405754][ T7450] trusted_key: syz.0.34575 sent an empty control message without MSG_MORE. [ 2108.036415][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2108.471019][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34604'. [ 2108.537103][ T7511] cgroup: fork rejected by pids controller in /syz4 [ 2109.076480][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2109.413172][ T7528] dummy0: Caught tx_queue_len zero misconfig [ 2109.817618][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34608'. [ 2109.916828][ T7538] macvlan2: entered promiscuous mode [ 2109.942298][ T7538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2110.116535][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2110.285444][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2110.296908][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2110.311448][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2110.328593][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2110.336544][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2110.419870][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34616'. [ 2110.456529][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34616'. [ 2110.481657][ T7564] netlink: 'syz.2.34616': attribute type 7 has an invalid length. [ 2110.513617][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34616'. [ 2111.104046][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 2111.156424][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2111.177293][ T6746] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 2111.340294][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.356259][ T6746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2111.379623][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.390915][ T6746] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2111.409986][ T7566] bridge_slave_0: entered allmulticast mode [ 2111.422567][ T6746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.447072][ T7566] bridge_slave_0: entered promiscuous mode [ 2111.481344][ T6746] usb 3-1: config 0 descriptor?? [ 2111.488127][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.495324][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.526232][ T7666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2111.576312][ T7566] bridge_slave_1: entered allmulticast mode [ 2111.608773][ T7566] bridge_slave_1: entered promiscuous mode [ 2111.761647][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.799787][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.969732][ T7566] team0: Port device team_slave_0 added [ 2112.006037][ T6746] elan 0003:04F3:0755.0099: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 2112.021325][ T7566] team0: Port device team_slave_1 added [ 2112.179411][ T7868] input: syz1 as /devices/virtual/input/input275 [ 2112.196452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2112.221055][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2112.259513][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2112.285552][ C1] vkms_vblank_simulate: vblank timer overrun [ 2112.308431][ T7566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2112.344850][ T7850] pim6reg: entered allmulticast mode [ 2112.351761][ T7886] pim6reg: left allmulticast mode [ 2112.383287][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2112.391346][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2112.417352][ C1] vkms_vblank_simulate: vblank timer overrun [ 2112.425054][ T7566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2112.437058][T32563] Bluetooth: hci3: command tx timeout [ 2112.624348][ T7566] hsr_slave_0: entered promiscuous mode [ 2112.642782][ T7566] hsr_slave_1: entered promiscuous mode [ 2112.786675][T28051] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2112.831086][ T7954] netlink: 56 bytes leftover after parsing attributes in process `syz.3.34640'. [ 2112.857239][ T7954] netlink: 'syz.3.34640': attribute type 1 has an invalid length. [ 2112.997230][T28051] usb 2-1: Using ep0 maxpacket: 8 [ 2113.014564][T28051] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2113.037109][T28051] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2113.063394][T28051] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2113.092716][T28051] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2113.110496][T28051] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2113.125890][T28051] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2113.155963][T28051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.236483][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2113.283104][ T7566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2113.312190][ T7566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2113.336603][ T7566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2113.368184][ T7566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 2113.406867][ T7566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 2113.420558][T28051] usb 2-1: GET_CAPABILITIES returned 0 [ 2113.426109][T28051] usbtmc 2-1:16.0: can't read capabilities [ 2113.539960][ T7566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2113.551779][ T7566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2113.573325][ T7566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2113.593139][ T7566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 2113.608365][ T7566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 2113.765228][ T7566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2113.779473][ T7566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2113.791313][ T7566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2113.809867][ T7566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 2113.820522][ T7566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 2113.934254][ T8053] loop7: detected capacity change from 0 to 7 [ 2113.955572][ T7566] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2113.967323][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2113.971727][T28052] usb 3-1: USB disconnect, device number 51 [ 2113.976536][ C1] buffer_io_error: 10 callbacks suppressed [ 2113.976552][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2113.998442][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.001210][ T7566] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 2114.007693][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.028060][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.042239][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.057438][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.068651][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.079050][ T7566] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2114.082618][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.091763][ T7566] netdevsim netdevsim4  (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 2114.108971][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.111928][ T7566] netdevsim netdevsim4  (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 2114.128645][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.138968][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.148237][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.158245][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.166287][ T8053] ldm_validate_partition_table(): Disk read failed. [ 2114.173628][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.205375][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.230248][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.240078][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.252115][ T8053] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2114.262008][ T8053] Buffer I/O error on dev loop7, logical block 0, async page read [ 2114.275033][ T8053] Dev loop7: unable to read RDB block 0 [ 2114.277600][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2114.281652][ T8053] loop7: unable to read partition table [ 2114.294005][ T8053] loop7: partition table beyond EOD, truncated [ 2114.310047][ T8053] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 2114.320138][ T8078] netlink: 'syz.2.34652': attribute type 4 has an invalid length. [ 2114.368415][ T8078] netlink: 'syz.2.34652': attribute type 17 has an invalid length. [ 2114.516599][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2114.525087][T32563] Bluetooth: hci3: command tx timeout [ 2114.761355][ T8092] lo: entered promiscuous mode [ 2114.804818][ T8100] lo: entered allmulticast mode [ 2114.841180][ T8091] lo: left allmulticast mode [ 2114.850671][ T8091] lo: left promiscuous mode [ 2114.861182][ T7566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2114.980912][ T7566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2115.005115][ T7566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2115.083435][ T7566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2115.316455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2115.442396][ T7566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2115.490886][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 2115.534299][T24063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.541565][T24063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.687539][T24063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.694742][T24063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.710439][ T30] audit: type=1326 audit(1758854583.706:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2115.726900][T28052] usb 2-1: USB disconnect, device number 51 [ 2115.732652][ C1] vkms_vblank_simulate: vblank timer overrun [ 2115.822499][ T8137] syzkaller1: entered promiscuous mode [ 2115.853911][ T8137] syzkaller1: entered allmulticast mode [ 2115.859832][ T30] audit: type=1326 audit(1758854583.746:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2115.926619][ T30] audit: type=1326 audit(1758854583.746:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2115.988058][ T30] audit: type=1326 audit(1758854583.746:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2116.070254][ T30] audit: type=1326 audit(1758854583.746:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2116.168979][ T30] audit: type=1326 audit(1758854583.746:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2116.221199][ T7566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2116.266762][ T30] audit: type=1326 audit(1758854583.746:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2116.356441][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2116.373860][ T30] audit: type=1326 audit(1758854583.746:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2116.407428][ T30] audit: type=1326 audit(1758854583.746:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x7ffc0000 [ 2116.506911][ T30] audit: type=1326 audit(1758854583.746:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.34664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f24558 code=0x7ffc0000 [ 2116.599470][T32563] Bluetooth: hci3: command tx timeout [ 2116.623330][ T7566] veth0_vlan: entered promiscuous mode [ 2116.661938][ T7566] veth1_vlan: entered promiscuous mode [ 2116.699271][ T7566] veth0_macvtap: entered promiscuous mode [ 2116.745086][ T7566] veth1_macvtap: entered promiscuous mode [ 2116.800216][ T8162] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.34668'. [ 2116.829957][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2116.870438][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2116.916545][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.958321][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.007019][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.026565][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.184433][ T8180] loop4: detected capacity change from 0 to 7 [ 2117.212791][ T8180] Dev loop4: unable to read RDB block 7 [ 2117.227959][ T8180] loop4: unable to read partition table [ 2117.254837][ T8180] loop4: partition table beyond EOD, truncated [ 2117.265933][T24063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.291379][ T8180] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 2117.310897][T24063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.396520][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2117.448283][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.483942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.862456][ T8223] loop5: detected capacity change from 0 to 2887 [ 2117.931796][ T8223] loop5: [POWERTEC] [ 2118.436418][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2118.689112][T32563] Bluetooth: hci3: command tx timeout [ 2118.808047][ T5235] loop5: [POWERTEC] [ 2119.431982][ T8306] binder: 8303:8306 ioctl c0306201 800003c0 returned -14 [ 2119.476438][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2120.350742][ T8342] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.34711'. [ 2120.435511][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34712'. [ 2120.516416][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2121.556667][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2121.816517][ T871] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2121.968789][ T871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2122.005519][ T871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2122.016922][ T871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2122.027195][ T871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2122.042869][ T871] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2122.052196][ T8421] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.34728'. [ 2122.067780][ T871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.079655][ T871] usb 3-1: config 0 descriptor?? [ 2122.497247][ T871] plantronics 0003:047F:FFFF.009A: ignoring exceeding usage max [ 2122.519568][ T871] plantronics 0003:047F:FFFF.009A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2122.596414][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2123.636405][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2124.668281][T28051] usb 3-1: USB disconnect, device number 52 [ 2124.676424][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2124.912227][ T8557] netlink: 'syz.4.34754': attribute type 1 has an invalid length. [ 2124.944344][ T8557] netlink: 'syz.4.34754': attribute type 2 has an invalid length. [ 2125.496837][T28051] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2125.517990][ T8598] netlink: 'syz.0.34759': attribute type 11 has an invalid length. [ 2125.673853][T28051] usb 2-1: Using ep0 maxpacket: 8 [ 2125.716065][T28051] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 2125.727764][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2125.792088][T28051] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 2125.819649][T28051] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2125.829393][T28051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.841470][T28051] usb 2-1: Product: syz [ 2125.845677][T28051] usb 2-1: Manufacturer: syz [ 2125.852126][T28051] usb 2-1: SerialNumber: syz [ 2125.861550][ T8574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2126.202282][ T8617] syzkaller1: entered promiscuous mode [ 2126.223927][ T8617] syzkaller1: entered allmulticast mode [ 2126.756452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2126.912756][T28051] cdc_ncm 2-1:1.0: bind() failure [ 2126.967565][T28051] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2127.009646][T28051] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2127.059612][T28051] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 2127.104251][T28051] usb 2-1: USB disconnect, device number 52 [ 2127.637424][ T871] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 2127.796397][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2127.817508][ T871] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 2127.836876][T28051] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2127.845247][ T871] usb 3-1: config 0 has no interface number 0 [ 2127.866936][ T871] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2127.877228][ T871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.885535][ T871] usb 3-1: Product: syz [ 2127.890352][ T871] usb 3-1: Manufacturer: syz [ 2127.894993][ T871] usb 3-1: SerialNumber: syz [ 2127.903285][ T871] usb 3-1: config 0 descriptor?? [ 2127.998348][T28051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.013106][T28051] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2128.024668][T28051] usb 2-1: config 1 has no interface number 0 [ 2128.030974][T28051] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2128.042440][T28051] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2128.053302][T28051] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2128.097778][T28051] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2128.136878][T28051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.164859][T28051] usb 2-1: Product: syz [ 2128.174602][T28051] usb 2-1: Manufacturer: syz [ 2128.201202][T28051] usb 2-1: SerialNumber: syz [ 2128.320936][ T871] usb 3-1: Firmware version (0.0) predates our first public release. [ 2128.356225][ T871] usb 3-1: Please update to version 0.2 or newer [ 2128.377760][ T871] usb 3-1: Firmware: build [ 2128.603207][ T871] usb 3-1: USB disconnect, device number 53 [ 2128.776683][ T7758] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2128.836392][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2128.946893][ T7758] usb 4-1: Using ep0 maxpacket: 32 [ 2128.960738][ T7758] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2128.970118][ T7758] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2128.980184][ T7758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.998031][ T7758] usb 4-1: config 0 descriptor?? [ 2129.078439][T28051] cdc_ncm 2-1:1.1: bind() failure [ 2129.285659][ T871] usb 2-1: USB disconnect, device number 53 [ 2129.456670][ T7758] corsair-psu 0003:1B1C:1C09.009B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 2129.877302][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2129.878391][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2130.042863][ T7758] corsair-psu 0003:1B1C:1C09.009B: unable to initialize device (-71) [ 2130.084688][ T7758] corsair-psu 0003:1B1C:1C09.009B: probe with driver corsair-psu failed with error -71 [ 2130.110294][ T7758] usb 4-1: USB disconnect, device number 22 [ 2130.504520][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34810'. [ 2130.926424][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2131.399258][ T8925] loop8: detected capacity change from 0 to 5 [ 2131.413998][T11223] buffer_io_error: 7 callbacks suppressed [ 2131.414017][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.475137][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.511518][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.538771][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.561260][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.588261][ T6746] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 2131.613876][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.642569][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.671215][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.702501][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.716013][T11223] Buffer I/O error on dev loop8, logical block 0, async page read [ 2131.785626][ T6746] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2131.795387][ T6746] usb 3-1: config 0 has no interface number 0 [ 2131.812346][ T7758] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2131.819115][ T6746] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=ab.07 [ 2131.829712][ T6746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.838323][ T6746] usb 3-1: Product: syz [ 2131.843183][ T6746] usb 3-1: Manufacturer: syz [ 2131.871218][ T6746] usb 3-1: SerialNumber: syz [ 2131.897171][ T6746] usb 3-1: config 0 descriptor?? [ 2131.947941][ T6746] ftdi_sio 3-1:0.67: FTDI USB Serial Device converter detected [ 2131.956531][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2131.969243][ T6746] ftdi_sio ttyUSB0: unknown device type: 0xab07 [ 2131.998741][ T7758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.018432][ T7758] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2132.037543][ T7758] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2132.054893][ T7758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2132.063539][ T7758] usb 2-1: SerialNumber: syz [ 2132.184254][ T871] usb 3-1: USB disconnect, device number 54 [ 2132.211346][ T871] ftdi_sio 3-1:0.67: device disconnected [ 2132.328356][ T7758] usb 2-1: 0:2 : does not exist [ 2132.363748][ T7758] usb 2-1: USB disconnect, device number 54 [ 2132.414109][T11223] udevd[11223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2132.996429][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2133.471358][ T9053] syzkaller1: entered promiscuous mode [ 2133.481592][ T9053] syzkaller1: entered allmulticast mode [ 2133.941858][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34851'. [ 2133.971368][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34851'. [ 2133.982393][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34851'. [ 2134.046422][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2134.742107][ T30] kauditd_printk_skb: 324 callbacks suppressed [ 2134.742126][ T30] audit: type=1326 audit(1758854602.736:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.34856" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24539 code=0x0 [ 2134.770132][ C1] vkms_vblank_simulate: vblank timer overrun [ 2135.076420][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2136.116392][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2136.726630][ T6746] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2136.882970][ T6746] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2136.903001][ T6746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.923013][ T6746] usb 3-1: config 0 descriptor?? [ 2136.932849][ T6746] cp210x 3-1:0.0: cp210x converter detected [ 2137.156407][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2137.352424][ T6746] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2137.391176][ T6746] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2137.597370][T28051] usb 3-1: USB disconnect, device number 55 [ 2137.624643][T28051] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2137.656269][T28051] cp210x 3-1:0.0: device disconnected [ 2138.196517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2138.844259][ T9270] syzkaller1: entered promiscuous mode [ 2138.851111][ T9270] syzkaller1: entered allmulticast mode [ 2139.246442][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2139.735174][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34904'. [ 2139.986637][ T9323] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.34909'. [ 2140.016462][ T9323] netlink: 'syz.4.34909': attribute type 2 has an invalid length. [ 2140.037905][ T9323] netlink: 62135 bytes leftover after parsing attributes in process `syz.4.34909'. [ 2140.117510][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2140.276391][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2140.418169][ T9327] binder: 9326:9327 ioctl c0306201 80001a80 returned -14 [ 2140.765590][ T9352] sctp: [Deprecated]: syz.2.34918 (pid 9352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2140.765590][ T9352] Use struct sctp_sack_info instead [ 2141.224989][ T30] audit: type=1326 audit(1758854609.216:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.255603][ T30] audit: type=1326 audit(1758854609.216:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.314241][ T30] audit: type=1326 audit(1758854609.216:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.336491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2141.351588][ T30] audit: type=1326 audit(1758854609.216:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.388472][ T30] audit: type=1326 audit(1758854609.216:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.421202][ T30] audit: type=1326 audit(1758854609.256:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 2141.459576][ T30] audit: type=1326 audit(1758854609.256:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3558 code=0x7ffc0000 [ 2141.503114][ T30] audit: type=1326 audit(1758854609.256:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3558 code=0x7ffc0000 [ 2141.593312][ T30] audit: type=1326 audit(1758854609.256:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3558 code=0x7ffc0000 [ 2141.662530][ T30] audit: type=1326 audit(1758854609.256:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.34921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3558 code=0x7ffc0000 [ 2141.933997][T28051] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 2142.138178][T28051] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2142.206747][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2142.246486][T28051] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2142.283402][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2142.332404][ T9389] loop8: detected capacity change from 0 to 8 [ 2142.339444][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2142.366463][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2142.383474][ T9389] Dev loop8: unable to read RDB block 8 [ 2142.388554][T28051] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2142.400811][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2142.423702][ T9389] loop8: unable to read partition table [ 2142.433584][T28051] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2142.444244][ T9389] loop8: partition table beyond EOD, truncated [ 2142.476063][ T9389] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2142.489100][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2142.503761][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2142.562007][T28051] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2142.572636][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2142.593837][T28051] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2142.646758][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2142.695233][T28051] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2142.733079][T28051] usb 3-1: string descriptor 0 read error: -22 [ 2142.740547][T28051] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2142.766654][T28051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.832265][T28051] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2143.155082][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.34937'. [ 2143.396423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2143.774851][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34945'. [ 2144.282427][ T9477] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2144.366641][ T9477] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2144.436407][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2145.476407][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2145.712673][ T7758] usb 3-1: USB disconnect, device number 56 [ 2145.713857][ T9534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2145.845531][ T9548] bond_slave_1: entered promiscuous mode [ 2145.854631][ T9548] bond_slave_1: left promiscuous mode [ 2146.326528][ T7758] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2146.476429][ T7758] usb 2-1: Using ep0 maxpacket: 32 [ 2146.483088][ T7758] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2146.491682][ T7758] usb 2-1: config 0 has no interface number 0 [ 2146.500085][ T7758] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 2146.510508][ T7758] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 2146.519709][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2146.528364][ T7758] usb 2-1: Product: syz [ 2146.532569][ T7758] usb 2-1: Manufacturer: syz [ 2146.538610][ T7758] usb 2-1: SerialNumber: syz [ 2146.548990][ T7758] usb 2-1: config 0 descriptor?? [ 2146.559012][ T7758] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2146.568374][ T7758] usb 2-1: selecting invalid altsetting 1 [ 2146.574169][ T7758] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2146.584664][ T7758] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2146.595689][ T7758] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2146.604180][ T7758] usb 2-1: media controller created [ 2146.627331][ T7758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2146.700555][ T9586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2146.763460][ T7758] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2146.781553][ T7758] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2146.795379][ T7758] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2146.851866][ T7758] usb 2-1: USB disconnect, device number 55 [ 2147.410013][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34988'. [ 2147.426515][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34988'. [ 2147.446421][T28052] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2147.556488][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2147.598496][T28052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.626680][T28052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.640157][T28052] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2147.653780][T28052] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2147.666833][T28052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.686686][T28052] usb 4-1: config 0 descriptor?? [ 2148.155733][T28052] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2148.410249][T28052] usb 4-1: USB disconnect, device number 23 [ 2148.596580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2149.636617][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2149.919110][ T9790] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.35015'. [ 2150.239205][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35019'. [ 2150.676380][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2151.074488][ T9823] input: syz0 as /devices/virtual/input/input278 [ 2151.716398][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2151.726799][ T871] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 2151.929182][ T871] usb 4-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 2151.945930][ T871] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2151.956087][ T871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.975890][ T871] usb 4-1: Product: syz [ 2151.980650][ T871] usb 4-1: Manufacturer: syz [ 2151.985267][ T871] usb 4-1: SerialNumber: syz [ 2152.005211][ T871] usb 4-1: config 0 descriptor?? [ 2152.140321][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35042'. [ 2152.143261][ T9907] sctp: [Deprecated]: syz.1.35041 (pid 9907) Use of int in maxseg socket option. [ 2152.143261][ T9907] Use struct sctp_assoc_value instead [ 2152.149634][ T9909] netlink: 'syz.0.35042': attribute type 20 has an invalid length. [ 2152.149663][ T9909] netlink: 'syz.0.35042': attribute type 21 has an invalid length. [ 2152.242013][ T871] usb 4-1: bad CDC descriptors [ 2152.256167][ T871] usb 4-1: unsupported MDLM descriptors [ 2152.272586][ T871] usb 4-1: USB disconnect, device number 24 [ 2152.606701][T28051] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2152.756426][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2152.776688][T28051] usb 2-1: Using ep0 maxpacket: 32 [ 2152.783636][T28051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.795331][T28051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.805441][T28051] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2152.815008][T28051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.826859][T28051] usb 2-1: config 0 descriptor?? [ 2152.866897][ T30] kauditd_printk_skb: 783 callbacks suppressed [ 2152.866915][ T30] audit: type=1804 audit(1758854620.856:7212): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.35051" name="/newroot/2456/bus" dev="tmpfs" ino=12434 res=1 errno=0 [ 2153.262737][T28051] savu 0003:1E7D:2D5A.009D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2153.518804][T28051] usb 2-1: USB disconnect, device number 56 [ 2153.719130][T28052] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2153.726767][T32563] Bluetooth: hci1: command 0x0406 tx timeout [ 2153.743003][T28052] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2153.806403][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2154.836517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2155.306848][T10033] input: syz0 as /devices/virtual/input/input279 [ 2155.798105][T32563] Bluetooth: hci2: command 0x0405 tx timeout [ 2155.804394][T28052] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2155.817427][T28052] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2155.876445][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2156.916399][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2156.975831][T10082] netlink: 'syz.4.35085': attribute type 1 has an invalid length. [ 2156.985179][T10082] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.35085'. [ 2157.466499][T28051] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2157.648064][T28051] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2157.686375][T28051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.694716][T28051] usb 4-1: Product: syz [ 2157.704863][T28051] usb 4-1: Manufacturer: syz [ 2157.710007][T28051] usb 4-1: SerialNumber: syz [ 2157.726650][T28051] usb 4-1: config 0 descriptor?? [ 2157.757830][T28051] ch341 4-1:0.0: ch341-uart converter detected [ 2157.876869][T32563] Bluetooth: hci0: command 0x0406 tx timeout [ 2157.883128][T28052] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2157.902944][T28052] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 2157.956382][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2158.779768][T28051] usb 4-1: failed to send control message: -71 [ 2158.786165][T28051] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2158.820671][T28051] usb 4-1: USB disconnect, device number 25 [ 2158.829980][T28051] ch341 4-1:0.0: device disconnected [ 2159.006387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2160.036403][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2160.037050][T28052] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2160.043781][T32563] Bluetooth: hci3: command 0x0c1a tx timeout [ 2160.056815][T28052] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2160.076879][T28051] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2160.084759][ T7758] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2160.253664][T28051] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2160.262801][T28051] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2160.273616][T28051] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2160.290523][T28051] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2160.302233][T28051] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2160.302424][ T7758] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2160.323160][ T7758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.332830][T28051] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2160.347931][T28051] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2160.357428][ T7758] usb 2-1: config 0 descriptor?? [ 2160.365618][T28051] usb 4-1: Product: syz [ 2160.371580][ T7758] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2160.378090][T28051] usb 4-1: Manufacturer: syz [ 2160.397681][T28051] cdc_wdm 4-1:1.0: skipping garbage [ 2160.405876][T28051] cdc_wdm 4-1:1.0: skipping garbage [ 2160.416846][T28051] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2160.423435][T28051] cdc_wdm 4-1:1.0: Unknown control protocol [ 2160.625717][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2160.632705][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2160.639545][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2160.646186][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2160.653895][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2160.660578][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2160.668727][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2160.675384][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2160.681969][T28051] usb 4-1: USB disconnect, device number 26 [ 2160.688116][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2160.688148][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2160.688168][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2160.783128][ T7758] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 2161.086401][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2161.385574][ T7758] gspca_cpia1: usb_control_msg 05, error -71 [ 2161.402637][ T7758] cpia1 2-1:0.0: unexpected systemstate: 00 [ 2161.426653][ T7758] usb 2-1: USB disconnect, device number 57 [ 2161.792768][T10285] loop8: detected capacity change from 0 to 8 [ 2161.804527][T10285] Dev loop8: unable to read RDB block 8 [ 2161.810426][T10285] loop8: unable to read partition table [ 2161.816259][T10285] loop8: partition table beyond EOD, truncated [ 2161.824361][T10285] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2162.116622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2162.206415][T28103] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2162.375265][T28103] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2162.392679][T28103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2162.406268][T28103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2162.422764][T28103] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2162.443287][T28103] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2162.453534][T28103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.477157][T28103] usb 4-1: config 0 descriptor?? [ 2162.931830][T28103] plantronics 0003:047F:FFFF.009E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2163.166389][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2163.199479][ T7758] usb 4-1: USB disconnect, device number 27 [ 2163.746971][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35147'. [ 2163.762447][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35147'. [ 2164.039258][T10362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2164.196389][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2164.303128][T10381] loop9: detected capacity change from 0 to 7 [ 2164.311088][T10381] loop9: [POWERTEC] p1 p2 p3 [ 2164.328999][T10381] loop9: p1 start 1600481121 is beyond EOD, truncated [ 2164.333134][T10384] syzkaller1: entered promiscuous mode [ 2164.335926][T10381] loop9: p2 size 1680801792 extends beyond EOD, [ 2164.341931][T10384] syzkaller1: entered allmulticast mode [ 2164.382392][T10381] truncated [ 2164.392105][T10381] loop9: p3 start 1680801792 is beyond EOD, truncated [ 2164.500642][T11223] udevd[11223]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 2164.593851][T10401] kvm: user requested TSC rate below hardware speed [ 2165.235015][T10436] netlink: 'syz.4.35174': attribute type 2 has an invalid length. [ 2165.236444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2165.247571][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.35174'. [ 2165.335835][T10442] netlink: 44 bytes leftover after parsing attributes in process `syz.4.35177'. [ 2165.345199][T10442] netlink: 43 bytes leftover after parsing attributes in process `syz.4.35177'. [ 2165.359560][T10442] netlink: 'syz.4.35177': attribute type 6 has an invalid length. [ 2165.368055][T10442] netlink: 'syz.4.35177': attribute type 5 has an invalid length. [ 2165.375986][T10442] netlink: 43 bytes leftover after parsing attributes in process `syz.4.35177'. [ 2165.725235][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.731817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.276391][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2166.323285][T10478] netlink: 'syz.0.35192': attribute type 12 has an invalid length. [ 2166.341730][T10478] netlink: 'syz.0.35192': attribute type 29 has an invalid length. [ 2166.372845][T10478] netlink: 148 bytes leftover after parsing attributes in process `syz.0.35192'. [ 2166.595701][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35196'. [ 2166.598634][T10484] syzkaller1: entered promiscuous mode [ 2166.633198][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35196'. [ 2166.658057][T10484] syzkaller1: entered allmulticast mode [ 2166.754899][T10496] input: syz0 as /devices/virtual/input/input281 [ 2166.765245][T10496] input: failed to attach handler leds to device input281, error: -6 [ 2166.845551][T10499] syzkaller1: entered promiscuous mode [ 2166.852267][T10499] syzkaller1: entered allmulticast mode [ 2167.316397][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2167.354501][T10526] netlink: 'syz.0.35207': attribute type 7 has an invalid length. [ 2167.382433][T10526] netlink: 'syz.0.35207': attribute type 8 has an invalid length. [ 2167.406390][T10526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35207'. [ 2167.856493][ T871] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2168.009376][ T871] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2168.036601][ T871] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2168.056976][ T871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2168.079178][ T871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2168.118818][ T871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2168.140816][ T871] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2168.151388][ T871] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2168.159654][ T871] usb 2-1: Product: syz [ 2168.174056][ T871] usb 2-1: Manufacturer: syz [ 2168.200909][ T871] cdc_wdm 2-1:1.0: skipping garbage [ 2168.211041][ T871] cdc_wdm 2-1:1.0: skipping garbage [ 2168.228498][ T871] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2168.244763][ T871] cdc_wdm 2-1:1.0: Unknown control protocol [ 2168.348665][T10565] syzkaller1: entered promiscuous mode [ 2168.354202][T10565] syzkaller1: entered allmulticast mode [ 2168.359931][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2168.993474][T28103] usb 2-1: USB disconnect, device number 58 [ 2169.396408][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2170.436397][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2171.476758][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2172.516427][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2172.830996][T10701] vlan4: entered allmulticast mode [ 2172.847661][T10701] bridge0: port 3(vlan4) entered blocking state [ 2172.857767][T10701] bridge0: port 3(vlan4) entered disabled state [ 2172.875945][T10701] vlan4: entered promiscuous mode [ 2173.314548][T10715] input: syz0 as /devices/virtual/input/input284 [ 2173.556387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2173.632580][T10728] netlink: 'syz.1.35272': attribute type 10 has an invalid length. [ 2174.596388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2175.636396][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2176.636541][T28103] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2176.676554][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2176.809221][T28103] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 2176.817691][T28103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2176.829301][T28103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2176.841191][T28103] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2176.854397][T28103] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2176.863542][T28103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.876525][T28103] usb 2-1: config 0 descriptor?? [ 2176.882260][T10823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2177.303008][T28103] plantronics 0003:047F:FFFF.009F: reserved main item tag 0xd [ 2177.320343][T28103] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2177.569047][T28103] usb 2-1: USB disconnect, device number 59 [ 2177.716518][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2178.161970][T10850] loop9: detected capacity change from 0 to 7 [ 2178.169916][T10850] Dev loop9: unable to read RDB block 7 [ 2178.175504][T10850] loop9: unable to read partition table [ 2178.182492][T10850] loop9: partition table beyond EOD, truncated [ 2178.189382][T10850] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2178.344273][T10862] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.35306'. [ 2178.756413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2179.767115][ T30] audit: type=1326 audit(1758854647.746:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4558 code=0x7ffc0000 [ 2179.796631][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2179.831741][ T30] audit: type=1326 audit(1758854647.746:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2179.876889][ T30] audit: type=1326 audit(1758854647.746:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2179.917838][ T30] audit: type=1326 audit(1758854647.746:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2179.946909][T28103] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2179.947380][ T30] audit: type=1326 audit(1758854647.746:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4558 code=0x7ffc0000 [ 2180.086577][ T30] audit: type=1326 audit(1758854647.746:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2180.146971][ T30] audit: type=1326 audit(1758854647.746:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4558 code=0x7ffc0000 [ 2180.179389][ T30] audit: type=1326 audit(1758854647.746:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2180.209597][T28103] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2180.213305][ T30] audit: type=1326 audit(1758854647.746:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa4558 code=0x7ffc0000 [ 2180.251521][ T30] audit: type=1326 audit(1758854647.746:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.3.35320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 2180.261621][T28103] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2180.315728][T28103] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2180.325717][T28103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.344136][T10904] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2180.364281][T28103] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2180.554722][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35327'. [ 2180.569305][T10941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2180.591176][ T3453] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 2180.602759][ T3453] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 2180.621614][ T3453] bond0: now running without any active interface! [ 2180.626047][ T871] usb 2-1: USB disconnect, device number 60 [ 2180.836385][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2181.876383][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2182.916435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2183.956421][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2184.025416][T11028] netlink: 'syz.0.35349': attribute type 4 has an invalid length. [ 2184.041555][T11028] netlink: 17 bytes leftover after parsing attributes in process `syz.0.35349'. [ 2184.996402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2186.036516][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2187.076514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2188.116622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2189.156488][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2190.196509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2191.236524][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2192.276512][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2193.316569][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2194.356500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2195.396518][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2196.436714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2197.476529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2198.516496][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2199.556492][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2200.596409][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2201.636508][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2202.676527][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2203.716486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2204.756584][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2205.796615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2206.836490][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2207.876491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2208.916522][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2209.956523][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2210.996487][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2212.036479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2213.076575][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2214.116516][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2215.156505][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2216.196495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2217.236519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2218.276509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2219.316597][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2220.356530][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2221.396443][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2222.436495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2223.476489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2224.516473][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2225.556441][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2226.596526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2227.161128][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.168268][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.636495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2228.676473][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2229.716522][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2230.756482][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2231.796511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2232.836545][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2233.886410][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2234.916479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2235.956512][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2236.996481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2238.036611][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2239.076505][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2240.116486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2241.156491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2242.196490][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2243.236534][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2244.276471][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2245.316544][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2246.356470][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2247.396471][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2248.436470][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2249.476504][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2250.516474][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2251.556466][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2252.596390][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2253.636666][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2254.676451][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2255.716402][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2256.756502][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.796410][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2258.836530][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2259.876485][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2260.916543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.956479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2262.996722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.036472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.076475][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2266.116464][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.156464][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.196481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2269.236495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.276466][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.316456][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.366397][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2273.396443][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.436455][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.476448][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.516445][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2277.556476][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.596378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.636472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.676529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2281.716465][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2282.756442][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.796387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.836379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2285.876491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.916446][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2287.956717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2288.601800][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.608327][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.996473][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2290.036478][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.076486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2292.116517][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.156458][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2294.196483][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2295.236500][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2296.276505][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2297.316452][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2298.356436][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.396502][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.117620][ T31] INFO: task kworker/0:16:6746 blocked for more than 143 seconds. [ 2300.125560][ T31] Not tainted syzkaller #0 [ 2300.130884][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2300.140135][ T31] task:kworker/0:16 state:D stack:22632 pid:6746 tgid:6746 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2300.152298][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2300.159076][ T31] Call Trace: [ 2300.162380][ T31] [ 2300.165328][ T31] __schedule+0x1798/0x4cc0 [ 2300.170313][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2300.176803][ T31] ? __pfx___schedule+0x10/0x10 [ 2300.181692][ T31] ? schedule+0x91/0x360 [ 2300.185949][ T31] schedule+0x165/0x360 [ 2300.190408][ T31] schedule_preempt_disabled+0x13/0x30 [ 2300.195905][ T31] __mutex_lock+0x7e6/0x1350 [ 2300.201013][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2300.205807][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2300.212122][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2300.217287][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2300.223026][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2300.229141][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2300.235249][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2300.241118][ T31] process_scheduled_works+0xae1/0x17b0 [ 2300.246740][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2300.252822][ T31] worker_thread+0x8a0/0xda0 [ 2300.257830][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2300.264191][ T31] ? __kthread_parkme+0x7b/0x200 [ 2300.269184][ T31] kthread+0x70e/0x8a0 [ 2300.273277][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2300.278689][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.283312][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2300.288770][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2300.293971][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.298861][ T31] ret_from_fork+0x439/0x7d0 [ 2300.303477][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2300.308651][ T31] ? __switch_to_asm+0x39/0x70 [ 2300.313436][ T31] ? __switch_to_asm+0x33/0x70 [ 2300.318571][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.323193][ T31] ret_from_fork_asm+0x1a/0x30 [ 2300.328156][ T31] [ 2300.331208][ T31] INFO: task syz.2.35026:9819 blocked for more than 143 seconds. [ 2300.339058][ T31] Not tainted syzkaller #0 [ 2300.344011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2300.353040][ T31] task:syz.2.35026 state:D stack:26920 pid:9819 tgid:9819 ppid:5992 task_flags:0x400040 flags:0x20004004 [ 2300.365231][ T31] Call Trace: [ 2300.368576][ T31] [ 2300.371533][ T31] __schedule+0x1798/0x4cc0 [ 2300.376052][ T31] ? __lock_acquire+0xab9/0xd20 [ 2300.381371][ T31] ? __lock_acquire+0xab9/0xd20 [ 2300.386417][ T31] ? __pfx___schedule+0x10/0x10 [ 2300.391319][ T31] ? schedule+0x91/0x360 [ 2300.395589][ T31] schedule+0x165/0x360 [ 2300.399876][ T31] schedule_preempt_disabled+0x13/0x30 [ 2300.405459][ T31] __mutex_lock+0x7e6/0x1350 [ 2300.410566][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2300.415349][ T31] ? rfkill_unregister+0xc8/0x220 [ 2300.420771][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2300.425842][ T31] ? __pfx_device_del+0x10/0x10 [ 2300.430776][ T31] rfkill_unregister+0xc8/0x220 [ 2300.435657][ T31] nfc_unregister_device+0x96/0x2a0 [ 2300.436372][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.441416][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2300.453506][ T31] virtual_ncidev_close+0x56/0x90 [ 2300.458665][ T31] __fput+0x44c/0xa70 [ 2300.462673][ T31] task_work_run+0x1d1/0x260 [ 2300.467623][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2300.472773][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 2300.478335][ T31] exit_to_user_mode_loop+0xec/0x110 [ 2300.483645][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 2300.488939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2300.494161][ T31] do_fast_syscall_32+0x34/0x80 [ 2300.499383][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2300.505725][ T31] RIP: 0023:0xf7f24539 [ 2300.509856][ T31] RSP: 002b:00000000f750faec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 2300.518509][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2300.527052][ T31] RDX: 0000000000000000 RSI: 0000000000000340 RDI: 0000000000000000 [ 2300.535064][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2300.543390][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2300.551507][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2300.559571][ T31] [ 2300.562633][ T31] [ 2300.562633][ T31] Showing all locks held in the system: [ 2300.570717][ T31] 1 lock held by khungtaskd/31: [ 2300.575622][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2300.585551][ T31] 2 locks held by getty/5625: [ 2300.590332][ T31] #0: ffff8880338a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2300.600484][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2300.610921][ T31] 4 locks held by kworker/0:4/28052: [ 2300.616226][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2300.627799][ T31] #1: ffffc900044afbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2300.638906][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 2300.648454][ T31] #3: ffff888058d5e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 2300.658506][ T31] 3 locks held by kworker/0:16/6746: [ 2300.663790][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2300.674872][ T31] #1: ffffc9000ed1fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2300.688779][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2300.700200][ T31] 2 locks held by syz.2.35026/9819: [ 2300.705407][ T31] #0: ffff888058d5e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 2300.715197][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 2300.725557][ T31] 2 locks held by syz-executor/10466: [ 2300.731001][ T31] #0: ffff888026baa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 2300.741237][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2300.751501][ T31] 3 locks held by syz.3.35327/10935: [ 2300.756950][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.765446][ T31] #1: ffff8880301cc100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 2300.775110][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2300.785422][ T31] 1 lock held by syz.1.35336/10976: [ 2300.790678][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.799230][ T31] 1 lock held by syz.4.35344/10997: [ 2300.804435][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.813219][ T31] 1 lock held by syz.0.35352/11045: [ 2300.818464][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.827016][ T31] 1 lock held by syz-executor/11046: [ 2300.832311][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.841130][ T31] 1 lock held by syz-executor/11047: [ 2300.846652][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.855157][ T31] 1 lock held by syz-executor/11048: [ 2300.860521][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.869240][ T31] 1 lock held by syz-executor/11049: [ 2300.874519][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2300.883038][ T31] [ 2300.885386][ T31] ============================================= [ 2300.885386][ T31] [ 2300.893895][ T31] NMI backtrace for cpu 0 [ 2300.893914][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2300.893938][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2300.893951][ T31] Call Trace: [ 2300.893959][ T31] [ 2300.893967][ T31] dump_stack_lvl+0x189/0x250 [ 2300.893999][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2300.894024][ T31] ? __pfx__printk+0x10/0x10 [ 2300.894067][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2300.894103][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2300.894138][ T31] ? __pfx__printk+0x10/0x10 [ 2300.894174][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2300.894212][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2300.894249][ T31] watchdog+0xf93/0xfe0 [ 2300.894286][ T31] ? watchdog+0x1de/0xfe0 [ 2300.894323][ T31] kthread+0x70e/0x8a0 [ 2300.894353][ T31] ? __pfx_watchdog+0x10/0x10 [ 2300.894383][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.894412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2300.894432][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2300.894454][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.894482][ T31] ret_from_fork+0x439/0x7d0 [ 2300.894508][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2300.894536][ T31] ? __switch_to_asm+0x39/0x70 [ 2300.894564][ T31] ? __switch_to_asm+0x33/0x70 [ 2300.894591][ T31] ? __pfx_kthread+0x10/0x10 [ 2300.894619][ T31] ret_from_fork_asm+0x1a/0x30 [ 2300.894662][ T31] [ 2300.894671][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2301.041429][ C1] NMI backtrace for cpu 1 [ 2301.041447][ C1] CPU: 1 UID: 0 PID: 17782 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 2301.041466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2301.041479][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2301.041504][ C1] RIP: 0010:unwind_next_frame+0x17df/0x2390 [ 2301.041528][ C1] Code: 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 84 c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 <84> c0 0f 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 39 06 4c 8b [ 2301.041543][ C1] RSP: 0018:ffffc90000a082b8 EFLAGS: 00000202 [ 2301.041557][ C1] RAX: 0000000000000000 RBX: ffffffff90343bb8 RCX: 0000000000000001 [ 2301.041569][ C1] RDX: ffffc90000a083c8 RSI: dffffc0000000000 RDI: ffffc90000a08fe8 [ 2301.041582][ C1] RBP: dffffc0000000000 R08: ffffc90000a08fe8 R09: 0000000000000000 [ 2301.041595][ C1] R10: ffffc90000a083d8 R11: fffff5200014107d R12: ffffc90000a08fe8 [ 2301.041608][ C1] R13: ffffc90000a083d8 R14: ffffc90000a08388 R15: 1ffffffff2068777 [ 2301.041622][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 2301.041636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2301.041648][ C1] CR2: 0000564b9ef3c168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 2301.041664][ C1] Call Trace: [ 2301.041670][ C1] [ 2301.041681][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2301.041701][ C1] ? handle_softirqs+0x283/0x870 [ 2301.041721][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2301.041743][ C1] arch_stack_walk+0x11c/0x150 [ 2301.041767][ C1] ? do_softirq+0xec/0x180 [ 2301.041786][ C1] stack_trace_save+0x9c/0xe0 [ 2301.041805][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2301.041829][ C1] ? __lock_acquire+0xab9/0xd20 [ 2301.041854][ C1] kasan_save_track+0x3e/0x80 [ 2301.041876][ C1] ? kasan_save_track+0x3e/0x80 [ 2301.041896][ C1] ? kasan_save_free_info+0x46/0x50 [ 2301.041913][ C1] ? __kasan_slab_free+0x5b/0x80 [ 2301.041934][ C1] ? kfree+0x18e/0x440 [ 2301.041954][ C1] ? skb_release_data+0x62d/0x7c0 [ 2301.041975][ C1] ? sk_skb_reason_drop+0x127/0x170 [ 2301.041994][ C1] ? __netif_receive_skb_core+0x3a01/0x4020 [ 2301.042020][ C1] ? __netif_receive_skb+0x72/0x380 [ 2301.042040][ C1] ? process_backlog+0x60e/0x14f0 [ 2301.042056][ C1] ? __napi_poll+0xc4/0x360 [ 2301.042070][ C1] ? net_rx_action+0x707/0xe30 [ 2301.042086][ C1] ? handle_softirqs+0x283/0x870 [ 2301.042125][ C1] kasan_save_free_info+0x46/0x50 [ 2301.042142][ C1] __kasan_slab_free+0x5b/0x80 [ 2301.042163][ C1] ? skb_release_data+0x62d/0x7c0 [ 2301.042183][ C1] kfree+0x18e/0x440 [ 2301.042206][ C1] skb_release_data+0x62d/0x7c0 [ 2301.042232][ C1] sk_skb_reason_drop+0x127/0x170 [ 2301.042253][ C1] __netif_receive_skb_core+0x3a01/0x4020 [ 2301.042293][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2301.042330][ C1] ? process_backlog+0x2d5/0x14f0 [ 2301.042348][ C1] ? process_backlog+0x2d5/0x14f0 [ 2301.042367][ C1] __netif_receive_skb+0x72/0x380 [ 2301.042384][ C1] ? process_backlog+0x2d5/0x14f0 [ 2301.042402][ C1] process_backlog+0x60e/0x14f0 [ 2301.042427][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2301.042446][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 2301.042468][ C1] __napi_poll+0xc4/0x360 [ 2301.042481][ C1] ? net_rx_action+0x46d/0xe30 [ 2301.042500][ C1] net_rx_action+0x707/0xe30 [ 2301.042526][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2301.042545][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 2301.042567][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2301.042591][ C1] handle_softirqs+0x283/0x870 [ 2301.042610][ C1] ? do_softirq+0xec/0x180 [ 2301.042628][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2301.042647][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2301.042671][ C1] do_softirq+0xec/0x180 [ 2301.042686][ C1] [ 2301.042692][ C1] [ 2301.042699][ C1] ? __pfx_do_softirq+0x10/0x10 [ 2301.042719][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 2301.042761][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 2301.042778][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2301.042798][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2301.042839][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2301.042862][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2301.042888][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 2301.042918][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 2301.042951][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2301.042978][ C1] ? rcu_is_watching+0x15/0xb0 [ 2301.042999][ C1] ? skb_release_data+0x2b6/0x7c0 [ 2301.043040][ C1] ? batadv_nc_skb_store_for_decoding+0x444/0x6a0 [ 2301.043062][ C1] batadv_send_skb_packet+0x44f/0x6d0 [ 2301.043091][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0 [ 2301.043115][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 2301.043134][ C1] process_scheduled_works+0xae1/0x17b0 [ 2301.043167][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2301.043194][ C1] worker_thread+0x8a0/0xda0 [ 2301.043214][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2301.043237][ C1] ? __kthread_parkme+0x7b/0x200 [ 2301.043262][ C1] kthread+0x70e/0x8a0 [ 2301.043286][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2301.043303][ C1] ? __pfx_kthread+0x10/0x10 [ 2301.043327][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2301.043342][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2301.043360][ C1] ? __pfx_kthread+0x10/0x10 [ 2301.043382][ C1] ret_from_fork+0x439/0x7d0 [ 2301.043402][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2301.043424][ C1] ? __switch_to_asm+0x39/0x70 [ 2301.043448][ C1] ? __switch_to_asm+0x33/0x70 [ 2301.043471][ C1] ? __pfx_kthread+0x10/0x10 [ 2301.043493][ C1] ret_from_fork_asm+0x1a/0x30 [ 2301.043526][ C1] [ 2301.044533][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2301.597456][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2301.606572][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2301.616633][ T31] Call Trace: [ 2301.619916][ T31] [ 2301.622855][ T31] dump_stack_lvl+0x99/0x250 [ 2301.627458][ T31] ? __asan_memcpy+0x40/0x70 [ 2301.632053][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2301.637259][ T31] ? __pfx__printk+0x10/0x10 [ 2301.641869][ T31] vpanic+0x281/0x750 [ 2301.645857][ T31] ? __pfx_vpanic+0x10/0x10 [ 2301.650360][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 2301.655912][ T31] ? preempt_schedule+0xae/0xc0 [ 2301.660772][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2301.666240][ T31] panic+0xb9/0xc0 [ 2301.669977][ T31] ? __pfx_panic+0x10/0x10 [ 2301.674399][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2301.679792][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2301.686046][ T31] watchdog+0xfd2/0xfe0 [ 2301.690215][ T31] ? watchdog+0x1de/0xfe0 [ 2301.694558][ T31] kthread+0x70e/0x8a0 [ 2301.698638][ T31] ? __pfx_watchdog+0x10/0x10 [ 2301.703324][ T31] ? __pfx_kthread+0x10/0x10 [ 2301.707923][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2301.713122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2301.718340][ T31] ? __pfx_kthread+0x10/0x10 [ 2301.722943][ T31] ret_from_fork+0x439/0x7d0 [ 2301.727538][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2301.732655][ T31] ? __switch_to_asm+0x39/0x70 [ 2301.737424][ T31] ? __switch_to_asm+0x33/0x70 [ 2301.742194][ T31] ? __pfx_kthread+0x10/0x10 [ 2301.746794][ T31] ret_from_fork_asm+0x1a/0x30 [ 2301.751595][ T31] [ 2301.754956][ T31] Kernel Offset: disabled [ 2301.759282][ T31] Rebooting in 86400 seconds..