last executing test programs: 10.595505053s ago: executing program 2 (id=3314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000050007050000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 10.5234305s ago: executing program 2 (id=3315): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c90000"], 0x22) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r4, r4, 0x0, 0x400000000003f) 8.915726301s ago: executing program 0 (id=3324): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f000001cc00)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000020c80)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x23b) 8.01464325s ago: executing program 2 (id=3329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) dup2(r1, r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040)=0x201, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x0, &(0x7f0000000080)) mremap(&(0x7f0000167000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00000ff000/0x3000)=nil) madvise(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.094969833s ago: executing program 4 (id=3336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b4000000000"], 0xcc}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) 6.921591067s ago: executing program 4 (id=3337): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x5}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x54}}, 0x0) 6.773492097s ago: executing program 4 (id=3338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2c4, 0x65, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}, {0x0, 0x2}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0xd0, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x15}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x31}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd7}]}]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cd6fd864c10004f600"}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x78, 0x6, [@m_connmark={0x74, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x41, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a0"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0xc8, 0x6, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x98, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x69, 0x6, "d784932991e68e79a1a8f16e3edcab797a2281b1fbddc2d509fb7751e05a005e849ca0382ebc3b87333b960c52ae953a7a80b06b5a350f75da086729e641bad0d7c6aa791b7d49bd198771d95f1beab77200e44077acf4ee86eafe0d4c6c6f36ead66159a8"}, {0xc}, {0xc}}}]}]}}]}, 0x2c4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.67999766s ago: executing program 3 (id=3339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x0) 6.645600893s ago: executing program 4 (id=3340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={r3}, &(0x7f0000000200)=0x8) 6.421328549s ago: executing program 3 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x6d42, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.34377423s ago: executing program 3 (id=3342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) migrate_pages(0x0, 0x1a, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004cc0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000006d00)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 6.267476702s ago: executing program 0 (id=3343): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r0) close_range(r3, 0xffffffffffffffff, 0x0) 6.235300272s ago: executing program 0 (id=3344): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x2020, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r5, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x0, 0x0) 5.947511465s ago: executing program 1 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000600)="b035"}, 0x20) 5.897699341s ago: executing program 2 (id=3346): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x0, @val=@perf_event}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) 5.614298851s ago: executing program 3 (id=3347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b4000000000"], 0xcc}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) 5.55203519s ago: executing program 0 (id=3348): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x5}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x54}}, 0x0) 5.55181518s ago: executing program 4 (id=3349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.551710482s ago: executing program 1 (id=3350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 5.478956495s ago: executing program 2 (id=3351): r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.46490136s ago: executing program 1 (id=3352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x120, 0xc8, 0x8, 0x0, 0x5803, 0x318, 0x2e8, 0x2e8, 0x318, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 5.421314979s ago: executing program 3 (id=3353): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f000001cc00)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000020c80)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x23b) 5.407896861s ago: executing program 0 (id=3354): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 5.319760317s ago: executing program 1 (id=3355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5.31770103s ago: executing program 2 (id=3356): socket$inet6(0xa, 0x6, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x100) syz_io_uring_setup(0x102c0c, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5.140939761s ago: executing program 0 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x6, 0x0) 4.326382563s ago: executing program 1 (id=3358): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x516f, &(0x7f0000000200)={0x0, 0xbd0d, 0x2, 0x3}, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000080), &(0x7f0000000040), 0x0) unshare(0x20000400) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 58.725534ms ago: executing program 4 (id=3359): mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x22000c0, 0x0) open(0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 16.269113ms ago: executing program 3 (id=3360): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000280)=0xd010c02) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="cc7b", 0x2}], 0x1, 0x20000002, 0x100000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 0s ago: executing program 1 (id=3361): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) kernel console output (not intermixed with test programs): h-speed USB device number 3 using dummy_hcd [ 1918.460817][ T5319] usb 3-1: Using ep0 maxpacket: 16 [ 1918.479921][ T5319] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1918.501306][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.518526][ T5319] usb 3-1: Product: syz [ 1918.529048][ T5319] usb 3-1: Manufacturer: syz [ 1918.533717][ T5319] usb 3-1: SerialNumber: syz [ 1918.549392][ T5319] usb 3-1: config 0 descriptor?? [ 1918.557147][ T5319] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1918.579941][ T5319] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1918.635467][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1918.770962][T17487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.789701][T17487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.832036][T15511] usb 3-1: USB disconnect, device number 3 [ 1920.061434][T17554] loop0: detected capacity change from 0 to 2048 [ 1920.084532][T17559] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1920.105416][T17556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1920.118339][T17554] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1920.169482][T17554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1920.476355][T15511] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1920.626184][T15511] usb 5-1: Using ep0 maxpacket: 8 [ 1920.634945][T15511] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1920.643249][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1920.655345][T15511] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1920.668281][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1920.680218][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1920.693647][T15511] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1920.701513][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1920.713580][T15511] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1920.725886][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1920.737605][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1920.750994][T15511] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1920.758901][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1920.770905][T15511] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1920.783344][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1920.795322][T15511] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1920.810853][T15511] usb 5-1: string descriptor 0 read error: -22 [ 1920.817961][T15511] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1920.827713][T15511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.850079][T15511] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1921.112554][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 1921.123317][T17561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.139690][T17561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.175761][T17561] fuse: Unknown parameter 'use00000000000000000000' [ 1921.556390][T15511] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1921.719181][T15511] usb 2-1: Using ep0 maxpacket: 16 [ 1921.738213][T15511] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1921.755426][T15511] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1921.782241][T15511] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1921.812358][T15511] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1921.825866][T15511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.838205][T15511] usb 2-1: Product: syz [ 1921.842504][T15511] usb 2-1: Manufacturer: syz [ 1921.849756][T15511] usb 2-1: SerialNumber: syz [ 1921.872471][T15511] usb 2-1: config 0 descriptor?? [ 1922.491634][T15511] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1922.733761][T15511] usb 4-1: config 108 has an invalid interface number: 85 but max is 0 [ 1922.852741][T15511] usb 4-1: config 108 has no interface number 0 [ 1922.962313][T15511] usb 4-1: config 108 interface 85 has no altsetting 0 [ 1922.983527][T15511] usb 4-1: language id specifier not provided by device, defaulting to English [ 1923.026280][T15511] usb 4-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 1923.059353][ T5319] usb 2-1: USB disconnect, device number 8 [ 1923.087667][T15511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.097570][ T5289] usb 5-1: USB disconnect, device number 15 [ 1923.142971][T15511] usb 4-1: Product: syz [ 1923.152836][T15511] usb 4-1: Manufacturer: 뫄ǹౘ噘꿴ⷜ縝䀼颤碅ﰊⳮោ͡퇂魾űㅟ뭆୼ࠒ쌟 [ 1923.170156][T15511] usb 4-1: SerialNumber: syz [ 1923.874692][T17639] netlink: 'syz.1.1979': attribute type 28 has an invalid length. [ 1923.885005][T17639] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1979'. [ 1924.506955][T17669] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1990'. [ 1924.649307][T17673] sctp: [Deprecated]: syz.0.1992 (pid 17673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1924.649307][T17673] Use struct sctp_sack_info instead [ 1925.007394][T15511] option 4-1:108.85: GSM modem (1-port) converter detected [ 1925.049604][T15511] usb 4-1: USB disconnect, device number 8 [ 1925.078536][T15511] option 4-1:108.85: device disconnected [ 1925.201112][T17692] erspan1: entered promiscuous mode [ 1925.206536][T17692] erspan1: entered allmulticast mode [ 1926.226841][T15511] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1926.376839][T15511] usb 5-1: Using ep0 maxpacket: 16 [ 1926.383792][T15511] usb 5-1: config 0 has an invalid interface number: 56 but max is 1 [ 1926.392687][T15511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.421810][T15511] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1926.451506][T15511] usb 5-1: config 0 has no interface number 0 [ 1926.466269][T15511] usb 5-1: config 0 interface 56 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.502586][T15511] usb 5-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=11.1d [ 1926.512024][T15511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.527031][T15511] usb 5-1: Product: syz [ 1926.531599][T15511] usb 5-1: Manufacturer: syz [ 1926.546549][T15511] usb 5-1: SerialNumber: syz [ 1926.555872][T17738] batman_adv: batadv0: Adding interface: ipvlan3 [ 1926.563254][T17738] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1926.618749][T15511] usb 5-1: config 0 descriptor?? [ 1926.627047][T15511] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.56/input/input14 [ 1926.640119][T17738] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1926.681730][T17739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1926.829542][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.887286][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.968590][ T4679] bcm5974 5-1:0.56: could not read from device [ 1927.025364][T15511] usb 5-1: USB disconnect, device number 16 [ 1927.057517][ T4679] bcm5974 5-1:0.56: could not read from device [ 1927.788058][T17779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2030'. [ 1928.366898][T17799] ALSA: mixer_oss: invalid OSS volume '' [ 1928.507258][T15511] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1928.680631][T15511] usb 1-1: Using ep0 maxpacket: 16 [ 1928.709132][T15511] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1928.727127][T15511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.747216][T15511] usb 1-1: Product: syz [ 1928.751421][T15511] usb 1-1: Manufacturer: syz [ 1928.756034][T15511] usb 1-1: SerialNumber: syz [ 1928.775365][T15511] usb 1-1: config 0 descriptor?? [ 1928.794377][T15511] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1928.848840][T15511] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1928.938203][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1929.010446][T17790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.039366][T17790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.084925][T17822] program syz.2.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1929.098309][T15511] usb 1-1: USB disconnect, device number 9 [ 1929.131332][T17822] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2049'. [ 1929.627800][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1929.627818][ T29] audit: type=1326 audit(1728840531.491:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.2.2052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4df7dff9 code=0x0 [ 1929.655803][ C1] vkms_vblank_simulate: vblank timer overrun [ 1929.947323][T15511] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1930.139019][T15511] usb 1-1: Using ep0 maxpacket: 16 [ 1930.150897][T15511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.167414][T15511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.193573][T15511] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1930.212963][T17843] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1930.232965][T15511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.273046][T15511] usb 1-1: config 0 descriptor?? [ 1930.722473][T15511] mcp2200 0003:04D8:00DF.0003: item fetching failed at offset 0/2 [ 1930.742249][T15511] mcp2200 0003:04D8:00DF.0003: can't parse reports [ 1930.761506][T15511] mcp2200 0003:04D8:00DF.0003: probe with driver mcp2200 failed with error -22 [ 1931.106199][ T29] audit: type=1326 audit(1728840532.961:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.175805][ T29] audit: type=1326 audit(1728840532.991:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.216610][ T29] audit: type=1326 audit(1728840532.991:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.290325][ T29] audit: type=1326 audit(1728840532.991:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.397411][ T29] audit: type=1326 audit(1728840533.001:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.420008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1931.464830][ T29] audit: type=1326 audit(1728840533.001:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.487274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1931.521836][ T29] audit: type=1326 audit(1728840533.001:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.592446][ T29] audit: type=1326 audit(1728840533.001:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.661986][ T29] audit: type=1326 audit(1728840533.001:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17871 comm="syz.1.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x7ffc0000 [ 1931.716852][T17899] fuse: Unknown parameter '1844674407370955161500000000000000000000003' [ 1931.764574][T17894] pimreg: entered allmulticast mode [ 1931.783624][T17894] pimreg: left allmulticast mode [ 1931.834105][T17899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2073'. [ 1932.405598][T17919] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2080'. [ 1932.973554][T17929] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2084'. [ 1933.167426][T12099] IPVS: starting estimator thread 0... [ 1933.287753][T17938] IPVS: using max 18 ests per chain, 43200 per kthread [ 1933.351231][T15511] usb 1-1: USB disconnect, device number 10 [ 1933.447835][T12099] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1933.586788][T17952] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2093'. [ 1933.609348][T12099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.630848][T12099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.641954][T12099] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1933.651801][T12099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.668406][T12099] usb 4-1: config 0 descriptor?? [ 1934.086759][T12099] cypress 0003:04B4:DE61.0004: item fetching failed at offset 5/7 [ 1934.103404][T12099] cypress 0003:04B4:DE61.0004: parse failed [ 1934.117761][T12099] cypress 0003:04B4:DE61.0004: probe with driver cypress failed with error -22 [ 1934.439108][T12099] usb 4-1: USB disconnect, device number 9 [ 1934.619885][T17982] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2104'. [ 1934.651405][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 1934.668112][T17983] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2107'. [ 1935.520808][T18007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2116'. [ 1935.683804][T18009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2117'. [ 1936.749270][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2133'. [ 1936.861454][T18057] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2134'. [ 1937.115480][T18071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2139'. [ 1937.478171][ T5319] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1937.662882][ T5319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.677144][ T5319] usb 4-1: config 0 has no interfaces? [ 1937.700767][ T5319] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1937.710528][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.718966][ T5319] usb 4-1: Product: syz [ 1937.723287][ T5319] usb 4-1: Manufacturer: syz [ 1937.727959][ T5319] usb 4-1: SerialNumber: syz [ 1937.744903][ T5319] usb 4-1: config 0 descriptor?? [ 1937.835970][T18091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1937.965995][ T5319] usb 4-1: USB disconnect, device number 10 [ 1938.124920][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 1938.124939][ T29] audit: type=1326 audit(1728840539.980:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.1.2152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x0 [ 1938.633923][T18122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2161'. [ 1940.189159][ T5319] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1940.380648][ T5319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.393931][ T5319] usb 5-1: config 0 has no interfaces? [ 1940.406231][ T5319] usb 5-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1940.415790][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.458530][ T5319] usb 5-1: Product: syz [ 1940.462939][ T5319] usb 5-1: Manufacturer: syz [ 1940.467665][ T5319] usb 5-1: SerialNumber: syz [ 1940.501346][ T5319] usb 5-1: config 0 descriptor?? [ 1940.718182][ T5319] usb 5-1: USB disconnect, device number 17 [ 1941.810167][T18173] blktrace: Concurrent blktraces are not allowed on sg0 [ 1941.865281][T18186] block device autoloading is deprecated and will be removed. [ 1942.079183][T18201] program syz.2.2188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1942.750548][T18224] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 1942.759711][T18224] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2194'. [ 1942.773174][T18224] team0: entered promiscuous mode [ 1942.778376][T18224] team_slave_0: entered promiscuous mode [ 1942.792034][T18224] team_slave_1: entered promiscuous mode [ 1942.803031][T18224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1942.823669][T18227] syz_tun: entered promiscuous mode [ 1942.834606][T18227] team0: Port device syz_tun added [ 1946.559392][T15511] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1946.721889][T15511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1946.759740][T15511] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1946.768913][T15511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.787491][T15511] usb 5-1: Product: syz [ 1946.795230][T15511] usb 5-1: Manufacturer: syz [ 1946.800097][T15511] usb 5-1: SerialNumber: syz [ 1946.812579][T15511] usb 5-1: config 0 descriptor?? [ 1946.925387][T18361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2240'. [ 1946.955560][T18361] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 1946.978153][T18361] team0: Port device netdevsim0 added [ 1946.989351][ T5319] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1947.204909][ T5319] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1947.213777][ T5319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.224042][ T5319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1947.233212][ T5319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.279339][ T5319] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1947.288600][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1947.296725][ T5319] usb 4-1: Product: syz [ 1947.301077][ T5319] usb 4-1: Manufacturer: syz [ 1947.334490][ T5319] cdc_wdm 4-1:1.0: skipping garbage [ 1947.339846][ T5319] cdc_wdm 4-1:1.0: skipping garbage [ 1947.349600][ T5319] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1947.355721][ T5319] cdc_wdm 4-1:1.0: Unknown control protocol [ 1947.366196][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'. [ 1947.470359][ T29] audit: type=1326 audit(1728840549.329:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18337 comm="syz.4.2234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecfd7dff9 code=0x0 [ 1947.555341][T15511] ath6kl: Failed to submit usb control message: -71 [ 1947.562756][T15511] ath6kl: unable to send the bmi data to the device: -71 [ 1947.578100][T15511] ath6kl: Unable to send get target info: -71 [ 1947.590318][T15511] ath6kl: Failed to init ath6kl core: -71 [ 1947.597287][T15511] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1947.619184][T15511] usb 5-1: USB disconnect, device number 18 [ 1947.675219][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.682156][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.688569][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.695209][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.701630][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.708216][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.714499][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.721101][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.727454][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.734086][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.740492][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.747108][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.756382][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.763017][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.769372][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.776003][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.782335][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.788962][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.796202][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1947.802824][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1947.809635][ T5319] usb 4-1: USB disconnect, device number 11 [ 1947.809693][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1947.978606][T18368] team0 (unregistering): Port device team_slave_0 removed [ 1947.987529][T18368] team0 (unregistering): Port device team_slave_1 removed [ 1948.139807][T15511] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1948.289409][T12099] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1948.289909][T15511] usb 3-1: Using ep0 maxpacket: 8 [ 1948.311077][T15511] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1948.327679][T15511] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1948.344262][T15511] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1948.358077][T15511] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1948.376638][T15511] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1948.386779][T15511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.471696][T12099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.482091][T12099] usb 1-1: config 0 has no interfaces? [ 1948.490137][T12099] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1948.514646][T12099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.537476][T12099] usb 1-1: Product: syz [ 1948.545221][T12099] usb 1-1: Manufacturer: syz [ 1948.560007][T12099] usb 1-1: SerialNumber: syz [ 1948.581192][T12099] usb 1-1: config 0 descriptor?? [ 1948.609546][T15511] usb 3-1: GET_CAPABILITIES returned 0 [ 1948.634708][T15511] usbtmc 3-1:16.0: can't read capabilities [ 1948.797898][T12099] usb 1-1: USB disconnect, device number 11 [ 1948.835581][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1948.844990][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1948.922144][T18378] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1949.479077][T18427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2263'. [ 1949.887294][T15511] usb 3-1: USB disconnect, device number 4 [ 1950.053750][T18441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2269'. [ 1950.529717][T12099] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1950.714430][T12099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.839886][T12099] usb 4-1: config 0 has no interfaces? [ 1950.876521][T12099] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1950.885738][T12099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.893822][T12099] usb 4-1: Product: syz [ 1950.898030][T12099] usb 4-1: Manufacturer: syz [ 1950.903654][T12099] usb 4-1: SerialNumber: syz [ 1950.911191][T12099] usb 4-1: config 0 descriptor?? [ 1951.122436][T15511] usb 4-1: USB disconnect, device number 12 [ 1951.575537][ T29] audit: type=1326 audit(1728840553.429:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18479 comm="syz.4.2281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecfd7dff9 code=0x0 [ 1951.715724][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 1952.165088][T18502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2292'. [ 1952.439724][T18509] ALSA: mixer_oss: invalid OSS volume '' [ 1952.712953][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1952.749009][ T9985] Bluetooth: hci4: command 0x0406 tx timeout [ 1953.490274][ T29] audit: type=1326 audit(1728840555.329:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.1.2306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x0 [ 1953.545077][T18548] capability: warning: `syz.4.2309' uses 32-bit capabilities (legacy support in use) [ 1954.642718][T15511] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1954.810155][T15511] usb 5-1: Using ep0 maxpacket: 32 [ 1954.822027][T15511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.842037][T15511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.862170][T15511] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1954.894229][T15511] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1954.926045][T15511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.952535][T15511] usb 5-1: config 0 descriptor?? [ 1955.077192][T18589] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1955.088485][T18589] PKCS7: Only support pkcs7_signedData type [ 1955.569701][ T29] audit: type=1326 audit(1728840557.418:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.2.2327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4df7dff9 code=0x0 [ 1955.646515][T18596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2326'. [ 1955.672921][T15511] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input15 [ 1955.763615][T15511] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input16 [ 1955.878948][T15511] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 1956.955709][T15511] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 1957.154600][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 1957.361971][ T29] audit: type=1326 audit(1728840559.218:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.2350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x0 [ 1957.811816][ T870] usb 5-1: USB disconnect, device number 19 [ 1958.300286][T18671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2356'. [ 1959.490739][ T870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1959.729774][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.740888][ T870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.750736][ T870] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1959.759793][ T870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.784121][ T870] usb 1-1: config 0 descriptor?? [ 1960.235719][ T870] usbhid 1-1:0.0: can't add hid device: -71 [ 1960.250856][ T870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1960.282197][ T870] usb 1-1: USB disconnect, device number 12 [ 1961.004538][T15511] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1961.191064][T15511] usb 4-1: Using ep0 maxpacket: 16 [ 1961.200736][T15511] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1961.218092][T15511] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1961.266270][T15511] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1961.280162][T15511] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1961.293112][T15511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.303856][T15511] usb 4-1: Product: syz [ 1961.308029][T15511] usb 4-1: Manufacturer: syz [ 1961.326596][T15511] usb 4-1: SerialNumber: syz [ 1961.340201][T15511] usb 4-1: config 0 descriptor?? [ 1961.794773][T18801] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1961.850394][ T870] usb 4-1: USB disconnect, device number 13 [ 1961.886738][T18814] netlink: 'syz.1.2414': attribute type 4 has an invalid length. [ 1962.186851][ T29] audit: type=1326 audit(1728840564.038:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x7ffc0000 [ 1962.241325][ T29] audit: type=1326 audit(1728840564.058:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x7ffc0000 [ 1962.280843][T18834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1962.287095][ T29] audit: type=1326 audit(1728840564.068:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc502d7c990 code=0x7ffc0000 [ 1962.321720][ T29] audit: type=1326 audit(1728840564.068:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc502d7c990 code=0x7ffc0000 [ 1962.426052][ T29] audit: type=1326 audit(1728840564.068:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x7ffc0000 [ 1962.486474][ T29] audit: type=1326 audit(1728840564.068:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc502d7dff9 code=0x7ffc0000 [ 1962.552633][ T29] audit: type=1326 audit(1728840564.078:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.0.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x7ffc0000 [ 1962.817614][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 1962.827350][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2435'. [ 1962.981253][ T5250] Bluetooth: hci2: command 0x0406 tx timeout [ 1963.847292][T18889] PKCS7: Unknown OID: [5] 0.0.0.0.0.0.0.0.0.0.0.0.18.1.0.0.0.0.0.0.0.0.0.0. [ 1963.856165][T18889] PKCS7: Only support pkcs7_signedData type [ 1964.291363][T15511] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1964.452854][T15511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.466447][T15511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.476530][T15511] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1964.486161][T15511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.511032][T15511] usb 2-1: config 0 descriptor?? [ 1964.768097][T18900] bridge0: port 3(macvlan2) entered blocking state [ 1964.782865][T18900] bridge0: port 3(macvlan2) entered disabled state [ 1964.791614][T18900] macvlan2: entered allmulticast mode [ 1964.797337][T18900] syz_tun: entered allmulticast mode [ 1964.815849][T18900] macvlan2: entered promiscuous mode [ 1964.892912][T15511] usbhid 2-1:0.0: can't add hid device: -71 [ 1964.898965][T15511] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1964.928333][T15511] usb 2-1: USB disconnect, device number 9 [ 1965.421500][T15511] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1965.584177][T15511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1965.603476][T15511] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1965.614598][T18929] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2463'. [ 1965.626849][T15511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.651472][T15511] usb 1-1: Product: syz [ 1965.666030][T15511] usb 1-1: Manufacturer: syz [ 1965.676145][T15511] usb 1-1: SerialNumber: syz [ 1965.690314][T15511] usb 1-1: config 0 descriptor?? [ 1965.799957][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 1965.916854][T15511] ath6kl: Failed to submit usb control message: -71 [ 1965.931654][T15511] ath6kl: unable to send the bmi data to the device: -71 [ 1965.938898][T15511] ath6kl: Unable to send get target info: -71 [ 1965.949106][T15511] ath6kl: Failed to init ath6kl core: -71 [ 1965.955603][T15511] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1965.987219][T15511] usb 1-1: USB disconnect, device number 13 [ 1966.550953][T18936] team0 (unregistering): Port device team_slave_0 removed [ 1966.602756][T18936] team0 (unregistering): Port device team_slave_1 removed [ 1966.850319][T18936] team0 (unregistering): Port device netdevsim0 removed [ 1967.141926][ T5289] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1967.348795][ T29] audit: type=1326 audit(1728840569.197:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18972 comm="syz.4.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecfd7dff9 code=0x0 [ 1967.416242][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.485683][ T5289] usb 4-1: config 0 has no interfaces? [ 1967.519300][ T5289] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1967.531776][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.539975][ T5289] usb 4-1: Product: syz [ 1967.544405][ T5289] usb 4-1: Manufacturer: syz [ 1967.549047][ T5289] usb 4-1: SerialNumber: syz [ 1967.556284][ T5289] usb 4-1: config 0 descriptor?? [ 1967.776766][ T5289] usb 4-1: USB disconnect, device number 14 [ 1967.866854][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1969.352076][ T5289] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1969.373489][T19016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1969.501956][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 1969.524448][ T5289] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1969.564056][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.592124][ T5289] usb 4-1: Product: syz [ 1969.596581][ T5289] usb 4-1: Manufacturer: syz [ 1969.601479][ T5289] usb 4-1: SerialNumber: syz [ 1969.633701][ T5289] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1969.640005][ T5289] r8152-cfgselector 4-1: config 0 descriptor?? [ 1969.902107][ T870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1969.968899][ T29] audit: type=1326 audit(1728840571.817:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19022 comm="syz.4.2500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecfd7dff9 code=0x0 [ 1970.079151][T19028] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2501'. [ 1970.099758][ T870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.110978][ T870] usb 1-1: config 0 has no interfaces? [ 1970.134272][ T870] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1970.148782][ T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.157071][ T870] usb 1-1: Product: syz [ 1970.161361][ T870] usb 1-1: Manufacturer: syz [ 1970.171093][ T870] usb 1-1: SerialNumber: syz [ 1970.180942][ T870] usb 1-1: config 0 descriptor?? [ 1970.407188][ T870] usb 1-1: USB disconnect, device number 14 [ 1970.602804][ T5289] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 1971.002604][ T5289] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1971.069640][T19049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1971.207467][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 1971.220912][ T5289] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1971.239526][T19059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2511'. [ 1971.267514][ T5289] usb 4-1: config 6 has an invalid interface number: 204 but max is 0 [ 1971.279307][ T5289] usb 4-1: config 6 has no interface number 0 [ 1971.297921][ T5289] usb 4-1: config 6 interface 204 has no altsetting 0 [ 1971.327102][ T5289] usb 4-1: New USB device found, idVendor=0403, idProduct=df30, bcdDevice=e2.81 [ 1971.353917][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.370042][ T5289] usb 4-1: Product: syz [ 1971.381762][ T5289] usb 4-1: Manufacturer: syz [ 1971.387020][ T5289] usb 4-1: SerialNumber: syz [ 1971.419610][ T29] audit: type=1326 audit(1728840573.266:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.2517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4df7dff9 code=0x0 [ 1971.614850][T15511] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1971.623140][ T5289] ftdi_sio 4-1:6.204: FTDI USB Serial Device converter detected [ 1971.633816][ T5289] ftdi_sio ttyUSB0: unknown device type: 0xe281 [ 1971.646321][ T5289] usb 4-1: USB disconnect, device number 16 [ 1971.653341][ T5289] ftdi_sio 4-1:6.204: device disconnected [ 1971.743549][ T870] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1971.774077][T15511] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1971.783588][T15511] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.794625][T15511] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1971.803693][T15511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1971.816840][T15511] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1971.826787][T15511] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1971.834952][T15511] usb 5-1: Product: syz [ 1971.839442][T15511] usb 5-1: Manufacturer: syz [ 1971.848411][T15511] cdc_wdm 5-1:1.0: skipping garbage [ 1971.854252][T15511] cdc_wdm 5-1:1.0: skipping garbage [ 1971.863202][T15511] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1971.869248][T15511] cdc_wdm 5-1:1.0: Unknown control protocol [ 1971.934134][ T870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.944715][ T870] usb 2-1: config 0 has no interfaces? [ 1971.952739][ T870] usb 2-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 1971.961946][ T870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.970154][ T870] usb 2-1: Product: syz [ 1971.974541][ T870] usb 2-1: Manufacturer: syz [ 1971.979156][ T870] usb 2-1: SerialNumber: syz [ 1971.987147][ T870] usb 2-1: config 0 descriptor?? [ 1972.106637][ C1] wdm_int_callback: 4 callbacks suppressed [ 1972.106663][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1972.107038][T15511] usb 5-1: USB disconnect, device number 20 [ 1972.112509][ C1] wdm_int_callback: 4 callbacks suppressed [ 1972.112530][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1972.112549][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1972.184526][T19080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1972.200306][ T870] usb 2-1: USB disconnect, device number 10 [ 1972.900120][T19110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1972.930456][T19110] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1972.930622][ T9985] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 1973.256872][ T9985] Bluetooth: hci1: command 0x0406 tx timeout [ 1974.002613][T15511] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1974.248240][T15511] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1974.259439][T15511] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.273839][T15511] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1974.291882][T15511] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.305597][T15511] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1974.315333][T15511] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1974.324143][T15511] usb 4-1: Product: syz [ 1974.328670][T15511] usb 4-1: Manufacturer: syz [ 1974.357487][T15511] cdc_wdm 4-1:1.0: skipping garbage [ 1974.366902][T15511] cdc_wdm 4-1:1.0: skipping garbage [ 1974.385710][T15511] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1974.399883][T15511] cdc_wdm 4-1:1.0: Unknown control protocol [ 1974.637574][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1974.638238][ T870] usb 4-1: USB disconnect, device number 17 [ 1974.644204][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1974.644227][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1974.893663][T19189] batman_adv: batadv0: Adding interface: ipvlan4 [ 1974.900061][T19189] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.925505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1974.925585][T15511] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1974.955746][T19189] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 1975.072674][T15511] usb 3-1: Using ep0 maxpacket: 16 [ 1975.083066][T15511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1975.098989][ T870] kernel read not supported for file /newroot/240/file0 (pid: 870 comm: kworker/1:2) [ 1975.106621][T15511] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1975.135335][T15511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.162614][T15511] usb 3-1: Product: syz [ 1975.166828][T15511] usb 3-1: Manufacturer: syz [ 1975.172568][T15511] usb 3-1: SerialNumber: syz [ 1975.189163][T15511] usb 3-1: config 0 descriptor?? [ 1975.198936][T15511] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1975.208807][T15511] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1975.213842][T19206] loop4: detected capacity change from 0 to 512 [ 1975.275989][T19206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1975.294433][T19206] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1975.326233][ T29] audit: type=1804 audit(1728840577.176:2554): pid=19206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2570" name="/newroot/241/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 1975.341863][T19206] Invalid ELF header len 1 [ 1975.388998][T15358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1975.892153][T15511] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1975.898330][ T5289] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1976.048858][T19241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2584'. [ 1976.052664][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 1976.071615][ T5289] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1976.081120][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.092737][ T5289] usb 4-1: Product: syz [ 1976.096967][ T5289] usb 4-1: Manufacturer: syz [ 1976.101572][ T5289] usb 4-1: SerialNumber: syz [ 1976.119518][ T5289] usb 4-1: config 0 descriptor?? [ 1976.265605][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.272465][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.342475][ T5289] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1976.578437][T15511] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1976.623346][T15511] em28xx 3-1:0.0: board has no eeprom [ 1976.832806][T15511] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1976.862847][T15511] em28xx 3-1:0.0: dvb set to bulk mode. [ 1976.873134][ T5290] em28xx 3-1:0.0: Binding DVB extension [ 1976.935681][T15511] usb 3-1: USB disconnect, device number 5 [ 1976.942586][T15511] em28xx 3-1:0.0: Disconnecting em28xx [ 1977.048891][ T5290] em28xx 3-1:0.0: Registering input extension [ 1977.056477][ T9985] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1977.067514][ T9985] Bluetooth: hci3: Injecting HCI hardware error event [ 1977.079792][ T9985] Bluetooth: hci3: hardware error 0x00 [ 1977.156019][T15511] em28xx 3-1:0.0: Closing input extension [ 1977.195581][T15511] em28xx 3-1:0.0: Freeing device [ 1977.248243][T19273] loop4: detected capacity change from 0 to 512 [ 1977.270750][T19273] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1977.433815][T19277] overlayfs: disabling nfs_export due to verity=require [ 1977.777708][ T5289] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1977.789911][ T5289] usb 4-1: USB disconnect, device number 18 [ 1978.336082][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'. [ 1978.823604][ T9987] Bluetooth: hci1: command 0x0406 tx timeout [ 1978.903168][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1979.027271][T19319] sctp: [Deprecated]: syz.2.2615 (pid 19319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1979.027271][T19319] Use struct sctp_sack_info instead [ 1979.226215][ T9985] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1979.461906][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1979.713841][ T29] audit: type=1326 audit(1728840581.576:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19354 comm="syz.4.2632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecfd7dff9 code=0x0 [ 1980.290210][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 1980.392546][T19372] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 1980.402847][T19386] overlayfs: failed to resolve './file0': -2 [ 1980.431832][T19372] kvm: pic: non byte write [ 1980.462731][T19378] binder: 19369:19378 ioctl 40046205 0 returned -22 [ 1981.285046][T19425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2658'. [ 1982.063408][T15511] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1982.141485][T19467] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2676'. [ 1982.178662][T19470] sg_read: process 1177 (syz.1.2677) changed security contexts after opening file descriptor, this is not allowed. [ 1982.243347][T15511] usb 1-1: Using ep0 maxpacket: 8 [ 1982.260435][T15511] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.286575][T15511] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1982.310760][T15511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1982.326948][T15511] usb 1-1: SerialNumber: syz [ 1982.365125][T15511] usb 1-1: config 0 descriptor?? [ 1982.519539][T19489] loop4: detected capacity change from 0 to 128 [ 1982.563543][ T5289] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1982.583090][T15511] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1982.603770][T15511] usb 1-1: No valid video chain found. [ 1982.611984][T15511] usb 1-1: USB disconnect, device number 15 [ 1982.707519][T19493] syzkaller0: tun_chr_ioctl cmd 21731 [ 1982.723709][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1982.736158][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1982.746367][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.759965][ T5289] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1982.775082][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.787813][ T5289] usb 2-1: config 0 descriptor?? [ 1982.811286][T19496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1982.846170][T19496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1982.859610][T19496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1982.871467][T19496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1982.969858][T19508] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2693'. [ 1983.198575][ T5289] betop 0003:11C2:2208.0006: item fetching failed at offset 2/5 [ 1983.212302][ T5289] betop 0003:11C2:2208.0006: parse failed [ 1983.218898][ T5289] betop 0003:11C2:2208.0006: probe with driver betop failed with error -22 [ 1983.400473][ T5289] usb 2-1: USB disconnect, device number 11 [ 1983.559345][T19541] netlink: 'syz.2.2709': attribute type 4 has an invalid length. [ 1983.664100][T19541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'. [ 1984.053901][T19568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2719'. [ 1984.139520][T19575] batadv0: entered promiscuous mode [ 1984.168620][T19575] batadv_slave_0: entered promiscuous mode [ 1984.191948][T19575] batadv_slave_0: left promiscuous mode [ 1984.245278][T19575] batadv0: left promiscuous mode [ 1984.632290][ T9985] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 1984.797029][ T29] audit: type=1326 audit(1728840586.655:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19615 comm="syz.1.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x0 [ 1985.266957][T19626] delete_channel: no stack [ 1985.928388][T19660] vlan2: entered promiscuous mode [ 1986.209242][ T29] audit: type=1326 audit(1728840588.065:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19676 comm="syz.0.2763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc502d7dff9 code=0x0 [ 1986.231160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1986.247770][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1986.859791][T19712] loop4: detected capacity change from 0 to 1024 [ 1986.923416][T19712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1987.204253][T12099] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1987.399893][T12099] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.445900][T12099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1987.461828][ T870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1987.563662][T12099] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1987.717846][T12099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1987.727603][T12099] usb 5-1: SerialNumber: syz [ 1987.745884][ T870] usb 3-1: Using ep0 maxpacket: 16 [ 1987.757910][ T870] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1987.774046][ T870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.861939][ T870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1987.932066][ T870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1987.942277][ T870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.968652][ T870] usb 3-1: Product: syz [ 1987.973819][ T870] usb 3-1: Manufacturer: syz [ 1988.032258][T12099] usb 5-1: 0:2 : does not exist [ 1988.037310][T12099] usb 5-1: unit 255 not found! [ 1988.042270][ T870] usb 3-1: SerialNumber: syz [ 1988.061351][T12099] usb 5-1: 5:0: cannot get min/max values for control 16 (id 5) [ 1988.109219][T12099] usb 5-1: USB disconnect, device number 21 [ 1988.192719][ T29] audit: type=1326 audit(1728840590.045:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19743 comm="syz.1.2790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16fd37dff9 code=0x0 [ 1988.214638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1988.424183][ T5289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1988.471804][ T870] usb 3-1: 0:2 : does not exist [ 1988.553343][T15358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1988.585740][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.603070][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.642536][ T5289] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1988.664669][ T9985] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1988.666170][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.675398][ T9985] Bluetooth: hci0: Injecting HCI hardware error event [ 1988.692520][ T9985] Bluetooth: hci0: hardware error 0x00 [ 1988.740029][ T5289] usb 4-1: config 0 descriptor?? [ 1988.905206][ T870] usb 3-1: 1:0: bogus dB values (-10844/-9853), disabling dB reporting [ 1988.928266][ T870] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1988.970624][ T870] usb 3-1: USB disconnect, device number 6 [ 1989.027365][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1989.374939][T19791] __nla_validate_parse: 1 callbacks suppressed [ 1989.374960][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 1989.687732][ T5289] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 1989.729810][ T5289] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 1989.768466][ T5289] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 1989.788486][ T5289] usb 4-1: USB disconnect, device number 19 [ 1989.913575][T19791] team_slave_0: left promiscuous mode [ 1989.931266][T19791] team0 (unregistering): Port device team_slave_0 removed [ 1989.940833][T19791] team_slave_1: left promiscuous mode [ 1989.948196][T19791] team0 (unregistering): Port device team_slave_1 removed [ 1989.955707][T19791] syz_tun: left promiscuous mode [ 1989.980984][T19791] team0 (unregistering): Port device syz_tun removed [ 1990.744505][ T9985] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1992.099551][T19874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1992.124619][ T5289] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 1992.276609][ T5289] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1992.287872][ T5289] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1992.297175][ T5289] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1992.306268][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1992.319010][ T5289] usb 3-1: string descriptor 0 read error: -22 [ 1992.325348][ T5289] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=ff.ff [ 1992.334408][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.343903][ T5289] usb 3-1: config 0 descriptor?? [ 1992.353806][T19864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1992.367633][ T5289] hub 3-1:0.0: bad descriptor, ignoring hub [ 1992.373580][ T5289] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1992.400794][ T5289] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 1992.474771][T12099] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1992.574665][ T870] usb 3-1: USB disconnect, device number 7 [ 1992.654812][T12099] usb 2-1: Using ep0 maxpacket: 8 [ 1992.669068][T12099] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1992.681555][T12099] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1992.691687][T12099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.711665][T12099] usb 2-1: config 0 descriptor?? [ 1992.733284][T12099] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1993.168731][ T870] usb 2-1: USB disconnect, device number 12 [ 1993.256099][T19911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2857'. [ 1993.464873][ T5289] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1993.494444][T19911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.554516][T19911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.596950][T19911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2857'. [ 1993.620242][T19911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.644763][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 1993.654327][ T5289] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1993.666969][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.676909][ T5289] usb 3-1: Product: syz [ 1993.681103][ T5289] usb 3-1: Manufacturer: syz [ 1993.690585][ T5289] usb 3-1: SerialNumber: syz [ 1993.719018][ T5289] usb 3-1: config 0 descriptor?? [ 1993.737852][ T5289] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1994.376409][T19953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1994.399714][T19953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1994.410664][T19954] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2874'. [ 1994.505214][T19953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1994.540743][ T5289] gspca_ov534_9: reg_w failed -71 [ 1994.552774][T19958] loop4: detected capacity change from 0 to 2048 [ 1994.645166][T19961] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1994.745737][ T29] audit: type=1804 audit(1728840596.594:2559): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2876" name="/newroot/300/file0/bus" dev="loop4" ino=2097152 res=1 errno=0 [ 1994.835236][ T5289] gspca_ov534_9: Unknown sensor 0000 [ 1994.835309][ T5289] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1994.875203][ T5289] usb 3-1: USB disconnect, device number 8 [ 1995.252725][T19974] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2883'. [ 1995.423797][T19986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'. [ 1995.452984][T19987] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2886'. [ 1995.550822][T19989] loop4: detected capacity change from 0 to 4096 [ 1995.582393][T19993] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1995.605496][T19996] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1995.642526][ T29] audit: type=1800 audit(1728840597.494:2560): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2889" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1995.668237][ T29] audit: type=1800 audit(1728840597.494:2561): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2889" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1995.745235][T15511] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1995.855151][ T5289] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1995.895082][T15511] usb 3-1: Using ep0 maxpacket: 8 [ 1995.909287][T15511] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1995.918882][T15511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.956510][T15511] usb 3-1: config 0 descriptor?? [ 1996.015095][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 1996.027347][ T5289] usb 2-1: config 6 has an invalid interface number: 33 but max is 0 [ 1996.036164][ T5289] usb 2-1: config 6 has no interface number 0 [ 1996.042346][ T5289] usb 2-1: config 6 interface 33 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1996.072747][ T5289] usb 2-1: config 6 interface 33 altsetting 0 endpoint 0x1 has invalid maxpacket 528, setting to 64 [ 1996.092291][ T5289] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2e.63 [ 1996.102259][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.358299][T19993] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2891'. [ 1996.383596][ T5289] usb 2-1: string descriptor 0 read error: -71 [ 1996.398561][T20014] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2899'. [ 1996.410446][ T5289] ath6kl: Failed to submit usb control message: -71 [ 1996.417327][ T5289] ath6kl: unable to send the bmi data to the device: -71 [ 1996.429118][ T5289] ath6kl: Unable to send get target info: -71 [ 1996.448186][ T5289] ath6kl: Failed to init ath6kl core: -71 [ 1996.456412][ T5289] ath6kl_usb 2-1:6.33: probe with driver ath6kl_usb failed with error -71 [ 1996.470154][ T5289] usb 2-1: USB disconnect, device number 13 [ 1996.622859][T20025] vlan2: entered promiscuous mode [ 1996.631952][T20025] team0: Device vlan2 is of different type [ 1996.935205][ T5289] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1997.065417][ T5289] usb 1-1: device descriptor read/64, error -71 [ 1997.315269][ T5289] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1997.455241][ T5289] usb 1-1: device descriptor read/64, error -71 [ 1997.568528][ T5289] usb usb1-port1: attempt power cycle [ 1997.688667][T20045] sctp: [Deprecated]: syz.1.2909 (pid 20045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1997.688667][T20045] Use struct sctp_sack_info instead [ 1997.781901][T15511] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1997.792869][T15511] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1997.812869][T15511] usb 3-1: USB disconnect, device number 9 [ 1997.915242][ T5289] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1997.955623][ T5289] usb 1-1: device descriptor read/8, error -71 [ 1998.205295][ T5289] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1998.226089][ T5289] usb 1-1: device descriptor read/8, error -71 [ 1998.285308][T15511] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1998.335777][ T5289] usb usb1-port1: unable to enumerate USB device [ 1998.435470][T15511] usb 4-1: Using ep0 maxpacket: 16 [ 1998.447871][T15511] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.464634][T15511] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.480772][T15511] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1998.488280][T15511] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1998.503336][T15511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.524266][T15511] usb 4-1: config 0 descriptor?? [ 1998.953939][T15511] kye 0003:0458:500F.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1998.980783][T15511] kye 0003:0458:500F.0008: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 1998.992800][ T870] IPVS: starting estimator thread 0... [ 1998.993141][T15511] kye 0003:0458:500F.0008: tablet-enabling feature report not found [ 1999.013387][T15511] kye 0003:0458:500F.0008: tablet enabling failed [ 1999.045524][T12099] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1999.069650][T20081] vlan2: entered promiscuous mode [ 1999.085497][T20079] IPVS: using max 20 ests per chain, 48000 per kthread [ 1999.160048][ T870] usb 4-1: USB disconnect, device number 20 [ 1999.206900][T12099] usb 2-1: config 0 has no interfaces? [ 1999.214401][T12099] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1999.224607][T12099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.239881][T12099] usb 2-1: config 0 descriptor?? [ 1999.470409][ T870] usb 2-1: USB disconnect, device number 14 [ 1999.614238][T15511] kernel read not supported for file /newroot/315/file0 (pid: 15511 comm: kworker/0:15) [ 1999.918712][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 2000.141537][T20131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.152088][T20131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.167114][T20131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.176469][T20131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.185300][T20131] geneve2: entered promiscuous mode [ 2000.195501][ T870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2000.203479][T20131] geneve2: entered allmulticast mode [ 2000.357637][ T870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.371076][ T870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.381739][ T870] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2000.393335][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.403556][ T870] usb 3-1: config 0 descriptor?? [ 2000.555789][T15511] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2000.695658][T15511] usb 2-1: device descriptor read/64, error -71 [ 2000.843708][ T870] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 2000.855630][ T870] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 2000.877661][ T870] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 2000.935869][T15511] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2001.023893][T20158] loop4: detected capacity change from 0 to 128 [ 2001.042277][ T870] steelseries 0003:1038:12B6.0009: hid_hw_raw_request() failed with -71 [ 2001.054356][T20158] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 2001.081900][ T870] usb 3-1: USB disconnect, device number 10 [ 2001.095669][T15511] usb 2-1: device descriptor read/64, error -71 [ 2001.127121][T20158] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2001.142264][T20158] ext2 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2001.174247][ C0] vkms_vblank_simulate: vblank timer overrun [ 2001.205871][T15511] usb usb2-port1: attempt power cycle [ 2001.232208][T15358] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2001.450430][T20172] loop4: detected capacity change from 0 to 128 [ 2001.546738][T15511] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2001.587432][T15511] usb 2-1: device descriptor read/8, error -71 [ 2001.825679][T15511] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2001.856188][T15511] usb 2-1: device descriptor read/8, error -71 [ 2001.866478][ T870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2001.965970][T15511] usb usb2-port1: unable to enumerate USB device [ 2002.037773][ T870] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 2002.046361][ T870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.070387][ T870] usb 3-1: config 0 has no interface number 0 [ 2002.078154][ T870] usb 3-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2002.089483][ T870] usb 3-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 2002.114976][ T870] usb 3-1: config 0 interface 242 has no altsetting 0 [ 2002.124854][ T870] usb 3-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 2002.134427][ T870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.142566][ T870] usb 3-1: Product: syz [ 2002.147317][ T870] usb 3-1: Manufacturer: syz [ 2002.151936][ T870] usb 3-1: SerialNumber: syz [ 2002.166335][ T870] usb 3-1: config 0 descriptor?? [ 2002.335819][T12099] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2002.343635][T20209] netlink: 1088 bytes leftover after parsing attributes in process `syz.0.2978'. [ 2002.497310][T12099] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2002.525726][T12099] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.565827][T12099] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2002.619141][T12099] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.666466][T12099] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2002.698467][T12099] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2002.723105][T12099] usb 4-1: Product: syz [ 2002.732192][T12099] usb 4-1: Manufacturer: syz [ 2002.749195][T20176] nfs4: Unknown parameter '' [ 2002.768409][T12099] cdc_wdm 4-1:1.0: skipping garbage [ 2002.773663][T12099] cdc_wdm 4-1:1.0: skipping garbage [ 2002.782239][T15511] usb 3-1: USB disconnect, device number 11 [ 2002.802260][T12099] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2002.808441][T12099] cdc_wdm 4-1:1.0: Unknown control protocol [ 2003.198317][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2003.199079][T12099] usb 4-1: USB disconnect, device number 21 [ 2003.205123][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2003.217109][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2003.357056][T20238] loop4: detected capacity change from 0 to 2048 [ 2003.410218][T20239] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2003.476449][T20239] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2003.492935][T20239] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2003.528077][T20239] Remounting filesystem read-only [ 2003.543996][T20238] NILFS (loop4): mounting fs with errors [ 2003.551431][ T5289] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2003.568743][T20238] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 2003.578908][T20238] Remounting filesystem read-only [ 2003.584177][T20238] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 2003.593885][T20238] NILFS (loop4): error -5 reading inode: ino=2 [ 2003.600140][T20238] NILFS (loop4): cannot mark inode dirty (ino=2): error -5 loading inode block [ 2003.632412][T15358] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 2003.743023][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 2003.775858][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 2003.794914][ T5289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.816217][T20257] syz.1.2997[20257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2003.816311][T20257] syz.1.2997[20257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2003.816820][ T5289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2003.850001][T20257] syz.1.2997[20257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2003.884278][ T5289] usb 1-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 2003.913997][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.922595][ T5289] usb 1-1: Product: syz [ 2003.927273][ T5289] usb 1-1: Manufacturer: syz [ 2003.932232][ T5289] usb 1-1: SerialNumber: syz [ 2004.155587][ T5289] usb 1-1: 0:2 : does not exist [ 2004.164396][ T5289] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2004.199653][ T5289] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2004.213297][ T5289] usb 1-1: USB disconnect, device number 20 [ 2004.237509][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2004.266512][T12099] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2004.275957][T15511] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2004.376081][ T870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2004.438989][T15511] usb 4-1: Using ep0 maxpacket: 16 [ 2004.444291][T12099] usb 2-1: device descriptor read/64, error -71 [ 2004.457276][T15511] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.474430][T15511] usb 4-1: config 0 has no interfaces? [ 2004.480315][T15511] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2004.495270][T15511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.505783][T15511] usb 4-1: config 0 descriptor?? [ 2004.540407][ T870] usb 3-1: Using ep0 maxpacket: 8 [ 2004.548757][ T870] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2004.564512][ T870] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 2004.580783][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.598971][ T870] usb 3-1: config 0 descriptor?? [ 2004.608200][ T870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2004.705977][T12099] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2004.768039][T20290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3011'. [ 2004.836343][T12099] usb 2-1: device descriptor read/64, error -71 [ 2004.913769][T15511] usb 3-1: USB disconnect, device number 12 [ 2004.957060][T12099] usb usb2-port1: attempt power cycle [ 2005.039620][ T870] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2005.095284][T20299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.104267][T20299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.116535][T20299] vlan2: entered promiscuous mode [ 2005.121808][T20299] team0: Device vlan2 is of different type [ 2005.197564][ T870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2005.206501][ T870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.217008][ T870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2005.226143][ T870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.238563][ T870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2005.248299][ T870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2005.256593][ T870] usb 1-1: Product: syz [ 2005.260796][ T870] usb 1-1: Manufacturer: syz [ 2005.272649][ T870] cdc_wdm 1-1:1.0: skipping garbage [ 2005.278179][ T870] cdc_wdm 1-1:1.0: skipping garbage [ 2005.284512][ T870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2005.290559][ T870] cdc_wdm 1-1:1.0: Unknown control protocol [ 2005.306173][T12099] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2005.326770][T12099] usb 2-1: device descriptor read/8, error -71 [ 2005.535412][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.542038][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.548512][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.555144][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.562590][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.569222][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.576064][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.582718][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.589227][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.595859][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.602242][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.608872][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.615171][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.621799][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.628180][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.634793][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.641143][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2005.647757][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2005.654414][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2005.663211][ T870] usb 1-1: USB disconnect, device number 21 [ 2005.670230][T12099] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2005.707408][T12099] usb 2-1: device descriptor read/8, error -71 [ 2005.804690][T20311] loop4: detected capacity change from 0 to 128 [ 2005.833778][T12099] usb usb2-port1: unable to enumerate USB device [ 2006.071311][T20321] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3022'. [ 2006.636350][T12099] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2006.692504][T20345] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2006.711632][T20345] kvm: pic: non byte read [ 2006.717142][T20345] kvm: pic: level sensitive irq not supported [ 2006.717296][T20345] kvm: pic: non byte read [ 2006.728369][T20345] kvm: pic: level sensitive irq not supported [ 2006.728452][T20345] kvm: pic: non byte read [ 2006.798703][T12099] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 2006.814034][T12099] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 2006.823572][T12099] usb 5-1: Manufacturer: syz [ 2006.830893][T12099] usb 5-1: config 0 descriptor?? [ 2006.914826][T20357] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3033'. [ 2007.065222][T15511] usb 4-1: USB disconnect, device number 22 [ 2007.175639][T20368] serio: Serial port pts0 [ 2007.250750][T12099] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 2007.276507][ T5319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2007.440326][ T5319] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2007.453564][ T5319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.469040][ T5319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2007.484788][ T5319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.507851][ T5319] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2007.524802][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2007.533835][ T5319] usb 3-1: Product: syz [ 2007.542735][ T5319] usb 3-1: Manufacturer: syz [ 2007.573898][ T5319] cdc_wdm 3-1:1.0: skipping garbage [ 2007.582573][ T5319] cdc_wdm 3-1:1.0: skipping garbage [ 2007.595172][ T5319] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2007.609369][ T5319] cdc_wdm 3-1:1.0: Unknown control protocol [ 2007.813136][T20378] Bluetooth: MGMT ver 1.23 [ 2007.848767][T15511] usb 3-1: USB disconnect, device number 13 [ 2007.854769][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2007.870928][T12099] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 2007.895575][T12099] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 2007.924562][T12099] usb 5-1: USB disconnect, device number 22 [ 2008.256422][ T5290] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2008.386465][ T5290] usb 4-1: device descriptor read/64, error -71 [ 2008.626496][ T5290] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2008.757188][ T5290] usb 4-1: device descriptor read/64, error -71 [ 2008.786496][T15511] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2008.870147][ T5290] usb usb4-port1: attempt power cycle [ 2008.946609][T15511] usb 5-1: Using ep0 maxpacket: 16 [ 2008.957152][T15511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.970431][T15511] usb 5-1: config 0 has no interfaces? [ 2008.975917][T15511] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2008.985071][T15511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.995428][T15511] usb 5-1: config 0 descriptor?? [ 2008.999695][T12099] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2009.076615][ T5289] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2009.156517][T12099] usb 3-1: Using ep0 maxpacket: 16 [ 2009.167990][T12099] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2009.176231][T12099] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.192158][T12099] usb 3-1: config 0 has no interface number 0 [ 2009.200495][T12099] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2009.215205][T12099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.223269][ T5290] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2009.242474][ T5290] usb 4-1: device descriptor read/8, error -71 [ 2009.244469][T12099] usb 3-1: Product: syz [ 2009.253219][T12099] usb 3-1: Manufacturer: syz [ 2009.256478][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 2009.258120][T12099] usb 3-1: SerialNumber: syz [ 2009.271459][T15511] usb 5-1: USB disconnect, device number 23 [ 2009.282382][ T5289] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 2009.287394][T12099] usb 3-1: config 0 descriptor?? [ 2009.299490][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.309929][ T5289] usb 2-1: Product: syz [ 2009.314126][ T5289] usb 2-1: Manufacturer: syz [ 2009.320605][ T5289] usb 2-1: SerialNumber: syz [ 2009.336140][ T5289] usb 2-1: config 0 descriptor?? [ 2009.406149][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2009.506651][ T5290] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2009.527546][ T5290] usb 4-1: device descriptor read/8, error -71 [ 2009.542269][T12099] usb 3-1: USB disconnect, device number 14 [ 2009.600392][T20408] ip6gretap0: entered promiscuous mode [ 2009.607893][T20408] bridge0: entered promiscuous mode [ 2009.614670][T20408] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 2009.629240][T20408] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 2009.636984][ T5290] usb usb4-port1: unable to enumerate USB device [ 2009.647030][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'. [ 2009.662107][ T5319] usb 2-1: USB disconnect, device number 23 [ 2010.718374][T20468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2010.750968][T20468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2010.789844][T20468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2011.275907][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 2011.429400][T20494] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2012.320541][ T5290] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2012.415930][ T9985] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2012.477875][ T5290] usb 5-1: device descriptor read/64, error -71 [ 2012.537056][ T870] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2012.688259][ T870] usb 4-1: Using ep0 maxpacket: 8 [ 2012.695221][ T870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2012.707219][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2012.716950][ T5290] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2012.727010][ T5319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2012.737547][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2012.747331][T15511] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2012.761512][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2012.782332][ T870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2012.790372][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2012.811254][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2012.829887][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2012.846349][ T870] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2012.854089][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2012.857720][ T5290] usb 5-1: device descriptor read/64, error -71 [ 2012.865785][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2012.883033][ T870] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2012.901764][ T870] usb 4-1: string descriptor 0 read error: -22 [ 2012.915503][ T870] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2012.926699][ T5319] usb 3-1: Using ep0 maxpacket: 32 [ 2012.928769][T15511] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2012.931920][ T870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.949845][ T5319] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 2012.958193][ T5319] usb 3-1: config 0 has an invalid interface number: 208 but max is 1 [ 2012.966965][ T5319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.977210][T15511] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.987667][T15511] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2012.998350][T15511] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.010052][ T5290] usb usb5-port1: attempt power cycle [ 2013.020641][ T870] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2013.043473][T15511] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2013.057413][ T5319] usb 3-1: config 0 has no interface number 0 [ 2013.066237][ T5319] usb 3-1: config 0 has no interface number 1 [ 2013.072931][ T5319] usb 3-1: too many endpoints for config 0 interface 208 altsetting 59: 34, using maximum allowed: 30 [ 2013.084170][T15511] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2013.092699][T15511] usb 2-1: Product: syz [ 2013.098827][T15511] usb 2-1: Manufacturer: syz [ 2013.108666][T15511] cdc_wdm 2-1:1.0: skipping garbage [ 2013.114034][T15511] cdc_wdm 2-1:1.0: skipping garbage [ 2013.120758][T15511] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 2013.126772][T15511] cdc_wdm 2-1:1.0: Unknown control protocol [ 2013.144755][ T5319] usb 3-1: config 0 interface 208 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 2013.188998][ T5319] usb 3-1: config 0 interface 208 has no altsetting 0 [ 2013.210823][T15511] usb 4-1: USB disconnect, device number 27 [ 2013.232546][ T5319] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 2013.241909][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.250132][ T5319] usb 3-1: Product: syz [ 2013.254687][ T5319] usb 3-1: Manufacturer: syz [ 2013.260417][ T5319] usb 3-1: SerialNumber: syz [ 2013.266672][ T5319] usb 3-1: config 0 descriptor?? [ 2013.366993][ T5290] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2013.377071][ T870] usb 2-1: USB disconnect, device number 24 [ 2013.387677][ T5290] usb 5-1: device descriptor read/8, error -71 [ 2013.485612][ T5319] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 2013.497015][ T5319] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 2013.509674][ T5319] usb 3-1: USB disconnect, device number 15 [ 2013.627054][ T5290] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2013.647798][ T5290] usb 5-1: device descriptor read/8, error -71 [ 2013.771900][ T5290] usb usb5-port1: unable to enumerate USB device [ 2014.026984][ C0] TCP: out of memory -- consider tuning tcp_mem [ 2014.035145][ C0] TCP: out of memory -- consider tuning tcp_mem [ 2014.599092][T20555] TCP: out of memory -- consider tuning tcp_mem [ 2014.687454][ T5319] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2014.870834][ T5319] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2014.885198][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.969113][ T5319] usb 3-1: config 0 descriptor?? [ 2014.976172][ T5319] cp210x 3-1:0.0: cp210x converter detected [ 2015.111281][T20601] loop4: detected capacity change from 0 to 256 [ 2015.155980][T20601] MPI: mpi too large (187712 bits) [ 2015.165012][T20603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3125'. [ 2015.180935][ T5319] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2015.189744][ T5319] cp210x 3-1:0.0: querying part number failed [ 2015.202865][ T5319] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2015.396182][ T5290] usb 3-1: USB disconnect, device number 16 [ 2015.411318][ T5290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2015.427582][ T5290] cp210x 3-1:0.0: device disconnected [ 2015.650695][ T9985] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 2015.704297][T20628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3137'. [ 2015.857277][ T5290] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2016.287826][ T5319] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2016.327476][ T5290] usb 5-1: device descriptor read/64, error -71 [ 2016.344999][T20658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3150'. [ 2016.567371][ T5290] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2016.633643][ T5319] usb 3-1: Using ep0 maxpacket: 16 [ 2016.650041][ T9985] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 2016.659051][ T5319] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2016.668344][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.676376][ T5319] usb 3-1: Product: syz [ 2016.680657][ T5319] usb 3-1: Manufacturer: syz [ 2016.685281][ T5319] usb 3-1: SerialNumber: syz [ 2016.748966][ T5319] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2016.757809][ T5319] r8152-cfgselector 3-1: config 0 descriptor?? [ 2016.787427][ T5290] usb 5-1: device descriptor read/64, error -71 [ 2016.914390][ T5290] usb usb5-port1: attempt power cycle [ 2016.994278][ T5319] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2017.000958][ T5319] r8152-cfgselector 3-1: bad CDC descriptors [ 2017.204794][ T5319] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 2017.267472][ T5290] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2017.339963][ T5290] usb 5-1: device descriptor read/8, error -71 [ 2017.543798][T20694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 2017.578322][ T5290] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2017.604475][ T5290] usb 5-1: device descriptor read/8, error -71 [ 2017.667501][T12099] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 2017.723846][ T5290] usb usb5-port1: unable to enumerate USB device [ 2017.810206][ T5319] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2017.829777][T12099] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2017.837431][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2017.848644][T12099] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2017.861408][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2017.873009][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2017.885732][T12099] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2017.895139][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2017.916048][T12099] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2017.928305][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2017.940036][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2017.958376][T12099] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2017.966206][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 2017.977359][ T5319] usb 1-1: Using ep0 maxpacket: 8 [ 2017.992311][T12099] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2018.004792][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2018.016155][ T5319] usb 1-1: config 0 has an invalid interface number: 112 but max is 1 [ 2018.024488][ T5319] usb 1-1: config 0 has an invalid interface number: 17 but max is 1 [ 2018.032767][ T5319] usb 1-1: config 0 has no interface number 0 [ 2018.038927][ T5319] usb 1-1: config 0 has no interface number 1 [ 2018.045131][T12099] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2018.060131][T12099] usb 4-1: string descriptor 0 read error: -22 [ 2018.066471][T12099] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2018.081881][T12099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.092816][ T5319] usb 1-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 2018.102594][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.111631][ T5319] usb 1-1: Product: syz [ 2018.116877][ T5319] usb 1-1: Manufacturer: syz [ 2018.121653][ T5319] usb 1-1: SerialNumber: syz [ 2018.131589][T12099] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2018.141032][ T5319] usb 1-1: config 0 descriptor?? [ 2018.362070][ T5319] usb 1-1: USB disconnect, device number 22 [ 2018.388565][ T5290] usb 4-1: USB disconnect, device number 28 [ 2018.879048][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 2019.709665][ T9985] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2019.719093][ T9985] Bluetooth: hci1: Injecting HCI hardware error event [ 2019.731531][ T9987] Bluetooth: hci1: hardware error 0x00 [ 2019.826684][T20737] loop4: detected capacity change from 0 to 512 [ 2019.835175][T20737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2019.844285][T20739] binder: 20738:20739 ioctl 4018620d 0 returned -22 [ 2019.885935][T20741] netlink: 'syz.3.3185': attribute type 4 has an invalid length. [ 2019.916078][T20737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 2019.937793][T20737] System zones: 1-12 [ 2019.946191][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3185'. [ 2019.977250][T20737] EXT4-fs (loop4): 1 truncate cleaned up [ 2019.996502][T20737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2020.032197][T20748] mac80211_hwsim hwsim167 : renamed from wlan0 [ 2020.093103][T15358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2020.327806][ T5319] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2020.437880][T15511] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2020.489873][ T5319] usb 1-1: no configurations [ 2020.494506][ T5319] usb 1-1: can't read configurations, error -22 [ 2020.594472][T15511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.606962][T15511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.617338][T15511] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2020.627189][T15511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.637984][ T5319] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2020.638572][T15511] usb 5-1: config 0 descriptor?? [ 2020.664053][T15511] usbhid 5-1:0.0: can't add hid device: -22 [ 2020.671012][T15511] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2020.769483][ T29] audit: type=1326 audit(1728840622.621:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20779 comm="syz.2.3201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee4df7dff9 code=0x0 [ 2020.828680][ T5319] usb 1-1: no configurations [ 2020.833302][ T5319] usb 1-1: can't read configurations, error -22 [ 2020.844855][ T5319] usb usb1-port1: attempt power cycle [ 2020.868294][T12099] usb 5-1: USB disconnect, device number 32 [ 2021.188180][ T5319] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2021.219471][ T5319] usb 1-1: no configurations [ 2021.224155][ T5319] usb 1-1: can't read configurations, error -22 [ 2021.257971][T15511] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2021.368164][ T5319] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2021.408159][ T5319] usb 1-1: no configurations [ 2021.416703][ T5319] usb 1-1: can't read configurations, error -22 [ 2021.417881][T15511] usb 4-1: Using ep0 maxpacket: 32 [ 2021.424847][ T5319] usb usb1-port1: unable to enumerate USB device [ 2021.439320][T15511] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2021.447721][T15511] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2021.463897][T15511] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2021.475476][T15511] usb 4-1: config 1 has no interface number 0 [ 2021.482330][T15511] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2021.493318][T15511] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2021.506530][T15511] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2021.515741][T15511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.534261][T15511] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2021.788261][ T9987] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2021.948025][ T5319] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2022.048156][ T5290] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2022.085798][T15511] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2022.098207][ T5319] usb 5-1: Using ep0 maxpacket: 8 [ 2022.105570][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2022.116947][ T5319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.127056][ T5319] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 2022.136238][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.146446][ T5319] usb 5-1: config 0 descriptor?? [ 2022.198128][ T5290] usb 3-1: Using ep0 maxpacket: 8 [ 2022.205633][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.216065][ T5290] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 2022.225263][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.239426][ T5290] usb 3-1: config 0 descriptor?? [ 2022.252855][ T5290] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2022.306949][T12099] usb 4-1: USB disconnect, device number 29 [ 2022.318493][T12099] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2022.549602][T12099] usb 3-1: USB disconnect, device number 18 [ 2023.113693][T20815] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3213'. [ 2024.418391][T12099] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2024.589220][T12099] usb 1-1: no configurations [ 2024.594281][T12099] usb 1-1: can't read configurations, error -22 [ 2024.668368][ T9985] Bluetooth: hci2: command 0x0406 tx timeout [ 2024.731603][ T5319] usbhid 5-1:0.0: can't add hid device: -71 [ 2024.758654][T12099] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2024.771500][ T5319] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2024.944012][T20849] loop4: detected capacity change from 0 to 32768 [ 2025.022722][ T5319] usb 5-1: USB disconnect, device number 33 [ 2025.233911][T20849] jfs_strtoUCS: char2uni returned -22. [ 2025.240474][T20849] charset = euc-jp, char = 0xf6 [ 2025.254763][T12099] usb 1-1: no configurations [ 2025.273524][T12099] usb 1-1: can't read configurations, error -22 [ 2025.283769][T12099] usb usb1-port1: attempt power cycle [ 2025.648680][T12099] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2025.680214][T12099] usb 1-1: no configurations [ 2025.689622][T12099] usb 1-1: can't read configurations, error -22 [ 2025.775776][T20871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3236'. [ 2025.838617][T12099] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2025.876260][T12099] usb 1-1: no configurations [ 2025.881221][T12099] usb 1-1: can't read configurations, error -22 [ 2025.889269][T12099] usb usb1-port1: unable to enumerate USB device [ 2026.178583][T12099] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2026.348586][T12099] usb 3-1: Using ep0 maxpacket: 8 [ 2026.355185][T12099] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2026.363614][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2026.377564][T12099] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2026.392487][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.403925][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.419474][T12099] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2026.426972][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2026.438549][T12099] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2026.454477][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.465860][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.481887][T12099] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2026.490200][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2026.504280][T12099] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2026.517120][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2026.531517][T12099] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2026.545918][T12099] usb 3-1: string descriptor 0 read error: -22 [ 2026.553687][T12099] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2026.565448][T12099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.587894][T12099] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2026.792403][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.812462][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.938070][ T5290] usb 3-1: USB disconnect, device number 19 [ 2028.609021][ T5290] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2028.654824][ T9987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2028.671184][ T9987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2028.718777][T15511] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2028.719857][ T9987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2028.736313][ T9987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2028.747253][ T9987] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2028.754888][T17237] macvlan2 (unregistering): left allmulticast mode [ 2028.761730][ T9987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2028.771213][T17237] macvlan2 (unregistering): left promiscuous mode [ 2028.779908][ T5290] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 2028.817240][ T5290] usb 3-1: config index 0 descriptor too short (expected 64945, got 72) [ 2028.818887][T17237] bridge0: port 3(macvlan2) entered disabled state [ 2028.842044][T20920] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3253'. [ 2028.842407][ T5290] usb 3-1: config index 1 descriptor too short (expected 64945, got 72) [ 2028.864152][ T5290] usb 3-1: config index 2 descriptor too short (expected 64945, got 72) [ 2028.874163][ T5290] usb 3-1: config index 3 descriptor too short (expected 64945, got 72) [ 2028.886066][T15511] usb 1-1: no configurations [ 2028.891374][T15511] usb 1-1: can't read configurations, error -22 [ 2028.902794][ T5290] usb 3-1: config index 4 descriptor too short (expected 64945, got 72) [ 2028.917120][ T5290] usb 3-1: config index 5 descriptor too short (expected 64945, got 72) [ 2028.927306][ T5290] usb 3-1: config index 6 descriptor too short (expected 64945, got 72) [ 2028.940759][ T5290] usb 3-1: config index 7 descriptor too short (expected 64945, got 72) [ 2028.970470][ T5290] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2028.979981][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.988115][ T5290] usb 3-1: Product: syz [ 2028.993833][ T5290] usb 3-1: Manufacturer: syz [ 2028.998554][ T5290] usb 3-1: SerialNumber: syz [ 2029.013206][ T5290] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2029.029066][T15511] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2029.095987][ T5289] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2029.177658][ T1130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.194376][T15511] usb 1-1: no configurations [ 2029.201795][T15511] usb 1-1: can't read configurations, error -22 [ 2029.218371][T15511] usb usb1-port1: attempt power cycle [ 2029.310511][ T1130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.400863][ T1130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.423986][T20914] chnl_net:caif_netlink_parms(): no params data found [ 2029.469145][ T1130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.562321][T20914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.568939][T15511] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2029.578333][T20914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.586596][T20914] bridge_slave_0: entered allmulticast mode [ 2029.590361][T15511] usb 1-1: no configurations [ 2029.596181][T20914] bridge_slave_0: entered promiscuous mode [ 2029.597218][T15511] usb 1-1: can't read configurations, error -22 [ 2029.624002][T20914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.631447][T20914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.639540][T20914] bridge_slave_1: entered allmulticast mode [ 2029.647069][T20914] bridge_slave_1: entered promiscuous mode [ 2029.705308][T20914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2029.733976][ T5319] usb 3-1: USB disconnect, device number 20 [ 2029.743500][T15511] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2029.748567][T20914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2029.782787][T15511] usb 1-1: no configurations [ 2029.793646][T15511] usb 1-1: can't read configurations, error -22 [ 2029.803623][T15511] usb usb1-port1: unable to enumerate USB device [ 2029.836604][T20914] team0: Port device team_slave_0 added [ 2029.843027][ T1130] bridge_slave_1: left allmulticast mode [ 2029.852992][ T1130] bridge_slave_1: left promiscuous mode [ 2029.860180][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.868603][ T1130] bridge_slave_0: left allmulticast mode [ 2029.874728][ T1130] bridge_slave_0: left promiscuous mode [ 2029.880648][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.927441][ T1130] ip6gretap0 (unregistering): left promiscuous mode [ 2030.182670][ T1130] bridge0 (unregistering): left promiscuous mode [ 2030.329109][ T870] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2030.350151][ T5289] usb 3-1: Service connection timeout for: 256 [ 2030.360400][T20934] xt_NFQUEUE: number of total queues is 0 [ 2030.366313][ T5289] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2030.455667][ T5289] ath9k_htc: Failed to initialize the device [ 2030.484507][ T5319] usb 3-1: ath9k_htc: USB layer deinitialized [ 2030.572654][ T870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.585526][ T870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2030.595920][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2030.604709][ T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.612949][ T870] usb 5-1: Product: syz [ 2030.618224][ T870] usb 5-1: Manufacturer: syz [ 2030.622981][ T870] usb 5-1: SerialNumber: syz [ 2030.627883][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2030.645489][ T1130] bond0 (unregistering): Released all slaves [ 2030.659602][T20914] team0: Port device team_slave_1 added [ 2030.751755][T20914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2030.758810][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2030.793263][T20914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2030.828404][T20914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2030.835890][ T9987] Bluetooth: hci3: command tx timeout [ 2030.853510][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2030.883732][ T870] cdc_ncm 5-1:1.0: bind() failure [ 2030.904569][ T870] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2030.918933][T20914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2030.934984][ T870] cdc_ncm 5-1:1.1: bind() failure [ 2030.959684][ T870] usb 5-1: USB disconnect, device number 34 [ 2031.194766][T20914] hsr_slave_0: entered promiscuous mode [ 2031.210028][T20914] hsr_slave_1: entered promiscuous mode [ 2031.235971][T20914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2031.250657][T20914] Cannot create hsr debugfs directory [ 2031.261703][T20950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.280657][T20950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.309139][T20950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.317888][T20950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.339245][T20950] geneve2: entered promiscuous mode [ 2031.344508][T20950] geneve2: entered allmulticast mode [ 2031.363355][T20950] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.386940][T20950] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.429049][T20950] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.459167][T20950] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.591451][T20961] loop4: detected capacity change from 0 to 1024 [ 2031.724204][ T1130] hsr_slave_0: left promiscuous mode [ 2031.731230][T20961] hfsplus: extend alloc file! (8192,65536,366) [ 2031.791991][ T1130] hsr_slave_1: left promiscuous mode [ 2031.821533][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2031.842635][ T1130] batman_adv: batadv0: Removing interface: ipvlan2 [ 2031.852594][ T1130] batman_adv: batadv0: Removing interface: ipvlan3 [ 2031.887090][ T1130] batman_adv: batadv0: Removing interface: ipvlan4 [ 2032.099540][T15511] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2032.256958][T15511] usb 3-1: Using ep0 maxpacket: 8 [ 2032.316561][T15511] usb 3-1: config 0 has no interfaces? [ 2032.324594][T15511] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 2032.335457][T15511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.359943][T15511] usb 3-1: Product: syz [ 2032.364303][T15511] usb 3-1: Manufacturer: syz [ 2032.368972][T15511] usb 3-1: SerialNumber: syz [ 2032.377097][T15511] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2032.397995][T15511] r8152-cfgselector 3-1: config 0 descriptor?? [ 2032.629789][T15511] r8152-cfgselector 3-1: USB disconnect, device number 21 [ 2032.721264][T20986] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3269'. [ 2032.910099][ T9987] Bluetooth: hci3: command tx timeout [ 2033.429276][ T870] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2033.599924][ T870] usb 1-1: no configurations [ 2033.604667][ T870] usb 1-1: can't read configurations, error -22 [ 2033.759990][ T870] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2033.943393][ T870] usb 1-1: no configurations [ 2033.948057][ T870] usb 1-1: can't read configurations, error -22 [ 2033.987552][ T870] usb usb1-port1: attempt power cycle [ 2034.199772][T15511] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2034.255300][T20914] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2034.265378][T20914] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2034.278596][T20914] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2034.294915][T20914] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2034.350252][ T870] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2034.371176][T15511] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.391168][T15511] usb 4-1: config 0 has no interfaces? [ 2034.396972][T15511] usb 4-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 2034.397082][T20914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2034.406754][T15511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.421882][ T870] usb 1-1: no configurations [ 2034.426506][ T870] usb 1-1: can't read configurations, error -22 [ 2034.438062][T15511] usb 4-1: config 0 descriptor?? [ 2034.488630][T20914] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.516653][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.523832][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.558909][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.566080][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2034.573956][ T870] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2034.601592][ T870] usb 1-1: no configurations [ 2034.606939][ T870] usb 1-1: can't read configurations, error -22 [ 2034.629926][ T870] usb usb1-port1: unable to enumerate USB device [ 2034.729985][ T870] usb 4-1: USB disconnect, device number 30 [ 2034.936633][T20914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2034.993330][ T9987] Bluetooth: hci3: command tx timeout [ 2035.005578][T21061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 2035.032473][T21061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'. [ 2035.105716][T20914] veth0_vlan: entered promiscuous mode [ 2035.218479][T20914] veth1_vlan: entered promiscuous mode [ 2035.316681][T20914] veth0_macvtap: entered promiscuous mode [ 2035.384453][T20914] veth1_macvtap: entered promiscuous mode [ 2035.648235][T20914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2035.674381][T20914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2035.688780][T20914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.799667][T20914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.808382][T20914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2035.918940][T20914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.019791][ T9240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.071032][ T9987] Bluetooth: hci3: command tx timeout [ 2037.136639][ T9240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.162316][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.180888][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.750569][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.478766][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'. [ 2038.490535][ T29] audit: type=1326 audit(1728840640.309:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21106 comm="syz.1.3243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fcf7dff9 code=0x0 [ 2038.684516][T21127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3296'. [ 2038.889960][ T5290] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2039.040028][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 2039.046952][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.058156][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.068516][ T5290] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 2039.078097][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.090394][ T5290] usb 5-1: config 0 descriptor?? [ 2039.190258][ T870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2039.353468][ T870] usb 2-1: no configurations [ 2039.368322][ T870] usb 2-1: can't read configurations, error -22 [ 2039.504981][ T5290] apple 0003:05AC:0246.000A: unknown main item tag 0x0 [ 2039.515004][ T5290] apple 0003:05AC:0246.000A: unknown main item tag 0x0 [ 2039.522128][ T5290] apple 0003:05AC:0246.000A: item fetching failed at offset 2/160 [ 2039.534194][ T870] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2039.573453][ T5290] apple 0003:05AC:0246.000A: parse failed [ 2039.603904][ T5290] apple 0003:05AC:0246.000A: probe with driver apple failed with error -22 [ 2039.717904][ T5292] usb 5-1: USB disconnect, device number 35 [ 2039.725718][ T870] usb 2-1: no configurations [ 2039.730692][ T870] usb 2-1: can't read configurations, error -22 [ 2039.743370][ T870] usb usb2-port1: attempt power cycle [ 2040.080292][ T870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2040.101224][ T870] usb 2-1: no configurations [ 2040.107167][ T870] usb 2-1: can't read configurations, error -22 [ 2040.250344][ T870] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2040.281823][ T870] usb 2-1: no configurations [ 2040.290210][ T870] usb 2-1: can't read configurations, error -22 [ 2040.307012][ T870] usb usb2-port1: unable to enumerate USB device [ 2040.625998][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3308'. [ 2040.701906][T21166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'. [ 2041.739815][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 2042.417000][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 2042.647400][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 2044.790859][T12099] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2044.950638][T12099] usb 3-1: Using ep0 maxpacket: 32 [ 2044.964742][T12099] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2044.985997][T12099] usb 3-1: config 0 has no interface number 0 [ 2045.011852][T12099] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2045.035276][T12099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.047508][T12099] usb 3-1: Product: syz [ 2045.052481][T12099] usb 3-1: Manufacturer: syz [ 2045.057635][T12099] usb 3-1: SerialNumber: syz [ 2045.072631][T12099] usb 3-1: config 0 descriptor?? [ 2045.079057][T21245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3336'. [ 2045.092597][T12099] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2045.104798][T12099] usb 3-1: selecting invalid altsetting 1 [ 2045.111306][T12099] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2045.134502][T12099] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2045.154683][T12099] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2045.179343][T12099] usb 3-1: media controller created [ 2045.225792][T12099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2045.258575][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'. [ 2045.323856][T12099] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2045.338261][T12099] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2045.353928][T12099] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2045.414609][T12099] usb 3-1: USB disconnect, device number 22 [ 2045.529271][T21256] loop4: detected capacity change from 0 to 512 [ 2045.540986][T21256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2045.593380][T21256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 2045.611951][T21256] System zones: 1-12 [ 2045.617455][T21256] EXT4-fs (loop4): 1 truncate cleaned up [ 2045.624402][T21256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2046.062749][T21270] warning: `syz.0.3344' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2046.516138][T15358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.523842][T21277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3347'. [ 2046.571435][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 2052.179305][T21316] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 2052.191922][T21316] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 2052.200325][T21316] CPU: 0 UID: 0 PID: 21316 Comm: syz.4.3359 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 2052.210565][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2052.220650][T21316] RIP: 0010:strlen+0x2c/0x70 [ 2052.225245][T21316] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2052.244853][T21316] RSP: 0018:ffffc9000902f8a8 EFLAGS: 00010246 [ 2052.250936][T21316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2052.258898][T21316] RDX: ffffc90009493000 RSI: 0000000000000238 RDI: 0000000000000000 [ 2052.266863][T21316] RBP: 0000000000000000 R08: ffffffff942e3907 R09: 1ffffffff285c720 [ 2052.274826][T21316] R10: dffffc0000000000 R11: fffffbfff285c721 R12: ffffffffffffffff [ 2052.282818][T21316] R13: ffff88802fbc4000 R14: 0000000000000000 R15: dffffc0000000000 [ 2052.290790][T21316] FS: 00007fced0bf16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2052.299709][T21316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.306286][T21316] CR2: 000000110c3dd572 CR3: 000000004c39a000 CR4: 00000000003526f0 [ 2052.314245][T21316] Call Trace: [ 2052.317507][T21316] [ 2052.320424][T21316] ? __die_body+0x5f/0xb0 [ 2052.324745][T21316] ? die_addr+0xb0/0xe0 [ 2052.328886][T21316] ? exc_general_protection+0x3dd/0x5d0 [ 2052.334426][T21316] ? asm_exc_general_protection+0x26/0x30 [ 2052.340142][T21316] ? strlen+0x2c/0x70 [ 2052.344117][T21316] ? __kasan_kmalloc+0x98/0xb0 [ 2052.348882][T21316] getname_kernel+0x1d/0x2f0 [ 2052.353464][T21316] kern_path+0x1d/0x50 [ 2052.357524][T21316] btrfs_scan_one_device+0x19e/0xd90 [ 2052.362811][T21316] ? irqentry_exit+0x63/0x90 [ 2052.367395][T21316] ? lockdep_hardirqs_on+0x99/0x150 [ 2052.372582][T21316] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 2052.378372][T21316] ? __pfx___mutex_lock+0x10/0x10 [ 2052.383386][T21316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2052.389365][T21316] btrfs_get_tree+0x30e/0x1920 [ 2052.394125][T21316] ? lockdep_hardirqs_on+0x99/0x150 [ 2052.399310][T21316] ? __pfx_btrfs_get_tree+0x10/0x10 [ 2052.404505][T21316] vfs_get_tree+0x90/0x2b0 [ 2052.408910][T21316] fc_mount+0x1b/0xb0 [ 2052.412877][T21316] btrfs_get_tree+0x652/0x1920 [ 2052.417640][T21316] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2052.423272][T21316] ? __mutex_lock+0x2ef/0xd70 [ 2052.427934][T21316] ? __pfx_btrfs_get_tree+0x10/0x10 [ 2052.433148][T21316] ? apparmor_capable+0x13b/0x1b0 [ 2052.438165][T21316] vfs_get_tree+0x90/0x2b0 [ 2052.442578][T21316] vfs_cmd_create+0xa0/0x1f0 [ 2052.447164][T21316] ? __se_sys_fsconfig+0xa15/0xf70 [ 2052.452286][T21316] __se_sys_fsconfig+0xa1f/0xf70 [ 2052.457234][T21316] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 2052.462691][T21316] ? __x64_sys_fsconfig+0x20/0xc0 [ 2052.467712][T21316] do_syscall_64+0xf3/0x230 [ 2052.472208][T21316] ? clear_bhb_loop+0x35/0x90 [ 2052.476872][T21316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.482782][T21316] RIP: 0033:0x7fcecfd7dff9 [ 2052.487191][T21316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2052.506782][T21316] RSP: 002b:00007fced0bf1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 2052.515184][T21316] RAX: ffffffffffffffda RBX: 00007fcecff36130 RCX: 00007fcecfd7dff9 [ 2052.523165][T21316] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2052.531128][T21316] RBP: 00007fcecfdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 2052.539093][T21316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2052.547051][T21316] R13: 0000000000000000 R14: 00007fcecff36130 R15: 00007fff75f2b998 [ 2052.555020][T21316] [ 2052.558022][T21316] Modules linked in: [ 2052.565479][T21316] ---[ end trace 0000000000000000 ]--- [ 2052.572669][T21316] RIP: 0010:strlen+0x2c/0x70 [ 2052.577403][T21316] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 2052.598167][T21316] RSP: 0018:ffffc9000902f8a8 EFLAGS: 00010246 [ 2052.604456][T21316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 2052.612949][T21316] RDX: ffffc90009493000 RSI: 0000000000000238 RDI: 0000000000000000 [ 2052.621049][T21316] RBP: 0000000000000000 R08: ffffffff942e3907 R09: 1ffffffff285c720 [ 2052.629138][T21316] R10: dffffc0000000000 R11: fffffbfff285c721 R12: ffffffffffffffff [ 2052.637416][T21316] R13: ffff88802fbc4000 R14: 0000000000000000 R15: dffffc0000000000 [ 2052.645602][T21316] FS: 00007fced0bf16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2052.654765][T21316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.661435][T21316] CR2: 000000110c3dd572 CR3: 000000004c39a000 CR4: 00000000003526f0 [ 2052.669451][T21316] Kernel panic - not syncing: Fatal exception [ 2052.675652][T21316] Kernel Offset: disabled [ 2052.679966][T21316] Rebooting in 86400 seconds..