last executing test programs: 5m38.185352087s ago: executing program 32 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]]}, 0x38}}, 0x20004800) 5m37.687740015s ago: executing program 33 (id=335): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m32.686843246s ago: executing program 4 (id=371): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r1, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) 5m32.41380132s ago: executing program 4 (id=373): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53}}, 0x120) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 5m31.161510071s ago: executing program 4 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000010100c0000000e3ae4993e3ce7b2c"]) 5m30.741770674s ago: executing program 4 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 5m30.528631174s ago: executing program 4 (id=381): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x26, 0x0, &(0x7f00000003c0)) 5m30.174841279s ago: executing program 4 (id=383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) tee(r1, r0, 0xfffffffffffffff7, 0x2) 5m29.787307563s ago: executing program 34 (id=383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) tee(r1, r0, 0xfffffffffffffff7, 0x2) 5m18.844020213s ago: executing program 6 (id=466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x404c010) 5m18.595216705s ago: executing program 6 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r2, 0x25, 0x2, @val=@perf_event={0x10000}}, 0x18) 5m18.413233142s ago: executing program 6 (id=472): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x5, 0x0, 0x10) 5m18.200986151s ago: executing program 6 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x29c5006, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 5m18.074464002s ago: executing program 6 (id=477): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) 5m17.703121918s ago: executing program 6 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000140)=0x1) 5m17.239911545s ago: executing program 35 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000140)=0x1) 4m10.904469741s ago: executing program 5 (id=1410): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x80, 0x3, 0x2, 0x1, 0x40, "bee34e0626588a22b2d012000040f94233a5bd", 0x40006, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 4m10.73912734s ago: executing program 5 (id=1413): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) 4m9.71408466s ago: executing program 5 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) 4m9.515064718s ago: executing program 5 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4m9.366651096s ago: executing program 5 (id=1437): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000015000100000000320000ffffffff00000000000000000000000001000000000000000000000000000000000800000000000000010000000100000006000000000000000000000000000000000000000000000000000000000000e7"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4m9.055204915s ago: executing program 5 (id=1441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086ddae16f132ec26128ff4f6a26116bf24bd3877a940db7844b904ae7daa865a1a27f562d861719de2cb", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m8.711481577s ago: executing program 36 (id=1441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086ddae16f132ec26128ff4f6a26116bf24bd3877a940db7844b904ae7daa865a1a27f562d861719de2cb", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m12.111272017s ago: executing program 7 (id=2957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m9.912354147s ago: executing program 7 (id=2985): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000100)="0881f92ad97130d804bba94f73923f91153d6368243debfafe8e507a3fe53e1b35c95d95a4a994259411eab0f7a673975596e43fb542383b582c8c1666aad42894d4d1293c5e0aa48cec6af5fd062339ef855f9d9c04b21bfc35243eec5426fb2bc9a2a59ccf3bd5f520d120d357fabb218154d99f63e3b50f93fa1f64b691c9e82d7d032963ee6cefc70ddde20883d177bcbc03842d1ec3d1b301aa066668dd21d5d7727311174fe7ae186aa0eb3e6b4107dd36ec2570eb0a941a556612e3d68b1f186bd9e3c0ca7d74eff0710edd7391089070a865011ffa2f6a24531b07aa9a4bc6bc97a0b446b91156f516e05c7d15346ca91f7249c801c7ec46cc3f836dfc901cbd025ae7fe604042435f4c5c41cbeccd38e7fbbf11d67d9862e508d649ce7d816db0c8ede0e40c79894860cfe56f39ba19b2e928c21093a29580db83980179001fa46261c7291c6c7fc770527361002235b0e7acaf06b2f1a6f30c04bf388972b6a7c528ebada5f64db6fdfcb8d6863944115f834d0967faa029fb3816ab79f9408e150ca22ebacef14b1612b3b4f582f22865852ecc7715d0a225a1a78e9e1e805ccd649171d25e62c7f7d9ded558d884e1b6e38bf00bf3a493e5a9143da4bc95e809f0d0b894db2c7329e02d2ceb77cc5620f3345ce5c5221e68f7fb8635a59ba4ac50ff7248c5face8e7f7c2d3135166a5d77b7f596799a78722da84eeed8be83e5f4029845bfea0fb31b97bfc2d27b432ad2c2e8154c4bae0030f74c8015a44756fa828fcf708381bd9074b72082b4b0f5bbd136fa94194ebd0fab65e4eaa0d7085d88f96f97f5cec6fad53515accf7a303a66146214a7cfc6b85bf45b2afca7e0bfb06ab0016539339d1afc9cf197f392bf267afd1f3632f5193282331cddeea585175ef318f2469d928ead90b8af82c75065cfbbd1359b203fa788851fbe51330a121b366d12d7c55f912dee3cbb850ee960c695114ab6eef204a778fe75531c8bd9abc12bc6fb8ea1ca95917d5bf8cbbf0064b3b43fe304f3c85baaefa12f448ce2fb69c2a82ba23a6fb8423929c9c36f21b373f3cb61366ba15105a4a92881ac5f650d001985b6dd6eb02c24c4e4f3d1fe97b39b25fdf28aa7b6d72dab5f04f55037d706be5a8c73c2ffddf1be0a4875f4b2f9f3c39e89672bc07edd1954643c75e38df0aafaab3a24dfd18e091220d05e50e5b663345234f66652d2af2a622f9aa757a673f32c088447c29312f767f2962e0212e76d0f7c6c977e09a15fe173a433f486689701da886b3c4ccec7176895ab008999cec9359407adaf5d12e38f7a823b3a98a5ee93a0a8abbbcfa6fde210c50ddc601edc85971a9fa4e380adfa9605bde2c848b3a6c88be1bc0fd5d66a9441a66155c234a54c438ed20c71056eeebb33a4ff56f6b8a7bedd9c1806b573595a103a65cdcd4ac80ed7c395f72d54e0f411d6bac23b1541f92a89855f0c0d9c6b59b194ff2fca1a126cc20dced5c3899272df0f4fdd1fb6932ea383cc53385135fdfa25265188faf7a478966b5a48e73c77f4c2511e05955df5944877cc1b310b5c27681c27538912b89012ef062369a40fd0c51750eaf3b939ce15d9fd2418b0f3a25473242354055d66db69f1e981659f8694a4fe83348d1932b9971bb2a99fc80dd525a6ad3f6d55dd24d6259f610542f65760c89f6ba9b47c298d4c4aa3dd96e20a5f5e4988fbd2a762b066ad4cc1c7721594bcf682330c37977640d4749325f314bd62e629fba7bfabb45bedc8885998a7f255c252ddfb3d54d4c26b3da98d683f20959e402dde9ced4b11c78e90c723112a2c5e77b74a9348a4e18d1b76065c8da8b440bdb9f7a0dca2ebe5b85e971fad22a0f95fac90c8bbd98dd6283d47b1c31442a67a6082cfd3c8593533bbf8a526c860c0403c30ce4159da7bfb5b2f4256f9bdbf579a019ebdca232b813f0b76ad1efa9503b6377c7506c005ba1c3f35cdb7a1f7a0cbe6e52e19cf4e5cf0b7b2fde1e6e62331f61b7124dee69b7b5963241d0c2943b26a33871ed39195378f73078060ca8c11fc5fef45a784f047bca62aaa94bf06bd7b63a78bbde6f1fb8309d53667e2914a8fe59fc9a2fcdc4ed3aee02510298d003dad9679e9e507681a8d8b1698eb5165487686c21df099c911f3667128e9c9ff8c585037633ded79e3250e2db33546ece8ad42ea2d228d9b6d2841edb0c478175b2d13f69e7893d858cea5404f7ccb9e760775b30c80265ebfece2e1c8ed3cee7e9c3ac0487b915be14607b9ccea6558fd9ad6883bb29043f55d73f31229cf1800c6c66fadbb700d32ea05910efeb9822486fec9d7c096daf19f76dce914a87078444b4aca4a982cfc4e84abd7588acf6f6ab18151218459eadcd84e69e0ddc7aa8d87cb6cc622136f1bb54323a2873947b3aa533a059cf25ef8902fd4e9dd44a20f4ff6681028ff1881bd7b9487783f8c913da4b0d597e59ed87cf95abbe7eeb16a4e90b324617bd46853dfa945b6a633f745b22b9384cf76f0b331c3d759a7426c4cac617ff6dbbf69532f1093927e7cb6e69c82071a835bee856c773c3119934b5da89879e3540e82bcfee432f8854ef3a454ca130cb9cc6d8c07277978735e21bbd0a1d40880f767df37a41bca382cd270fc2b85241fc321679d580d1743f4eae5e750ca42576707889f5189e019ab496aa7fdc8327669bf93b9d1ccb8b0220128e9af901e2efa9ec216d649c13838331ed821f288dfdebf63c75252b80c9f42320bb785dc7cff10a4390fa91d0e96ece6624768225255c61472027a3d88d8047dce7fbc44a8690c178ac4d8a014c1171510fc222d6835e5395e7235535e25baab0cf30dc54e979bb963e07dedde0a228f2d774f9fbbdef9856009edf721dabb161943c1ca14427d7113fc50e9550632b2f43052c6b381ea14e7ee16510ee12342a48374029d8d3025ec4f0887c0fe321500a475c8b703efa8cd2771323633e56c8d3ad17c2647578324f278dec0e9e4e3d9c13a9e1a735ed808206d1a57917c0ad43919fe0845d24e1bd29ef900f136d51209dd66af80a8f53864caa03c47bf3f092091a18a450e00e3369c6b2eb797b43469d6eede1adc808b0412383fd572f46654b34d6925e6792fb1b8aab6a675ca6dbd47c9d2da7204b663dfc21dd55c5b931db875543d5a572371bcfd610ed6cd558e16963548dfe9019f6d4818590c62df5b944f29b7b99111b7fd05c2c9d63bfd2e7767b02b70ea2244be45976b92eefbf39a620fd6933da80290263ed4840e511ee0b4290dd2ac45fdda958b6456291b055852de353e65a96f6756dea01ec8f37a1a59a0760a2a7fa837f7382b4dc3c82406f09d1f57ce5112de18662d78989820bfa1f217fa8947fc4b1f212d36904558b8165d83c78de99cb3eb970e78188cdb549c5af7ca3fc65703b78c4b4fdf6e8ced3274323da7d96b5d4fee2feb13091c2c4a6df7d116275caf10c94f736856097256e645fa1324a6cf4b6412466f20ec79d2118a8d83d13dc8fb9fa08c5d1a37009f30da6312564044f86d664004585c4f2edf14d01428f0296c1f6237bf7ce5ad4490d30bf6bf4a60a6814c77e583d1e3732de91a80e4637009a404fbe1f2820af466c1d0a9facc61ccdb8352f4356416ecb8d5eb063f233f18ff4251528e0d62881d35255d711e9dee56a27a66253e32c087c46e9dd8dec2c67b984b2bbc004069f13b2f6d0bfd9516025bba7a3a18c4c1cf97a5b7d83e0afff2214491db59ead4e470880e8697e5a12653e02ac1971f6b974898ae7c00edc1cdbb501c9b00ddf12a8b1cb68ecedec4b6bf604f83e355a43564db0acf4b9e9382d39c784ddb995391c57bf509a03b70f9ae334c2990a78cca441e023492c126dde11c1aa839eb8217e3d9a8567036c8ecd6769f67f89db01fd9d09c7620e0803f2ca64924e9fdda73ee15b44bc55b5824b7176c2952d48b5f6d5396fad282a07cf340dd3a371f4d99146349319c0e26b01ace689f394cddcfd8c5870dd98e7fa237dee612edda6a2a132d0f77fc20a127d510a6e1a4a397d1fc1f26fcdf66b648630559c1b98d5c7740567f54d5e4848f52d449593368f094612652b1c9422c829449b66ed47ad49763d44eba686548d3763095afbc0d13e1b71dce0c602c70067c7dfb3019e9fea0d6ad411de356cc62ec834497b65a7e6834b59b5ec6c617ef0482297489d4f2c38c332c1dad6304c0fb6c34990c7d8b6a8c4fc2f155bf5c9e303f78a5e2a7051091d2079ee77e583555f9a9f6fcd54579e122a0ff5a28c3143bb5e52b542a12e35c80aa07d370ceb02b3faf6650346ad245043d11fad525a8981f6e759ba9bad05980783dc91ee7b2c26260cab30930d826973487fa97aec73d77e9a0a0d97cb832ea1bc751d1fbe6e23b3742621cba7ffb2755ffa16840045e958c8b8ee9346bdcf2de705c86e702bf49892ba52cbb4692c13ae3c4df88898a34c6cc6428ceb2650b201e13961dafd4887f1b84c133a983691471fa81648b24c9bfa212452b4906148feca94f831380e3a23963da71c30f74861fe0a9d164ae183f45d71f4bba97a1c199f4dcc972aa7fbd42384aa48a69440b6a27ac5526048c478d83e061fcf29ad55ad7f7e6b07e5a000fc44e3e4ea8404f078ca94b13857295aad3eeffd09598b16fdd1edf83758b39c980f85f77be674ff5a566f3a24ca38d8bffa3c5304d3a0edd4c6acfd3dbe549fe1d2774ffee5cb50afef0fbc8cfdd0b99b5352014b1ceeea4bec384843ddcdee13e51f85588cf613ca7d111278c2b6021403c90a894af731b5bf98df71bcbbedf601948a1bf72edb1f3fd02db429d83c04bf2c6cfa9dcf3d6f2ea90a357f3d4001842f7a678ec18faad9238548eba9b6df5efeb46d693e110929ba8399bcbab6346a91627682c106e535f97e719daa55cc7bf51b1198fc95b0464382438f77273adc8b3ade0e9538adb205e5ebc60ed91bd0ce2075eb7fe74d06f7fcc569a3c039b97c21819c1a6368748fd632e7a8b19f9c2ef15fce95e325d580b3897c90a4b045256348631f77835f50ee3059fffc29d73bcecaaeb84fd59aa27ee0e803d9a088b0e527f102c639da909ff12538a2ba5233706d2f6fb9c88572551c278d3086ffaae023752cd48cd82d7c0392207320b503455d633d735ac76823c673c92b155aa0ed5add1c06ef181a125168a4159891aeaa22237afb7cfdbafc53ea26837c97bcaec67de63ed6ea0b1cd1a419374d994fa2a9194b46acca8781b90c6fcfd89b06ee66e2c938279d29f07ce2857394d7a15f21a479d6df53a615730a2064a898206e47353738e3a8dedc358ffc3d69b7b7a19b901086720f8d032e73b7b7253f0b666707329f8f534fba496153c4e48c6e1c82ca8ad50850a5c7e46d1b4eef36a85fe8a82093edc2fbdb950d70ee16a500ceed547caeb54fe67b962c3e1380d42fd2530b656aba9afd02c7b560ec17b698701ec556b035a8359875a13634f7ae472e04621fd8746d36aabc35723a7f66fca449ae9c1ab66ac054d4b72ec882b6bc7f3bd26297c9ca019cee0f5c791551bdb5c10bbaf0dd9c0547d0a60895e80fd1ad9ffd741aea7caa37ea2493c1d6cea907cba568321b0f224efa9f923d1c5d2ea83f9f2d05c3cddd00547f1e83c391a580396e148ee7c06cabbd28c08b753961cd46508f9916af715a4f5b362513d4f52afc0662a6578cb3045", 0xfd1, 0x5, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 2m9.810032821s ago: executing program 7 (id=2986): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 2m9.56435372s ago: executing program 7 (id=2991): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m9.340364917s ago: executing program 7 (id=2995): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x6, 0x80000001, 0xb, 0x1fd, 0x1}) 2m8.608875398s ago: executing program 7 (id=3009): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x60) 2m8.282974764s ago: executing program 37 (id=3009): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x60) 1m28.671150048s ago: executing program 9 (id=3545): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m28.341749616s ago: executing program 9 (id=3547): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 1m28.070925527s ago: executing program 9 (id=3551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m27.856843043s ago: executing program 9 (id=3557): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m27.788453691s ago: executing program 9 (id=3560): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a64972b7b7e146a7911571bb59f0e94f352e26cb1786147ec409747c16e647c39544ddc94ae86f22df3c699017a2bff17e0417aa3bc0aed51580366fb5e84c6aeceb3a45ed1f79616a7ee291f89da8339eae2ca85073cd6376fad3089ffd2e60aec5f2b70ca6e4e12965766bbd36d1271eda8a0079e4bfdcd7f6b032b9fc17d49bc0163bd545223488899f0e79b328b6759baf040c49a8901911ba619f3672a770401ee2397f383588220761a10123e504e9fb1fe07ac2a8e27aafd72853", 0xbe}, {&(0x7f00000003c0)="f269333e13140d47714b000638df33125e5b3dccfb572915780003f3d437f9f705e6c98eae5299a4df5902f172cc7e9ba29b0e5e649c6faf6674f9a924e3310643b39b32d1add6930c84b2b29c2c8d74f3efeb2e51c564d7fb56884c5b6b849b02788855bb285c23b909b459b91dfd4ae9c132e281df2ea04e87608b085f56091d7752522b7e536d4dfc312cf1e7d1ada9d4d90cc2ed987e92557c55d0c0c5c45c788a8331f0635de61db15340db49de434ae16e90b742cdbc756078912163ad464345", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="f17e05ed42b2ade17bc46bbdb73da4b6b4185b9e3856a6be940e023316ec5a84df9833fcec19c3bb3d6806ae728e4911a564640832e9cbbf17eeb333e6c6f4fefe590c3e6ea76ff29f8a218627101c67495201c56b231b4539f0d84e57c765786668f8e97268f1ffe5c8434e833c4e76dbce593b407c2104940eec4513ef2ef9583b8b5cb0d6672752102a5a60fb0cc9b53103411bd974c217abed966ddae688e87e8ceab75d17baa015b2ccc9cefc9bddec29be324cd6532fdc242b9533f351bc0ead2380", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)="8c1262634f1c44c6418418cf99e0eff3c5350c", 0x13}, {&(0x7f0000000840)="64269006905ca982f480ed11fa65fcb35a405af7645af3aac5d2ab51a6dd856ea805a2f9bf0c501388a0afa0d52c0428dd8b4c5d56f6fb925c7bdd09a1a8", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001e80)="ff4bce4e73e7dffa6c4153ab37d4f00de8458ea027168751b5990bbdf8962fc1a1901fd21b5e9d883e37e27c758b3cc7923c24b1a594d68e398c846735187df64915007378b4f2854f525b4c411ff63139e5a0a2be9e6a262438571da986f21d38967cf1da00d662d6a6a1d65cde1dcd28b8d6a845b7de7c3ec07f5e3d0b55decb611772573339cd8eb523df9d7d8a408156f4", 0x93}, {&(0x7f0000001f40)="3082fcef788d357461ced050ec191da01920c1172ae5eb78d1bf17410d3b3955f61be944e04a91c9553e5e4d0d0d99ef6489432b4ee199c3821dfb2015e68ae8d0bfd01d73b3086205172176be6f", 0x4e}, {&(0x7f00000008c0)="504ce849def6a3b80d9fa9e7c033e36d3953a5c327efca79ace420f3b11f860fb6d5db7e1e332c867789fadd2b", 0x2d}, {&(0x7f0000001fc0)="80a38f246fff25b54a6cf1eb9048d4902316398c6d2d9f4fd16918cf4d21ac16396c8426411e6140efbed8b7d545e2f6275cb4aedbf16721a5ff9782277cc522d64ac6f890f0ba56f20361b248c99172f5531110595237aa4fa310d47ea7910f46f1b94a3ea2c6de7b04f5e197935e911813b16296e1fc999cf0b6bea9bf4f8decd9ee83c1a2a723d37447881f785c9d0877f2791074e7e05e762a63dab96450999331846fb967da0748b0671e1ce72ed526196d9bc539319cd4fda19e67ce9a874fb7fab8bd3b56f19c1f64bb4fba0ca753de15447bc62c0b1b9ed60286ab45654bc783340acf5f81ccddf1e9e4f6a3", 0xf0}, {&(0x7f00000020c0)="216fe9fa51673f6ca656034566ebe872ae001c39570dad809200c67c3decb5f271f66e85eb8287e8bea0ac9ebb7bb99aefd52ed5e3040e63790669b322378eeb6e4ec20c3910d0e7578e44268bce7e9d5d8e0312fa21f0cde5f50e5bc08e179d722f65e1c73f379101d95e51e3288e5fcf08ef81f94cdfc3e3f0dc441a4d7dd335bfcadf8d71b729a6872b6aedcba5971998ae5ef2e3b1f129365eb1d5dd3f353bc5e098d85db814e947bee283c240cf102296670518f5f31b3eda90c6263f3407e04dd73403bf1e59add6fa636c96a677aba71a18fdfeeb6ff9d1a09b283c73969736477cd74891023f0a803c0997cb6c4ab9dc94fc5c08b8f3a3a0cb077d75ac6facdb8f76c3da192a3edb128c87b715b3383e38b0b44d7a404668cfa917365448c39f56522ec3671ce9963c0d0a28a57959749c0df846580c42daef07640279e679e6e382aef623adead6ec76dc51135e193bb91e31c498771453dd60a9fcbb91ba8a8a841bcef9af46ffdc641e3c0d71551a2b343023224aaeee74f9621acdfca73e536264af10049df37d87d2a41554210bcf4b4a6ffeeb6a2291497f53730affd003f17a3418a5fc80881fa337c62b80378bdbbe6a5cb3d831d7d7d45128625a41b6a928c972c3d0ead7b8e08a73aaa72b5239f8a1b6ec0b6712771df93d59a741b608b3bc952e495f8d7517c034393e591af01ed1b17a9ba888b4fb10dbe132993b0b27c0e37157f3395f3801e465d687e2d8262bf835116cb139a6f553daec6adb0cad56ebe10ee1ef1e6112ef11841991f372937fb7d7f53e8feb1f6d213f8580b8accf48deb7883f3acfe73783b5d868af609fdf08a38d1ac441fec0fc586ba3f88bd71a9cbd7b3fc6d258fcd7ca12973705adcebf2c83ec92568f327cf7419db31defc3cee9696a2d9451f0fcd28a4362c5ddb679b7c02a0b7240f3d7605b1b9f32a1fd4312f5f00fe6dce2771dfaf1f4bf602a2701bc0fa0bd16662b0d4876c36dc043bb04bc596637a35918e4538e966c0cba4e07eb38558b154a3e89349d0a629e28e156f932b70e3691ecb7992468f9dcf3f3e01e3ccdab528515d217b6d20508186f5d1e6ac9830c33724837b131fe43febd021e1a789340e2313d0b8aa1f77fd8cf3075d947df1da0faf40467d9f81c4fbc82aa092c92f8a9265800f1da8574d2893714fed55a586926fed382dcc064c2eb7e8390bcaf7b56e45e444f2c8a79c91ee4b61aa17b56b1f93b901b5846051761048c2556fd27a0c0772165c6fb6dcab7566891f6bbfc098cf1944e96f975fb06a8d871cf300d3769e2b50df158e98aa050a436075d869f0d1319794c63cb181296ef569a0ca16e9d01a77f0dc2b8107026de202ddcca87bc46397ca7e68f0bf2aa79b6bb8104a0005638b5f3457c10574284720af9a16a6c495880e779618a9204e842b20b814191bcbb8b9f9d1182ef73683de004717e054c5df2753d62bcf1a034f63e1aac6f8db3fee0dafa7006cea8d9d6fa0207ea895d90448343ad6ce43643ecf6401c76483cab0d1a968d4b991c101f21edc632e87f73f110ab36ee6e31bfc9fae636399bbf39dea99ca3d61adfb7e2c8be93e12d6b401d765783aeda8b95efc097cf319e64169dc8ae32e72642f4ab8668ed3824da0815d8597a24a2ad95f77d15291d4811714dfb654253b38ee81240b66790ed424b656d9038f22e2e6b6977051e83f778b61205247e67d68dd5b529f2097938b099df85bb91783cf4137077bc0f477ffde3ec9a97a95ef45c15a64a0d7100728b9a9a7bd1fbf6c8176c90e54bed79cac764f7b38977a49c88f5f8298feef95e8caeaf4affc73983ac8308faf76b9c8c4ec2215f35811dc0aefa9a2de273c454e142954de6b4bf0db9e02e62104d4574befa9aa7216b8fc3dd69fbfb2dd1092ee2601406f78a812bb759ddca7472db04ff3646f618c4a54b8d9c894d061aa881d3716addec9a61d839fa307509a0c41e38f6e214f62f52de5064dccede37ca26a2ccf095e4feee69d04c203d7f12139025cbe29a4c2c045cb7ab6b52d57f501c1c934d0d60282dd2361ea5c2bc0d4cef329177efe65a56d6e4480ce5ceb618be88940f590a3cdf6c62b22cb35092c9f15a155fdaf28649cea5850a2c73c59b38144c79e60f92b006cdcee4d65844dbe328998cf3655c9c476d4e73ed6beafb8de441b15b7ea28a3a8cde8f04cbfd8bfa050bbc720210376062cdb0e5c57e27e3c5cb6a07ef4173c83964b61c3182741b8c9635dbc9f60c01922ceb28047ab98ecc3fe11408acfe93ac201b077d6e62c6ea6dffb118797af594f539e13cf3782761f2ac8358d4b5468083dba3f975a75c80b34b654ef2690ab110f5337df42a21af7d7a25c1621388223c5b1ceb558006d1b0e7872330970b79f06e0d03b1fb930417db8ed13b9b351b80a651890e1b1055fb3de9b136420d8a18e763559e3ab8304f07ce729535e26cd309a3b4ff547cd5255cbd8bf16222600d3995a088b7a3f96fedb9551729f6639d021f55910eada96147de2862463eefe00e9b3ee9311e2f8d071c2b588acab2d6c5790beee17444f746d5d9e67817104208810e45363b93e59078037b4d2c73d2446df40dfe25c6b16501b14d36d0dde0afc38d32f5ffb6271206d7c0be246e221136167e4580f3c4f26b8cac488788a449aaf576ccef7499b7ff7851fd26789df0314cd97fc7ea8251e104769563401bb0bd17bec9889e1600321a0e0023ebdf730580c268e91c49249c915026f1f11d3888eef4846266e6b7de11a55b4f6457bae280dfb5fac94a0df452768729d2a5ceac6b3290ef81c0d82984130e7c07ba8ef0041abd73af1263fdfec574854648a2e8db7e25f748c6bb41bc7a5b326f814ab9a8b319dd6fdc0a3ae65973e0a2cfefd89fa5ad2a40f76fa70656357c5d94a2cba88ad863b0a67ded77822e6f13bfbb943024ad6a0853505111b953daca3df55814d8369051f3c083fe4c4af2b17dffb8338f451271409874946154039ec1b7070869161d99421a786273082c72e2107c21110b2ac2a41f710d16e7d46618a914a78070d2fa310cba0fb0b15ff42882b5b074bc4492548a4023783ecfc8f637e2408bda561fd4f1ca2927109250d608778039513528fe5e2d4890e4d2110d24b5f751ba6ecf6597cf588b9af0449e38f7d5f90717ec75cd66c908bc08acad48c722138f11a3cd26271cee1dc08cfcee0be52e3b6cf029382560114d96c1a2658d3e5b84f7a82f4ddf715485d522dd8f4e6ba3461df44a6adb76828f8f61482079e7bbb503257de120de4963bf9445f8f769e24208b3b775f083ac649a421d636f9385a0838f6411db4374dbb4e704d395e1cb7b2f003fad159a2743ad8fb49d544a413cef73b91ec0d7daa043e3ad5cf5f03a8745aba05f45d0ed3eba02385c1c6b03854f21097af958852ef8166e99b75adebc04b88ba90f365cdc2532389676c3ae9982f6f7553c8e59491bb077bac515358b907d32dbc88be84b7fb5610d1ef5c5ba45f91b69ebda90176d775bb7192cc3402f088765102155b2138d34cf85d055c0f19a3e57d2dc5e6bfd245d6b5f86eb9c2d27a40041361c12089f00026ecd4d1857b615c5c97686033fb4fa2a5382c2bdeade5f0e5e84cda4e92cddbf102d219e1068013ebc52fdab61342ff58cab77aa37c4fea76634ecc56b792236fc112756f11b16b573b5f731aae3e5053eedb97ce9494aa5cd569ea74b3531bd7b48faa8ea0c0b7a936f0d07e57c7f8d3cfaf86c7de7e36125170c56fed886780580c99e37ec298ed6c8ff5c517abecc8c40196d8da2725a8cb2ab60f9360cc6ae8f906e0ef7780ea75b804f8ea231f1c90608c10bc28f6be99ee25ce7dd677fc22f2c5324d298aa3d3c9314bd62c5dd2f2f01ef7dea198c7601c2657d8520705f9a9d963a60144275c0d3b4a63c10ea7ffa8c9a5246257f7a4b1b2e34f45b40abeb6042bb02186e296846af62dfa87782a81f82405514430d595a59144cd8af21a43c318d50752f66ea1fbde88765d5950935388a85366807c40f05570e7cf717a03a884d05eb26c35451ac5268672d1b2b4d93461a533b1685038ef34c4872439a72b1251996291722db74ca28c4", 0xb6c}], 0x5}}], 0x4, 0xc884) 1m27.383512555s ago: executing program 9 (id=3569): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/252, 0xfc}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 1m26.827853936s ago: executing program 38 (id=3569): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/252, 0xfc}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 3.927170978s ago: executing program 1 (id=4762): r0 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x8000, r0, 0x12, {0x6, 0x1}, 0x5}, 0x1) 2.54185754s ago: executing program 2 (id=4788): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x305294c5, 0x10001, 0x9, 0x101, 0x2, r1}, 0x20) 2.311736414s ago: executing program 2 (id=4792): r0 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r0, &(0x7f0000000180)=[{}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 2.11985817s ago: executing program 8 (id=4793): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x40000000, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(0x3) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r1}) 2.042987044s ago: executing program 3 (id=4795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x4) 2.024977242s ago: executing program 2 (id=4796): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x100, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0xff0000ff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xffffff00], 'veth1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1e, 0xff, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6e, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x3}, {0x1, 0x2, 0x3}, {0xffffffffffffffff, 0x2, 0x1}, 0x12c104ff, 0xffffffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 1.928849864s ago: executing program 3 (id=4798): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000001, 0x4082172, 0xffffffffffffffff, 0xfffff000) 1.928320208s ago: executing program 8 (id=4799): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x0, &(0x7f0000000740)) link(0x0, &(0x7f0000000340)='./file0\x00') 1.790932349s ago: executing program 2 (id=4801): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x18102) close(0x4) 1.780681395s ago: executing program 3 (id=4802): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x100000, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x1000004000000000}, 0x0, 0x0, 0x0) 1.646230972s ago: executing program 2 (id=4804): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 1.380612389s ago: executing program 0 (id=4806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @remote, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588", 0x8, 0x11, 0x0, 0x0) 1.234894638s ago: executing program 0 (id=4807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.121459247s ago: executing program 8 (id=4808): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x627, 0x4c1, 0x9, 0x0, 0x0) 962.948854ms ago: executing program 1 (id=4809): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESHEX=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 847.438872ms ago: executing program 8 (id=4810): r0 = io_uring_setup(0x3c92, &(0x7f0000000240)={0x0, 0x3, 0x0, 0xffffffff}) r1 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0xffbfbffd, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0xf728, 0xd, 0x0, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 763.690439ms ago: executing program 1 (id=4811): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 752.419358ms ago: executing program 0 (id=4812): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1c7b, &(0x7f0000000080)={0x0, 0x5e0e, 0x8, 0x1, 0x2b6}) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 647.679796ms ago: executing program 1 (id=4813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa028100020008004500fe3240002000032f"], 0x32) 543.035429ms ago: executing program 0 (id=4814): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x408c5, &(0x7f0000000100)={0x11, 0x8, r1, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x54}}, 0x14) 542.831023ms ago: executing program 8 (id=4815): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0xfc, 0x0, 0x0, 0x0, "121f4496bd54e16c"}}, 0x48}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 460.66921ms ago: executing program 8 (id=4816): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 431.98161ms ago: executing program 0 (id=4817): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x100, 0x1000}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r0, 0x2743}], 0x1, 0x0, 0x0, 0x0) 374.313051ms ago: executing program 3 (id=4818): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x63}, 0x2) 290.418754ms ago: executing program 2 (id=4819): r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 289.798392ms ago: executing program 3 (id=4820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000894) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 263.931753ms ago: executing program 1 (id=4821): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, r1, 0x0, 0x46) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 220.742587ms ago: executing program 0 (id=4822): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)='A', 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 50.944527ms ago: executing program 1 (id=4823): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @win={{0x4, 0x6, 0x803, 0x5}, 0x6, 0x0, &(0x7f00000005c0)={{0x10, 0x4, 0x10, 0x9}, &(0x7f0000000580)={{0x316f, 0x3, 0x6, 0x3}, &(0x7f0000000540)={{0x824, 0x7038, 0x2, 0x5}}}}, 0x573, 0x0, 0x91}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f, 0x822f01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fcntl$setstatus(r1, 0x4, 0x42400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 3 (id=4824): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @rand_addr=0x64010100}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): USB device number 28 using dummy_hcd [ 348.039269][T13211] loop5: detected capacity change from 0 to 4447 [ 348.048019][T13211] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 348.110867][ T5844] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 348.130028][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.153232][ T5844] usb 4-1: config 0 descriptor?? [ 348.191373][ T5844] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 348.558165][T13228] netlink: 'syz.9.3170': attribute type 1 has an invalid length. [ 348.572197][T13228] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3170'. [ 348.604215][ T5844] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 349.208575][ T5844] gspca_cpia1: usb_control_msg 05, error -71 [ 349.228523][ T5844] cpia1 4-1:0.0: unexpected systemstate: 00 [ 349.232663][ T30] audit: type=1400 audit(1754615939.003:4264): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=13243 comm="syz.2.3176" name="address_bits" dev="sysfs" ino=1392 [ 349.249378][ T5844] usb 4-1: USB disconnect, device number 28 [ 349.517303][ T5978] Process accounting resumed [ 350.004597][T13285] syzkaller1: entered promiscuous mode [ 350.010986][T13285] syzkaller1: entered allmulticast mode [ 350.068987][ T5844] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 350.223127][ T5844] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 350.251254][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.266223][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 350.282267][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 350.299115][ T5844] usb 4-1: Product: syz [ 350.308045][ T5844] usb 4-1: Manufacturer: syz [ 350.318683][ T5844] usb 4-1: SerialNumber: syz [ 350.326085][ T5844] usb 4-1: config 0 descriptor?? [ 350.337241][ T5844] usb 4-1: selecting invalid altsetting 0 [ 350.376428][T13260] orangefs_mount: mount request failed with -4 [ 350.592190][ T5844] usb 4-1: USB disconnect, device number 29 [ 350.868700][T13307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.880294][T13307] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 351.005813][T13310] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3207'. [ 351.541262][T13336] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3217'. [ 351.793806][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3222'. [ 352.188094][T13374] loop2: detected capacity change from 0 to 7 [ 352.199406][T13374] Dev loop2: unable to read RDB block 7 [ 352.205195][T13374] loop2: unable to read partition table [ 352.211276][T13374] loop2: partition table beyond EOD, truncated [ 352.217675][T13374] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 352.368942][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 352.520366][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.551133][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.567646][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.585041][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.602960][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.613267][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.621882][T13389] loop9: detected capacity change from 0 to 8 [ 352.638235][T13389] Dev loop9: unable to read RDB block 8 [ 352.648917][T13389] loop9: unable to read partition table [ 352.659263][T13389] loop9: partition table beyond EOD, truncated [ 352.670177][ T24] usb 4-1: config 0 descriptor?? [ 352.679052][T13389] loop_reread_partitions: partition scan of loop9 (被x^> ) failed (rc=-5) [ 352.784801][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 353.010879][ T8720] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 353.100807][ T24] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 353.184171][ T8720] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.209424][ T8720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 353.222751][ T8720] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 353.238369][ T8720] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.257892][ T8720] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.267345][ T8720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.298743][ T8720] usb 10-1: config 0 descriptor?? [ 353.307766][ T24] usb 4-1: USB disconnect, device number 30 [ 353.309921][T13398] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 353.569061][ T5844] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 353.709226][ T5978] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 353.717021][ T8728] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 353.719280][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 353.740757][ T8720] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 353.741862][ T5844] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 353.755148][ T8720] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 353.763381][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 353.778232][ T5844] usb 9-1: Product: syz [ 353.782658][ T5844] usb 9-1: Manufacturer: syz [ 353.787262][ T5844] usb 9-1: SerialNumber: syz [ 353.794581][ T5844] usb 9-1: config 0 descriptor?? [ 353.899191][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 353.908415][ T8728] usb 3-1: Using ep0 maxpacket: 8 [ 353.916018][ T5978] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 353.930299][ T5978] usb 2-1: config 1 has no interface number 0 [ 353.942271][ T5978] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 353.958343][ T5978] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 353.969908][ T5844] usb 10-1: USB disconnect, device number 20 [ 353.973359][ T8728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 353.985253][ T5978] usb 2-1: config 1 interface 105 has no altsetting 0 [ 353.996329][ T8728] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 354.026252][ T5978] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 354.042314][ T8728] usb 3-1: can't read configurations, error -71 [ 354.058366][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.068163][ T5978] usb 2-1: Product: syz [ 354.072611][ T5978] usb 2-1: Manufacturer: syz [ 354.074257][ T24] usb 9-1: USB disconnect, device number 23 [ 354.077296][ T5978] usb 2-1: SerialNumber: syz [ 354.093278][T13426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.104265][T13426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.408978][ T8720] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 354.524477][T13426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.533654][T13426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 354.572252][ T8720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.584172][ T8720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.596403][ T8720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.606359][ T8720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.620338][ T8720] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.631917][ T8720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.643046][ T8720] usb 4-1: config 0 descriptor?? [ 354.899497][ T8728] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 355.068054][ T8720] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x3 [ 355.076635][ T8728] usb 3-1: Using ep0 maxpacket: 16 [ 355.085502][ T8720] plantronics 0003:047F:FFFF.0029: unbalanced collection at end of report description [ 355.101713][ T8728] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 355.114905][ T8720] plantronics 0003:047F:FFFF.0029: parse failed [ 355.125525][ T8728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.141027][ T8720] plantronics 0003:047F:FFFF.0029: probe with driver plantronics failed with error -22 [ 355.154867][ T8728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.164104][ T5978] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 355.179366][ T5978] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 355.190757][ T8728] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.200490][ T8728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.208503][ T8728] usb 3-1: Product: syz [ 355.224460][ T5978] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 355.242366][ T8728] usb 3-1: Manufacturer: syz [ 355.247156][ T8728] usb 3-1: SerialNumber: syz [ 355.257434][ T5978] usb 2-1: USB disconnect, device number 32 [ 355.259000][ T43] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 355.283705][ T5978] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 355.294916][ T5844] usb 4-1: USB disconnect, device number 31 [ 355.352055][ T5978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 355.361535][ T5978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 355.371220][ T5978] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 355.419104][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 355.428343][ T43] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 355.437852][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.446251][ T43] usb 9-1: Product: syz [ 355.450472][ T43] usb 9-1: Manufacturer: syz [ 355.455114][ T43] usb 9-1: SerialNumber: syz [ 355.462679][ T43] usb 9-1: config 0 descriptor?? [ 355.470184][ T43] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 355.478525][ T43] usb 9-1: Detected FT-X [ 355.663552][ T8728] usb 3-1: 0:2 : does not exist [ 355.674001][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 356.073997][ T5978] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.089201][ T43] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 356.099245][ T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 356.229155][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 356.244055][ T5978] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.268468][ T5978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.275872][ T5978] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 356.285514][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 356.299281][ T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.324268][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.332647][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.353392][ T8719] usb 9-1: USB disconnect, device number 24 [ 356.370371][ T5978] usb 2-1: config 0 descriptor?? [ 356.383222][ T8728] usb 3-1: USB disconnect, device number 6 [ 356.390715][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.400083][ T8719] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 356.423119][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.433229][ T8719] ftdi_sio 9-1:0.0: device disconnected [ 356.449892][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.459913][ T10] usb 10-1: Product: syz [ 356.464276][ T10] usb 10-1: Manufacturer: syz [ 356.470106][ T10] usb 10-1: SerialNumber: syz [ 356.838424][ T5978] corsair-psu 0003:1B1C:1C09.002A: unknown main item tag 0x0 [ 356.846879][ T5978] corsair-psu 0003:1B1C:1C09.002A: unknown main item tag 0x0 [ 356.854459][ T5978] corsair-psu 0003:1B1C:1C09.002A: item fetching failed at offset 2/5 [ 356.880655][ T5978] corsair-psu 0003:1B1C:1C09.002A: probe with driver corsair-psu failed with error -22 [ 356.906926][ T10] usb 10-1: 0:2 : does not exist [ 357.077584][ T43] usb 2-1: USB disconnect, device number 33 [ 357.324713][T13502] loop9: detected capacity change from 0 to 7 [ 357.334386][T13502] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 357.340965][T13502] loop9: partition table partially beyond EOD, truncated [ 357.348223][T13502] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 357.535145][ T10] usb 10-1: USB disconnect, device number 21 [ 357.753913][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 358.469306][ T10] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 358.641506][ T10] usb 9-1: config index 0 descriptor too short (expected 69, got 36) [ 358.661958][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.686741][ T10] usb 9-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 358.740962][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.774256][ T10] usb 9-1: Product: syz [ 358.785040][ T10] usb 9-1: Manufacturer: syz [ 358.797820][ T10] usb 9-1: SerialNumber: syz [ 358.833949][ T10] usb 9-1: config 0 descriptor?? [ 358.867466][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 359.353281][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 359.382092][T13560] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 359.416025][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 359.452493][T13560] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 359.745849][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input47 [ 359.958142][T13593] netlink: 'syz.3.3337': attribute type 17 has an invalid length. [ 359.973929][ T43] usb 9-1: USB disconnect, device number 25 [ 360.079771][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.241444][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.258621][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.272309][ T24] usb 3-1: config 0 descriptor?? [ 360.287619][ T24] cp210x 3-1:0.0: cp210x converter detected [ 360.395164][ T5844] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 360.563024][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 360.576757][ T5844] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 360.586962][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.597958][ T5844] usb 2-1: config 0 descriptor?? [ 360.684603][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 360.828986][ T8728] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 360.896765][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 360.986995][ T8728] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 360.996416][ T8728] usb 10-1: config 0 has no interface number 0 [ 361.003578][ T8728] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 361.014896][ T8728] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 361.028426][ T8728] usb 10-1: config 0 interface 255 has no altsetting 0 [ 361.034775][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x2 [ 361.035336][ T8728] usb 10-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 361.042294][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x2 [ 361.051679][ T8728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.069430][ T8728] usb 10-1: config 0 descriptor?? [ 361.072603][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x5 [ 361.077043][ T8728] ums-realtek 10-1:0.255: USB Mass Storage device detected [ 361.083090][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x7 [ 361.098372][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x7 [ 361.103279][ T10] usb 3-1: USB disconnect, device number 7 [ 361.107437][ T5844] nti 0003:0757:0A00.002B: unknown main item tag 0x2 [ 361.116794][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 361.125032][ T5844] nti 0003:0757:0A00.002B: invalid report_size 543453793 [ 361.129055][ T10] cp210x 3-1:0.0: device disconnected [ 361.132811][ T5844] nti 0003:0757:0A00.002B: item 0 4 1 7 parsing failed [ 361.146225][ T5844] nti 0003:0757:0A00.002B: probe with driver nti failed with error -22 [ 361.221372][ T5844] usb 2-1: USB disconnect, device number 34 [ 361.293656][ T24] usb 10-1: USB disconnect, device number 22 [ 361.738912][ T5978] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 361.931880][ T5978] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 361.941250][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.951957][ T5978] usb 4-1: config 0 descriptor?? [ 361.976023][ T5978] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 362.152078][T13662] loop4: detected capacity change from 0 to 7 [ 362.161105][T13662] Dev loop4: unable to read RDB block 7 [ 362.168473][T13662] loop4: unable to read partition table [ 362.179261][T13662] loop4: partition table beyond EOD, truncated [ 362.186052][T13662] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 362.386530][ T5978] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 362.619284][T13679] netlink: 428 bytes leftover after parsing attributes in process `syz.9.3374'. [ 362.639900][T13679] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3374'. [ 362.798945][ T5978] gspca_cpia1: usb_control_msg 02, error -71 [ 362.832473][ T5978] gspca_cpia1: usb_control_msg 05, error -71 [ 362.838550][ T5978] cpia1 4-1:0.0: unexpected systemstate: 00 [ 362.853143][ T5978] usb 4-1: USB disconnect, device number 32 [ 364.397299][T13732] 9pnet: p9_errstr2errno: server reported unknown error @ [ 364.817044][T13752] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3405'. [ 364.946078][T13757] netlink: 'syz.2.3408': attribute type 1 has an invalid length. [ 364.962758][T13757] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3408'. [ 364.972078][T13757] netlink: 'syz.2.3408': attribute type 1 has an invalid length. [ 365.104442][ T30] audit: type=1326 audit(1754615954.883:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13760 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0c38ebe9 code=0x7ffc0000 [ 365.175101][ T30] audit: type=1326 audit(1754615954.883:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13760 comm="syz.2.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0c38ebe9 code=0x7ffc0000 [ 365.821627][ T5978] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 365.993921][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.024207][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.055751][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 366.076276][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.100132][ T5978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.118894][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.139742][ T5978] usb 2-1: config 0 descriptor?? [ 366.575744][ T5978] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 366.640096][T13828] loop5: detected capacity change from 0 to 3591 [ 366.650222][T13828] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 366.771537][ T24] usb 2-1: USB disconnect, device number 35 [ 366.801867][T13832] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 367.186690][T13840] sctp: [Deprecated]: syz.9.3446 (pid 13840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.186690][T13840] Use struct sctp_sack_info instead [ 367.404525][T13844] syzkaller1: entered promiscuous mode [ 367.410221][T13844] syzkaller1: entered allmulticast mode [ 367.471614][T13848] netlink: 'syz.2.3451': attribute type 12 has an invalid length. [ 367.488100][T13848] netlink: 'syz.2.3451': attribute type 29 has an invalid length. [ 367.511018][T13851] (syz.3.3448,13851,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 367.515207][T13848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3451'. [ 367.534693][T13853] loop8: detected capacity change from 0 to 8 [ 367.544201][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 367.554108][T13853] Dev loop8: unable to read RDB block 8 [ 367.563395][T13853] loop8: unable to read partition table [ 367.570105][T13853] loop8: partition table beyond EOD, truncated [ 367.584375][T13853] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 368.949162][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 369.100833][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 369.142462][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 369.151040][ T24] usb 2-1: config 0 has no interface number 0 [ 369.174588][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 369.197854][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.209622][T13881] loop5: detected capacity change from 0 to 5863 [ 369.220690][ T24] usb 2-1: Product: syz [ 369.225046][T13881] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 369.228330][ T24] usb 2-1: Manufacturer: syz [ 369.258625][ T24] usb 2-1: SerialNumber: syz [ 369.265813][ T24] usb 2-1: config 0 descriptor?? [ 369.291635][ T24] smsc95xx v2.0.0 [ 370.119317][ T8728] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 370.196265][T13891] sctp: [Deprecated]: syz.9.3466 (pid 13891) Use of int in max_burst socket option deprecated. [ 370.196265][T13891] Use struct sctp_assoc_value instead [ 370.292819][ T8728] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 370.311480][ T8728] usb 3-1: config 0 has no interface number 0 [ 370.317623][ T8728] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 370.340353][ T8728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.352434][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 370.367538][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 370.370310][ T8728] usb 3-1: config 0 descriptor?? [ 370.379173][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 370.398730][ T43] kernel write not supported for file bpf-prog (pid: 43 comm: kworker/1:1) [ 370.432846][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 370.455971][ T24] usb 2-1: USB disconnect, device number 36 [ 370.615079][ T8728] usb 3-1: USB disconnect, device number 8 [ 371.368973][T13910] input: syz0 as /devices/virtual/input/input48 [ 371.779008][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 371.928931][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 371.935692][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.950194][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.961400][ T10] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 371.974313][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.993321][ T10] usb 2-1: config 0 descriptor?? [ 372.040509][ T43] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 372.139302][ T8730] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 372.214868][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.227837][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.237810][ T43] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 372.248084][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.259971][ T43] usb 9-1: config 0 descriptor?? [ 372.272121][T13857] Set syz1 is full, maxelem 65536 reached [ 372.291015][ T8730] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 372.308922][ T8730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.323581][ T8730] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 372.336630][ T8730] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 372.345121][ T8730] usb 10-1: Manufacturer: syz [ 372.352720][ T8730] usb 10-1: config 0 descriptor?? [ 372.428272][ T10] smartjoyplus 0003:0925:8866.002D: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 372.440092][ T8730] rc_core: IR keymap rc-hauppauge not found [ 372.440108][ T8730] Registered IR keymap rc-empty [ 372.441192][ T8730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 372.452297][ T10] smartjoyplus 0003:0925:8866.002D: Force feedback for SmartJoy PLUS PS2/USB adapter [ 372.474933][ T8730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input49 [ 372.580071][ C1] igorplugusb 10-1:0.0: Error: urb status = -32 [ 372.603200][ T10] usb 10-1: USB disconnect, device number 23 [ 372.646229][ T8728] usb 2-1: USB disconnect, device number 37 [ 372.702420][ T43] cm6533_jd 0003:0D8C:0022.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 372.849004][ T8730] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 372.898369][ T43] usb 9-1: USB disconnect, device number 26 [ 373.027283][ T8730] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.038631][ T8730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 373.045769][ T8730] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 373.056214][ T8730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.067465][ T8730] usb 4-1: config 0 descriptor?? [ 373.391989][T13960] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3499'. [ 373.422805][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3498'. [ 373.465864][T13962] netlink: 'syz.1.3498': attribute type 7 has an invalid length. [ 373.498770][T13962] netlink: 'syz.1.3498': attribute type 8 has an invalid length. [ 373.517219][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 373.551565][ T8730] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.002F/input/input51 [ 373.566153][ T43] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 373.624764][ T8730] sony 0003:054C:03D5.002F: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 373.718662][ T10] usb 4-1: USB disconnect, device number 33 [ 373.720741][T13967] block nbd2: server does not support multiple connections per device. [ 373.748344][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.764468][T13967] block nbd2: shutting down sockets [ 373.778285][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 373.790093][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.800228][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 373.857005][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.880898][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.909175][ T43] usb 3-1: Manufacturer: syz [ 373.921743][ T43] usb 3-1: config 0 descriptor?? [ 374.238012][T13994] pimreg3: entered allmulticast mode [ 374.261556][ T43] rc_core: IR keymap rc-hauppauge not found [ 374.287796][ T43] Registered IR keymap rc-empty [ 374.296664][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.331539][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.374265][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 374.410892][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 374.451818][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.499109][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.529048][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.551689][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.589697][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.619471][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.669386][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.696477][T13998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.702073][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.730615][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.766583][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.823658][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.871926][ T43] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.892407][ T43] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.912436][ T43] usb 3-1: USB disconnect, device number 9 [ 375.820498][ T5978] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 375.930416][ T43] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 375.978901][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 375.990396][ T5978] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 376.008880][ T5978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.028970][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.051605][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.068879][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.076933][ T5978] usb 4-1: Product: syz [ 376.088952][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 376.098867][ T5978] usb 4-1: Manufacturer: syz [ 376.100268][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.103474][ T5978] usb 4-1: SerialNumber: syz [ 376.124542][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.138683][ T43] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.165217][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.180949][ T43] usb 10-1: Product: syz [ 376.185333][ T43] usb 10-1: Manufacturer: syz [ 376.192981][ T43] usb 10-1: SerialNumber: syz [ 376.554798][ T5978] usb 4-1: 0:2 : does not exist [ 376.689118][ T30] audit: type=1326 audit(1754615966.453:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000 [ 376.738646][ T30] audit: type=1326 audit(1754615966.453:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc07452add9 code=0x7ffc0000 [ 376.841635][ T30] audit: type=1326 audit(1754615966.453:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc07452add9 code=0x7ffc0000 [ 376.931027][ T30] audit: type=1326 audit(1754615966.453:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000 [ 377.004894][ T30] audit: type=1326 audit(1754615966.453:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000 [ 377.100391][ T30] audit: type=1326 audit(1754615966.453:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000 [ 377.170012][ T5978] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 377.212527][ T30] audit: type=1326 audit(1754615966.453:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000 [ 377.264765][T14069] netlink: 'syz.9.3545': attribute type 12 has an invalid length. [ 377.272879][ T30] audit: type=1326 audit(1754615966.463:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc07452add9 code=0x7ffc0000 [ 377.283031][T14069] netlink: 'syz.9.3545': attribute type 29 has an invalid length. [ 377.317417][T14069] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3545'. [ 377.327703][T14069] netlink: 59 bytes leftover after parsing attributes in process `syz.9.3545'. [ 377.341440][ T30] audit: type=1326 audit(1754615966.463:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc07452add9 code=0x7ffc0000 [ 377.378176][ T5978] usb 4-1: USB disconnect, device number 34 [ 377.425303][ T30] audit: type=1326 audit(1754615966.463:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14060 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc07452add9 code=0x7ffc0000 [ 377.453496][ T43] usb 10-1: 0:2 : does not exist [ 377.474163][ T43] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 377.515893][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3547'. [ 377.562281][ T43] usb 10-1: USB disconnect, device number 24 [ 377.912741][T14095] syzkaller1: entered promiscuous mode [ 377.918300][T14095] syzkaller1: entered allmulticast mode [ 378.098937][ T10] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 378.281084][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 378.302495][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 378.314149][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 378.324258][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.349045][ T10] usb 2-1: config 0 descriptor?? [ 378.365532][T14090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.385422][ T993] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.389206][T14090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.556414][ T993] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.624907][ T993] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.646358][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652833][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.725741][ T993] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.892608][ T10] aquacomputer_d5next 0003:0C70:F0B6.0030: hidraw0: USB HID v8.da Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 379.003775][ T993] bridge_slave_1: left allmulticast mode [ 379.017803][ T993] bridge_slave_1: left promiscuous mode [ 379.031517][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.113607][ T8728] usb 2-1: USB disconnect, device number 38 [ 379.114285][ T993] bridge_slave_0: left allmulticast mode [ 379.138734][ T993] bridge_slave_0: left promiscuous mode [ 379.153911][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.756611][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.766663][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.775495][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.783727][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.791698][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.849598][ T993] erspan0 (unregistering): left promiscuous mode [ 379.894256][ T993] gretap0 (unregistering): left promiscuous mode [ 380.223409][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.234208][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.244037][ T993] bond0 (unregistering): Released all slaves [ 380.369045][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 380.505495][T14169] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.3590'. [ 380.552310][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 380.563469][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.595604][ T10] usb 3-1: config 0 has no interface number 0 [ 380.622293][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.671527][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.687980][ T993] hsr_slave_0: left promiscuous mode [ 380.700469][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.713862][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.713955][ T993] hsr_slave_1: left promiscuous mode [ 380.736321][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.748405][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.752061][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.792583][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.839899][ T10] usb 3-1: config 0 descriptor?? [ 380.864402][ T993] veth1_macvtap: left promiscuous mode [ 380.865384][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 380.899132][ T993] veth0_macvtap: left promiscuous mode [ 381.074893][ T24] usb 3-1: USB disconnect, device number 10 [ 381.094342][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 381.475150][T14195] binder_alloc: binder_alloc_mmap_handler: 14194 200000ffc000-200001000000 already mapped failed -16 [ 381.685379][T14207] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3607'. [ 381.708305][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 381.708321][ T30] audit: type=1400 audit(1754615971.483:4376): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=14206 comm="syz.2.3608" name="120" dev="tmpfs" ino=628 [ 381.847705][ T5837] Bluetooth: hci0: command tx timeout [ 381.905208][ T993] team0 (unregistering): Port device team_slave_1 removed [ 381.986095][ T993] team0 (unregistering): Port device team_slave_0 removed [ 382.551934][T14147] chnl_net:caif_netlink_parms(): no params data found [ 382.574651][T14221] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 382.597355][T14221] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 382.930728][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.958399][T14147] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.989000][T14147] bridge_slave_0: entered allmulticast mode [ 382.997517][T14253] loop7: detected capacity change from 0 to 7 [ 383.042380][T14147] bridge_slave_0: entered promiscuous mode [ 383.061187][ T94] blk_print_req_error: 138 callbacks suppressed [ 383.061204][ T94] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.086065][ T94] buffer_io_error: 6 callbacks suppressed [ 383.086080][ T94] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.102313][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.122681][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.126346][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.153486][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.159112][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.179304][T14147] bridge_slave_1: entered allmulticast mode [ 383.182345][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.188783][T14147] bridge_slave_1: entered promiscuous mode [ 383.224070][T14259] vivid-003: disconnect [ 383.234078][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.249692][T14257] vivid-003: reconnect [ 383.267782][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.292075][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.351180][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.381393][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.401145][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.418339][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.433363][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.443410][T14253] ldm_validate_partition_table(): Disk read failed. [ 383.475111][T14147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.475823][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.518776][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.529167][T14147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.551640][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.582791][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.592225][T14253] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.605455][T14253] Buffer I/O error on dev loop7, logical block 0, async page read [ 383.613945][T14253] Dev loop7: unable to read RDB block 0 [ 383.620184][T14253] loop7: unable to read partition table [ 383.626064][T14253] loop7: partition table beyond EOD, truncated [ 383.633600][T14253] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 383.676159][T14270] batadv0: entered promiscuous mode [ 383.683691][T14270] batadv0: left promiscuous mode [ 383.757401][T14147] team0: Port device team_slave_0 added [ 383.797870][T14147] team0: Port device team_slave_1 added [ 383.910057][T14147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.920321][ T5837] Bluetooth: hci0: command tx timeout [ 383.924313][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.988550][T14147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.033009][T14147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.043283][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.069182][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.091220][T14147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.254812][T14147] hsr_slave_0: entered promiscuous mode [ 384.276722][T14147] hsr_slave_1: entered promiscuous mode [ 384.293197][T14147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.310225][T14147] Cannot create hsr debugfs directory [ 385.029932][T14147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.047122][T14147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.072256][T14147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.127710][T14147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.283711][T14334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3658'. [ 385.302608][T14334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3658'. [ 385.388684][T14147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.432825][T14147] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.448101][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.455312][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.531414][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.538595][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.933052][T14147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.002504][ T5837] Bluetooth: hci0: command tx timeout [ 386.030693][T14147] veth0_vlan: entered promiscuous mode [ 386.055668][T14147] veth1_vlan: entered promiscuous mode [ 386.121237][T14147] veth0_macvtap: entered promiscuous mode [ 386.133619][T14147] veth1_macvtap: entered promiscuous mode [ 386.154040][T14147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.170647][T14147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.185437][T14147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.195892][T14147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.204926][T14147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.214145][T14147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.324594][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.336140][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.387282][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.405648][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.079353][ T5837] Bluetooth: hci0: command tx timeout [ 389.009593][T14477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.306158][T14495] capability: warning: `syz.0.3726' uses 32-bit capabilities (legacy support in use) [ 389.504812][ T10] kernel write not supported for file /bluetooth/6lowpan_control (pid: 10 comm: kworker/0:1) [ 389.789019][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 389.959021][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 389.976454][ T10] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 389.995489][ T10] usb 9-1: config 0 has no interface number 0 [ 390.027882][ T10] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.062478][ T10] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 390.080476][ T5978] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 390.099651][ T10] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 390.126684][ T10] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.155068][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 390.179093][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.187141][ T10] usb 9-1: Product: syz [ 390.207336][ T10] usb 9-1: Manufacturer: syz [ 390.226191][ T10] usb 9-1: SerialNumber: syz [ 390.241669][ T10] usb 9-1: config 0 descriptor?? [ 390.282199][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.303974][ T5978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.325418][ T5978] usb 2-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.369527][ T5978] usb 2-1: config 1 interface 0 has no altsetting 0 [ 390.396269][ T5978] usb 2-1: string descriptor 0 read error: -22 [ 390.404368][ T5978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.424044][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.446351][ T5978] usb 2-1: bad CDC descriptors [ 390.484127][ T10] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 390.663432][ T43] usb 2-1: USB disconnect, device number 39 [ 390.697212][ T8719] usb 9-1: USB disconnect, device number 27 [ 390.885654][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3757'. [ 390.894860][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3757'. [ 391.155913][T14579] netlink: 520 bytes leftover after parsing attributes in process `syz.3.3764'. [ 391.199351][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 391.372086][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.399008][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 391.440822][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.476516][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.526721][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.551944][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.574637][ T43] usb 1-1: config 0 descriptor?? [ 391.589677][T14566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.748956][ T5978] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 391.919251][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 391.936029][ T5978] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 391.965384][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.976456][ T5978] usb 2-1: Product: syz [ 391.982436][ T5978] usb 2-1: Manufacturer: syz [ 391.987184][ T5978] usb 2-1: SerialNumber: syz [ 392.000727][ T5978] usb 2-1: config 0 descriptor?? [ 392.008631][ T5978] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 392.018400][ T43] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xd [ 392.020641][ T5978] usb 2-1: Detected FT232H [ 392.055412][ T43] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 392.214448][ T5978] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 392.230638][ T43] usb 1-1: USB disconnect, device number 6 [ 392.643511][ T5978] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 392.848494][ T5978] usb 2-1: USB disconnect, device number 40 [ 392.872922][ T5978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 392.885995][ T5978] ftdi_sio 2-1:0.0: device disconnected [ 393.962637][ T30] audit: type=1326 audit(1754615983.743:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14682 comm="syz.8.3807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271bb8ebe9 code=0x0 [ 394.449500][ T8719] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 394.510388][ T5978] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 394.618938][ T8719] usb 1-1: Using ep0 maxpacket: 16 [ 394.628356][ T8719] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 394.637572][ T8719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.645850][ T8719] usb 1-1: Product: syz [ 394.651088][ T8719] usb 1-1: Manufacturer: syz [ 394.655723][ T8719] usb 1-1: SerialNumber: syz [ 394.664611][ T8719] usb 1-1: config 0 descriptor?? [ 394.671841][ T8719] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 394.679109][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 394.688918][ T5978] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.6d [ 394.698109][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.706230][ T5978] usb 2-1: Product: syz [ 394.720170][ T5978] usb 2-1: Manufacturer: syz [ 394.728353][ T5978] usb 2-1: SerialNumber: syz [ 394.744476][ T5978] usb 2-1: config 0 descriptor?? [ 394.755749][ T5978] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 394.891095][ T24] usb 1-1: USB disconnect, device number 7 [ 395.319301][ T8719] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 395.521034][ T8719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.538924][ T8719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.566393][ T8719] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.598317][ T8719] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.619297][ T8719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.642121][ T8719] usb 9-1: config 0 descriptor?? [ 395.790249][ T5978] gspca_sonixj: reg_w1 err -71 [ 395.830490][ T5978] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 395.844390][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'. [ 395.860353][T14728] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.869373][T14728] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.874293][ T5978] usb 2-1: USB disconnect, device number 41 [ 395.979674][T14730] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.029073][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 396.075167][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.088906][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.096336][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.133083][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.149007][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.156423][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.178898][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.188970][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 396.199466][ T43] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 396.211177][ T43] usb 4-1: config 0 has no interface number 0 [ 396.211666][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.230081][ T43] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 396.248906][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.261306][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.274984][ T43] usb 4-1: Product: syz [ 396.279516][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.286935][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.289207][ T43] usb 4-1: Manufacturer: syz [ 396.308766][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.317695][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.331010][ T43] usb 4-1: SerialNumber: syz [ 396.331364][ T8719] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 396.350718][ T43] usb 4-1: config 0 descriptor?? [ 396.371417][ T43] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 396.397335][ T8719] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 396.426056][ T8719] usb 9-1: USB disconnect, device number 28 [ 396.610077][ T43] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 396.659215][ T43] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 397.049762][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 397.051472][ T8719] usb 4-1: USB disconnect, device number 35 [ 397.101261][ T8719] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 397.142536][ T8719] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 397.172335][ T8719] quatech2 4-1:0.51: device disconnected [ 397.328938][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 397.484464][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.496853][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.536571][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.559382][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.568697][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.585473][ T24] usb 1-1: config 0 descriptor?? [ 397.780606][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3853'. [ 397.789787][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3853'. [ 397.798794][T14788] netlink: 'syz.8.3853': attribute type 18 has an invalid length. [ 397.836762][T14788] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.846510][T14788] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.854907][T14788] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.863164][T14788] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.875275][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3853'. [ 397.886369][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3853'. [ 397.895547][T14788] netlink: 'syz.8.3853': attribute type 18 has an invalid length. [ 398.030278][ T24] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 398.129141][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 398.231466][ T24] usb 1-1: USB disconnect, device number 8 [ 398.291657][T14804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 398.301002][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.312967][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.324340][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.333879][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.343949][ T43] usb 4-1: SerialNumber: syz [ 398.573749][ T43] usb 4-1: 0:2 : does not exist [ 398.590997][ T43] usb 4-1: USB disconnect, device number 36 [ 399.079027][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 399.149593][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 399.229064][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 399.242532][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.254303][ T24] usb 1-1: config 179 has no interface number 0 [ 399.262549][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.273825][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 399.285314][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.296521][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 399.308041][ T8730] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 399.316238][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 399.330439][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.345014][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.354895][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 399.366447][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.379905][T14819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.388324][ T43] usb 2-1: config 0 descriptor?? [ 399.404731][ T43] cp210x 2-1:0.0: cp210x converter detected [ 399.458983][ T8730] usb 3-1: Using ep0 maxpacket: 8 [ 399.479584][ T8730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.507522][ T8730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.518357][ T8730] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 399.528063][ T8730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.547966][ T8730] usb 3-1: config 0 descriptor?? [ 399.662852][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input56 [ 399.829051][ T43] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 399.848861][ T43] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 399.885781][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 399.894872][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.926290][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.989653][ T8730] uclogic 0003:2179:0053.0034: interface is invalid, ignoring [ 400.066873][ T5978] usb 2-1: USB disconnect, device number 42 [ 400.073134][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 400.108500][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 400.130085][ T5978] cp210x 2-1:0.0: device disconnected [ 400.176292][ T8730] usb 1-1: USB disconnect, device number 9 [ 400.182246][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 400.182294][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 400.207421][ T8719] usb 3-1: USB disconnect, device number 11 [ 400.260369][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 400.284542][ T10] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 400.294502][ T10] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 400.302753][ T10] usb 9-1: Product: syz [ 400.307042][ T10] usb 9-1: Manufacturer: syz [ 400.312700][ T10] usb 9-1: SerialNumber: syz [ 400.321361][ T10] usb 9-1: config 0 descriptor?? [ 400.527890][T14861] sctp: [Deprecated]: syz.3.3887 (pid 14861) Use of int in max_burst socket option deprecated. [ 400.527890][T14861] Use struct sctp_assoc_value instead [ 400.542649][ T8719] usb 9-1: USB disconnect, device number 29 [ 400.919071][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 400.999707][ T8719] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 401.091728][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.107244][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.120904][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 401.134951][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.144109][ T10] usb 4-1: SerialNumber: syz [ 401.181528][ T8719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.197052][ T8719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.210002][ T8719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.219906][ T8720] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 401.230151][ T8719] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.241503][ T8719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.249742][ T8719] usb 2-1: Product: syz [ 401.254026][ T8719] usb 2-1: Manufacturer: syz [ 401.259043][ T8719] usb 2-1: SerialNumber: syz [ 401.369699][ T10] usb 4-1: 0:2 : does not exist [ 401.397057][ T10] usb 4-1: USB disconnect, device number 37 [ 401.404356][ T8720] usb 3-1: Using ep0 maxpacket: 8 [ 401.418531][ T8720] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 401.436609][ T8720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.445951][ T8720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.523257][ T8730] IPVS: starting estimator thread 0... [ 401.619108][T14894] IPVS: using max 31 ests per chain, 74400 per kthread [ 402.282546][ T8719] cdc_ncm 2-1:1.0: bind() failure [ 402.293956][ T8719] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 402.302649][ T8719] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 402.314482][ T8719] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 402.323293][ T5978] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 402.335664][ T8719] usb 2-1: USB disconnect, device number 43 [ 402.488990][ T5978] usb 9-1: Using ep0 maxpacket: 8 [ 402.496843][ T5978] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 402.519747][ T5978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.551313][ T5978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 402.560276][ T5978] pvrusb2: ********** [ 402.564601][ T5978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 402.575863][ T5978] pvrusb2: Important functionality might not be entirely working. [ 402.583867][ T5978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 402.595907][ T5978] pvrusb2: ********** [ 402.747225][ T2344] pvrusb2: Invalid write control endpoint [ 402.809172][ T2344] pvrusb2: Invalid write control endpoint [ 402.814924][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 402.844837][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 402.852537][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 402.866546][ T2344] pvrusb2: Device being rendered inoperable [ 402.872582][ T2344] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 402.880650][ T2344] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 402.888926][ T2344] pvrusb2: Attached sub-driver cx25840 [ 402.894413][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 402.906893][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 402.952413][ T8739] usb 9-1: USB disconnect, device number 30 [ 402.979015][ T8719] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 403.049241][ T5978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.154076][ T8719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.176942][ T8719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.186883][ T8719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.202069][ T8719] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 403.211477][ T8719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.222207][ T8719] usb 4-1: config 0 descriptor?? [ 403.232971][ T5978] usb 1-1: config 0 has no interfaces? [ 403.238485][ T5978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.249190][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.261569][ T5978] usb 1-1: config 0 descriptor?? [ 403.593859][T14947] vivid-001: disconnect [ 403.613517][T14946] vivid-001: reconnect [ 403.647661][ T8719] acrux 0003:1A34:0802.0035: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 403.673067][ T8719] acrux 0003:1A34:0802.0035: no inputs found [ 403.685931][ T8719] acrux 0003:1A34:0802.0035: Failed to enable force feedback support, error: -19 [ 403.699880][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.718799][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.734724][ T5978] usb 1-1: USB disconnect, device number 10 [ 403.859717][ T8719] usb 4-1: USB disconnect, device number 38 [ 404.022172][ T8739] usb 3-1: USB disconnect, device number 12 [ 404.027880][T14961] syz_tun: entered promiscuous mode [ 404.043742][T14961] batadv_slave_0: entered promiscuous mode [ 404.060009][T14961] hsr1: entered allmulticast mode [ 404.065218][T14961] syz_tun: entered allmulticast mode [ 404.072230][T14961] batadv_slave_0: entered allmulticast mode [ 404.789013][ T8739] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 404.983402][ T8739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.011182][ T8739] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 405.030591][ T8739] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 405.060422][ T8739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.096714][ T8739] usb 4-1: config 0 descriptor?? [ 405.111037][ T8739] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 405.126256][ T8739] dvb-usb: bulk message failed: -22 (3/0) [ 405.153027][ T8739] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 405.195160][ T8739] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 405.214238][ T8739] usb 4-1: media controller created [ 405.230654][ T8739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.265863][ T8739] dvb-usb: bulk message failed: -22 (6/0) [ 405.284836][ T8739] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 405.331517][ T8739] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 405.382716][ T8739] dvb-usb: schedule remote query interval to 150 msecs. [ 405.416920][ T8739] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 405.568930][ T8739] dvb-usb: bulk message failed: -22 (1/0) [ 405.612010][ T8739] dvb-usb: error while querying for an remote control event. [ 405.809012][ T8730] dvb-usb: bulk message failed: -22 (1/0) [ 405.837342][ T8730] dvb-usb: error while querying for an remote control event. [ 405.881951][ T8720] usb 4-1: USB disconnect, device number 39 [ 405.887943][T15005] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 405.931329][ T8720] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 406.345335][T15026] input: syz1 as /devices/virtual/input/input58 [ 406.414185][T15031] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 406.435029][T15031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.457188][T15032] sctp: [Deprecated]: syz.8.3960 (pid 15032) Use of int in max_burst socket option deprecated. [ 406.457188][T15032] Use struct sctp_assoc_value instead [ 406.570726][T15036] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 406.580295][ T8739] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 406.742099][ T8739] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.767977][ T8739] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.794317][ T8739] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 406.818071][ T8739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.847616][ T8739] usb 1-1: config 0 descriptor?? [ 407.323844][ T8739] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0036/input/input59 [ 407.411101][ T8739] sony 0003:054C:03D5.0036: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 407.556314][ T8720] usb 1-1: USB disconnect, device number 11 [ 407.824989][T15072] syzkaller1: entered promiscuous mode [ 407.830659][T15072] syzkaller1: entered allmulticast mode [ 407.839461][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 408.281206][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 408.294138][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3988'. [ 408.330865][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 408.371153][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3988'. [ 408.764867][T15109] syzkaller1: entered promiscuous mode [ 408.784866][T15109] syzkaller1: entered allmulticast mode [ 410.516568][T15148] Bluetooth: hci5: Frame reassembly failed (-84) [ 410.526913][ T1107] Bluetooth: hci5: Frame reassembly failed (-84) [ 410.605940][ T30] audit: type=1326 audit(1754616000.385:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15143 comm="syz.2.4012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc0c38ebe9 code=0x0 [ 410.989188][ T8739] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 411.153514][ T8739] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.167832][ T8739] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 411.183568][ T8739] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 411.195792][ T8739] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.209559][ T8739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.223444][T15160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.235039][ T8739] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.365709][T15190] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 411.419137][ T8719] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 411.468336][ T43] usb 4-1: USB disconnect, device number 40 [ 411.600883][ T8719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.611928][ T8719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.638995][ T8719] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 411.648075][ T8719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.668334][ T8719] usb 1-1: config 0 descriptor?? [ 411.698481][T15201] program syz.2.4038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.086323][ T8719] hid-led 0003:0FC5:B080.0037: unknown main item tag 0x0 [ 412.094596][ T8719] hid-led 0003:0FC5:B080.0037: unknown main item tag 0x0 [ 412.101983][ T8719] hid-led 0003:0FC5:B080.0037: unknown main item tag 0x0 [ 412.145492][T15212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.234695][T15212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.281216][ T30] audit: type=1326 audit(1754616002.065:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15193 comm="syz.8.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bb8ebe9 code=0x7fc00000 [ 412.369645][T15212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.477303][T15212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.559319][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 412.565776][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.674390][T15212] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.678909][ T8720] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 412.724237][ T8719] usb 1-1: USB disconnect, device number 12 [ 412.733392][T15212] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.764787][T15212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.834435][T15212] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.893292][ T8720] usb 3-1: Using ep0 maxpacket: 16 [ 412.903648][ T8720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.930946][ T8720] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.949958][ T8720] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.955035][T15231] input: syz1 as /devices/virtual/input/input60 [ 412.963863][ T8720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.973555][ T8720] usb 3-1: Product: syz [ 412.977797][ T8720] usb 3-1: Manufacturer: syz [ 412.988502][ T8720] usb 3-1: SerialNumber: syz [ 413.254616][T15241] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4054'. [ 413.441820][ T8720] usb 3-1: 0:2 : does not exist [ 414.073299][ T8739] usb 3-1: USB disconnect, device number 13 [ 414.227548][T15258] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.247770][ T8730] IPVS: starting estimator thread 0... [ 414.358998][T15263] IPVS: using max 31 ests per chain, 74400 per kthread [ 414.636354][T15275] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4069'. [ 414.920607][ T8739] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 415.113211][ T8739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 415.140218][ T8739] usb 1-1: not running at top speed; connect to a high speed hub [ 415.182493][ T8739] usb 1-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 415.229383][ T8739] usb 1-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 415.262838][ T8739] usb 1-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 415.302691][ T8739] usb 1-1: config 187 interface 0 has no altsetting 0 [ 415.322916][ T8739] usb 1-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 415.369000][ T8739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.377128][ T8739] usb 1-1: Product: syz [ 415.449031][ T8739] usb 1-1: Manufacturer: syz [ 415.482452][ T8739] usb 1-1: SerialNumber: syz [ 415.530878][T15279] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.554180][T15279] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.809712][T15287] geneve0: entered promiscuous mode [ 415.818892][T15287] geneve0: entered allmulticast mode [ 415.913625][ T8739] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.045529][ T8739] usb 1-1: USB disconnect, device number 13 [ 416.918908][ T8720] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 417.029095][ T8739] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 417.079094][ T8720] usb 2-1: Using ep0 maxpacket: 32 [ 417.100341][ T8720] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.123713][ T8720] usb 2-1: config 0 has no interface number 0 [ 417.139718][ T8720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.179103][ T8739] usb 9-1: Using ep0 maxpacket: 16 [ 417.199088][ T8720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.206059][ T8739] usb 9-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 417.218089][ T8720] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 417.228199][ T8739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.244861][ T8739] usb 9-1: config 0 descriptor?? [ 417.265525][ T8720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.288781][ T8720] usb 2-1: config 0 descriptor?? [ 417.913771][ T8720] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0038/input/input61 [ 417.930951][ T8720] uclogic 0003:28BD:0094.0038: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 418.121260][ T8720] usb 2-1: USB disconnect, device number 44 [ 418.292847][ T8739] pegasus 9-1:0.0: probe with driver pegasus failed with error -71 [ 418.303978][ T8739] usb 9-1: USB disconnect, device number 31 [ 418.930448][T15360] sctp: [Deprecated]: syz.8.4106 (pid 15360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.930448][T15360] Use struct sctp_sack_info instead [ 419.732779][T15380] ip6gretap0: entered promiscuous mode [ 419.769137][T15380] macsec1: entered promiscuous mode [ 419.800229][T15380] macsec1: entered allmulticast mode [ 419.807889][T15380] ip6gretap0: entered allmulticast mode [ 419.893902][T15386] syzkaller1: entered promiscuous mode [ 419.911208][T15386] syzkaller1: entered allmulticast mode [ 420.135543][ T30] audit: type=1326 audit(1754616009.915:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.8.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bb8ebe9 code=0x7fc00000 [ 420.266180][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'. [ 420.287258][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4124'. [ 420.312303][T15406] netlink: 'syz.1.4125': attribute type 29 has an invalid length. [ 420.347422][T15406] netlink: 'syz.1.4125': attribute type 29 has an invalid length. [ 420.372999][T15406] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4125'. [ 420.404067][T15406] unsupported nla_type 58 [ 420.810880][ T30] audit: type=1326 audit(1754616010.585:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15392 comm="syz.8.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f271bb8ebe9 code=0x7fc00000 [ 421.565280][T15462] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b2f8bddb73e65c239a40942f00000000000000000000000000) [ 421.799444][ T43] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 421.875820][T15475] Bluetooth: MGMT ver 1.23 [ 421.968981][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 421.981146][ T43] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 422.009071][ T43] usb 9-1: config 179 has no interface number 0 [ 422.019963][ T43] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 422.041708][ T43] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 422.069252][ T43] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.088931][ T43] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 422.123180][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4161'. [ 422.132660][ T43] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 422.149099][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4161'. [ 422.168880][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.190638][T15460] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 422.601868][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4166'. [ 422.681446][ T5978] usb 9-1: USB disconnect, device number 32 [ 422.681484][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 422.695781][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 423.080049][ T8720] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 423.208994][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 423.282818][ T8720] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 423.297020][ T8720] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 423.320152][ T8720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.354788][ T8720] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 423.370090][ T8720] usb 2-1: config 0 has no interface number 0 [ 423.371574][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.389216][ T8720] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 423.389244][ T8720] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 423.389269][ T8720] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 423.389307][ T8720] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.389352][ T8720] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 423.389393][ T8720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.392328][ T8720] usb 2-1: config 0 descriptor?? [ 423.450103][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.475559][ T8720] gspca_main: spca561-2.14.0 probing abcd:cdee [ 423.517886][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.562884][ T43] usb 4-1: SerialNumber: syz [ 423.694693][ T8720] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 423.732914][ T8720] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.759603][ T8720] usb 2-1: MIDIStreaming interface descriptor not found [ 423.842237][ T8720] usb 2-1: USB disconnect, device number 45 [ 423.921964][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 424.175350][T15534] Smack: duplicate mount options [ 424.244458][ T43] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 424.623684][ T5978] usb 4-1: USB disconnect, device number 41 [ 424.643095][ T5978] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 424.934097][T15568] bridge0: port 3(gretap0) entered blocking state [ 424.953341][T15568] bridge0: port 3(gretap0) entered disabled state [ 424.973804][T15568] gretap0: entered allmulticast mode [ 424.991455][T15568] gretap0: entered promiscuous mode [ 425.013465][T15568] bridge0: port 3(gretap0) entered blocking state [ 425.020611][T15568] bridge0: port 3(gretap0) entered forwarding state [ 425.061349][T15569] gretap0: left allmulticast mode [ 425.089449][T15569] gretap0: left promiscuous mode [ 425.098463][T15569] bridge0: port 3(gretap0) entered disabled state [ 426.043311][T15596] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 426.402774][T15611] input: syz0 as /devices/virtual/input/input62 [ 426.849005][ T5978] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 426.868761][ T8739] kernel write not supported for file /snd/midiC2D0 (pid: 8739 comm: kworker/1:12) [ 427.009381][ T5978] usb 4-1: Using ep0 maxpacket: 32 [ 427.033601][ T5978] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 427.052424][ T5978] usb 4-1: config 0 has no interface number 0 [ 427.058595][ T5978] usb 4-1: config 0 interface 184 has no altsetting 0 [ 427.091351][ T5978] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 427.118884][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.126929][ T5978] usb 4-1: Product: syz [ 427.155553][ T5978] usb 4-1: Manufacturer: syz [ 427.178879][ T5978] usb 4-1: SerialNumber: syz [ 427.188443][ T5978] usb 4-1: config 0 descriptor?? [ 427.211283][ T5978] smsc75xx v1.0.0 [ 427.841554][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 427.857379][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 427.963709][T15664] netlink: 'syz.2.4242': attribute type 11 has an invalid length. [ 428.093582][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 428.124932][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 428.152047][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 428.182900][ T5978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 428.222594][ T5978] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 428.254934][ T5978] usb 4-1: USB disconnect, device number 42 [ 429.609125][ T5978] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 429.769251][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 429.786389][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.824974][ T5978] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 429.849105][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.888649][ T5978] usb 2-1: config 0 descriptor?? [ 430.332133][ T5978] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 430.444359][T15746] syz.2.4277 (15746) used greatest stack depth: 19352 bytes left [ 430.742117][ T8720] usb 2-1: USB disconnect, device number 46 [ 430.809121][ T8739] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 430.991404][ T8739] usb 3-1: Using ep0 maxpacket: 32 [ 430.998357][ T8739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.011058][ T8739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.021335][ T8739] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 431.040107][ T8739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.060879][ T8739] usb 3-1: config 0 descriptor?? [ 431.415618][T15811] input: syz1 as /devices/virtual/input/input63 [ 431.537072][ T8739] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 431.678649][T15828] binder: 15827:15828 ioctl c0306201 200000000100 returned -14 [ 431.724890][ T24] usb 3-1: USB disconnect, device number 14 [ 431.746968][T15830] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.4315'. [ 431.819006][ T8720] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 431.899003][ T8739] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 431.921692][ T5837] Bluetooth: hci4: command 0x0401 tx timeout [ 431.978991][ T8720] usb 1-1: Using ep0 maxpacket: 16 [ 431.985711][ T8720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.996012][ T8720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.008120][ T8720] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.017597][ T8720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.026631][ T8720] usb 1-1: Product: syz [ 432.031319][ T8720] usb 1-1: Manufacturer: syz [ 432.036289][ T8720] usb 1-1: SerialNumber: syz [ 432.054044][ T8739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.068563][ T8739] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 432.082172][ T8739] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 432.090432][ T8739] usb 2-1: Manufacturer: syz [ 432.095139][ T8739] usb 2-1: SerialNumber: syz [ 432.103325][ T8739] usb 2-1: config 0 descriptor?? [ 432.252542][ T8720] usb 1-1: 0:2 : does not exist [ 432.274448][ T8720] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 432.326845][ T8720] usb 1-1: USB disconnect, device number 14 [ 432.925511][ T43] usb 2-1: USB disconnect, device number 47 [ 433.158922][T15885] input: syz0 as /devices/virtual/input/input64 [ 433.508637][T15908] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 434.251521][T15948] netlink: 'syz.3.4369': attribute type 29 has an invalid length. [ 434.261887][T15948] netlink: 'syz.3.4369': attribute type 29 has an invalid length. [ 434.273092][T15948] netlink: 508 bytes leftover after parsing attributes in process `syz.3.4369'. [ 434.509096][ T8720] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 434.679196][ T8720] usb 3-1: Using ep0 maxpacket: 16 [ 434.716076][ T8720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.743894][ T8720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.759292][ T8720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.803012][ T8720] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 434.865505][ T8720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.888185][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 434.894963][ T8720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 434.908845][ T8720] usb 3-1: SerialNumber: syz [ 434.924120][ T8720] hub 3-1:1.0: bad descriptor, ignoring hub [ 434.939590][ T8720] hub 3-1:1.0: probe with driver hub failed with error -5 [ 434.962554][ T8720] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 435.360996][T15937] raw-gadget.0 gadget.2: fail, usb_ep_set_wedge returned -11 [ 435.479248][ T43] usb 3-1: USB disconnect, device number 15 [ 435.631134][T15993] kvm: user requested TSC rate below hardware speed [ 436.125276][T16013] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.125294][ T24] IPVS: starting estimator thread 0... [ 436.259235][T16017] IPVS: using max 29 ests per chain, 69600 per kthread [ 436.350799][T16024] sctp: [Deprecated]: syz.3.4399 (pid 16024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.350799][T16024] Use struct sctp_sack_info instead [ 437.424612][T16075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.637299][T16084] could not open pipe file descriptor [ 437.785495][ T30] audit: type=1326 audit(1754616028.559:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 437.895381][ T30] audit: type=1326 audit(1754616028.569:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 437.985394][ T30] audit: type=1326 audit(1754616028.569:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.065025][ T30] audit: type=1326 audit(1754616028.569:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.189295][ T30] audit: type=1326 audit(1754616028.569:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.194766][T16096] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4430'. [ 438.265907][ T30] audit: type=1326 audit(1754616028.569:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.399289][ T30] audit: type=1326 audit(1754616028.569:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.481818][ T30] audit: type=1326 audit(1754616028.569:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.508978][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 438.581975][ T30] audit: type=1326 audit(1754616028.569:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.668498][ T30] audit: type=1326 audit(1754616028.569:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16077 comm="syz.0.4422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3e92add9 code=0x7ffc0000 [ 438.690206][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 438.710059][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.769643][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 438.820989][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.962336][ T24] usb 2-1: config 0 descriptor?? [ 439.222221][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 440.090202][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.096949][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.184339][T16133] bridge0: port 3(gretap0) entered blocking state [ 440.212477][T16133] bridge0: port 3(gretap0) entered disabled state [ 440.237730][T16133] gretap0: entered allmulticast mode [ 440.291463][T16133] gretap0: left allmulticast mode [ 440.377794][T16141] tipc: Started in network mode [ 440.395824][T16141] tipc: Node identity ac1414aa, cluster identity 4711 [ 440.416286][T16141] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.424088][T16141] tipc: Enabled bearer , priority 10 [ 440.549127][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.688952][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.828917][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.968954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.109153][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.248962][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.285614][ T8720] usb 2-1: USB disconnect, device number 48 [ 441.388966][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.498932][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 441.529003][ T8720] tipc: Node number set to 2886997162 [ 441.668947][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.679509][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 441.755174][ T43] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 441.774432][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.818989][ T43] usb 1-1: Product: syz [ 441.833654][ T43] usb 1-1: Manufacturer: syz [ 441.838291][ T43] usb 1-1: SerialNumber: syz [ 441.889739][ T43] usb 1-1: config 0 descriptor?? [ 441.931393][ T43] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 441.939104][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.155785][ T43] gp8psk: usb in 128 operation failed. [ 442.179392][ T43] gp8psk: usb in 137 operation failed. [ 442.184903][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.263002][ T43] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 442.278970][ T43] usb 1-1: media controller created [ 442.341599][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.406357][ T43] gp8psk_fe: Frontend revision 1 attached [ 442.419773][ T43] usb 1-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 442.438189][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 442.458712][T16171] geneve0: entered promiscuous mode [ 442.479068][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 442.487368][T16171] geneve0: entered allmulticast mode [ 442.614376][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 442.639185][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 442.657501][ T43] gp8psk: found Genpix USB device pID = 201 (hex) [ 442.664500][T16200] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 442.681091][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.692616][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.703789][ T24] usb 4-1: config 0 descriptor?? [ 442.855537][ T8720] usb 1-1: USB disconnect, device number 15 [ 442.940971][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 442.959965][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.981224][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 442.988717][ T24] usb 4-1: media controller created [ 443.055868][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.124237][ T8720] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 443.470722][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4474'. [ 443.502331][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4475'. [ 443.751330][ T24] az6027: usb out operation failed. (-71) [ 443.757115][ T24] stb0899_attach: Driver disabled by Kconfig [ 443.803702][ T24] az6027: no front-end attached [ 443.803702][ T24] [ 443.832252][ T24] az6027: usb out operation failed. (-71) [ 443.838016][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 443.880188][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65 [ 443.883422][T16223] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 443.938961][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 443.949094][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 443.971126][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 443.995394][ T24] usb 4-1: USB disconnect, device number 43 [ 444.102424][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 444.160955][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 444.171741][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 444.206703][ T10] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 444.234056][ T10] usb 3-1: config 0 has no interface number 0 [ 444.249487][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 444.291416][ T10] usb 3-1: config 0 interface 88 has no altsetting 0 [ 444.324681][ T10] usb 3-1: string descriptor 0 read error: -22 [ 444.331377][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 444.364503][ T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 444.408308][ T10] usb 3-1: config 0 descriptor?? [ 444.452951][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input66 [ 444.670899][ T24] usb 3-1: USB disconnect, device number 16 [ 444.935621][ T30] kauditd_printk_skb: 525 callbacks suppressed [ 444.935641][ T30] audit: type=1400 audit(1754616035.709:4917): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=16249 comm="syz.1.4493" path="/proc/1912/task/1913/attr/current" dev="proc" ino=67099 [ 445.018985][ T30] audit: type=1400 audit(1754616035.759:4918): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=16249 comm="syz.1.4493" path="/proc/1912/task/1913/attr/current" dev="proc" ino=67099 [ 445.123068][T16254] syzkaller1: entered promiscuous mode [ 445.128589][T16254] syzkaller1: entered allmulticast mode [ 445.490853][T16267] net_ratelimit: 3 callbacks suppressed [ 445.490870][T16267] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 445.549463][T16267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.599037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.741739][T16276] netlink: 'syz.1.4504': attribute type 10 has an invalid length. [ 445.768985][ T8720] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 445.913084][T16276] team0: Port device team_slave_0 removed [ 445.919303][ T8720] usb 3-1: Using ep0 maxpacket: 16 [ 445.940907][ T8720] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 445.988981][ T8720] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 446.043074][ T8720] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 446.088884][ T8720] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.120573][ T8720] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 446.150021][ T8720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.192909][ T8720] usb 3-1: Product: syz [ 446.198597][T16284] loop8: detected capacity change from 0 to 8 [ 446.219128][ T8720] usb 3-1: Manufacturer: syz [ 446.223751][ T8720] usb 3-1: SerialNumber: syz [ 446.234059][T16284] Dev loop8: unable to read RDB block 8 [ 446.250160][ T8720] usb 3-1: config 0 descriptor?? [ 446.259567][T16284] loop8: unable to read partition table [ 446.271536][T16284] loop8: partition table beyond EOD, truncated [ 446.291246][T16284] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 446.511699][ T8720] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input67 [ 446.639007][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.746531][T16270] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.793372][ T43] usb 3-1: USB disconnect, device number 17 [ 446.819093][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 446.980655][ T10] usb 4-1: config 0 has no interfaces? [ 446.988505][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 447.019268][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.050040][ T10] usb 4-1: config 0 descriptor?? [ 447.285377][T16288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.303696][T16288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.319206][ T10] usb 4-1: USB disconnect, device number 44 [ 447.678975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.771782][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 447.918092][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4530'. [ 447.939283][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 447.956039][ T10] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 447.979043][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 448.011846][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 448.030478][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.038611][ T10] usb 4-1: Product: syz [ 448.047817][ T10] usb 4-1: Manufacturer: syz [ 448.052878][ T10] usb 4-1: SerialNumber: syz [ 448.087577][T16337] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4531'. [ 448.290794][T16343] sp0: Synchronizing with TNC [ 448.315188][T16342] [U] [ 448.383515][ T10] usb 4-1: USB disconnect, device number 45 [ 448.719102][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.859664][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'. [ 448.879191][T16373] netlink: 'syz.0.4546': attribute type 18 has an invalid length. [ 448.887037][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4546'. [ 449.269470][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 449.379164][ T8730] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 449.455638][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.493604][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.515135][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.554365][ T8730] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 449.564820][ T8730] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 449.594580][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.609142][ T8730] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 449.634425][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.668924][ T8730] usb 1-1: config 220 has no interface number 2 [ 449.675264][ T8730] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 449.709835][ T43] usb 4-1: config 0 descriptor?? [ 449.737274][ T8730] usb 1-1: config 220 interface 0 has no altsetting 0 [ 449.755557][ T8730] usb 1-1: config 220 interface 76 has no altsetting 0 [ 449.759034][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.783591][ T8730] usb 1-1: config 220 interface 1 has no altsetting 0 [ 449.814608][ T8730] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 449.837456][ T8730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.868520][ T8730] usb 1-1: Product: syz [ 449.886421][ T8730] usb 1-1: Manufacturer: syz [ 449.911932][ T8730] usb 1-1: SerialNumber: syz [ 450.036779][T16399] tipc: Started in network mode [ 450.046018][T16399] tipc: Node identity ac1414aa, cluster identity 4711 [ 450.054075][T16399] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.062093][T16399] tipc: Enabled bearer , priority 10 [ 450.108910][ T8739] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 450.151094][ T43] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 450.163866][ T8730] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 450.171510][ T8730] usb 1-1: No valid video chain found. [ 450.180012][ T8730] usb 1-1: selecting invalid altsetting 0 [ 450.195189][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.207642][ T8730] usb 1-1: selecting invalid altsetting 0 [ 450.216508][ T8730] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 450.230960][ T8730] usb 1-1: USB disconnect, device number 16 [ 450.269139][ T8739] usb 2-1: Using ep0 maxpacket: 32 [ 450.276312][ T8739] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 450.286392][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 450.305231][ T8739] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 450.315267][ T8739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.327123][ T8739] usb 2-1: Product: syz [ 450.328895][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.331546][ T8739] usb 2-1: Manufacturer: syz [ 450.343156][ T8739] usb 2-1: SerialNumber: syz [ 450.361355][ T8739] usb 2-1: config 0 descriptor?? [ 450.369367][ T43] usb 4-1: USB disconnect, device number 46 [ 450.376936][T16394] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 450.401235][ T8739] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input68 [ 450.440221][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 450.457529][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 450.468166][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.477717][ T24] usb 3-1: Product: syz [ 450.482786][ T24] usb 3-1: Manufacturer: syz [ 450.487696][ T24] usb 3-1: SerialNumber: syz [ 450.497156][ T24] usb 3-1: config 0 descriptor?? [ 450.506625][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 450.516846][ T24] usb 3-1: Detected FT-X [ 450.608893][ C0] net_ratelimit: 1 callbacks suppressed [ 450.608912][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.625554][ T5978] usb 2-1: USB disconnect, device number 49 [ 450.625717][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 450.719763][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 450.748966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.799039][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.889046][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.029012][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.154212][ T24] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 451.165756][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 451.169077][ T5978] tipc: Node number set to 2886997162 [ 451.177698][ T24] usb 3-1: USB disconnect, device number 18 [ 451.189816][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 451.205659][ T24] ftdi_sio 3-1:0.0: device disconnected [ 451.308982][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.387732][T16431] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.4572'. [ 451.526002][T16435] syzkaller1: entered promiscuous mode [ 451.543184][T16435] syzkaller1: entered allmulticast mode [ 451.579027][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.591352][T16437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4575'. [ 451.643291][T16437] bridge0: port 3(vlan0) entered blocking state [ 451.650120][T16437] bridge0: port 3(vlan0) entered disabled state [ 451.656723][T16437] vlan0: entered allmulticast mode [ 451.662257][T16437] dummy0: entered allmulticast mode [ 451.671960][T16437] vlan0: entered promiscuous mode [ 451.693157][T16437] dummy0: entered promiscuous mode [ 451.839052][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.109025][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 452.483073][T16480] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 452.879132][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.938990][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 455.999100][ C0] net_ratelimit: 5 callbacks suppressed [ 455.999119][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.148922][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 456.156191][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.209363][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 456.238928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.264448][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.273705][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.288887][ T24] usb 4-1: Product: syz [ 456.293086][ T24] usb 4-1: Manufacturer: syz [ 456.317875][ T24] usb 4-1: SerialNumber: syz [ 456.350191][ T24] cdc_ncm 4-1:1.0: skipping garbage [ 456.527420][T16630] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4663'. [ 456.541321][T16630] netlink: 'syz.2.4663': attribute type 5 has an invalid length. [ 456.552931][T16604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.931681][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4669'. [ 457.039035][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.141491][T16655] gfs2: not a GFS2 filesystem [ 457.172899][T16604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.278953][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 457.382920][ T24] cdc_ncm 4-1:1.0: bind() failure [ 457.397762][ T24] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 457.419516][ T24] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 457.441112][ T24] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 457.483395][ T24] usb 4-1: USB disconnect, device number 47 [ 457.614804][T16670] Cannot find add_set index 2 as target [ 457.839112][ T5837] Bluetooth: hci0: command tx timeout [ 458.078976][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.143175][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 458.318874][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.320477][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.347780][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.358300][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 458.368151][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.386875][ T24] usb 1-1: config 0 descriptor?? [ 458.847429][ T24] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 458.864006][ T10] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 458.869121][ T24] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 458.902982][ T10] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.916251][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.003C/input/input69 [ 458.981087][ T24] cm6533_jd 0003:0D8C:0022.003C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 459.111710][ T10] usb 1-1: USB disconnect, device number 17 [ 459.118974][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.358913][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 459.897248][T16762] bond0: entered promiscuous mode [ 459.906818][T16762] bond_slave_0: entered promiscuous mode [ 459.914091][T16762] bond_slave_1: entered promiscuous mode [ 460.156465][T16773] loop7: detected capacity change from 0 to 7 [ 460.158993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.175138][T16773] Dev loop7: unable to read RDB block 7 [ 460.182054][T16773] loop7: unable to read partition table [ 460.188096][T16773] loop7: partition table beyond EOD, truncated [ 460.203463][T16773] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 460.329081][ T8730] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 460.340108][ T8720] kernel write not supported for file /2007/attr/exec (pid: 8720 comm: kworker/0:7) [ 460.358419][T16783] input: syz1 as /devices/virtual/input/input70 [ 460.399029][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 460.491923][ T30] audit: type=1326 audit(1754616051.269:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16790 comm="syz.1.4735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x0 [ 460.519370][ T8730] usb 1-1: Using ep0 maxpacket: 16 [ 460.547001][ T8730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.599212][ T8730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.656231][ T8730] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.706682][ T8730] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 460.729223][ T8730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.754053][ T8730] usb 1-1: config 0 descriptor?? [ 460.984313][T16811] loop2: detected capacity change from 0 to 7 [ 460.999368][T16811] Dev loop2: unable to read RDB block 7 [ 461.005180][T16811] loop2: unable to read partition table [ 461.015452][T16811] loop2: partition table beyond EOD, truncated [ 461.023090][T16811] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 461.059948][T16815] syzkaller1: entered promiscuous mode [ 461.065577][T16815] syzkaller1: entered allmulticast mode [ 461.199131][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.211249][ T8730] HID 045e:07da: Invalid code 65791 type 1 [ 461.234722][ T8730] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003E/input/input71 [ 461.273987][ T8730] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 461.438860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.451565][ T24] usb 1-1: USB disconnect, device number 18 [ 461.607336][ T10] kernel write not supported for file /1008/clear_refs (pid: 10 comm: kworker/0:1) [ 462.043166][T16862] netlink: 'syz.2.4765': attribute type 3 has an invalid length. [ 462.063338][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4765'. [ 462.238956][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.444257][T16890] overlayfs: workdir and upperdir must reside under the same mount [ 462.478947][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 462.649255][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 463.279028][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.525147][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 463.554492][T16928] input: syz1 as /devices/virtual/input/input72 [ 463.817733][T16939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4796'. [ 464.299009][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 464.318995][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.411991][ T8720] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 464.450456][ T10] usb 4-1: config 0 has no interfaces? [ 464.460426][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.489224][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.518162][ T10] usb 4-1: Product: syz [ 464.522514][ T10] usb 4-1: Manufacturer: syz [ 464.540117][ T10] usb 4-1: config 0 descriptor?? [ 464.558971][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 464.580574][ T8720] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.591331][ T8720] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.601692][ T8720] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.610859][ T8720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.619377][ T8720] usb 3-1: SerialNumber: syz [ 464.754711][ T8719] usb 4-1: USB disconnect, device number 48 [ 464.821594][T16969] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 464.835201][ T8720] usb 3-1: 0:2 : does not exist [ 464.846963][ T8720] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 464.876277][ T8720] usb 3-1: USB disconnect, device number 19 [ 465.358928][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.398202][T16988] netlink: 'syz.0.4817': attribute type 1 has an invalid length. [ 465.435760][T16988] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4817'. [ 465.534425][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 465.578488][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4820'. [ 465.598860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 465.853052][T17003] [ 465.855447][T17003] ===================================================== [ 465.862390][T17003] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 465.869884][T17003] 6.16.0-syzkaller #0 Not tainted [ 465.874927][T17003] ----------------------------------------------------- [ 465.881871][T17003] syz.1.4823/17003 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 465.889606][T17003] ffff8880349166a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 465.898377][T17003] [ 465.898377][T17003] and this task is already holding: [ 465.905759][T17003] ffff88802a227230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 465.915475][T17003] which would create a new lock dependency: [ 465.921379][T17003] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 465.929367][T17003] [ 465.929367][T17003] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 465.938827][T17003] (&dev->event_lock#2){..-.}-{3:3} [ 465.938866][T17003] [ 465.938866][T17003] ... which became SOFTIRQ-irq-safe at: [ 465.951786][T17003] lock_acquire+0x120/0x360 [ 465.956403][T17003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 465.961724][T17003] input_inject_event+0xab/0x320 [ 465.966774][T17003] led_trigger_event+0x138/0x210 [ 465.971838][T17003] kbd_bh+0x1c6/0x2e0 [ 465.975929][T17003] tasklet_action_common+0x369/0x580 [ 465.981334][T17003] handle_softirqs+0x283/0x870 [ 465.986209][T17003] run_ksoftirqd+0x9b/0x100 [ 465.990822][T17003] smpboot_thread_fn+0x53f/0xa60 [ 465.995877][T17003] kthread+0x70e/0x8a0 [ 466.000075][T17003] ret_from_fork+0x3fc/0x770 [ 466.004778][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.009663][T17003] [ 466.009663][T17003] to a SOFTIRQ-irq-unsafe lock: [ 466.016696][T17003] (tasklist_lock){.+.+}-{3:3} [ 466.016734][T17003] [ 466.016734][T17003] ... which became SOFTIRQ-irq-unsafe at: [ 466.029398][T17003] ... [ 466.029410][T17003] lock_acquire+0x120/0x360 [ 466.036633][T17003] _raw_read_lock+0x36/0x50 [ 466.041243][T17003] __do_wait+0xde/0x740 [ 466.045516][T17003] do_wait+0x1f8/0x520 [ 466.049705][T17003] kernel_wait+0xab/0x170 [ 466.054159][T17003] call_usermodehelper_exec_work+0xbe/0x230 [ 466.060174][T17003] process_scheduled_works+0xade/0x17b0 [ 466.065827][T17003] worker_thread+0x8a0/0xda0 [ 466.070527][T17003] kthread+0x70e/0x8a0 [ 466.074709][T17003] ret_from_fork+0x3fc/0x770 [ 466.079417][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.084318][T17003] [ 466.084318][T17003] other info that might help us debug this: [ 466.084318][T17003] [ 466.094586][T17003] Chain exists of: [ 466.094586][T17003] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 466.094586][T17003] [ 466.107597][T17003] Possible interrupt unsafe locking scenario: [ 466.107597][T17003] [ 466.115930][T17003] CPU0 CPU1 [ 466.121316][T17003] ---- ---- [ 466.126706][T17003] lock(tasklist_lock); [ 466.130978][T17003] local_irq_disable(); [ 466.137746][T17003] lock(&dev->event_lock#2); [ 466.144982][T17003] lock(&new->fa_lock); [ 466.151779][T17003] [ 466.155249][T17003] lock(&dev->event_lock#2); [ 466.160146][T17003] [ 466.160146][T17003] *** DEADLOCK *** [ 466.160146][T17003] [ 466.168312][T17003] 6 locks held by syz.1.4823/17003: [ 466.173529][T17003] #0: ffff88802a3b9118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 466.182717][T17003] #1: ffff88802a227230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 466.192876][T17003] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 466.202597][T17003] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 466.212246][T17003] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 466.222404][T17003] #5: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 466.231523][T17003] [ 466.231523][T17003] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 466.241943][T17003] -> (&dev->event_lock#2){..-.}-{3:3} { [ 466.247554][T17003] IN-SOFTIRQ-W at: [ 466.251558][T17003] lock_acquire+0x120/0x360 [ 466.257738][T17003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 466.264626][T17003] input_inject_event+0xab/0x320 [ 466.271248][T17003] led_trigger_event+0x138/0x210 [ 466.277876][T17003] kbd_bh+0x1c6/0x2e0 [ 466.283531][T17003] tasklet_action_common+0x369/0x580 [ 466.290515][T17003] handle_softirqs+0x283/0x870 [ 466.296951][T17003] run_ksoftirqd+0x9b/0x100 [ 466.303131][T17003] smpboot_thread_fn+0x53f/0xa60 [ 466.309749][T17003] kthread+0x70e/0x8a0 [ 466.315494][T17003] ret_from_fork+0x3fc/0x770 [ 466.321757][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.328211][T17003] INITIAL USE at: [ 466.332133][T17003] lock_acquire+0x120/0x360 [ 466.338223][T17003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 466.345024][T17003] input_inject_event+0xab/0x320 [ 466.351551][T17003] kbd_led_trigger_activate+0xbc/0x100 [ 466.358608][T17003] led_trigger_set+0x52d/0x950 [ 466.364992][T17003] led_trigger_set_default+0x260/0x2a0 [ 466.372053][T17003] led_classdev_register_ext+0x73d/0x930 [ 466.379356][T17003] input_leds_connect+0x517/0x790 [ 466.385969][T17003] input_register_device+0xceb/0x10b0 [ 466.392933][T17003] atkbd_connect+0x70e/0x9c0 [ 466.398913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.399090][T17003] serio_driver_probe+0x82/0xa0 [ 466.412587][T17003] really_probe+0x26a/0x9a0 [ 466.418688][T17003] __driver_probe_device+0x18c/0x2f0 [ 466.425565][T17003] driver_probe_device+0x4f/0x430 [ 466.432178][T17003] __driver_attach+0x452/0x700 [ 466.438539][T17003] bus_for_each_dev+0x230/0x2b0 [ 466.444991][T17003] serio_handle_event+0x1a2/0x860 [ 466.451628][T17003] process_scheduled_works+0xade/0x17b0 [ 466.458769][T17003] worker_thread+0x8a0/0xda0 [ 466.464957][T17003] kthread+0x70e/0x8a0 [ 466.470627][T17003] ret_from_fork+0x3fc/0x770 [ 466.476817][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.483219][T17003] } [ 466.485734][T17003] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 466.494803][T17003] [ 466.494803][T17003] the dependencies between the lock to be acquired [ 466.494817][T17003] and SOFTIRQ-irq-unsafe lock: [ 466.508355][T17003] -> (tasklist_lock){.+.+}-{3:3} { [ 466.513688][T17003] HARDIRQ-ON-R at: [ 466.517883][T17003] lock_acquire+0x120/0x360 [ 466.524408][T17003] _raw_read_lock+0x36/0x50 [ 466.530931][T17003] __do_wait+0xde/0x740 [ 466.537116][T17003] do_wait+0x1f8/0x520 [ 466.543208][T17003] kernel_wait+0xab/0x170 [ 466.549560][T17003] call_usermodehelper_exec_work+0xbe/0x230 [ 466.557470][T17003] process_scheduled_works+0xade/0x17b0 [ 466.565039][T17003] worker_thread+0x8a0/0xda0 [ 466.571654][T17003] kthread+0x70e/0x8a0 [ 466.577754][T17003] ret_from_fork+0x3fc/0x770 [ 466.584383][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.591176][T17003] SOFTIRQ-ON-R at: [ 466.595361][T17003] lock_acquire+0x120/0x360 [ 466.601879][T17003] _raw_read_lock+0x36/0x50 [ 466.608396][T17003] __do_wait+0xde/0x740 [ 466.614585][T17003] do_wait+0x1f8/0x520 [ 466.620682][T17003] kernel_wait+0xab/0x170 [ 466.627035][T17003] call_usermodehelper_exec_work+0xbe/0x230 [ 466.634943][T17003] process_scheduled_works+0xade/0x17b0 [ 466.638881][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 466.642492][T17003] worker_thread+0x8a0/0xda0 [ 466.656050][T17003] kthread+0x70e/0x8a0 [ 466.662147][T17003] ret_from_fork+0x3fc/0x770 [ 466.668749][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.675534][T17003] INITIAL USE at: [ 466.679625][T17003] lock_acquire+0x120/0x360 [ 466.686060][T17003] _raw_write_lock_irq+0xa2/0xf0 [ 466.692933][T17003] copy_process+0x21d5/0x3b80 [ 466.699539][T17003] kernel_clone+0x224/0x7f0 [ 466.705981][T17003] user_mode_thread+0xdd/0x140 [ 466.712688][T17003] rest_init+0x23/0x300 [ 466.718784][T17003] start_kernel+0x47d/0x500 [ 466.725222][T17003] x86_64_start_reservations+0x24/0x30 [ 466.732617][T17003] x86_64_start_kernel+0x143/0x1c0 [ 466.739672][T17003] common_startup_64+0x13e/0x147 [ 466.746556][T17003] INITIAL READ USE at: [ 466.751069][T17003] lock_acquire+0x120/0x360 [ 466.757937][T17003] _raw_read_lock+0x36/0x50 [ 466.764802][T17003] __do_wait+0xde/0x740 [ 466.771349][T17003] do_wait+0x1f8/0x520 [ 466.777787][T17003] kernel_wait+0xab/0x170 [ 466.784491][T17003] call_usermodehelper_exec_work+0xbe/0x230 [ 466.792760][T17003] process_scheduled_works+0xade/0x17b0 [ 466.800673][T17003] worker_thread+0x8a0/0xda0 [ 466.807637][T17003] kthread+0x70e/0x8a0 [ 466.814080][T17003] ret_from_fork+0x3fc/0x770 [ 466.821036][T17003] ret_from_fork_asm+0x1a/0x30 [ 466.828173][T17003] } [ 466.830859][T17003] ... key at: [] tasklist_lock+0x18/0x40 [ 466.838778][T17003] ... acquired at: [ 466.842769][T17003] lock_acquire+0x120/0x360 [ 466.847469][T17003] _raw_read_lock+0x36/0x50 [ 466.852165][T17003] send_sigurg+0x12b/0x420 [ 466.856786][T17003] sk_send_sigurg+0x6c/0x2e0 [ 466.861576][T17003] queue_oob+0x490/0x5a0 [ 466.866031][T17003] unix_stream_sendmsg+0xaf9/0xc90 [ 466.871350][T17003] __sock_sendmsg+0x21c/0x270 [ 466.876223][T17003] ____sys_sendmsg+0x52d/0x830 [ 466.881192][T17003] ___sys_sendmsg+0x21f/0x2a0 [ 466.886088][T17003] __sys_sendmmsg+0x227/0x430 [ 466.890972][T17003] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.896023][T17003] do_syscall_64+0xfa/0x3b0 [ 466.900728][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.906820][T17003] [ 466.909165][T17003] -> (&f_owner->lock){....}-{3:3} { [ 466.914505][T17003] INITIAL USE at: [ 466.918500][T17003] lock_acquire+0x120/0x360 [ 466.924759][T17003] _raw_write_lock_irq+0xa2/0xf0 [ 466.931474][T17003] __f_setown+0x67/0x370 [ 466.937474][T17003] tty_fasync+0x2dc/0x350 [ 466.943561][T17003] do_vfs_ioctl+0x14cb/0x1990 [ 466.950003][T17003] __se_sys_ioctl+0x82/0x170 [ 466.956365][T17003] do_syscall_64+0xfa/0x3b0 [ 466.962632][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.970297][T17003] INITIAL READ USE at: [ 466.974762][T17003] lock_acquire+0x120/0x360 [ 466.981449][T17003] _raw_read_lock_irq+0xaa/0xf0 [ 466.988485][T17003] do_fcntl+0x812/0x1910 [ 466.994931][T17003] __se_sys_fcntl+0xc8/0x150 [ 467.001717][T17003] do_syscall_64+0xfa/0x3b0 [ 467.008416][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.016495][T17003] } [ 467.019088][T17003] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 467.028048][T17003] ... acquired at: [ 467.031956][T17003] lock_acquire+0x120/0x360 [ 467.036660][T17003] _raw_read_lock_irqsave+0xaf/0x100 [ 467.042141][T17003] send_sigio+0x38/0x370 [ 467.046580][T17003] kill_fasync+0x24d/0x4d0 [ 467.051191][T17003] sock_wake_async+0x137/0x160 [ 467.056149][T17003] sk_wake_async+0x184/0x280 [ 467.060936][T17003] unix_release_sock+0x768/0xd30 [ 467.066071][T17003] unix_release+0x92/0xd0 [ 467.070594][T17003] sock_close+0xc3/0x240 [ 467.075024][T17003] __fput+0x449/0xa70 [ 467.079204][T17003] task_work_run+0x1d1/0x260 [ 467.083999][T17003] exit_to_user_mode_loop+0xec/0x110 [ 467.089488][T17003] do_syscall_64+0x2bd/0x3b0 [ 467.094274][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.100364][T17003] [ 467.102705][T17003] -> (&new->fa_lock){....}-{3:3} { [ 467.107862][T17003] INITIAL USE at: [ 467.111772][T17003] lock_acquire+0x120/0x360 [ 467.117852][T17003] _raw_write_lock_irq+0xa2/0xf0 [ 467.124375][T17003] fasync_remove_entry+0xf1/0x1c0 [ 467.131014][T17003] tty_fasync+0x13c/0x350 [ 467.136923][T17003] __fput+0x8a2/0xa70 [ 467.142491][T17003] task_work_run+0x1d1/0x260 [ 467.148680][T17003] exit_to_user_mode_loop+0xec/0x110 [ 467.155547][T17003] do_syscall_64+0x2bd/0x3b0 [ 467.161726][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.169208][T17003] INITIAL READ USE at: [ 467.173558][T17003] lock_acquire+0x120/0x360 [ 467.180078][T17003] _raw_read_lock_irqsave+0xaf/0x100 [ 467.187385][T17003] kill_fasync+0x199/0x4d0 [ 467.193835][T17003] sock_wake_async+0x137/0x160 [ 467.200625][T17003] sock_def_write_space+0x390/0x430 [ 467.207842][T17003] sk_setsockopt+0x2189/0x2d30 [ 467.214645][T17003] do_sock_setsockopt+0x11b/0x1b0 [ 467.221701][T17003] __x64_sys_setsockopt+0x13f/0x1b0 [ 467.228938][T17003] do_syscall_64+0xfa/0x3b0 [ 467.235469][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.243393][T17003] } [ 467.245913][T17003] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 467.254644][T17003] ... acquired at: [ 467.258466][T17003] lock_acquire+0x120/0x360 [ 467.263174][T17003] _raw_read_lock_irqsave+0xaf/0x100 [ 467.268660][T17003] kill_fasync+0x199/0x4d0 [ 467.273283][T17003] mousedev_notify_readers+0x6f1/0xc00 [ 467.278962][T17003] mousedev_event+0x602/0x1320 [ 467.283941][T17003] input_handle_events_default+0xd4/0x1a0 [ 467.289863][T17003] input_pass_values+0x285/0x890 [ 467.295008][T17003] input_event_dispose+0x330/0x6b0 [ 467.300329][T17003] input_inject_event+0x1fe/0x320 [ 467.305561][T17003] evdev_write+0x2fc/0x480 [ 467.310174][T17003] vfs_write+0x27e/0xa90 [ 467.314619][T17003] ksys_write+0x145/0x250 [ 467.319148][T17003] do_syscall_64+0xfa/0x3b0 [ 467.323857][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.329956][T17003] [ 467.332297][T17003] [ 467.332297][T17003] stack backtrace: [ 467.338244][T17003] CPU: 1 UID: 0 PID: 17003 Comm: syz.1.4823 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 467.338270][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.338292][T17003] Call Trace: [ 467.338310][T17003] [ 467.338324][T17003] dump_stack_lvl+0x189/0x250 [ 467.338352][T17003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.338375][T17003] ? __pfx__printk+0x10/0x10 [ 467.338408][T17003] validate_chain+0x1f05/0x2140 [ 467.338446][T17003] __lock_acquire+0xab9/0xd20 [ 467.338467][T17003] ? kill_fasync+0x199/0x4d0 [ 467.338494][T17003] lock_acquire+0x120/0x360 [ 467.338512][T17003] ? kill_fasync+0x199/0x4d0 [ 467.338546][T17003] _raw_read_lock_irqsave+0xaf/0x100 [ 467.338566][T17003] ? kill_fasync+0x199/0x4d0 [ 467.338594][T17003] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 467.338620][T17003] kill_fasync+0x199/0x4d0 [ 467.338647][T17003] ? kill_fasync+0x53/0x4d0 [ 467.338676][T17003] mousedev_notify_readers+0x6f1/0xc00 [ 467.338712][T17003] ? mousedev_notify_readers+0x2c/0xc00 [ 467.338745][T17003] mousedev_event+0x602/0x1320 [ 467.338777][T17003] input_handle_events_default+0xd4/0x1a0 [ 467.338801][T17003] ? input_pass_values+0x8d/0x890 [ 467.338830][T17003] input_pass_values+0x285/0x890 [ 467.338864][T17003] ? input_handle_event+0x70c/0xf30 [ 467.338891][T17003] input_event_dispose+0x330/0x6b0 [ 467.338921][T17003] input_inject_event+0x1fe/0x320 [ 467.338948][T17003] ? input_inject_event+0xbc/0x320 [ 467.338977][T17003] evdev_write+0x2fc/0x480 [ 467.339000][T17003] ? __pfx_evdev_write+0x10/0x10 [ 467.339020][T17003] ? bpf_lsm_file_permission+0x9/0x20 [ 467.339045][T17003] ? security_file_permission+0x75/0x290 [ 467.339069][T17003] ? rw_verify_area+0x258/0x650 [ 467.339102][T17003] ? __pfx_evdev_write+0x10/0x10 [ 467.339122][T17003] vfs_write+0x27e/0xa90 [ 467.339144][T17003] ? __pfx_vfs_write+0x10/0x10 [ 467.339164][T17003] ? __fget_files+0x2a/0x420 [ 467.339189][T17003] ? __fget_files+0x2a/0x420 [ 467.339212][T17003] ? __fget_files+0x3a0/0x420 [ 467.339233][T17003] ? __fget_files+0x2a/0x420 [ 467.339261][T17003] ksys_write+0x145/0x250 [ 467.339281][T17003] ? __pfx_ksys_write+0x10/0x10 [ 467.339299][T17003] ? rcu_is_watching+0x15/0xb0 [ 467.339331][T17003] ? do_syscall_64+0xbe/0x3b0 [ 467.339357][T17003] do_syscall_64+0xfa/0x3b0 [ 467.339379][T17003] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.339401][T17003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.339421][T17003] ? clear_bhb_loop+0x60/0xb0 [ 467.339444][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.339465][T17003] RIP: 0033:0x7fc07458ebe9 [ 467.339483][T17003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.339501][T17003] RSP: 002b:00007fc075398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.339528][T17003] RAX: ffffffffffffffda RBX: 00007fc0747b5fa0 RCX: 00007fc07458ebe9 [ 467.339544][T17003] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 467.339558][T17003] RBP: 00007fc074611e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.339571][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.339584][T17003] R13: 00007fc0747b6038 R14: 00007fc0747b5fa0 R15: 00007ffc1f96a728 [ 467.339608][T17003] [ 467.438915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.678859][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 468.478863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.718963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 469.518835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.758984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 470.558854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.799113][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 471.598861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.839041][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 472.638856][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.878941][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 473.678864][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.919084][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 474.718880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.959060][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 475.758848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available