last executing test programs: 3.233348962s ago: executing program 0 (id=1773): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x0, 0x7}, 0x14}}, 0x0) 3.184451251s ago: executing program 0 (id=1774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c0016800804040089"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) 3.127330039s ago: executing program 0 (id=1775): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)=0x4f) 3.077504988s ago: executing program 0 (id=1776): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x92}}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000]}, 0x45c) 3.01032521s ago: executing program 0 (id=1777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0xa0}}, 0xc004) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.938854424s ago: executing program 0 (id=1779): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "63b6bcef"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x9}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}) 1.839869737s ago: executing program 2 (id=1794): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) shutdown(r0, 0x1) 1.618587865s ago: executing program 3 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x3dc, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x3b8, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x2bc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.60790692s ago: executing program 1 (id=1799): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00'}) 1.585944716s ago: executing program 3 (id=1800): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="1c0000001200050f0c", 0x9, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) io_setup(0xbf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 1.404955532s ago: executing program 3 (id=1801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffffe2}]}}}}}}}, 0x0) 930.140079ms ago: executing program 4 (id=1802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/24, 0x18}], 0x1}}], 0x1, 0x0, 0x0) 904.895849ms ago: executing program 2 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 808.869399ms ago: executing program 2 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000360ec970000282900fe8000400000000000000000000000aaff020000000000000000000000000001"], 0xffe) 686.241241ms ago: executing program 4 (id=1805): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 649.041303ms ago: executing program 1 (id=1806): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, 0x0) 594.96028ms ago: executing program 4 (id=1807): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8, 0x1}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bind$inet(r0, 0x0, 0x0) 568.725317ms ago: executing program 2 (id=1808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x81, 0x0, &(0x7f0000000080)) 567.644841ms ago: executing program 1 (id=1809): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x2edd, &(0x7f0000000040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x20000028, r2) 471.607121ms ago: executing program 3 (id=1810): socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff0a) 471.036761ms ago: executing program 4 (id=1811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xfdef) 387.89549ms ago: executing program 2 (id=1812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58c"]) 330.746172ms ago: executing program 1 (id=1813): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) 233.936534ms ago: executing program 3 (id=1814): unshare(0x20020400) ioperm(0x0, 0x7, 0x40000000000006) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 195.123568ms ago: executing program 1 (id=1815): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000c8000c00993c00008b6eeb8c090000000700000000cbf447"], 0x0, 0x2d}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 139.124094ms ago: executing program 4 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') lseek(r1, 0xd7, 0x0) read$FUSE(r1, &(0x7f0000005fc0)={0x2020}, 0x2020) 116.552186ms ago: executing program 3 (id=1817): close(0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 66.784207ms ago: executing program 2 (id=1818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r1, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffdb3) 49.942558ms ago: executing program 1 (id=1819): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0xfa0b) 0s ago: executing program 4 (id=1820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000280)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r1, 0x0) shutdown(r0, 0x2) kernel console output (not intermixed with test programs): 3485][ T5230] Bluetooth: hci0: command tx timeout [ 62.693787][ T5211] veth0_macvtap: entered promiscuous mode [ 62.701220][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.722399][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.734626][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.745867][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.756162][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.766962][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.779515][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.809173][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.821481][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.831508][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.840983][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.857562][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.870228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.875534][ T5211] veth1_macvtap: entered promiscuous mode [ 62.915489][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.931107][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.946538][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.963125][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.977925][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.989237][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.999475][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.010754][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.024264][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.025367][ T5301] binder: 5300:5301 ioctl c0306201 200001c0 returned -14 [ 63.119878][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.130660][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.134246][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 63.151710][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 63.154421][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.160587][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180365][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.203689][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.222784][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.241836][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.258718][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.269240][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.281705][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.327154][ T5211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.354057][ T5211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.364851][ T5211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.374415][ T5211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.403770][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.418916][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.433527][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.442503][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.516821][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.544754][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.601248][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.630491][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.641141][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.672835][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.703352][ T5214] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.768522][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.781767][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.915247][ T5214] usb 3-1: Using ep0 maxpacket: 16 [ 63.974756][ T5214] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 64.009226][ T5214] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 64.037887][ T5214] usb 3-1: Product: syz [ 64.044850][ T5214] usb 3-1: Manufacturer: syz [ 64.049573][ T5214] usb 3-1: SerialNumber: syz [ 64.096198][ T5214] usb 3-1: config 0 descriptor?? [ 64.423174][ T5214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.501016][ T943] usb 3-1: USB disconnect, device number 2 [ 64.508803][ T5299] kernel read not supported for file /rfkill (pid: 5299 comm: kworker/1:7) [ 64.573407][ T5230] Bluetooth: hci1: command tx timeout [ 64.584987][ T5230] Bluetooth: hci3: command tx timeout [ 64.618707][ T5214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.640080][ T5214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.651783][ T5214] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.663031][ T5230] Bluetooth: hci2: command tx timeout [ 64.663872][ T4607] Bluetooth: hci4: command tx timeout [ 64.674002][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.712786][ T5214] usb 5-1: SerialNumber: syz [ 64.734116][ T4607] Bluetooth: hci0: command tx timeout [ 64.962451][ T5214] usb 5-1: 0:2 : does not exist [ 64.981513][ T5299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.023679][ T5214] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 65.050617][ T5214] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 65.163567][ T5214] usb 5-1: USB disconnect, device number 2 [ 65.231490][ T5299] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 65.256859][ T5219] udevd[5219]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.308498][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.331205][ T5299] usb 4-1: Product: syz [ 65.368139][ T5299] usb 4-1: Manufacturer: syz [ 65.396988][ T5299] usb 4-1: SerialNumber: syz [ 65.436175][ T5299] usb 4-1: config 0 descriptor?? [ 65.693482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.914664][ T5299] usb 4-1: Firmware: major: 202, minor: 255, hardware type: RZUSB (3) [ 66.127601][ T5299] usb 4-1: failed to fetch extended address, random address set [ 66.232566][ T5299] usb 4-1: USB disconnect, device number 2 [ 66.474039][ T4669] udevd[4669]: worker [5219] terminated by signal 33 (Unknown signal 33) [ 66.521376][ T4669] udevd[4669]: worker [5219] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/ieee802154/phy2' [ 67.863398][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.073100][ T5265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.086777][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 68.102571][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.115427][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 68.126362][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.137157][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.148720][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 68.158089][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.178215][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.199170][ T9] usb 2-1: Product: syz [ 68.210222][ T9] usb 2-1: Manufacturer: syz [ 68.219427][ T9] usb 2-1: SerialNumber: syz [ 68.294988][ T5265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 68.314624][ T5265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 68.348793][ T5265] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 68.362844][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.383087][ T5265] usb 1-1: Product: syz [ 68.387586][ T5265] usb 1-1: Manufacturer: syz [ 68.392230][ T5265] usb 1-1: SerialNumber: syz [ 68.408784][ T5265] usb 1-1: config 0 descriptor?? [ 68.454163][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 68.465742][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 68.523458][ T9] usb 2-1: USB disconnect, device number 2 [ 68.643163][ T5265] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.839102][ T5265] usb 1-1: USB disconnect, device number 2 [ 68.973705][ T4607] Bluetooth: hci4: command tx timeout [ 69.076516][ T5418] udevd[5418]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 69.166454][ T5323] udevd[5323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.582861][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.735591][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.764950][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.787342][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.808096][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 69.822796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.844569][ T9] usb 3-1: config 0 descriptor?? [ 69.927507][ T5299] usb 5-1: config 0 has no interfaces? [ 69.937205][ T5299] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 69.950079][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.971771][ T5299] usb 5-1: config 0 descriptor?? [ 70.203877][ T5299] usb 5-1: USB disconnect, device number 3 [ 70.400615][ T5442] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 70.411958][ T5442] syzkaller1: entered promiscuous mode [ 70.419918][ T5442] syzkaller1: entered allmulticast mode [ 70.616482][ T5447] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 70.683448][ T9] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 70.727277][ T9] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 70.976991][ T5262] usb 3-1: USB disconnect, device number 3 [ 71.053186][ T5230] Bluetooth: hci5: command 0x1003 tx timeout [ 71.053249][ T4607] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.505362][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.603725][ T5477] netlink: 'syz.1.68': attribute type 20 has an invalid length. [ 71.622551][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.629244][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726660][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.757800][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.790540][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.800166][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.808564][ T9] usb 5-1: SerialNumber: syz [ 72.057509][ T9] usb 5-1: 0:2 : does not exist [ 72.100394][ T9] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 72.144799][ T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 72.166748][ T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 72.248722][ T9] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 72.260006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.269041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.333892][ T9] usb 5-1: USB disconnect, device number 4 [ 72.525366][ T5409] udevd[5409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.566669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.611418][ T5492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.649872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.773397][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.906640][ T5533] Bluetooth: MGMT ver 1.23 [ 73.911913][ T5533] Bluetooth: hci3: unsupported parameter 64512 [ 73.938457][ T5533] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 73.986909][ T9] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 74.026712][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.064804][ T9] usb 5-1: config 0 descriptor?? [ 74.096054][ T9] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 74.116531][ T5544] netlink: 165 bytes leftover after parsing attributes in process `syz.0.95'. [ 74.232406][ T5547] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure [ 74.359470][ T5519] ======================================================= [ 74.359470][ T5519] WARNING: The mand mount option has been deprecated and [ 74.359470][ T5519] and is ignored by this kernel. Remove the mand [ 74.359470][ T5519] option from the mount to silence this warning. [ 74.359470][ T5519] ======================================================= [ 74.464662][ T5262] usb 5-1: USB disconnect, device number 5 [ 74.982982][ T5575] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.536934][ T5593] loop0: detected capacity change from 0 to 7 [ 75.583657][ T5593] Dev loop0: unable to read RDB block 7 [ 75.589442][ T5593] loop0: unable to read partition table [ 75.641373][ T5593] loop0: partition table beyond EOD, truncated [ 75.677721][ T5593] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 75.677721][ T5593] ) failed (rc=-5) [ 76.372877][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.584795][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.613758][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.636789][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 76.663053][ T5624] vivid-001: ================= START STATUS ================= [ 76.663979][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.720819][ T9] usb 2-1: config 0 descriptor?? [ 76.741797][ T5624] vivid-001: Radio HW Seek Mode: Bounded [ 76.760639][ T942] cfg80211: failed to load regulatory.db [ 76.801266][ T5624] vivid-001: Radio Programmable HW Seek: false [ 76.832896][ T5624] vivid-001: RDS Rx I/O Mode: Block I/O [ 76.858841][ T5624] vivid-001: Generate RBDS Instead of RDS: false [ 76.889190][ T5624] vivid-001: RDS Reception: true [ 76.918247][ T5624] vivid-001: RDS Program Type: 0 inactive [ 76.938160][ T5624] vivid-001: RDS PS Name: inactive [ 76.952959][ T5624] vivid-001: RDS Radio Text: inactive [ 76.992786][ T5624] vivid-001: RDS Traffic Announcement: false inactive [ 77.022960][ T5624] vivid-001: RDS Traffic Program: false inactive [ 77.033723][ T5624] vivid-001: RDS Music: false inactive [ 77.039266][ T5624] vivid-001: ================== END STATUS ================== [ 77.195895][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 77.212914][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 77.244596][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input5 [ 77.263140][ T5634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.270841][ T5634] IPv6: NLM_F_CREATE should be set when creating new route [ 77.278130][ T5634] IPv6: NLM_F_CREATE should be set when creating new route [ 77.332836][ T9] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 77.366556][ T5634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.452868][ T5218] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.573320][ T5214] usb 2-1: USB disconnect, device number 3 [ 77.666311][ T5218] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 77.686373][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.720818][ T5218] usb 3-1: config 0 descriptor?? [ 77.933060][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.182871][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 78.190169][ T5218] [drm:udl_init] *ERROR* Selecting channel failed [ 78.217036][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 78.256629][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.291326][ T5218] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 78.321992][ T9] usb 5-1: config 0 descriptor?? [ 78.329360][ T5218] [drm] Initialized udl on minor 2 [ 78.344405][ T5218] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 78.362584][ T5218] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 78.386380][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 78.399986][ T943] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 78.419782][ T5218] usb 3-1: USB disconnect, device number 4 [ 78.433382][ T943] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 79.167466][ T9] gspca_sunplus: reg_w_riv err -71 [ 79.193843][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 79.212840][ T9] usb 5-1: USB disconnect, device number 6 [ 79.366988][ T5675] syzkaller1: entered promiscuous mode [ 79.372510][ T5675] syzkaller1: entered allmulticast mode [ 79.984281][ T5699] process 'syz.2.166' launched './file1' with NULL argv: empty string added [ 80.080056][ T5699] 9pnet_virtio: no channels available for device [ 80.197639][ T5706] syz.2.168[5706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.197791][ T5706] syz.2.168[5706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.210300][ T5299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.433892][ T943] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.439738][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.458661][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.478853][ T5299] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 80.499948][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.521068][ T5299] usb 5-1: config 0 descriptor?? [ 80.658805][ T943] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 80.674465][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.699148][ T943] usb 2-1: config 0 descriptor?? [ 80.943715][ T943] kaweth 2-1:0.0: Firmware present in device. [ 80.969658][ T5299] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0 [ 80.994827][ T5299] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0 [ 81.021182][ T5299] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0 [ 81.029019][ T5299] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0 [ 81.036368][ T5299] hid-led 0003:27B8:01ED.0003: unknown main item tag 0x0 [ 81.072845][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.132052][ T943] kaweth 2-1:0.0: Statistics collection: 0 [ 81.142909][ T943] kaweth 2-1:0.0: Multicast filter limit: 0 [ 81.161534][ T943] kaweth 2-1:0.0: MTU: 0 [ 81.178128][ T943] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 81.264864][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.288739][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.315434][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.333309][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.363280][ T5299] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 81.369900][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.391163][ T5299] usb 5-1: USB disconnect, device number 7 [ 81.418239][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.457829][ T9] usb 1-1: Manufacturer: syz [ 81.492842][ T9] usb 1-1: config 0 descriptor?? [ 81.498086][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.507534][ T5728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.520646][ T5728] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 81.729244][ T5734] capability: warning: `syz.3.181' uses 32-bit capabilities (legacy support in use) [ 81.759191][ T943] kaweth 2-1:0.0: Error setting receive filter [ 81.787963][ T943] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 81.805215][ T943] usb 2-1: USB disconnect, device number 4 [ 81.919147][ T9] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 81.933933][ T9] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 81.968233][ T9] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 82.178132][ T5746] pim6reg1: entered promiscuous mode [ 82.190825][ T5746] pim6reg1: entered allmulticast mode [ 82.251161][ T943] usb 1-1: USB disconnect, device number 3 [ 82.442282][ T5218] kernel read not supported for file /video37 (pid: 5218 comm: kworker/0:3) [ 82.782467][ T5299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.030098][ T5299] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 83.049765][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.076124][ T5299] usb 2-1: config 0 descriptor?? [ 83.491157][ T5804] binder: 5803:5804 ioctl 40046205 0 returned -22 [ 83.539612][ T5299] [drm:udl_init] *ERROR* Selecting channel failed [ 83.560155][ T5299] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 83.566992][ T5299] [drm] Initialized udl on minor 2 [ 83.573998][ T5299] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 83.582457][ T5299] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 83.593165][ T5262] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 83.601449][ T5299] usb 2-1: USB disconnect, device number 5 [ 83.608075][ T5262] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 83.874249][ T5788] syz.2.202 (5788) used greatest stack depth: 16176 bytes left [ 84.322877][ T5218] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.501755][ T5829] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 84.518451][ T5829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.535252][ T5218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.555487][ T5218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.576862][ T5218] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.592771][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.629415][ T5218] usb 3-1: SerialNumber: syz [ 84.874504][ T5218] usb 3-1: 0:2 : does not exist [ 84.907583][ T5218] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 84.967057][ T5218] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 84.994166][ T5218] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 85.030476][ T5218] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 85.103310][ T5218] usb 3-1: USB disconnect, device number 5 [ 85.228457][ T5409] udevd[5409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.408713][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 85.582826][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.643274][ T5863] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.783254][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 85.798532][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.832952][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.870958][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 85.906951][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.936639][ T9] usb 1-1: config 0 descriptor?? [ 86.077567][ T5879] netlink: 'syz.4.243': attribute type 2 has an invalid length. [ 86.377660][ T9] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 86.560593][ T9] ft260 0003:0403:6030.0005: chip code: 5e81 abf2 [ 86.761212][ T9] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 86.802356][ T5910] Bluetooth: hci3: unsupported parameter 64512 [ 86.816560][ T5910] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 86.962314][ T9] ft260 0003:0403:6030.0005: failed to retrieve status: -71, no wakeup [ 86.981082][ T9] ft260 0003:0403:6030.0005: failed to retrieve status: -71 [ 87.037755][ T9] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 87.096751][ T9] usb 1-1: USB disconnect, device number 4 [ 87.973004][ T5265] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.156947][ T5942] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 88.191054][ T5265] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.194663][ T5942] overlayfs: conflicting lowerdir path [ 88.210288][ T5265] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.235011][ T5265] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.272813][ T5265] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.311784][ T5265] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.326842][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.342647][ T5265] usb 1-1: Product: syz [ 88.366599][ T5265] usb 1-1: Manufacturer: syz [ 88.394172][ T5265] cdc_wdm 1-1:1.0: skipping garbage [ 88.401086][ T5265] cdc_wdm 1-1:1.0: skipping garbage [ 88.425394][ T5265] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 88.435533][ T5265] cdc_wdm 1-1:1.0: Unknown control protocol [ 88.470875][ T5952] netem: change failed [ 88.628080][ T5299] usb 1-1: USB disconnect, device number 5 [ 88.643442][ T5218] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 88.730428][ T5960] dvmrp1: entered allmulticast mode [ 88.783185][ T5960] dvmrp1: left allmulticast mode [ 88.859813][ T5218] usb 2-1: config 0 has no interfaces? [ 88.867978][ T5218] usb 2-1: New USB device found, idVendor=0548, idProduct=0069, bcdDevice= a.8d [ 88.881680][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.910122][ T5218] usb 2-1: config 0 descriptor?? [ 89.396425][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.430013][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.506802][ T5214] usb 2-1: USB disconnect, device number 6 [ 89.624125][ T5299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.655613][ T5998] netlink: 64 bytes leftover after parsing attributes in process `syz.3.293'. [ 89.714316][ T5265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.843846][ T5299] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 89.863635][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.883658][ T5299] usb 1-1: config 0 descriptor?? [ 89.902019][ T5299] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 89.914736][ T5265] usb 3-1: Using ep0 maxpacket: 32 [ 89.925541][ T5299] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 89.935286][ T5265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.958637][ T5265] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 89.989528][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.009320][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.024450][ T5265] usb 3-1: SerialNumber: syz [ 90.056126][ T5265] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 90.084851][ T5265] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 90.092985][ T5265] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 90.185944][ T5265] usb 1-1: USB disconnect, device number 6 [ 90.204828][ T5265] ftdi_sio 1-1:0.0: device disconnected [ 90.277208][ T9] usb 3-1: USB disconnect, device number 6 [ 90.572510][ T6030] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.600999][ T6030] CIFS mount error: No usable UNC path provided in device string! [ 90.600999][ T6030] [ 90.613622][ T6030] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.197157][ T3012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.371693][ T3012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.614688][ T3012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.656115][ T6051] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 91.680138][ T6048] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 91.782985][ T5218] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.841943][ T3012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.878842][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.888194][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.906726][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.916786][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.926828][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.941914][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.015751][ T5218] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 92.054670][ T5218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.086833][ T5218] usb 5-1: Product: syz [ 92.098605][ T5218] usb 5-1: Manufacturer: syz [ 92.125877][ T5218] usb 5-1: SerialNumber: syz [ 92.163389][ T5218] usb 5-1: config 0 descriptor?? [ 92.368450][ T3012] bridge_slave_1: left allmulticast mode [ 92.384847][ T3012] bridge_slave_1: left promiscuous mode [ 92.422006][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.477210][ T3012] bridge_slave_0: left allmulticast mode [ 92.487303][ T3012] bridge_slave_0: left promiscuous mode [ 92.494133][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.517146][ T9] usb 5-1: USB disconnect, device number 8 [ 93.375456][ T943] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.411871][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.431609][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.444859][ T3012] bond0 (unregistering): Released all slaves [ 93.487445][ T6097] geneve0: entered promiscuous mode [ 93.505625][ T6097] geneve0: left promiscuous mode [ 93.613378][ T943] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.623109][ T943] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 93.632173][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.674193][ T943] usb 3-1: config 0 descriptor?? [ 94.017643][ T4607] Bluetooth: hci4: command tx timeout [ 94.335943][ T6136] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 94.362423][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 94.448581][ T3012] hsr_slave_0: left promiscuous mode [ 94.458955][ T3012] hsr_slave_1: left promiscuous mode [ 94.485248][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.502012][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.536345][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.552822][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.620339][ T3012] veth1_macvtap: left promiscuous mode [ 94.637471][ T3012] veth0_macvtap: left promiscuous mode [ 94.643264][ T3012] veth1_vlan: left promiscuous mode [ 94.648985][ T3012] veth0_vlan: left promiscuous mode [ 94.729612][ T6147] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.357'. [ 94.749543][ T943] video4linux radio32: keene_cmd_set failed (-71) [ 94.762123][ T6147] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 94.770338][ T943] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 94.806666][ T943] usb 3-1: USB disconnect, device number 7 [ 94.827886][ T6147] netlink: 121 bytes leftover after parsing attributes in process `syz.0.357'. [ 94.851002][ T5262] kernel write not supported for file /snd/seq (pid: 5262 comm: kworker/1:4) [ 95.632665][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 95.679600][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 96.038371][ T6165] netlink: 'syz.0.366': attribute type 34 has an invalid length. [ 96.102769][ T4607] Bluetooth: hci4: command tx timeout [ 96.225736][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.238076][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.251347][ T6062] bridge_slave_0: entered allmulticast mode [ 96.258968][ T6062] bridge_slave_0: entered promiscuous mode [ 96.272033][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.282015][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.305724][ T6062] bridge_slave_1: entered allmulticast mode [ 96.325601][ T6062] bridge_slave_1: entered promiscuous mode [ 96.563555][ T6182] batadv_slave_1: entered promiscuous mode [ 96.582421][ T6181] batadv_slave_1: left promiscuous mode [ 96.617915][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.684159][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.913154][ T6062] team0: Port device team_slave_0 added [ 96.953294][ T6062] team0: Port device team_slave_1 added [ 97.163398][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.185417][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.212212][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.235219][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.242233][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.278450][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.450392][ T6062] hsr_slave_0: entered promiscuous mode [ 97.473625][ T6062] hsr_slave_1: entered promiscuous mode [ 97.481608][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.492647][ T6062] Cannot create hsr debugfs directory [ 97.503210][ T6189] netlink: 'syz.0.376': attribute type 4 has an invalid length. [ 97.643073][ T6221] Zero length message leads to an empty skb [ 98.097912][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 98.172885][ T4607] Bluetooth: hci4: command tx timeout [ 98.237868][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.247229][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.255401][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.272805][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.292636][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.314055][ T6241] Dead loop on virtual device ip6_vti0, fix it urgently! [ 98.676308][ T6254] Bluetooth: MGMT ver 1.23 [ 99.157304][ T6266] mmap: syz.4.409 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.246921][ T6062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.289148][ T6062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.364915][ T6062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.451179][ T6062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.491601][ T6257] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 100.217953][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.260214][ T4607] Bluetooth: hci4: command tx timeout [ 100.294495][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.392808][ T5262] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.406485][ T1126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.444614][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.451771][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.503072][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.510225][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.565103][ T1126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.597172][ T5262] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.624523][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.645804][ T5262] usb 3-1: config 0 descriptor?? [ 100.655325][ T5262] cp210x 3-1:0.0: cp210x converter detected [ 100.697819][ T6301] Invalid option length (1048372) for dns_resolver key [ 100.795885][ T1126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.831196][ T6062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.878030][ T1126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.970682][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.981216][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.003517][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.014422][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.023430][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.030879][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.077485][ T5262] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 101.131045][ T1126] bridge_slave_1: left allmulticast mode [ 101.142245][ T1126] bridge_slave_1: left promiscuous mode [ 101.149881][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.168264][ T1126] bridge_slave_0: left allmulticast mode [ 101.177671][ T1126] bridge_slave_0: left promiscuous mode [ 101.183538][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.319465][ T5262] usb 3-1: cp210x converter now attached to ttyUSB0 [ 101.526084][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.530238][ T5262] usb 3-1: USB disconnect, device number 8 [ 101.548097][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.554017][ T5262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.569037][ T1126] bond0 (unregistering): Released all slaves [ 101.598246][ T5262] cp210x 3-1:0.0: device disconnected [ 101.695421][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.879583][ T6062] veth0_vlan: entered promiscuous mode [ 101.922160][ T1126] hsr_slave_0: left promiscuous mode [ 101.928365][ T1126] hsr_slave_1: left promiscuous mode [ 101.939453][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.948794][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.957411][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.965469][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.981579][ T1126] veth1_macvtap: left promiscuous mode [ 101.987429][ T1126] veth0_macvtap: left promiscuous mode [ 101.993203][ T1126] veth1_vlan: left promiscuous mode [ 101.998477][ T1126] veth0_vlan: left promiscuous mode [ 102.731674][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 102.769071][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 103.118007][ T6303] chnl_net:caif_netlink_parms(): no params data found [ 103.133064][ T4607] Bluetooth: hci0: command tx timeout [ 103.161539][ T6319] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 103.211361][ T6062] veth1_vlan: entered promiscuous mode [ 103.505768][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.523047][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.534311][ T6303] bridge_slave_0: entered allmulticast mode [ 103.541625][ T6303] bridge_slave_0: entered promiscuous mode [ 103.663446][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.672568][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.697631][ T6303] bridge_slave_1: entered allmulticast mode [ 103.709977][ T6303] bridge_slave_1: entered promiscuous mode [ 103.801200][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.865397][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.995398][ T6303] team0: Port device team_slave_0 added [ 104.018701][ T6062] veth0_macvtap: entered promiscuous mode [ 104.044036][ T6303] team0: Port device team_slave_1 added [ 104.054416][ T6062] veth1_macvtap: entered promiscuous mode [ 104.196208][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.211353][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.281876][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.318590][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.359161][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.388729][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.405356][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.440773][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.484518][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.497423][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.528472][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.576912][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.608214][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.642782][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.668660][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.682227][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.696428][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.708191][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.788648][ T6062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.802554][ T6062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.813475][ T6062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822949][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.823240][ T6062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.855874][ T6303] hsr_slave_0: entered promiscuous mode [ 104.888667][ T6303] hsr_slave_1: entered promiscuous mode [ 104.919845][ T6303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.932205][ T6303] Cannot create hsr debugfs directory [ 105.027377][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 105.058801][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.076023][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.089705][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.115738][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.144266][ T9] usb 4-1: config 0 descriptor?? [ 105.215674][ T4607] Bluetooth: hci0: command tx timeout [ 105.384774][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.392677][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.612276][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 105.643783][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.664180][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.677416][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input7 [ 105.758025][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 105.902929][ T5214] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.110199][ T6303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.110346][ T5218] usb 4-1: USB disconnect, device number 3 [ 106.134550][ T5214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.160120][ T5214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.181147][ T6303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.195181][ T5214] usb 1-1: config 1 has no interface number 0 [ 106.210439][ T6303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.232027][ T5214] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.267279][ T6303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.283876][ T5214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.308620][ T5214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.323143][ T5214] usb 1-1: Product: syz [ 106.330474][ T5214] usb 1-1: Manufacturer: syz [ 106.341563][ T5214] usb 1-1: SerialNumber: syz [ 106.362063][ T5214] usb 1-1: selecting invalid altsetting 1 [ 106.499097][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.570545][ T6303] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.599185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.606390][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.644086][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.651312][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.783043][ T5214] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 106.809165][ T5214] cdc_ncm 1-1:1.1: bind() failure [ 106.854966][ T5214] usb 1-1: USB disconnect, device number 7 [ 107.102353][ T6433] loop2: detected capacity change from 0 to 7 [ 107.124743][ T6433] Dev loop2: unable to read RDB block 7 [ 107.130579][ T6433] loop2: unable to read partition table [ 107.140246][ T6433] loop2: partition table beyond EOD, truncated [ 107.169002][ T6433] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 107.186401][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.293207][ T4607] Bluetooth: hci0: command tx timeout [ 107.788554][ T6303] veth0_vlan: entered promiscuous mode [ 107.843309][ T6303] veth1_vlan: entered promiscuous mode [ 107.925224][ T6303] veth0_macvtap: entered promiscuous mode [ 107.933059][ T5218] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.968579][ T6303] veth1_macvtap: entered promiscuous mode [ 108.060205][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.113595][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.138533][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.149610][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.159959][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.170809][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.183714][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.197513][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.208931][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.234680][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.234903][ T5218] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.257312][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 108.269073][ T5218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.280310][ T5218] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.296636][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.302771][ T5218] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.308511][ T5262] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.327039][ T5218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.334720][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.354264][ T5218] usb 1-1: config 0 descriptor?? [ 108.354342][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.359868][ T6454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.389275][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.415870][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.446886][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.458316][ T6303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.467631][ T6303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.476475][ T6303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.485642][ T6303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.533854][ T5262] usb 3-1: Using ep0 maxpacket: 32 [ 108.568336][ T5262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.613104][ T5262] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.646867][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.663527][ T5262] usb 3-1: Product: syz [ 108.667727][ T5262] usb 3-1: Manufacturer: syz [ 108.689814][ T5262] usb 3-1: SerialNumber: syz [ 108.724214][ T5262] usb 3-1: config 0 descriptor?? [ 108.743545][ T6469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.767580][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.802635][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.826014][ T5218] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 108.843092][ T5218] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 108.862923][ T5218] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 108.892784][ T5218] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 108.911570][ T5218] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 108.944843][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.949035][ T5218] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 108.952677][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.003480][ T5218] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.074427][ T5262] usb 3-1: USB disconnect, device number 9 [ 109.083735][ T5218] usb 1-1: USB disconnect, device number 8 [ 109.373057][ T4607] Bluetooth: hci0: command tx timeout [ 109.723149][ T5214] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.938670][ T5214] usb 5-1: Using ep0 maxpacket: 8 [ 109.983820][ T5214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.004217][ T5214] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 110.023815][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.062432][ T5214] usb 5-1: config 0 descriptor?? [ 110.081468][ T5214] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 110.093427][ T6516] syzkaller1: entered promiscuous mode [ 110.111273][ T6516] syzkaller1: entered allmulticast mode [ 110.530395][ T6531] warning: `syz.2.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.701185][ T6536] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 110.885932][ T6542] bond0: entered promiscuous mode [ 110.905460][ T6542] bond_slave_0: entered promiscuous mode [ 110.929374][ T6542] bond_slave_1: entered promiscuous mode [ 111.108558][ T5214] gspca_vc032x: reg_r err -71 [ 111.126702][ T5214] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 111.149775][ T5214] usb 5-1: USB disconnect, device number 9 [ 111.652913][ T5218] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.860139][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.899079][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.918270][ T5218] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 111.950369][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.971663][ T5218] usb 3-1: config 0 descriptor?? [ 112.370696][ T29] audit: type=1804 audit(1724275556.616:2): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.539" name="/newroot/5/file0/bus" dev="hugetlbfs" ino=13856 res=1 errno=0 [ 112.391625][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.441491][ T5218] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 112.913317][ T5265] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.034607][ T5218] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 113.063429][ T5218] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 113.080768][ T5218] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 113.108670][ T5218] usb 3-1: USB disconnect, device number 10 [ 113.123367][ T5265] usb 5-1: Using ep0 maxpacket: 32 [ 113.140983][ T5265] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.151939][ T5265] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.176484][ T5265] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.200781][ T5265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.239703][ T5265] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.268152][ T5265] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.295392][ T5265] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.322767][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.355146][ T5265] usb 5-1: config 0 descriptor?? [ 113.600281][ T5265] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.880419][ C1] usblp0: nonzero read bulk status received: -71 [ 113.906769][ T6381] usb 5-1: USB disconnect, device number 10 [ 114.279348][ T6595] usblp0: removed [ 114.775817][ T6666] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.785109][ T6666] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.793962][ T6666] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.802749][ T6666] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.833019][ T6666] vxlan0: entered promiscuous mode [ 114.838810][ T6666] vxlan0: entered allmulticast mode [ 114.859128][ T6666] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.868225][ T6666] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.877597][ T6666] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.886925][ T6666] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.962093][ T29] audit: type=1326 audit(1724275559.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6672 comm="syz.4.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb09b79e79 code=0x0 [ 115.119601][ T6674] syzkaller1: entered promiscuous mode [ 115.126048][ T6674] syzkaller1: entered allmulticast mode [ 115.491435][ T5214] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.648565][ T6704] sctp: [Deprecated]: syz.2.589 (pid 6704) Use of int in maxseg socket option. [ 115.648565][ T6704] Use struct sctp_assoc_value instead [ 115.654298][ T6701] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 115.692887][ T5214] usb 4-1: Using ep0 maxpacket: 8 [ 115.708779][ T5214] usb 4-1: New USB device found, idVendor=10c4, idProduct=81c8, bcdDevice=fa.86 [ 115.735543][ T5214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.764337][ T5214] usb 4-1: Product: syz [ 115.777913][ T5214] usb 4-1: Manufacturer: syz [ 115.797827][ T5214] usb 4-1: SerialNumber: syz [ 115.811424][ T5214] usb 4-1: config 0 descriptor?? [ 115.819942][ T5214] cp210x 4-1:0.0: cp210x converter detected [ 115.969088][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.978436][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.024097][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.026771][ T5214] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 116.031479][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.039545][ T5214] cp210x 4-1:0.0: querying part number failed [ 116.047767][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.055908][ T5214] usb 4-1: cp210x converter now attached to ttyUSB0 [ 116.059483][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.069848][ T5214] usb 4-1: USB disconnect, device number 4 [ 116.098823][ T5214] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.112312][ T5214] cp210x 4-1:0.0: device disconnected [ 116.118799][ T6710] team0: Port device bridge0 added [ 116.142945][ T942] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.282638][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 116.328973][ T942] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.344573][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.353483][ T942] usb 1-1: Product: syz [ 116.357813][ T942] usb 1-1: Manufacturer: syz [ 116.362543][ T942] usb 1-1: SerialNumber: syz [ 116.386676][ T942] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.445641][ T5214] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.707912][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 116.770760][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 116.807987][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.815369][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.844330][ T6712] team0 (unregistering): Port device bridge0 removed [ 117.227149][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.317599][ T6737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.341620][ T6737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 117.346403][ T29] audit: type=1326 audit(1724275561.596:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.367506][ T6740] syz.4.604: attempt to access beyond end of device [ 117.367506][ T6740] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 117.379378][ T4607] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.393012][ T4607] Bluetooth: hci2: Injecting HCI hardware error event [ 117.403199][ T4607] Bluetooth: hci2: hardware error 0x00 [ 117.423758][ T6737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 117.442002][ T29] audit: type=1326 audit(1724275561.626:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.481178][ T6737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 117.514520][ T6740] F2FS-fs (loop4): Unable to read 1th superblock [ 117.526904][ T29] audit: type=1326 audit(1724275561.636:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.541057][ T5214] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 117.557796][ T5214] ath9k_htc: Failed to initialize the device [ 117.592250][ T5214] usb 1-1: ath9k_htc: USB layer deinitialized [ 117.592857][ T6740] syz.4.604: attempt to access beyond end of device [ 117.592857][ T6740] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 117.613693][ T5299] usb 1-1: USB disconnect, device number 9 [ 117.633760][ T29] audit: type=1326 audit(1724275561.636:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.660778][ T6740] F2FS-fs (loop4): Unable to read 2th superblock [ 117.679242][ T29] audit: type=1326 audit(1724275561.636:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.753781][ T29] audit: type=1326 audit(1724275561.656:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.800042][ T29] audit: type=1326 audit(1724275561.656:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.846401][ T29] audit: type=1326 audit(1724275561.656:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.882854][ T29] audit: type=1326 audit(1724275561.666:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.923020][ T29] audit: type=1326 audit(1724275561.666:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 117.940012][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.965741][ T29] audit: type=1326 audit(1724275561.666:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6738 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 118.480609][ T6763] netlink: 104 bytes leftover after parsing attributes in process `syz.4.616'. [ 119.166386][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.390192][ T8] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 119.403219][ T5265] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.419947][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.448392][ T8] usb 5-1: Product: syz [ 119.458562][ T8] usb 5-1: Manufacturer: syz [ 119.477122][ T8] usb 5-1: SerialNumber: syz [ 119.499431][ T8] usb 5-1: config 0 descriptor?? [ 119.642958][ T5265] usb 1-1: Using ep0 maxpacket: 8 [ 119.666123][ T5265] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.666292][ T5265] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.666316][ T5265] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.666343][ T5265] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.666392][ T5265] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.666434][ T5265] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.666462][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.892804][ C0] hrtimer: interrupt took 134849 ns [ 119.926780][ T5265] usb 1-1: usb_control_msg returned -32 [ 119.936883][ T5265] usbtmc 1-1:16.0: can't read capabilities [ 120.093520][ T4607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 120.198443][ T8] mos7840 5-1:0.0: required endpoints missing [ 120.227255][ T8] usb 5-1: USB disconnect, device number 11 [ 120.354157][ T6827] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 120.571558][ T8] usb 1-1: USB disconnect, device number 10 [ 121.162903][ T6860] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 121.209459][ T6860] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 123.600683][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 123.600699][ T29] audit: type=1326 audit(1724275567.846:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6972 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 123.646949][ T29] audit: type=1326 audit(1724275567.846:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6972 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 123.676214][ T29] audit: type=1326 audit(1724275567.846:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6972 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 123.703782][ T29] audit: type=1326 audit(1724275567.846:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6972 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 123.744761][ T29] audit: type=1326 audit(1724275567.846:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6972 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 124.043985][ T6985] syzkaller1: entered promiscuous mode [ 124.054897][ T6990] Bluetooth: hci3: unsupported parameter 64512 [ 124.061811][ T6985] syzkaller1: entered allmulticast mode [ 124.079319][ T6990] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 125.327654][ T7040] hsr0: entered allmulticast mode [ 125.355387][ T7040] hsr_slave_0: entered allmulticast mode [ 125.375479][ T7040] hsr_slave_1: entered allmulticast mode [ 126.672821][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.883266][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 126.900692][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 126.932965][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 126.979345][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.991599][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.886930][ T5262] usb 3-1: USB disconnect, device number 11 [ 128.192825][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.395494][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 128.418673][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.449936][ T8] usb 2-1: config 0 descriptor?? [ 128.899243][ T8] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 128.933850][ T29] audit: type=1326 audit(1724275573.186:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.4.797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb09b79e79 code=0x0 [ 129.501474][ T7182] ALSA: mixer_oss: invalid OSS volume '' [ 129.515586][ T8] usb 2-1: USB disconnect, device number 7 [ 129.687586][ T7188] Bluetooth: hci3: too big key_count value 29184 [ 129.925081][ T7196] loop2: detected capacity change from 0 to 7 [ 129.942522][ T7196] Dev loop2: unable to read RDB block 7 [ 129.955769][ T7196] loop2: AHDI p1 p3 [ 129.975089][ T7196] loop2: partition table partially beyond EOD, truncated [ 129.982609][ T7196] loop2: p1 start 2048 is beyond EOD, truncated [ 130.383435][ T7218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.821'. [ 131.299922][ T7266] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 131.311935][ T7266] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.844'. [ 131.635720][ T6381] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.710692][ T7285] loop2: detected capacity change from 0 to 7 [ 131.718336][ T7285] Dev loop2: unable to read RDB block 7 [ 131.724703][ T7285] loop2: AHDI p1 p3 p4 [ 131.728972][ T7285] loop2: partition table partially beyond EOD, truncated [ 131.744877][ T7285] loop2: p1 start 2048 is beyond EOD, truncated [ 131.763292][ T7285] loop2: p3 size 16779293 extends beyond EOD, truncated [ 131.849039][ T6381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.889505][ T6381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.928832][ T6381] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 131.962872][ T6381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.979789][ T6381] usb 1-1: config 0 descriptor?? [ 132.347923][ T62] tipc: Subscription rejected, illegal request [ 132.443153][ T6381] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 132.469255][ T6381] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 132.491934][ T6381] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0009/input/input9 [ 132.529406][ T6381] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 132.558803][ T7309] netlink: 'syz.3.863': attribute type 29 has an invalid length. [ 132.601225][ T7312] netlink: 'syz.3.863': attribute type 29 has an invalid length. [ 132.671850][ T7309] netlink: 500 bytes leftover after parsing attributes in process `syz.3.863'. [ 132.770643][ T6381] usb 1-1: USB disconnect, device number 11 [ 133.057356][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064717][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.334804][ T7338] input: syz0 as /devices/virtual/input/input10 [ 133.668715][ T7355] syz.1.884[7355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.668944][ T7355] syz.1.884[7355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.221596][ T29] audit: type=1326 audit(1724275578.466:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7376 comm="syz.1.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x0 [ 135.803341][ T5265] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.995600][ T5265] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.025289][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.085524][ T5265] usb 1-1: config 0 descriptor?? [ 136.094869][ T5265] cp210x 1-1:0.0: cp210x converter detected [ 136.479148][ T5262] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.501808][ T5265] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 136.549089][ T5265] usb 1-1: cp210x converter now attached to ttyUSB0 [ 136.682819][ T5262] usb 3-1: Using ep0 maxpacket: 16 [ 136.691636][ T5262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.722868][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.758792][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.777850][ T5262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.793266][ T5265] usb 1-1: USB disconnect, device number 12 [ 136.799814][ T5262] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.843516][ T5265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.853911][ T5262] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.881344][ T5262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.882723][ T5265] cp210x 1-1:0.0: device disconnected [ 136.897219][ T5262] usb 3-1: Manufacturer: syz [ 136.934346][ T5262] usb 3-1: config 0 descriptor?? [ 137.363243][ T5262] rc_core: IR keymap rc-hauppauge not found [ 137.383395][ T5262] Registered IR keymap rc-empty [ 137.403430][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.455243][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.524706][ T5262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 137.583005][ T5262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 137.630627][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.653105][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.683038][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.728248][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.782870][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.822844][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.866028][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.912895][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.962871][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.013227][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.053550][ T5262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.095339][ T5262] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 138.143226][ T5262] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.190301][ T5262] usb 3-1: USB disconnect, device number 12 [ 138.544215][ T7510] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.954'. [ 139.284138][ T7528] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.529954][ T7505] IPVS: You probably need to specify IP address on multicast interface. [ 139.552936][ T7505] IPVS: Error connecting to the multicast addr [ 140.185577][ T7568] hsr0: entered allmulticast mode [ 140.214354][ T7568] hsr_slave_0: entered allmulticast mode [ 140.220644][ T7568] hsr_slave_1: entered allmulticast mode [ 140.750662][ T7590] team_slave_0: entered allmulticast mode [ 141.499690][ T7588] IPVS: You probably need to specify IP address on multicast interface. [ 141.541041][ T7588] IPVS: Error connecting to the multicast addr [ 141.584323][ T7623] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1001'. [ 141.713353][ T7628] loop2: detected capacity change from 0 to 7 [ 141.743923][ T7628] Dev loop2: unable to read RDB block 7 [ 141.774087][ T7628] loop2: unable to read partition table [ 141.783060][ T7628] loop2: partition table beyond EOD, truncated [ 141.789618][ T7628] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 141.879747][ T4669] Dev loop2: unable to read RDB block 7 [ 141.894171][ T4669] loop2: unable to read partition table [ 141.913120][ T4669] loop2: partition table beyond EOD, truncated [ 142.172033][ T7642] sctp: [Deprecated]: syz.3.1010 (pid 7642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.172033][ T7642] Use struct sctp_sack_info instead [ 143.242588][ T7695] bond_slave_0: entered allmulticast mode [ 143.271133][ T7694] bond_slave_0: left allmulticast mode [ 143.507166][ T7703] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 143.510597][ T7709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1042'. [ 144.015090][ T7727] sctp: [Deprecated]: syz.1.1049 (pid 7727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.015090][ T7727] Use struct sctp_sack_info instead [ 144.063255][ T7732] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.924291][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.125019][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.158048][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.177498][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.189061][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.223889][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.247297][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.268675][ T8] usb 3-1: config 0 descriptor?? [ 145.282367][ T7756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.806467][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 145.824807][ T8] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 145.873356][ T8] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 145.992735][ T29] audit: type=1326 audit(1724275590.236:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.073177][ T29] audit: type=1326 audit(1724275590.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.146365][ T29] audit: type=1326 audit(1724275590.266:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.185178][ T29] audit: type=1326 audit(1724275590.266:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.206571][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.227225][ T5265] usb 3-1: USB disconnect, device number 13 [ 146.273556][ T29] audit: type=1326 audit(1724275590.266:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.319763][ T29] audit: type=1326 audit(1724275590.266:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.341157][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.371495][ T29] audit: type=1326 audit(1724275590.276:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.397614][ T29] audit: type=1326 audit(1724275590.276:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.440802][ T29] audit: type=1326 audit(1724275590.276:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.465700][ T29] audit: type=1326 audit(1724275590.276:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2035579e79 code=0x7ffc0000 [ 146.487129][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.693818][ T7827] input: syz1 as /devices/virtual/input/input13 [ 146.803152][ T5265] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.932835][ T5262] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.020424][ T5265] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.040623][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.092307][ T5265] usb 2-1: config 0 descriptor?? [ 147.121186][ T5265] cp210x 2-1:0.0: cp210x converter detected [ 147.143803][ T5262] usb 1-1: Using ep0 maxpacket: 16 [ 147.170705][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 147.222876][ T5262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 147.243161][ T5262] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 147.262575][ T5262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.306510][ T5262] usb 1-1: config 0 descriptor?? [ 147.315505][ T7825] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.554022][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.566443][ T5265] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 147.583756][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.617328][ T5265] usb 2-1: cp210x converter now attached to ttyUSB0 [ 147.624966][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.790977][ T5262] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 147.807580][ T5262] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 147.814807][ T5262] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 147.821797][ T5262] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 147.832928][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 147.842906][ T5262] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 147.846579][ T9] usb 2-1: USB disconnect, device number 8 [ 147.868743][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 147.887343][ T5262] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 147.888235][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.913578][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.939144][ T9] cp210x 2-1:0.0: device disconnected [ 147.957198][ T8] usb 5-1: Product: syz [ 147.963020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 147.977458][ T8] usb 5-1: Manufacturer: syz [ 147.993910][ T8] usb 5-1: SerialNumber: syz [ 148.002487][ T5262] cp2112 0003:10C4:EA90.000B: error requesting version [ 148.009906][ T8] usb 5-1: config 0 descriptor?? [ 148.027519][ T5262] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 148.072169][ T5262] usb 1-1: USB disconnect, device number 13 [ 148.147924][ T7871] netlink: 'syz.2.1115': attribute type 27 has an invalid length. [ 148.156562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.169960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.259916][ T8] usb read operation failed. (-71) [ 148.288179][ T8] usb write operation failed. (-71) [ 148.322439][ T8] usb write operation failed. (-71) [ 148.336047][ T8] usb write operation failed. (-71) [ 148.379190][ T8] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 148.427926][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.435381][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.456030][ T8] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 148.481017][ T8] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 148.751888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.772784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 149.129312][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.319681][ T7871] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.330365][ T7871] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.341619][ T7871] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.357645][ T7871] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.397083][ T7974] bridge0: port 3(vlan2) entered blocking state [ 151.409156][ T7974] bridge0: port 3(vlan2) entered disabled state [ 151.419311][ T7974] vlan2: entered allmulticast mode [ 151.428060][ T7974] xfrm0: entered allmulticast mode [ 151.434814][ T7974] vlan2: entered promiscuous mode [ 151.439875][ T7974] xfrm0: entered promiscuous mode [ 151.447180][ T7974] bridge0: port 3(vlan2) entered blocking state [ 151.453569][ T7974] bridge0: port 3(vlan2) entered forwarding state [ 151.836592][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1157'. [ 151.848334][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1157'. [ 151.958592][ T8000] loop0: detected capacity change from 0 to 128 [ 152.661615][ T8027] input: syz0 as /devices/virtual/input/input14 [ 152.668216][ T942] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 152.865207][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.893392][ T942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.926882][ T8035] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 152.934982][ T942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.960836][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.990477][ T942] usb 1-1: config 0 descriptor?? [ 153.191135][ T8041] sp0: Synchronizing with TNC [ 153.443344][ T942] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 153.457397][ T942] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 153.487089][ T942] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 153.502829][ T7875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.527860][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 153.545771][ T942] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.714688][ T7875] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.742771][ T7875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.777039][ T942] usb 1-1: USB disconnect, device number 14 [ 153.785284][ T7875] usb 4-1: config 0 descriptor?? [ 153.816348][ T7875] cp210x 4-1:0.0: cp210x converter detected [ 154.199058][ T7875] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 154.224120][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.239581][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.262063][ T7875] usb 4-1: cp210x converter now attached to ttyUSB0 [ 154.459511][ T943] usb 4-1: USB disconnect, device number 5 [ 154.479764][ T943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.517553][ T943] cp210x 4-1:0.0: device disconnected [ 154.998924][ T7875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.083198][ T7904] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.193375][ T7875] usb 2-1: Using ep0 maxpacket: 32 [ 155.209524][ T7875] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 155.229165][ T7875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.250897][ T7875] usb 2-1: Product: syz [ 155.257685][ T7875] usb 2-1: Manufacturer: syz [ 155.286039][ T7875] usb 2-1: SerialNumber: syz [ 155.307550][ T7904] usb 1-1: Using ep0 maxpacket: 8 [ 155.319145][ T7875] usb 2-1: config 0 descriptor?? [ 155.341285][ T7904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 155.368138][ T7904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.388974][ T7904] usb 1-1: Product: syz [ 155.393453][ T7904] usb 1-1: Manufacturer: syz [ 155.398141][ T7904] usb 1-1: SerialNumber: syz [ 155.405385][ T7904] usb 1-1: config 0 descriptor?? [ 155.481223][ T8105] sctp: [Deprecated]: syz.2.1207 (pid 8105) Use of int in max_burst socket option. [ 155.481223][ T8105] Use struct sctp_assoc_value instead [ 155.633882][ T7904] usb read operation failed. (-71) [ 155.648153][ T7904] usb write operation failed. (-71) [ 155.659993][ T7904] usb write operation failed. (-71) [ 155.666609][ T7904] usb write operation failed. (-71) [ 155.672290][ T7904] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 155.744112][ T7875] airspy 2-1:0.0: Board ID: 00 [ 155.754839][ T7875] airspy 2-1:0.0: Firmware version: [ 156.290456][ T8110] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.352168][ T7875] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 156.376480][ T7875] airspy 2-1:0.0: Registered as swradio16 [ 156.382210][ T7875] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 156.388892][ T8110] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.399328][ T7875] usb 2-1: USB disconnect, device number 9 [ 157.701953][ T8164] team0: Device ipvlan2 is already an upper device of the team interface [ 158.505622][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 158.505640][ T29] audit: type=1326 audit(1724275602.756:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.2.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9ef79e79 code=0x0 [ 159.148552][ T8228] input: syz0 as /devices/virtual/input/input15 [ 159.158862][ T8228] input: failed to attach handler leds to device input15, error: -6 [ 160.938594][ T8281] netlink: 'syz.1.1284': attribute type 3 has an invalid length. [ 160.951085][ T8281] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 160.961339][ T8281] netlink: 'syz.1.1284': attribute type 7 has an invalid length. [ 160.974136][ T8281] netlink: 'syz.1.1284': attribute type 8 has an invalid length. [ 160.982293][ T8281] netlink: 'syz.1.1284': attribute type 7 has an invalid length. [ 160.994717][ T8281] netlink: 198180 bytes leftover after parsing attributes in process `syz.1.1284'. [ 161.562265][ T8296] loop0: detected capacity change from 0 to 127 [ 161.789936][ T8303] dccp_invalid_packet: P.Data Offset(0) too small [ 161.805693][ T8309] ebt_limit: overflow, try lower: 570423552/2483027968 [ 162.175738][ T8324] loop2: detected capacity change from 0 to 7 [ 162.186793][ T8324] Dev loop2: unable to read RDB block 7 [ 162.203207][ T8324] loop2: unable to read partition table [ 162.228551][ T8324] loop2: partition table beyond EOD, truncated [ 162.244843][ T8324] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 162.245082][ T943] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.331151][ T8329] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1306'. [ 162.456174][ T943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.487491][ T943] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 162.519743][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.560057][ T943] usb 3-1: config 0 descriptor?? [ 162.592419][ T943] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 162.617891][ T943] usb 3-1: No valid video chain found. [ 162.860884][ T943] usb 3-1: USB disconnect, device number 14 [ 162.949489][ T8354] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1316'. [ 162.965094][ T8356] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 163.292828][ T7875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.498898][ T7875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.526205][ T7875] usb 4-1: config 1 has no interface number 0 [ 163.548122][ T7875] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.569340][ T7875] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 163.581618][ T7875] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 206 [ 163.605823][ T7875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.615431][ T7875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.623584][ T7875] usb 4-1: Product: syz [ 163.627891][ T7875] usb 4-1: Manufacturer: syz [ 163.632497][ T7875] usb 4-1: SerialNumber: syz [ 163.875576][ T8358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.188002][ T8399] Process accounting resumed [ 164.523421][ T8358] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.548078][ T7875] cdc_ncm 4-1:1.1: bind() failure [ 164.559114][ T8412] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.688669][ T8415] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.860920][ T7873] usb 4-1: USB disconnect, device number 6 [ 164.863708][ T8423] [U] [ 164.869811][ T8423] [U] [ 164.872512][ T8423] [U] [ 164.875217][ T8423] [U] [ 164.878192][ T8423] [U] [ 164.880906][ T8423] [U] [ 164.883610][ T8423] [U] [ 164.886312][ T8423] [U] [ 164.889294][ T8423] [U] [ 164.892009][ T8423] [U] [ 164.894726][ T8423] [U] [ 164.897429][ T8423] [U] [ 164.900276][ T8423] [U] [ 164.902988][ T8423] [U] [ 164.905695][ T8423] [U] [ 164.908399][ T8423] [U] [ 164.912336][ T8423] [U] [ 164.915060][ T8423] [U] [ 164.917762][ T8423] [U] [ 164.920470][ T8423] [U] [ 164.923290][ T8423] [U] [ 164.926000][ T8423] [U] [ 164.928713][ T8423] [U] [ 164.931424][ T8423] [U] [ 164.934544][ T8423] [U] [ 164.937259][ T8423] [U] [ 164.939966][ T8423] [U] [ 164.942673][ T8423] [U] [ 164.945604][ T8423] [U] [ 164.948316][ T8423] [U] [ 164.951020][ T8423] [U] [ 164.953733][ T8423] [U] [ 164.956595][ T8423] [U] [ 164.959308][ T8423] [U] [ 164.962016][ T8423] [U] [ 164.964716][ T8423] [U] [ 164.967448][ T8423] [U] [ 164.970133][ T8423] [U] [ 164.972818][ T8423] [U] [ 164.975497][ T8423] [U] [ 164.978344][ T8423] [U] [ 164.981052][ T8423] [U] [ 164.983760][ T8423] [U] [ 164.986463][ T8423] [U] [ 164.989314][ T8423] [U] [ 164.992025][ T8423] [U] [ 164.994737][ T8423] [U] [ 164.997442][ T8423] [U] [ 165.000220][ T8423] [U] [ 165.002929][ T8423] [U] [ 165.005631][ T8423] [U] [ 165.008332][ T8423] [U] [ 165.011110][ T8423] [U] [ 165.013809][ T8423] [U] [ 165.016488][ T8423] [U] [ 165.019169][ T8423] [U] [ 165.021985][ T8423] [U] [ 165.024700][ T8423] [U] [ 165.027404][ T8423] [U] [ 165.030101][ T8423] [U] [ 165.033184][ T8423] [U] [ 165.035895][ T8423] [U] [ 165.038595][ T8423] [U] [ 165.041297][ T8423] [U] [ 165.044117][ T8423] [U] [ 165.046828][ T8423] [U] [ 165.049531][ T8423] [U] [ 165.052234][ T8423] [U] [ 165.056213][ T8423] [U] [ 165.058934][ T8423] [U] [ 165.061635][ T8423] [U] [ 165.064333][ T8423] [U] [ 165.067142][ T8423] [U] [ 165.069840][ T8423] [U] [ 165.072530][ T8423] [U] [ 165.075213][ T8423] [U] [ 165.078018][ T8423] [U] [ 165.080729][ T8423] [U] [ 165.083432][ T8423] [U] [ 165.086135][ T8423] [U] [ 165.089016][ T8423] [U] [ 165.091727][ T8423] [U] [ 165.094430][ T8423] [U] [ 165.097133][ T8423] [U] [ 165.099938][ T8423] [U] [ 165.102651][ T8423] [U] [ 165.105360][ T8423] [U] [ 165.108066][ T8423] [U] [ 165.111398][ T8423] [U] [ 165.114104][ T8423] [U] [ 165.116784][ T8423] [U] [ 165.119462][ T8423] [U] [ 165.122238][ T8423] [U] [ 165.124952][ T8423] [U] [ 165.127652][ T8423] [U] [ 165.130359][ T8423] [U] [ 165.133330][ T8423] [U] [ 165.136046][ T8423] [U] [ 165.138748][ T8423] [U] [ 165.141454][ T8423] [U] [ 165.144607][ T8423] [U] [ 165.147325][ T8423] [U] [ 165.150031][ T8423] [U] [ 165.152735][ T8423] [U] [ 165.155571][ T8423] [U] [ 165.158277][ T8423] [U] [ 165.160985][ T8423] [U] [ 165.163695][ T8423] [U] [ 165.166488][ T8423] [U] [ 165.169199][ T8423] [U] [ 165.171891][ T8423] [U] [ 165.174572][ T8423] [U] [ 165.177357][ T8423] [U] [ 165.180064][ T8423] [U] [ 165.182856][ T8423] [U] [ 165.185566][ T8423] [U] [ 165.188359][ T8423] [U] [ 165.191066][ T8423] [U] [ 165.193772][ T8423] [U] [ 165.196479][ T8423] [U] [ 165.199266][ T8423] [U] [ 165.201961][ T8423] [U] [ 165.204644][ T8423] [U] [ 165.207324][ T8423] [U] [ 165.210134][ T8423] [U] [ 165.212846][ T8423] [U] [ 165.215552][ T8423] [U] [ 165.240577][ T8420] [U] [ 166.004238][ T8459] loop0: detected capacity change from 0 to 7 [ 166.042979][ T8459] Dev loop0: unable to read RDB block 7 [ 166.062173][ T8459] loop0: unable to read partition table [ 166.078694][ T8459] loop0: partition table beyond EOD, truncated [ 166.085320][ T8459] loop_reread_partitions: partition scan of loop0 (被xd) failed (rc=-5) [ 167.072789][ T7903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.293437][ T7903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.309963][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1390'. [ 167.315097][ T7903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.335689][ T7903] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 167.346855][ T7903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.361115][ T8512] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 167.385273][ T7903] usb 4-1: config 0 descriptor?? [ 167.531896][ T8521] syzkaller1: entered promiscuous mode [ 167.538713][ T8521] syzkaller1: entered allmulticast mode [ 167.845734][ T7903] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 168.050281][ T7875] usb 4-1: USB disconnect, device number 7 [ 168.452866][ T7873] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.620934][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 168.634879][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 168.676914][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 168.718814][ T7873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.754672][ T7873] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.774118][ T7873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.823918][ T7873] usb 3-1: config 0 descriptor?? [ 168.850750][ T8543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.925172][ T8573] erspan0: entered promiscuous mode [ 169.051545][ T7875] kernel write not supported for file /vcsa1 (pid: 7875 comm: kworker/1:12) [ 169.222531][ T8584] tipc: Started in network mode [ 169.229973][ T8584] tipc: Node identity 5f6c656e3a20380a, cluster identity 4711 [ 169.240204][ T8584] tipc: Enabling of bearer rejected, failed to enable media [ 169.313207][ T7873] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 169.322626][ T7873] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 169.367635][ T7873] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 169.382039][ T4607] Bluetooth: hci0: command 0x0405 tx timeout [ 169.579288][ T8600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1430'. [ 169.594806][ T7903] usb 3-1: USB disconnect, device number 15 [ 169.636346][ T8602] netlink: 'syz.3.1431': attribute type 3 has an invalid length. [ 170.082427][ T8619] syzkaller1: entered promiscuous mode [ 170.089414][ T8619] syzkaller1: entered allmulticast mode [ 170.171351][ T8621] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 170.189427][ T8621] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1440'. [ 170.202564][ T8621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1440'. [ 170.222759][ T8621] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 170.230522][ T8621] netlink: 'syz.1.1440': attribute type 2 has an invalid length. [ 170.847244][ T29] audit: type=1326 audit(1724275615.096:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.3.1450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2035579e79 code=0x0 [ 171.021034][ T8657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1455'. [ 171.553270][ T7900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.742548][ T8683] netlink: 'syz.2.1467': attribute type 10 has an invalid length. [ 171.766885][ T8683] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 171.777342][ T7900] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 171.786329][ T7900] usb 4-1: config 0 has no interface number 0 [ 171.792465][ T7900] usb 4-1: config 0 interface 255 has no altsetting 0 [ 171.801637][ T7900] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.811825][ T7900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.837232][ T7900] usb 4-1: config 0 descriptor?? [ 171.849785][ T7900] cp210x 4-1:0.255: cp210x converter detected [ 172.007258][ T7903] IPVS: starting estimator thread 0... [ 172.047068][ T8686] tipc: Started in network mode [ 172.082593][ T8686] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.096846][ T8686] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.127623][ T8686] tipc: Enabled bearer , priority 10 [ 172.143153][ T8688] IPVS: using max 21 ests per chain, 50400 per kthread [ 172.180635][ T8692] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1471'. [ 172.192399][ T8691] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1470'. [ 172.245292][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.268822][ T7900] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 172.392854][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.488301][ T7900] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 172.517387][ T7900] usb 4-1: cp210x converter now attached to ttyUSB0 [ 172.533062][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.673100][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.759419][ T7900] usb 4-1: USB disconnect, device number 8 [ 172.788075][ T7900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.802482][ T7900] cp210x 4-1:0.255: device disconnected [ 172.813011][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.954061][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.094982][ T7900] tipc: Node number set to 2886997162 [ 173.232947][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.502857][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.032939][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.293375][ T7873] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.485013][ T7873] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.533541][ T7873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 174.561502][ T7873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.579499][ T7873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.607518][ T7873] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.619328][ T7873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.665081][ T7873] usb 2-1: config 0 descriptor?? [ 174.680856][ T8746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.153773][ T7873] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 175.186941][ T7873] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 175.209854][ T7873] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.506169][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 175.527026][ T942] usb 2-1: USB disconnect, device number 10 [ 175.791523][ T8813] block nbd2: shutting down sockets [ 175.949052][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 175.966054][ T8823] loop7: detected capacity change from 0 to 7 [ 175.985677][ T8823] Dev loop7: unable to read RDB block 7 [ 175.993012][ T8823] loop7: unable to read partition table [ 176.008359][ T8823] loop7: partition table beyond EOD, truncated [ 176.022205][ T8823] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 176.022205][ T8823] ) failed (rc=-5) [ 176.251616][ T29] audit: type=1326 audit(1724275620.496:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.285162][ T29] audit: type=1326 audit(1724275620.496:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.314122][ T29] audit: type=1326 audit(1724275620.496:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.361131][ T29] audit: type=1326 audit(1724275620.496:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.452768][ T29] audit: type=1326 audit(1724275620.496:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.528788][ T29] audit: type=1326 audit(1724275620.496:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.598975][ T29] audit: type=1326 audit(1724275620.496:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.628276][ T29] audit: type=1326 audit(1724275620.496:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 176.681949][ T29] audit: type=1326 audit(1724275620.496:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e45579e79 code=0x7ffc0000 [ 177.011892][ T8870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.093048][ T942] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.114611][ T8876] pimreg: entered allmulticast mode [ 177.132887][ C0] net_ratelimit: 2 callbacks suppressed [ 177.132906][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.178619][ T8876] pimreg: left allmulticast mode [ 177.274733][ T942] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 177.293981][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.320180][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.341786][ T942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 177.374654][ T942] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 177.392967][ T942] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 177.401077][ T942] usb 3-1: Manufacturer: syz [ 177.424670][ T942] usb 3-1: config 0 descriptor?? [ 177.855550][ T942] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 177.873831][ T942] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 177.914233][ T942] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 178.183100][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.219865][ T7903] usb 3-1: USB disconnect, device number 16 [ 178.675032][ T942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 178.729447][ T8920] Bluetooth: MGMT ver 1.23 [ 178.884798][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.899727][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.909798][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.923530][ T942] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.932600][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.943556][ T942] usb 2-1: config 0 descriptor?? [ 179.212987][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.381000][ T29] audit: type=1326 audit(1724275623.616:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8937 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de5d79e79 code=0x7ffc0000 [ 179.398111][ T942] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 179.434367][ T8939] pim6reg1: entered promiscuous mode [ 179.445367][ T942] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 179.452560][ T8939] pim6reg1: entered allmulticast mode [ 179.493565][ T942] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 179.530236][ T942] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 179.619144][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 179.661347][ T8944] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1582'. [ 179.757944][ T942] usb 2-1: USB disconnect, device number 11 [ 180.067533][ T8963] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1592'. [ 180.122817][ T5265] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.252902][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 180.314782][ T5265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.331913][ T5265] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.344964][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.364320][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.385305][ T5265] usb 3-1: Product: syz [ 180.389515][ T5265] usb 3-1: Manufacturer: syz [ 180.423057][ T5265] usb 3-1: SerialNumber: syz [ 180.489216][ T8979] vlan2: entered promiscuous mode [ 180.507923][ T8979] vlan0: entered promiscuous mode [ 180.529841][ T8979] vlan0: left promiscuous mode [ 180.813111][ T5228] Bluetooth: hci0: command 0x0405 tx timeout [ 180.819262][ T4607] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 181.207933][ T9015] Bluetooth: hci3: unsupported parameter 64512 [ 181.214341][ T5228] Bluetooth: hci1: command 0x0406 tx timeout [ 181.214629][ T4607] Bluetooth: hci3: command 0x0406 tx timeout [ 181.225987][ T9015] Bluetooth: hci3: invalid length 0, exp 2 for type 3 [ 181.303427][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 181.489252][ T5265] cdc_ncm 3-1:1.0: bind() failure [ 181.505293][ T5265] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 181.515734][ T5265] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 181.525409][ T5265] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 181.553083][ T5265] usb 3-1: USB disconnect, device number 17 [ 182.008009][ T4669] udevd[4669]: worker [5422] terminated by signal 33 (Unknown signal 33) [ 182.023033][ T5265] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.035769][ T4669] udevd[4669]: worker [5422] failed while handling '/devices/virtual/block/loop4' [ 182.215879][ T5265] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 182.244720][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.281953][ T5265] usb 2-1: config 0 descriptor?? [ 182.343220][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.574081][ T9061] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 182.738118][ T5265] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 183.163596][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 183.310313][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 183.310331][ T29] audit: type=1400 audit(1724275627.556:71): lsm=SMACK fn=smack_task_setpgid action=denied subject="N" object="_" requested=w pid=9084 comm="syz.0.1647" opid=9084 ocomm="syz.0.1647" [ 183.372872][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 183.383414][ T5265] usb 2-1: USB disconnect, device number 12 [ 184.412877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 185.275441][ T7903] kernel write not supported for file /input/event2 (pid: 7903 comm: kworker/0:16) [ 185.375152][ T5265] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.452933][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 185.554853][ T9182] netlink: 'syz.2.1689': attribute type 9 has an invalid length. [ 185.572344][ T9182] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1689'. [ 185.600099][ T5265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.628192][ T5265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.654088][ T5265] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.668600][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.677020][ T9187] netlink: 'syz.2.1689': attribute type 9 has an invalid length. [ 185.685212][ T5265] usb 4-1: SerialNumber: syz [ 185.700769][ T9187] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1689'. [ 185.929575][ T5265] usb 4-1: 0:2 : does not exist [ 185.956878][ T5265] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 185.957882][ T9193] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.008465][ T5265] usb 4-1: USB disconnect, device number 9 [ 186.105183][ T5418] udevd[5418]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.156952][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1698'. [ 186.350451][ T9210] Bluetooth: hci3: unsupported parameter 64512 [ 186.359706][ T9210] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 186.403691][ T9214] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 186.492887][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.073927][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1721'. [ 187.273095][ T943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.399242][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 187.465003][ T943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.478688][ T943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.491897][ T943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.509419][ T943] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.522017][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.542864][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.550141][ T943] usb 4-1: config 0 descriptor?? [ 187.985547][ T943] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 188.003786][ T943] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 188.030326][ T943] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 188.275024][ T5265] usb 4-1: USB disconnect, device number 10 [ 188.582875][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.979789][ T9300] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1743'. [ 189.100325][ T9307] input: syz1 as /devices/virtual/input/input18 [ 189.132975][ T942] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.325752][ T942] usb 4-1: Using ep0 maxpacket: 32 [ 189.332409][ T942] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 189.345243][ T942] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 189.356792][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.364938][ T942] usb 4-1: Product: syz [ 189.369106][ T942] usb 4-1: Manufacturer: syz [ 189.377167][ T942] usb 4-1: SerialNumber: syz [ 189.384335][ T942] usb 4-1: config 0 descriptor?? [ 189.392819][ T9296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 189.402328][ T942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.492806][ T7873] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.613010][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.647224][ T942] usb 4-1: USB disconnect, device number 11 [ 189.677800][ T7873] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 189.696834][ T7873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.720645][ T7873] usb 2-1: config 0 descriptor?? [ 189.729373][ T7873] radioshark 2-1:0.0: Invalid radioSHARK device [ 189.735798][ T7873] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 189.744814][ T7873] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 190.371471][ T9333] netlink: 'syz.3.1758': attribute type 2 has an invalid length. [ 190.379409][ T9333] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 190.388168][ T9333] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1758'. [ 190.652961][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 191.193520][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 191.207573][ T9365] macvtap0: entered promiscuous mode [ 191.214531][ T9365] macvtap0: left promiscuous mode [ 191.370571][ T9371] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1774'. [ 191.525552][ T9377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1777'. [ 191.538710][ T9377] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 191.693065][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.032043][ T9389] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 192.040115][ T9389] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.1782'. [ 192.049561][ T9389] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1782'. [ 192.059148][ T9389] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 192.075495][ T9389] netlink: 'syz.4.1782': attribute type 2 has an invalid length. [ 192.204131][ T942] usb 2-1: USB disconnect, device number 13 [ 192.733028][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.773060][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 194.204462][ T9459] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 194.511306][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518034][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.527238][ T9478] ================================================================== [ 194.535334][ T9478] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 194.542815][ T9478] Read of size 8 at addr ffff88802c9a3ab0 by task syz.2.1818/9478 [ 194.550629][ T9478] [ 194.552982][ T9478] CPU: 0 UID: 0 PID: 9478 Comm: syz.2.1818 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0 [ 194.563680][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 194.573759][ T9478] Call Trace: [ 194.577052][ T9478] [ 194.579995][ T9478] dump_stack_lvl+0x241/0x360 [ 194.584692][ T9478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.589912][ T9478] ? __pfx__printk+0x10/0x10 [ 194.594533][ T9478] ? _printk+0xd5/0x120 [ 194.598700][ T9478] ? __virt_addr_valid+0x183/0x530 [ 194.603828][ T9478] ? __virt_addr_valid+0x183/0x530 [ 194.608955][ T9478] print_report+0x169/0x550 [ 194.613520][ T9478] ? __virt_addr_valid+0x183/0x530 [ 194.618650][ T9478] ? __virt_addr_valid+0x183/0x530 [ 194.623776][ T9478] ? __virt_addr_valid+0x45f/0x530 [ 194.628908][ T9478] ? __phys_addr+0xba/0x170 [ 194.633440][ T9478] ? uprobe_mmap+0xb9a/0x11a0 [ 194.638125][ T9478] kasan_report+0x143/0x180 [ 194.642625][ T9478] ? uprobe_mmap+0xb9a/0x11a0 [ 194.647299][ T9478] uprobe_mmap+0xb9a/0x11a0 [ 194.651802][ T9478] ? __pfx_uprobe_mmap+0x10/0x10 [ 194.656732][ T9478] mmap_region+0x1891/0x2090 [ 194.661313][ T9478] ? mark_lock+0x9a/0x350 [ 194.665644][ T9478] ? __pfx_mmap_region+0x10/0x10 [ 194.670570][ T9478] ? mm_get_unmapped_area+0xa5/0xd0 [ 194.675762][ T9478] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 194.681393][ T9478] ? cap_mmap_addr+0x163/0x2c0 [ 194.686156][ T9478] ? __get_unmapped_area+0x2f0/0x360 [ 194.691435][ T9478] do_mmap+0x8f9/0x1010 [ 194.695586][ T9478] ? __pfx_do_mmap+0x10/0x10 [ 194.700166][ T9478] ? __pfx_down_write_killable+0x10/0x10 [ 194.705791][ T9478] ? __pfx_ima_file_mmap+0x10/0x10 [ 194.710894][ T9478] ? security_mmap_file+0x178/0x1a0 [ 194.716086][ T9478] vm_mmap_pgoff+0x1dd/0x3d0 [ 194.720668][ T9478] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 194.725771][ T9478] ? __fget_files+0x29/0x470 [ 194.730356][ T9478] ? __fget_files+0x3f6/0x470 [ 194.735029][ T9478] ksys_mmap_pgoff+0x4f1/0x720 [ 194.739784][ T9478] ? __x64_sys_mmap+0x7f/0x140 [ 194.744544][ T9478] do_syscall_64+0xf3/0x230 [ 194.749038][ T9478] ? clear_bhb_loop+0x35/0x90 [ 194.753707][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.759600][ T9478] RIP: 0033:0x7f0f9ef79e79 [ 194.764012][ T9478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.783611][ T9478] RSP: 002b:00007f0f9fde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 194.792014][ T9478] RAX: ffffffffffffffda RBX: 00007f0f9f115f80 RCX: 00007f0f9ef79e79 [ 194.799977][ T9478] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000000020000000 [ 194.807937][ T9478] RBP: 00007f0f9efe7916 R08: 0000000000000003 R09: 0000000000000000 [ 194.815896][ T9478] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 194.823854][ T9478] R13: 0000000000000000 R14: 00007f0f9f115f80 R15: 00007ffe7e5e6278 [ 194.831823][ T9478] [ 194.834831][ T9478] [ 194.837138][ T9478] Allocated by task 5222: [ 194.841448][ T9478] kasan_save_track+0x3f/0x80 [ 194.846114][ T9478] __kasan_kmalloc+0x98/0xb0 [ 194.850690][ T9478] __kmalloc_cache_node_noprof+0x1d3/0x300 [ 194.856487][ T9478] __get_vm_area_node+0x113/0x270 [ 194.861503][ T9478] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 194.867388][ T9478] vzalloc_noprof+0x79/0x90 [ 194.871879][ T9478] alloc_counters+0xd7/0x740 [ 194.876462][ T9478] do_ip6t_get_ctl+0xecc/0x1820 [ 194.881300][ T9478] nf_getsockopt+0x299/0x2c0 [ 194.885875][ T9478] ipv6_getsockopt+0x263/0x380 [ 194.890626][ T9478] tcp_getsockopt+0x163/0x1c0 [ 194.895294][ T9478] do_sock_getsockopt+0x373/0x850 [ 194.900309][ T9478] __sys_getsockopt+0x271/0x330 [ 194.905163][ T9478] __x64_sys_getsockopt+0xb5/0xd0 [ 194.910200][ T9478] do_syscall_64+0xf3/0x230 [ 194.914697][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.920578][ T9478] [ 194.922889][ T9478] Freed by task 5222: [ 194.926852][ T9478] kasan_save_track+0x3f/0x80 [ 194.931530][ T9478] kasan_save_free_info+0x40/0x50 [ 194.936563][ T9478] poison_slab_object+0xe0/0x150 [ 194.941501][ T9478] __kasan_slab_free+0x37/0x60 [ 194.946258][ T9478] kfree+0x149/0x360 [ 194.950145][ T9478] do_ip6t_get_ctl+0x11eb/0x1820 [ 194.955073][ T9478] nf_getsockopt+0x299/0x2c0 [ 194.959648][ T9478] ipv6_getsockopt+0x263/0x380 [ 194.964400][ T9478] tcp_getsockopt+0x163/0x1c0 [ 194.969067][ T9478] do_sock_getsockopt+0x373/0x850 [ 194.974079][ T9478] __sys_getsockopt+0x271/0x330 [ 194.978920][ T9478] __x64_sys_getsockopt+0xb5/0xd0 [ 194.983931][ T9478] do_syscall_64+0xf3/0x230 [ 194.988420][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.994303][ T9478] [ 194.996610][ T9478] The buggy address belongs to the object at ffff88802c9a3a80 [ 194.996610][ T9478] which belongs to the cache kmalloc-64 of size 64 [ 195.010563][ T9478] The buggy address is located 48 bytes inside of [ 195.010563][ T9478] freed 64-byte region [ffff88802c9a3a80, ffff88802c9a3ac0) [ 195.024174][ T9478] [ 195.026483][ T9478] The buggy address belongs to the physical page: [ 195.032887][ T9478] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802c9a3d00 pfn:0x2c9a3 [ 195.042944][ T9478] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 195.051010][ T9478] page_type: 0xfdffffff(slab) [ 195.055676][ T9478] raw: 00fff00000000200 ffff8880154418c0 ffffea0000906c10 ffffea0000b31850 [ 195.064246][ T9478] raw: ffff88802c9a3d00 000000000020001c 00000001fdffffff 0000000000000000 [ 195.072811][ T9478] page dumped because: kasan: bad access detected [ 195.079209][ T9478] page_owner tracks the page as allocated [ 195.084904][ T9478] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4670, tgid 4670 (udevadm), ts 17657127374, free_ts 15754466834 [ 195.103572][ T9478] post_alloc_hook+0x1f3/0x230 [ 195.108337][ T9478] get_page_from_freelist+0x2e4c/0x2f10 [ 195.113877][ T9478] __alloc_pages_noprof+0x256/0x6c0 [ 195.119063][ T9478] alloc_slab_page+0x5f/0x120 [ 195.123741][ T9478] allocate_slab+0x5a/0x2f0 [ 195.128255][ T9478] ___slab_alloc+0xcd1/0x14b0 [ 195.132944][ T9478] __slab_alloc+0x58/0xa0 [ 195.137268][ T9478] __kmalloc_noprof+0x25a/0x400 [ 195.142112][ T9478] tomoyo_encode+0x26f/0x540 [ 195.146699][ T9478] tomoyo_realpath_from_path+0x59e/0x5e0 [ 195.152326][ T9478] tomoyo_path_perm+0x2b7/0x740 [ 195.157174][ T9478] security_inode_getattr+0xd8/0x130 [ 195.162448][ T9478] vfs_getattr+0x45/0x430 [ 195.166766][ T9478] vfs_statx+0x199/0x490 [ 195.170996][ T9478] vfs_fstatat+0x145/0x190 [ 195.175403][ T9478] __x64_sys_newfstatat+0x11d/0x1a0 [ 195.180595][ T9478] page last free pid 1 tgid 1 stack trace: [ 195.186387][ T9478] free_unref_page+0xd19/0xea0 [ 195.191139][ T9478] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 195.196845][ T9478] __apply_to_page_range+0x8a8/0xe50 [ 195.202116][ T9478] kasan_release_vmalloc+0x9a/0xb0 [ 195.207214][ T9478] purge_vmap_node+0x3e3/0x770 [ 195.211968][ T9478] __purge_vmap_area_lazy+0x708/0xae0 [ 195.217332][ T9478] _vm_unmap_aliases+0x79d/0x840 [ 195.222272][ T9478] change_page_attr_set_clr+0x2fe/0xdb0 [ 195.227815][ T9478] set_memory_nx+0xf2/0x130 [ 195.232320][ T9478] free_initmem+0x79/0x110 [ 195.236742][ T9478] kernel_init+0x31/0x2b0 [ 195.241061][ T9478] ret_from_fork+0x4b/0x80 [ 195.245474][ T9478] ret_from_fork_asm+0x1a/0x30 [ 195.250233][ T9478] [ 195.252540][ T9478] Memory state around the buggy address: [ 195.258153][ T9478] ffff88802c9a3980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 195.266199][ T9478] ffff88802c9a3a00: 00 00 00 00 01 fc fc fc fc fc fc fc fc fc fc fc [ 195.274244][ T9478] >ffff88802c9a3a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 195.282285][ T9478] ^ [ 195.287898][ T9478] ffff88802c9a3b00: 00 00 00 00 05 fc fc fc fc fc fc fc fc fc fc fc [ 195.295943][ T9478] ffff88802c9a3b80: 00 00 00 00 05 fc fc fc fc fc fc fc fc fc fc fc [ 195.303985][ T9478] ================================================================== [ 195.312909][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 195.332886][ T9478] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.340117][ T9478] CPU: 1 UID: 0 PID: 9478 Comm: syz.2.1818 Not tainted 6.11.0-rc4-syzkaller-00019-gb311c1b497e5 #0 [ 195.350794][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.360838][ T9478] Call Trace: [ 195.364104][ T9478] [ 195.367021][ T9478] dump_stack_lvl+0x241/0x360 [ 195.371691][ T9478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.376878][ T9478] ? __pfx__printk+0x10/0x10 [ 195.381461][ T9478] ? preempt_schedule+0xe1/0xf0 [ 195.386304][ T9478] ? vscnprintf+0x5d/0x90 [ 195.390628][ T9478] panic+0x349/0x860 [ 195.394518][ T9478] ? check_panic_on_warn+0x21/0xb0 [ 195.399616][ T9478] ? __pfx_panic+0x10/0x10 [ 195.404026][ T9478] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 195.409998][ T9478] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 195.416322][ T9478] ? print_report+0x502/0x550 [ 195.420988][ T9478] check_panic_on_warn+0x86/0xb0 [ 195.425914][ T9478] ? uprobe_mmap+0xb9a/0x11a0 [ 195.430577][ T9478] end_report+0x77/0x160 [ 195.434809][ T9478] kasan_report+0x154/0x180 [ 195.439300][ T9478] ? uprobe_mmap+0xb9a/0x11a0 [ 195.443969][ T9478] uprobe_mmap+0xb9a/0x11a0 [ 195.448465][ T9478] ? __pfx_uprobe_mmap+0x10/0x10 [ 195.453393][ T9478] mmap_region+0x1891/0x2090 [ 195.457971][ T9478] ? mark_lock+0x9a/0x350 [ 195.462300][ T9478] ? __pfx_mmap_region+0x10/0x10 [ 195.467228][ T9478] ? mm_get_unmapped_area+0xa5/0xd0 [ 195.472417][ T9478] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 195.478039][ T9478] ? cap_mmap_addr+0x163/0x2c0 [ 195.482797][ T9478] ? __get_unmapped_area+0x2f0/0x360 [ 195.488073][ T9478] do_mmap+0x8f9/0x1010 [ 195.492231][ T9478] ? __pfx_do_mmap+0x10/0x10 [ 195.496812][ T9478] ? __pfx_down_write_killable+0x10/0x10 [ 195.502433][ T9478] ? __pfx_ima_file_mmap+0x10/0x10 [ 195.507534][ T9478] ? security_mmap_file+0x178/0x1a0 [ 195.512725][ T9478] vm_mmap_pgoff+0x1dd/0x3d0 [ 195.517312][ T9478] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 195.522410][ T9478] ? __fget_files+0x29/0x470 [ 195.526992][ T9478] ? __fget_files+0x3f6/0x470 [ 195.531661][ T9478] ksys_mmap_pgoff+0x4f1/0x720 [ 195.536415][ T9478] ? __x64_sys_mmap+0x7f/0x140 [ 195.541172][ T9478] do_syscall_64+0xf3/0x230 [ 195.545665][ T9478] ? clear_bhb_loop+0x35/0x90 [ 195.550334][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.556213][ T9478] RIP: 0033:0x7f0f9ef79e79 [ 195.560617][ T9478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.580211][ T9478] RSP: 002b:00007f0f9fde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.588614][ T9478] RAX: ffffffffffffffda RBX: 00007f0f9f115f80 RCX: 00007f0f9ef79e79 [ 195.596574][ T9478] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000000020000000 [ 195.604532][ T9478] RBP: 00007f0f9efe7916 R08: 0000000000000003 R09: 0000000000000000 [ 195.612488][ T9478] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 195.620445][ T9478] R13: 0000000000000000 R14: 00007f0f9f115f80 R15: 00007ffe7e5e6278 [ 195.628412][ T9478] [ 195.631628][ T9478] Kernel Offset: disabled [ 195.635938][ T9478] Rebooting in 86400 seconds..