last executing test programs: 3m10.671852174s ago: executing program 3 (id=2540): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) close(0x3) 3m10.489663418s ago: executing program 3 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 3m10.376989933s ago: executing program 3 (id=2546): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8008804}, 0x0) 3m10.175377927s ago: executing program 3 (id=2550): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x81900) 3m9.275074947s ago: executing program 3 (id=2556): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000f9010902900902000000000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/147) 3m8.984034253s ago: executing program 3 (id=2557): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x748}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3m8.66597541s ago: executing program 32 (id=2557): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x748}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2m18.567998891s ago: executing program 0 (id=3191): r0 = openat$kvm(0xffffff9c, &(0x7f0000000700), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000540)={0xe, 0x5, [{0x1, 0x0, 0x400}, {0xfff, 0x0, 0xc}, {0x3, 0x0, 0x9}, {0x5, 0x0, 0x8}, {0x8, 0x0, 0x1e}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0xa2}, {0x7fffffff, 0x0, 0xe3}, {0xf, 0x0, 0x8}, {0xff}, {0xffffffff, 0x0, 0x3}, {0x8000, 0x0, 0xc04}, {0x5, 0x0, 0x6}, {0x5fb, 0x0, 0x1}, {0xe3, 0x0, 0x3}, {0x3, 0x0, 0x5}]}) 2m18.271115239s ago: executing program 0 (id=3195): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2m12.696310668s ago: executing program 0 (id=3247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000400)={0x9, 0x4, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x29b, 0x0, 0x40000000}]}) 2m12.472962211s ago: executing program 0 (id=3251): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 2m11.55717272s ago: executing program 0 (id=3260): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) 2m11.327328208s ago: executing program 0 (id=3261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2m10.89349921s ago: executing program 33 (id=3261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1m4.495703424s ago: executing program 6 (id=4021): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 1m2.66932855s ago: executing program 6 (id=4036): ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x18c6) 1m2.422883031s ago: executing program 6 (id=4040): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x22) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m2.283332976s ago: executing program 6 (id=4043): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) 1m1.307770364s ago: executing program 6 (id=4052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mlock(&(0x7f00001f7000/0x1000)=nil, 0x1000) 1m0.975948328s ago: executing program 6 (id=4056): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x80c0, &(0x7f0000000240)={0xa, 0x4e20, 0xffbffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000001880)={0xa, 0x0, 0x9, @private0, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0xa00}, 0x8) 1m0.463930647s ago: executing program 34 (id=4056): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x80c0, &(0x7f0000000240)={0xa, 0x4e20, 0xffbffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000001880)={0xa, 0x0, 0x9, @private0, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0xa00}, 0x8) 3.544485579s ago: executing program 5 (id=4660): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() 2.621916931s ago: executing program 4 (id=4670): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x7, {0x2a12, 0x80010000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xe, 0x13, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) 2.396564574s ago: executing program 2 (id=4672): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 2.396348784s ago: executing program 4 (id=4673): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) open$dir(&(0x7f0000000140)='./file0\x00', 0x26c001, 0x0) 2.305139362s ago: executing program 5 (id=4675): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 2.247862929s ago: executing program 2 (id=4676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000884) 2.16099442s ago: executing program 5 (id=4677): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) 2.134094009s ago: executing program 2 (id=4678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x8c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "d14f787a3577a095692144d56d12d7f275d38fb4f0975d07011c75d429d36f9137d28bcde20b958cfac9b8b4d8ca443fc4346b1c6e790f68ba436d1be7913970ee"}]}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 2.054744159s ago: executing program 2 (id=4679): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.038774501s ago: executing program 5 (id=4680): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.383038146s ago: executing program 7 (id=4684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x1}, 0x8) 1.322908471s ago: executing program 4 (id=4685): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x7, 0xf, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x8, 0x9, 0xab47, 0xb0c, 0x8, 0x1417d221, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0xfffffffe, 0xfffffffe, 0x3, 0xa, 0x12, 0x8, 0xd2f1, 0x7, 0x7, 0x3, 0x3, 0x3, 0x2, 0x1ff, 0x47f2, 0x80000000, 0x4, 0xfffffffd, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x17ca, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x80000000, 0x227, 0x1ff, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x4, 0x8001, 0x801, 0x7, 0xa, 0xb, 0x9e, 0xd9, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x403, 0x5, 0x0, 0x1020, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xffbffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x3fc, 0x2243ccfc, 0x8455, 0x0, 0xc2, 0xffffffa8, 0xdc9b, 0x0, 0x1553e2a8, 0xff, 0x80000005, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x8], [0x1, 0x7fff, 0x1, 0x0, 0x9, 0x3, 0x8, 0x7ffffffc, 0x2, 0x7, 0x6, 0x0, 0x4, 0x440, 0x7, 0x2, 0x7, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x7, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x1, 0x2, 0x80000001, 0x1, 0x10001, 0x4f68, 0x5, 0x10001, 0x5, 0xc, 0x3, 0x10003, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0xf53e, 0x2, 0x5, 0x7f, 0xf, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x406, 0x200, 0x40, 0x5, 0x40000000, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x7, 0x400, 0x4, 0xb, 0x9, 0x1, 0x9, 0x0, 0x2, 0x1, 0x7fffffff, 0x6, 0x2, 0x3, 0xfff, 0xe79, 0x2, 0xe0, 0x2, 0x3ff, 0xfffffffa, 0x6, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x9, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) 1.211146513s ago: executing program 1 (id=4686): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x28, 0x80008000, 0x0, 0x0, 0x0, 0x4, 0x225000}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x1000000000000000) fcntl$setpipe(r1, 0x407, 0x100000) 1.200922422s ago: executing program 7 (id=4687): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x244000, 0x0) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc2101) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x10000, 0x3, 0x11, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000009c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) 1.199675076s ago: executing program 2 (id=4688): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 996.645355ms ago: executing program 7 (id=4689): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, 0x8) 935.965832ms ago: executing program 4 (id=4690): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1002, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8ac, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x803, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0x100, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffd}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x9}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f63, 0x1a5b5e18}, {0xc}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x7fffffffffffffff}, {0x80000001, 0x9}, {0x70, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0xeb29, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000003}, {0x8, 0xf405}, {0x2, 0x1}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8000000008001}, {0x4, 0x2}, {0xffffffffffff7fff}, {0xd, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xbb6}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x7}, {0x7, 0xfffffffffffffffd}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x6, 0x3}, {0x4002, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x4}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x8003}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f3}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x200000000000002}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8d, 0x1000}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffdfffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0xffffffff}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xd}, {0x5, 0xe}, {0xa, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd5}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001}, {0x6, 0x7fc}, {0xcaa, 0x800000100000005}, {0x9, 0x8}, {0x0, 0xb12}, {0x7, 0x8}, {0xfab, 0x6}, {0xbf1, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x23}, {0x1ff, 0x8}, {0x2000000000000, 0x90000000}, {0xfff, 0x1}, {0x40002, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x9}, {0x5, 0x75}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x80004, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0) 891.093918ms ago: executing program 1 (id=4700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003100)="0100000003000000640000000000003f420f000000000000020f580000000000000000000000000001000000000000000100000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 758.613722ms ago: executing program 5 (id=4691): unshare(0x60000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 744.906603ms ago: executing program 7 (id=4692): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0xfffffffe, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) 722.908994ms ago: executing program 4 (id=4693): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101a03) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xabf) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 709.944542ms ago: executing program 1 (id=4694): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x9, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x7fc, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 573.156193ms ago: executing program 7 (id=4695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0x1000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x2000, 0x8}) 555.599733ms ago: executing program 1 (id=4696): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a0300001800255107", 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 447.189258ms ago: executing program 5 (id=4697): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c40, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xaf316000) utime(&(0x7f0000000080)='./file0\x00', 0x0) 395.880151ms ago: executing program 4 (id=4698): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000010280)=0x6, 0x4) 338.870428ms ago: executing program 1 (id=4699): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 319.375016ms ago: executing program 7 (id=4701): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000000, 0x32, 0xffffffffffffffff, 0xf1f6f000) 123.209401ms ago: executing program 2 (id=4702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 0s ago: executing program 1 (id=4703): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) kernel console output (not intermixed with test programs): ][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.598638][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.598656][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.598724][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.680237][T10465] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 358.680274][T10465] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 358.680304][T10465] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 358.680332][T10465] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 358.680359][T10465] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 358.744551][T10465] hid-thrustmaster 0003:044F:B65D.0027: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 358.744952][T10465] hid-thrustmaster 0003:044F:B65D.0027: Wrong number of endpoints? [ 358.902646][ C0] hid-thrustmaster 0003:044F:B65D.0027: URB to get model id failed with error -71 [ 358.904226][ T5707] usb 3-1: USB disconnect, device number 44 [ 359.114296][T13359] hsr_slave_0: entered promiscuous mode [ 359.116027][T13359] hsr_slave_1: entered promiscuous mode [ 359.147651][T13359] debugfs: 'hsr0' already exists in 'hsr' [ 359.147676][T13359] Cannot create hsr debugfs directory [ 359.168269][T13466] fido_id[13466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 359.521703][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.522165][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.674620][T13359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.690747][T13359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.717309][T13359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.752412][T13359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.753516][T13359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.810332][T13359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.846318][T13359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.889696][T13359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.083929][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.346405][ T4932] Bluetooth: hci0: command tx timeout [ 360.471059][T13359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.563922][T13359] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.610814][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.610939][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.669746][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.669869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.877671][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3316'. [ 361.148044][ T5681] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 361.280257][T13359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.298447][ T5681] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.299609][ T5681] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.299638][ T5681] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.299660][ T5681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.299706][ T5681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 361.299734][ T5681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 361.301290][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.301326][ T5681] usb 2-1: Product: syz [ 361.301342][ T5681] usb 2-1: Manufacturer: syz [ 361.410964][ T5681] cdc_wdm 2-1:1.0: skipping garbage [ 361.410985][ T5681] cdc_wdm 2-1:1.0: skipping garbage [ 361.418690][ T5681] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 361.418752][ T5681] cdc_wdm 2-1:1.0: Unknown control protocol [ 361.529328][T13359] veth0_vlan: entered promiscuous mode [ 361.545578][T13359] veth1_vlan: entered promiscuous mode [ 361.573359][T13540] input: syz1 as /devices/virtual/input/input67 [ 361.696205][T13359] veth0_macvtap: entered promiscuous mode [ 361.703258][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.703406][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.703636][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.703658][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.703907][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.703929][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.704145][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.704168][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.704389][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.704410][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.704513][ T5688] usb 2-1: USB disconnect, device number 45 [ 361.704621][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 361.704641][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 361.704659][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 361.814824][T13359] veth1_macvtap: entered promiscuous mode [ 361.864669][T13359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.903683][T13359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.986614][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.986666][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.020720][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.046734][ T9515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.263258][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.263283][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.426768][ T4932] Bluetooth: hci0: command tx timeout [ 362.448005][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 362.481504][ T9515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.481526][ T9515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.944434][T13565] IPVS: set_ctl: invalid protocol: 41 172.30.0.2:20002 [ 363.194436][T13575] input: syz1 as /devices/virtual/input/input68 [ 363.360786][T13584] binder: 13583:13584 ioctl c0306201 800006c0 returned -14 [ 363.746258][ T5764] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 363.896242][ T5764] usb 2-1: Using ep0 maxpacket: 32 [ 363.898716][ T5764] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 363.899895][ T5764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.899940][ T5764] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.899967][ T5764] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.899989][ T5764] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 363.900015][ T5764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.900047][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.988065][ T5764] usb 2-1: config 0 descriptor?? [ 364.240043][ T4932] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 364.240089][ T4932] CPU: 0 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.240118][ T4932] Tainted: [L]=SOFTLOCKUP [ 364.240126][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.240141][ T4932] Workqueue: hci0 hci_rx_work [ 364.240175][ T4932] Call Trace: [ 364.240188][ T4932] [ 364.240198][ T4932] dump_stack_lvl+0xe8/0x150 [ 364.240232][ T4932] sysfs_create_dir_ns+0x271/0x2a0 [ 364.240258][ T4932] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 364.240285][ T4932] ? do_raw_spin_unlock+0xf5/0x200 [ 364.240322][ T4932] kobject_add_internal+0x622/0xcd0 [ 364.240353][ T4932] kobject_add+0x163/0x240 [ 364.240380][ T4932] ? __pfx_kobject_add+0x10/0x10 [ 364.240407][ T4932] ? get_device_parent+0x366/0x3a0 [ 364.240436][ T4932] device_add+0x3fa/0xb80 [ 364.240463][ T4932] hci_conn_add_sysfs+0xd5/0x210 [ 364.240490][ T4932] le_conn_complete_evt+0xfe3/0x16d0 [ 364.240528][ T4932] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 364.240561][ T4932] ? __mutex_unlock_slowpath+0x731/0x900 [ 364.240597][ T4932] ? skb_pull_data+0xf0/0x200 [ 364.240623][ T4932] hci_le_enh_conn_complete_evt+0x189/0x490 [ 364.240655][ T4932] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 364.240690][ T4932] hci_event_packet+0x67a/0xf10 [ 364.240723][ T4932] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 364.240750][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 364.240799][ T4932] ? replace_chunk+0xa70/0xb80 [ 364.240838][ T4932] ? hci_send_to_monitor+0xe2/0x590 [ 364.240881][ T4932] hci_rx_work+0x3ee/0x1020 [ 364.240917][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 364.240949][ T4932] process_scheduled_works+0xc3d/0x1630 [ 364.241012][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.241056][ T4932] ? assign_work+0x3cf/0x5d0 [ 364.241092][ T4932] worker_thread+0xa47/0xfb0 [ 364.241152][ T4932] kthread+0x38b/0x480 [ 364.241176][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 364.241205][ T4932] ? __pfx_kthread+0x10/0x10 [ 364.241228][ T4932] ret_from_fork+0x514/0xb70 [ 364.241253][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 364.241276][ T4932] ? __switch_to+0xc89/0x1420 [ 364.241308][ T4932] ? __pfx_kthread+0x10/0x10 [ 364.241330][ T4932] ret_from_fork_asm+0x1a/0x30 [ 364.241379][ T4932] [ 364.241487][ T4932] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 364.241530][ T4932] Bluetooth: hci0: failed to register connection device [ 364.520996][ T5764] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 364.521035][ T5764] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 364.521072][ T5764] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 364.521099][ T5764] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 364.521127][ T5764] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 364.568560][ T5764] hid-thrustmaster 0003:044F:B65D.0028: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 364.568844][ T5764] hid-thrustmaster 0003:044F:B65D.0028: Wrong number of endpoints? [ 364.575529][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 364.705025][ C1] hid-thrustmaster 0003:044F:B65D.0028: URB to get model id failed with error -71 [ 364.711741][ T5681] usb 2-1: USB disconnect, device number 46 [ 364.807354][T13617] fido_id[13617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 366.107182][ T5764] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 366.266241][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 366.267395][ T5764] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 366.269874][ T5764] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.269900][ T5764] usb 3-1: config 0 has no interface number 0 [ 366.269942][ T5764] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.269977][ T5764] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.270001][ T5764] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.270029][ T5764] usb 3-1: config 0 interface 1 has no altsetting 0 [ 366.270063][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.318918][ T5764] usb 3-1: config 0 descriptor?? [ 366.372606][ T5764] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 366.399583][T13686] binder: 13685:13686 ioctl c00c620f 80000180 returned -22 [ 366.795756][ T5764] elan 0003:04F3:074D.0029: failed to start in urb: -90 [ 367.102297][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.102770][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.138762][ T5707] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 367.189927][ T5764] elan 0003:04F3:074D.0029: Get report error for parm 6: -71 [ 367.205088][ T5764] elan 0003:04F3:074D.0029: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 367.205124][ T5764] elan 0003:04F3:074D.0029: Input device is not registered [ 367.238840][ T5764] elan 0003:04F3:074D.0029: probe with driver elan failed with error -119 [ 367.258607][ T5764] usb 3-1: USB disconnect, device number 45 [ 367.261609][T13721] netlink: 'syz.1.3388': attribute type 3 has an invalid length. [ 367.261629][T13721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3388'. [ 367.302703][ T5707] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.303945][ T5707] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.303976][ T5707] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.304020][ T5707] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.304066][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.365126][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.365184][ T5707] usb 6-1: Product: syz [ 367.365203][ T5707] usb 6-1: Manufacturer: syz [ 367.411359][ T5707] cdc_wdm 6-1:1.0: skipping garbage [ 367.411384][ T5707] cdc_wdm 6-1:1.0: skipping garbage [ 367.427768][ T5707] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 367.427791][ T5707] cdc_wdm 6-1:1.0: Unknown control protocol [ 367.476081][T13722] fido_id[13722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 367.901887][ T5764] usb 6-1: USB disconnect, device number 9 [ 368.155711][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 368.156352][ T5707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 368.251979][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3402'. [ 368.327223][ T5707] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 368.327788][ T5707] usb 7-1: config 0 has no interfaces? [ 368.331447][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.331475][ T5707] usb 7-1: Product: syz [ 368.331491][ T5707] usb 7-1: Manufacturer: syz [ 368.331516][ T5707] usb 7-1: SerialNumber: syz [ 368.348472][ T5707] usb 7-1: config 0 descriptor?? [ 368.490649][ T5764] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 368.619234][ T5707] usb 7-1: USB disconnect, device number 2 [ 368.636344][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 368.643110][ T5764] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 368.654314][ T5764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.654379][ T5764] usb 2-1: config 0 has no interfaces? [ 368.674574][ T5764] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 368.674602][ T5764] usb 2-1: Product: syz [ 368.674619][ T5764] usb 2-1: Manufacturer: syz [ 368.674635][ T5764] usb 2-1: SerialNumber: syz [ 368.703810][ T5764] usb 2-1: config 0 descriptor?? [ 368.928399][ T5707] usb 2-1: USB disconnect, device number 47 [ 370.209445][ T31] audit: type=1800 audit(1791021170.109:939): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3430" name="file1" dev="tmpfs" ino=3354 res=0 errno=0 [ 370.299407][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 370.334468][ T31] audit: type=1800 audit(1791021170.229:940): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3430" name="file1" dev="tmpfs" ino=3354 res=0 errno=0 [ 370.432834][ T31] audit: type=1800 audit(1791021170.329:941): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3430" name="file1" dev="tmpfs" ino=3354 res=0 errno=0 [ 370.457217][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 370.463422][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 370.479227][ T9] usb 7-1: config 3 has an invalid interface number: 20 but max is 0 [ 370.479256][ T9] usb 7-1: config 3 has no interface number 0 [ 370.479298][ T9] usb 7-1: config 3 interface 20 has no altsetting 0 [ 370.482552][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.482580][ T9] usb 7-1: Product: syz [ 370.482597][ T9] usb 7-1: Manufacturer: syz [ 370.482612][ T9] usb 7-1: SerialNumber: syz [ 370.607412][ T31] audit: type=1800 audit(1791021170.509:942): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3430" name="file1" dev="tmpfs" ino=3354 res=0 errno=0 [ 370.659443][T13837] Cannot find set identified by id 0 to match [ 370.754332][T13810] loop5: detected capacity change from 0 to 7 [ 370.762869][T13810] Dev loop5: unable to read RDB block 7 [ 370.762899][T13810] loop5: AHDI p1 p3 p4 [ 370.762937][T13810] loop5: partition table partially beyond EOD, truncated [ 370.763113][T13810] loop5: p1 start 1818582900 is beyond EOD, truncated [ 370.763133][T13810] loop5: p3 start 719360596 is beyond EOD, truncated [ 370.816934][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.20/input/input71 [ 370.845293][ T4968] bcm5974 7-1:3.20: could not read from device [ 370.867268][ T9] usb 7-1: USB disconnect, device number 3 [ 371.392196][T13862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.606701][ T5764] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 371.730597][ T4932] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 371.730630][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.730681][ T4932] Tainted: [L]=SOFTLOCKUP [ 371.730690][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.730705][ T4932] Workqueue: hci1 hci_rx_work [ 371.730737][ T4932] Call Trace: [ 371.730746][ T4932] [ 371.730757][ T4932] dump_stack_lvl+0xe8/0x150 [ 371.730794][ T4932] sysfs_create_dir_ns+0x271/0x2a0 [ 371.730822][ T4932] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 371.730851][ T4932] ? do_raw_spin_unlock+0xf5/0x200 [ 371.730890][ T4932] kobject_add_internal+0x622/0xcd0 [ 371.730923][ T4932] kobject_add+0x163/0x240 [ 371.730953][ T4932] ? __pfx_kobject_add+0x10/0x10 [ 371.730983][ T4932] ? get_device_parent+0x366/0x3a0 [ 371.731016][ T4932] device_add+0x3fa/0xb80 [ 371.731047][ T4932] hci_conn_add_sysfs+0xd5/0x210 [ 371.731077][ T4932] le_conn_complete_evt+0xfe3/0x16d0 [ 371.731117][ T4932] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 371.731155][ T4932] ? __mutex_unlock_slowpath+0x731/0x900 [ 371.731192][ T4932] ? skb_pull_data+0xf0/0x200 [ 371.731220][ T4932] hci_le_enh_conn_complete_evt+0x189/0x490 [ 371.731254][ T4932] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 371.731291][ T4932] hci_event_packet+0x67a/0xf10 [ 371.731325][ T4932] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 371.731354][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 371.731386][ T4932] ? replace_chunk+0xa70/0xb80 [ 371.731425][ T4932] ? hci_send_to_monitor+0xe2/0x590 [ 371.731464][ T4932] hci_rx_work+0x3ee/0x1020 [ 371.731499][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 371.731540][ T4932] process_scheduled_works+0xc3d/0x1630 [ 371.731605][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.731643][ T4932] ? assign_work+0x3cf/0x5d0 [ 371.731679][ T4932] worker_thread+0xa47/0xfb0 [ 371.731739][ T4932] kthread+0x38b/0x480 [ 371.731764][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 371.731792][ T4932] ? __pfx_kthread+0x10/0x10 [ 371.731814][ T4932] ret_from_fork+0x514/0xb70 [ 371.731839][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 371.731862][ T4932] ? __switch_to+0xc89/0x1420 [ 371.731898][ T4932] ? __pfx_kthread+0x10/0x10 [ 371.731923][ T4932] ret_from_fork_asm+0x1a/0x30 [ 371.731975][ T4932] [ 371.732030][ T4932] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 371.732068][ T4932] Bluetooth: hci1: failed to register connection device [ 371.833673][ T5764] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.839959][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.903581][ T5764] usb 3-1: config 0 descriptor?? [ 372.151189][ T5764] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.383973][ T5764] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 372.384004][ T5764] [drm] Initialized udl on minor 1 [ 373.256374][T13918] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 373.256403][T13918] ALSA: mixer_oss: invalid OSS volume 'VOLUM' [ 373.606302][ T5681] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 373.756988][ T5681] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.758525][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.758558][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.758583][ T5681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.758627][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.764520][ T5681] usb 6-1: config 0 descriptor?? [ 374.192099][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.192140][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.192170][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.192198][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.192226][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.192254][ T5681] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 374.250440][ T5681] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 374.459495][ T5668] usb 6-1: USB disconnect, device number 10 [ 375.053948][T13949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.054456][T13949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.886279][ T2235] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 376.036372][ T2235] usb 6-1: Using ep0 maxpacket: 8 [ 376.039019][ T2235] usb 6-1: unable to get BOS descriptor or descriptor too short [ 376.039069][ T2235] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 376.040398][ T2235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.040424][ T2235] usb 6-1: config 0 has no interfaces? [ 376.079638][ T2235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.079667][ T2235] usb 6-1: Product: syz [ 376.079684][ T2235] usb 6-1: Manufacturer: syz [ 376.079700][ T2235] usb 6-1: SerialNumber: syz [ 376.119764][ T2235] usb 6-1: config 0 descriptor?? [ 376.178725][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.182433][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.331209][ T2235] usb 6-1: USB disconnect, device number 11 [ 376.528464][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 377.369701][T14036] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 377.369726][T14036] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 377.369740][T14036] ALSA: mixer_oss: invalid OSS volume '6' [ 377.369754][T14036] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 377.369767][T14036] ALSA: mixer_oss: invalid OSS volume '7' [ 377.410480][ T2235] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 377.469928][ T5764] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 377.471422][ T5764] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 377.474190][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 377.565181][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 377.565386][ T5668] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 377.577191][ T5764] usb 3-1: USB disconnect, device number 46 [ 377.581624][ T2235] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 377.588281][ T2235] usb 2-1: config 0 has no interfaces? [ 377.608812][ T2235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.608841][ T2235] usb 2-1: Product: syz [ 377.608858][ T2235] usb 2-1: Manufacturer: syz [ 377.608874][ T2235] usb 2-1: SerialNumber: syz [ 377.663488][ T2235] usb 2-1: config 0 descriptor?? [ 378.067898][ T2235] usb 2-1: USB disconnect, device number 48 [ 378.590409][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.590467][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.679791][T14073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.813733][T14079] Invalid argument reading file caps for ./file0 [ 379.351351][T14107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3529'. [ 380.251322][T14139] netlink: 'syz.6.3539': attribute type 3 has an invalid length. [ 380.251354][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3539'. [ 380.345212][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.345764][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.551238][T14153] netlink: 'syz.6.3545': attribute type 11 has an invalid length. [ 380.551274][T14153] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3545'. [ 381.149433][T14175] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 381.149450][T14175] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 381.149460][T14175] ALSA: mixer_oss: invalid OSS volume '6' [ 381.149469][T14175] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 381.149477][T14175] ALSA: mixer_oss: invalid OSS volume '7' [ 381.326363][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 381.333850][T14181] veth0_macvtap: left promiscuous mode [ 381.986263][ T5681] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 382.139422][ T5681] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 382.141837][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 382.141872][ T5681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.141901][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.158282][ T5681] usb 3-1: config 0 descriptor?? [ 382.384460][T14228] sctp: [Deprecated]: syz.1.3577 (pid 14228) Use of int in max_burst socket option. [ 382.384460][T14228] Use struct sctp_assoc_value instead [ 382.459404][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3576'. [ 382.463882][T14229] veth0_macvtap: left promiscuous mode [ 382.640852][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.640897][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.640926][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.640953][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.640981][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.641007][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.641034][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.641062][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.641089][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.641116][ T5681] kovaplus 0003:1E7D:2D50.002B: unknown main item tag 0x0 [ 382.703747][ T5681] kovaplus 0003:1E7D:2D50.002B: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 383.015592][ T5681] kovaplus 0003:1E7D:2D50.002B: couldn't init struct kovaplus_device [ 383.015652][ T5681] kovaplus 0003:1E7D:2D50.002B: couldn't install mouse [ 383.032763][ T5681] kovaplus 0003:1E7D:2D50.002B: probe with driver kovaplus failed with error -5 [ 383.096696][ T2235] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 383.184098][T14256] loop4: detected capacity change from 0 to 7 [ 383.185407][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.202143][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.230844][ T5681] usb 3-1: USB disconnect, device number 47 [ 383.247197][ T2235] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.255636][ T2235] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 383.263186][ T2235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.263245][ T2235] usb 7-1: SerialNumber: syz [ 383.302459][T14256] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 383.302484][T14256] loop4: partition table partially beyond EOD, truncated [ 383.302779][T14256] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 383.320765][T14260] loop2: detected capacity change from 0 to 3 [ 383.343275][T14260] Dev loop2: unable to read RDB block 3 [ 383.343318][T14260] loop2: unable to read partition table [ 383.343490][T14260] loop2: partition table beyond EOD, truncated [ 383.343537][T14260] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 383.617168][ T5681] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.958680][ T2235] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 384.205911][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3594'. [ 384.233862][T14274] veth0_macvtap: left promiscuous mode [ 384.372068][ T5681] usb 7-1: USB disconnect, device number 4 [ 384.389115][ T5681] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 384.762573][T14298] loop2: detected capacity change from 0 to 3 [ 384.775218][T14298] Dev loop2: unable to read RDB block 3 [ 384.775262][T14298] loop2: unable to read partition table [ 384.775475][T14298] loop2: partition table beyond EOD, truncated [ 384.775514][T14298] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 385.144358][T14314] pimreg: tun_chr_ioctl cmd 1074812117 [ 385.144572][T14314] pimreg: tun_chr_ioctl cmd 1074025673 [ 385.296259][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 385.332214][T14324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3612'. [ 385.332728][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3612'. [ 385.447724][ T9] usb 7-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 385.449370][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.689929][T14340] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3616'. [ 386.132439][ C0] usb 7-1: NFC: It it not the response to the last command [ 386.136836][ T9] usb 7-1: NFC: Unable to get FW version [ 386.183182][ T9] pn533_usb 7-1:1.0: probe with driver pn533_usb failed with error -5 [ 386.315394][T14365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.326055][T14365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.362735][ T5681] usb 7-1: USB disconnect, device number 5 [ 386.506539][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 386.657601][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 386.659270][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.663559][ T9] usb 2-1: config 0 descriptor?? [ 386.890607][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 387.126810][ T991] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 387.254042][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 387.254068][ T9] [drm] Initialized udl on minor 1 [ 387.306611][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 387.349811][ T991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.349865][ T991] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 387.351277][ T991] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 387.351314][ T991] usb 3-1: can't read configurations, error -71 [ 387.676291][ T5764] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 387.826337][ T5764] usb 7-1: Using ep0 maxpacket: 8 [ 387.827221][ T5764] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 387.828689][ T5764] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 387.828740][ T5764] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.828768][ T5764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.828796][ T5764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.831719][ T5764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.831745][ T5764] usb 7-1: Product: syz [ 387.831761][ T5764] usb 7-1: Manufacturer: syz [ 387.831777][ T5764] usb 7-1: SerialNumber: syz [ 387.921870][ T5764] usb 7-1: config 0 descriptor?? [ 387.922781][T14387] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 388.135745][ T5764] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 388.170398][ T5764] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input74 [ 388.377872][ C1] powermate: config urb returned -71 [ 388.378086][ C1] powermate: config urb returned -71 [ 388.378349][ C1] powermate: config urb returned -71 [ 388.378566][ C1] powermate: config urb returned -71 [ 388.378758][ C1] powermate: config urb returned -71 [ 388.379054][ T991] usb 7-1: USB disconnect, device number 6 [ 388.379178][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 389.646310][ T991] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 389.806625][ T991] usb 7-1: Using ep0 maxpacket: 32 [ 389.807342][ T991] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 389.808593][ T991] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 389.808618][ T991] usb 7-1: config 0 has no interface number 0 [ 389.808669][ T991] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.808699][ T991] usb 7-1: config 0 interface 85 has no altsetting 0 [ 389.813585][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.813611][ T991] usb 7-1: Product: syz [ 389.813628][ T991] usb 7-1: Manufacturer: syz [ 389.813645][ T991] usb 7-1: SerialNumber: syz [ 389.889541][ T991] usb 7-1: config 0 descriptor?? [ 390.512673][ T991] appletouch 7-1:0.85: Geyser mode initialized. [ 390.525570][ T991] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input75 [ 390.747767][ T991] usb 7-1: USB disconnect, device number 7 [ 390.773624][ T991] appletouch 7-1:0.85: input: appletouch disconnected [ 390.864377][T14472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3671'. [ 391.753629][T14488] nvme nvme0: failed to connect socket: -101 [ 392.347703][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 392.348135][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 392.362542][ T5681] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.372204][ T9] usb 2-1: USB disconnect, device number 49 [ 392.422267][ T5681] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.422480][ T5681] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 392.536343][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 392.649957][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.653828][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.687789][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.694275][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.694305][ T10] usb 3-1: config 1 has no interface number 0 [ 392.694346][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.694375][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 392.694408][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 392.694435][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 392.713830][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.713907][ T10] usb 3-1: Product: syz [ 392.713947][ T10] usb 3-1: Manufacturer: syz [ 392.713986][ T10] usb 3-1: SerialNumber: syz [ 393.006026][T14518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 393.529101][T14553] xt_IDLETIMER: label is empty or not nul-terminated [ 393.633288][T14518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 393.641037][ T10] cdc_ncm 3-1:1.1: bind() failure [ 393.705899][T14557] input: syz0 as /devices/virtual/input/input76 [ 393.874035][ T10] usb 3-1: USB disconnect, device number 50 [ 393.939058][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 393.942207][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 395.102480][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.116371][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.221059][ T31] audit: type=1326 audit(1791021195.119:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14604 comm="syz.6.3729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc80ec code=0x0 [ 395.290730][T14609] input: syz0 as /devices/virtual/input/input77 [ 395.336333][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 395.486238][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 395.498173][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 395.498308][ T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 395.503231][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 395.503344][ T10] usb 6-1: can't read configurations, error -71 [ 395.725444][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3739'. [ 395.935261][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.946748][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.126383][ T5668] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 397.278050][ T5668] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 397.279438][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.279471][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.279513][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.284192][ T5668] usb 3-1: config 0 descriptor?? [ 397.765156][ T5668] hid_parser_main: 223 callbacks suppressed [ 397.765182][ T5668] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 397.765215][ T5668] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 397.765242][ T5668] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 397.765269][ T5668] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 397.765297][ T5668] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 397.824036][ T5668] cm6533_jd 0003:0D8C:0022.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 397.996309][ T5681] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 398.040618][ T9] usb 3-1: USB disconnect, device number 51 [ 398.121180][T14686] fido_id[14686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 398.150847][ T5681] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 398.154307][ T5681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.181683][ T5681] usb 7-1: config 0 descriptor?? [ 398.411670][ T5681] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 398.650738][ T5681] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 398.650765][ T5681] [drm] Initialized udl on minor 1 [ 399.593100][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.597433][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.677209][T14720] ptrace attach of ""[14721] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[14720] [ 400.126334][ T5668] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 400.277390][ T5668] usb 2-1: Using ep0 maxpacket: 32 [ 400.278179][ T5668] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 400.279513][ T5668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.320876][ T5668] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 401.246441][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3792'. [ 401.332756][ T5668] gspca_nw80x: reg_w err -71 [ 401.332871][ T5668] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 401.359514][ T5668] usb 2-1: USB disconnect, device number 50 [ 401.896287][ T2235] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 402.046644][ T2235] usb 3-1: Using ep0 maxpacket: 16 [ 402.047552][ T2235] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 402.048856][ T2235] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.048880][ T2235] usb 3-1: config 0 has no interface number 0 [ 402.048916][ T2235] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.048940][ T2235] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.048961][ T2235] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.049006][ T2235] usb 3-1: config 0 interface 1 has no altsetting 0 [ 402.049038][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.052179][ T2235] usb 3-1: config 0 descriptor?? [ 402.099657][ T2235] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 402.507535][ T2235] elan 0003:04F3:074D.002E: failed to start in urb: -90 [ 402.893677][ T2235] elan 0003:04F3:074D.002E: Get report error for parm 6: 0 [ 403.095532][ T2235] elan 0003:04F3:074D.002E: Set report error for parm 7: -71 [ 403.106089][ T2235] elan 0003:04F3:074D.002E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 403.106206][ T2235] elan 0003:04F3:074D.002E: Input device is not registered [ 403.114694][ T2235] elan 0003:04F3:074D.002E: probe with driver elan failed with error -119 [ 403.158170][ T2235] usb 3-1: USB disconnect, device number 52 [ 403.310700][T14800] fido_id[14800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 403.706627][ T5681] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 403.709151][ T5681] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 403.732258][ T5681] usb 7-1: USB disconnect, device number 8 [ 403.746594][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 405.659576][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'. [ 405.664065][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'. [ 405.671898][T14879] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3840'. [ 405.671951][T14879] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3840'. [ 405.773556][T14885] netlink: 'syz.6.3842': attribute type 12 has an invalid length. [ 405.773576][T14885] netlink: 'syz.6.3842': attribute type 29 has an invalid length. [ 405.773588][T14885] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3842'. [ 405.773604][T14885] netlink: 'syz.6.3842': attribute type 1 has an invalid length. [ 405.773614][T14885] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3842'. [ 406.194428][T14900] bond0: (slave vlan2): Opening slave failed [ 406.791927][T14922] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 406.791927][T14922] program syz.4.3858 not setting count and/or reply_len properly [ 407.147945][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3866'. [ 407.149736][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3866'. [ 407.150929][T14941] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3866'. [ 407.150950][T14941] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3866'. [ 407.513260][T14960] block device autoloading is deprecated and will be removed. [ 407.592127][T14964] tun0: tun_chr_ioctl cmd 1074025675 [ 407.592152][T14964] tun0: persist enabled [ 407.592413][T14964] tun0: tun_chr_ioctl cmd 1074025675 [ 407.592430][T14964] tun0: persist enabled [ 408.276303][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 408.427161][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 408.428244][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.428268][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.428295][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.430988][ T10] usb 6-1: config 0 descriptor?? [ 408.616322][ T5668] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 408.767278][ T5668] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 408.768476][ T5668] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.768507][ T5668] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.768582][ T5668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.771627][ T5668] usb 7-1: config 0 descriptor?? [ 408.848523][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848558][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848577][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848618][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848645][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848670][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.848699][ T10] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 408.881302][ T10] hid-thrustmaster 0003:044F:B65D.002F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 408.881563][ T10] hid-thrustmaster 0003:044F:B65D.002F: Wrong number of endpoints? [ 409.057205][ C0] hid-thrustmaster 0003:044F:B65D.002F: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 409.149339][T14996] bond0: (slave vlan2): Opening slave failed [ 409.199446][ T5668] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 409.199484][ T5668] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 409.199511][ T5668] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 409.240424][ T5668] cm6533_jd 0003:0D8C:0022.0030: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 409.264562][ T10] usb 6-1: USB disconnect, device number 14 [ 409.521624][ T5668] usb 7-1: USB disconnect, device number 9 [ 410.190474][T15030] loop4: detected capacity change from 0 to 7 [ 410.192956][T15030] Dev loop4: unable to read RDB block 7 [ 410.192987][T15030] loop4: unable to read partition table [ 410.193211][T15030] loop4: partition table beyond EOD, truncated [ 410.193250][T15030] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 410.391205][T15036] kvm: user requested TSC rate below hardware speed [ 410.663174][T15054] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 410.663174][T15054] program syz.2.3914 not setting count and/or reply_len properly [ 410.756517][T15056] bond2 (unregistering): Released all slaves [ 410.836619][ T5707] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 410.987048][ T5707] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 410.988094][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.988149][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.988188][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.000288][ T5707] usb 6-1: config 0 descriptor?? [ 411.503272][ T5707] cm6533_jd 0003:0D8C:0022.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 411.760553][ T10] usb 6-1: USB disconnect, device number 15 [ 411.892939][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 411.921505][T15092] netlink: 'syz.4.3930': attribute type 2 has an invalid length. [ 413.210195][T15129] loop5: detected capacity change from 0 to 7 [ 413.211961][T15129] Dev loop5: unable to read RDB block 7 [ 413.211991][T15129] loop5: AHDI p1 p2 p3 [ 413.212013][T15129] loop5: partition table partially beyond EOD, truncated [ 413.212243][T15129] loop5: p1 size 150995456 extends beyond EOD, truncated [ 413.224737][T15129] loop5: p2 size 150995200 extends beyond EOD, truncated [ 413.417153][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 413.419642][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 413.717253][T15148] kvm: user requested TSC rate below hardware speed [ 414.685887][T15181] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 414.685887][T15181] program syz.1.3967 not setting count and/or reply_len properly [ 415.016260][ T5707] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 415.041992][T15191] netlink: 'syz.5.3972': attribute type 1 has an invalid length. [ 415.170117][ T5707] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 415.171509][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.171543][ T5707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.171569][ T5707] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.171611][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.188260][ T5707] usb 7-1: config 0 descriptor?? [ 415.656866][ T5707] hid_parser_main: 7 callbacks suppressed [ 415.656891][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658200][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658230][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658256][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658282][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658308][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658335][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658386][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658412][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.658439][ T5707] hid-multitouch 0003:0457:07DA.0032: unknown main item tag 0x0 [ 415.666511][ T5707] hid-multitouch 0003:0457:07DA.0032: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 415.965250][ T2235] usb 7-1: USB disconnect, device number 10 [ 416.426662][ T5668] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 416.530463][T15226] netlink: 'syz.2.3986': attribute type 14 has an invalid length. [ 416.530488][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 416.576263][ T5668] usb 6-1: Using ep0 maxpacket: 16 [ 416.578526][ T5668] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 416.585284][T15227] netlink: 'syz.2.3986': attribute type 14 has an invalid length. [ 416.585302][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 416.600928][ T5668] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 416.601000][ T5668] usb 6-1: config 252 has no interface number 0 [ 416.601187][ T5668] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.644228][ T5668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.644303][ T5668] usb 6-1: Product: syz [ 416.644337][ T5668] usb 6-1: Manufacturer: syz [ 416.644376][ T5668] usb 6-1: SerialNumber: syz [ 416.706785][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3987'. [ 416.708981][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3987'. [ 416.762832][ T5668] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.957462][ T39] usb 6-1: Failed to submit usb control message: -71 [ 416.957503][ T39] usb 6-1: unable to send the bmi data to the device: -71 [ 416.957528][ T39] usb 6-1: unable to get target info from device [ 416.957562][ T39] usb 6-1: could not get target info (-71) [ 416.957893][ T39] usb 6-1: could not probe fw (-71) [ 416.962763][ T5668] usb 6-1: USB disconnect, device number 16 [ 417.026653][ T39] IPVS: starting estimator thread 0... [ 417.127401][T15240] IPVS: using max 31 ests per chain, 74400 per kthread [ 417.475446][T15255] input: syz0 as /devices/virtual/input/input79 [ 417.475487][T15255] input: failed to attach handler leds to device input79, error: -6 [ 417.551964][T15261] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 417.620548][T15265] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 417.620585][T15265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.791758][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.792237][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.479247][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.479837][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.684156][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.695600][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.796278][ T5707] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 418.946314][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 418.948192][ T5707] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.951277][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.951309][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.951334][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.951378][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.972515][ T5707] usb 3-1: config 0 descriptor?? [ 419.169722][ T5764] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 419.317990][ T5764] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 419.319568][ T5764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.319642][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.466789][ T5707] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0033/input/input80 [ 419.544653][ T5707] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 419.547819][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 419.589641][ T5764] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 419.606572][ T5764] wwan wwan0: port wwan0qmi0 attached [ 419.835108][ T5681] usb 3-1: USB disconnect, device number 53 [ 419.850510][ T5764] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 9e:51:38:10:b9:f9 [ 419.852911][ T5764] usb 2-1: USB disconnect, device number 51 [ 419.957800][ T5764] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 420.088803][ T5764] wwan wwan0: port wwan0qmi0 disconnected [ 420.461165][ T991] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 420.607063][ T991] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 420.608463][ T991] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 420.608513][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.802480][ T31] audit: type=1326 audit(1791021220.699:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.802537][ T31] audit: type=1326 audit(1791021220.699:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.818982][ T31] audit: type=1326 audit(1791021220.709:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.819121][ T31] audit: type=1326 audit(1791021220.709:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.835236][ T31] audit: type=1326 audit(1791021220.739:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.835383][ T31] audit: type=1326 audit(1791021220.739:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.894638][ T31] audit: type=1326 audit(1791021220.789:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.894780][ T31] audit: type=1326 audit(1791021220.789:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.900911][ T31] audit: type=1326 audit(1791021220.739:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 420.901053][ T31] audit: type=1326 audit(1791021220.789:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15333 comm="syz.1.4030" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 421.062800][ T991] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 421.080228][ T991] wwan wwan0: port wwan0qmi0 attached [ 421.294896][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4031'. [ 421.352683][ T991] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, ee:12:d5:6a:da:02 [ 421.354826][ T991] usb 7-1: USB disconnect, device number 11 [ 421.382382][ T991] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 421.458233][ T991] wwan wwan0: port wwan0qmi0 disconnected [ 421.638232][ T4932] Bluetooth: hci1: command 0x0406 tx timeout [ 422.055757][T15353] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 422.064325][ T39] IPVS: starting estimator thread 0... [ 422.156285][T15358] IPVS: using max 29 ests per chain, 69600 per kthread [ 422.184246][T15362] input: syz1 as /devices/virtual/input/input81 [ 422.907155][ T5681] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 423.066247][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 423.067150][ T5681] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 423.068412][ T5681] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 423.068456][ T5681] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.068484][ T5681] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.068513][ T5681] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 423.071351][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.071376][ T5681] usb 3-1: Product: syz [ 423.071397][ T5681] usb 3-1: Manufacturer: syz [ 423.071407][ T5681] usb 3-1: SerialNumber: syz [ 423.114634][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 423.182773][ T5681] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input82 [ 423.358361][ T5681] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 423.358384][ T5681] (id 0x00) [ 423.478446][ T5681] rc_core: IR keymap rc-imon-pad not found [ 423.478467][ T5681] Registered IR keymap rc-empty [ 423.479152][ T5681] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 423.479174][ T5681] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 423.569181][ T5681] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 423.582837][ T5681] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input83 [ 423.612681][ T5681] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:54> initialized [ 423.657248][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 423.822045][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 423.846094][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.848205][ T9] usb 6-1: Product: syz [ 423.848224][ T9] usb 6-1: Manufacturer: syz [ 423.848241][ T9] usb 6-1: SerialNumber: syz [ 423.896012][ T5681] usb 3-1: USB disconnect, device number 54 [ 423.907665][ T9] usb 6-1: config 0 descriptor?? [ 424.039100][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.221333][ T9] usb 6-1: USB disconnect, device number 17 [ 424.344335][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.375603][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.454323][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.467090][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.474973][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.480111][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.494927][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.517251][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 424.605158][T15412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.605608][T15412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.660081][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.688592][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 424.690937][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 424.694105][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.694153][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.694180][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.694206][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 424.694233][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.694267][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.720624][ T10] usb 2-1: config 0 descriptor?? [ 424.867241][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.215413][ T10] logitech-djreceiver 0003:046D:C53A.0034: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 425.376763][ T5681] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 425.384787][ T2235] usb 2-1: USB disconnect, device number 52 [ 425.408459][ T39] bridge_slave_1: left allmulticast mode [ 425.408486][ T39] bridge_slave_1: left promiscuous mode [ 425.408719][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.449145][T15430] fido_id[15430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 425.501544][ T39] bridge_slave_0: left allmulticast mode [ 425.501571][ T39] bridge_slave_0: left promiscuous mode [ 425.501813][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.536728][ T5681] usb 6-1: Using ep0 maxpacket: 16 [ 425.552212][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 425.552267][ T5681] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 425.583437][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.583467][ T5681] usb 6-1: Product: syz [ 425.583484][ T5681] usb 6-1: Manufacturer: syz [ 425.583500][ T5681] usb 6-1: SerialNumber: syz [ 426.165581][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.180572][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.182871][ T39] bond0 (unregistering): Released all slaves [ 426.216265][ T5681] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 426.280732][ T5681] usb 6-1: USB disconnect, device number 18 [ 426.351700][ T2235] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 426.506967][ T2235] usb 2-1: Using ep0 maxpacket: 32 [ 426.507790][ T2235] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 426.508973][ T2235] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 426.508999][ T2235] usb 2-1: config 0 has no interface number 0 [ 426.511734][ T2235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.511757][ T2235] usb 2-1: Product: syz [ 426.511772][ T2235] usb 2-1: Manufacturer: syz [ 426.511786][ T2235] usb 2-1: SerialNumber: syz [ 426.515879][ T2235] usb 2-1: config 0 descriptor?? [ 426.573435][ T2235] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.596599][ T5619] Bluetooth: hci0: command tx timeout [ 426.763203][ T2235] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 426.772830][ T2235] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 427.133708][T15410] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.133816][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.134042][T15410] bridge_slave_0: entered allmulticast mode [ 427.137161][T15410] bridge_slave_0: entered promiscuous mode [ 427.147935][T15410] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.148115][T15410] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.148300][T15410] bridge_slave_1: entered allmulticast mode [ 427.196649][T15410] bridge_slave_1: entered promiscuous mode [ 427.255256][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 427.256222][ T5681] usb 2-1: USB disconnect, device number 53 [ 427.299843][ T5681] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 427.362614][ T5681] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 427.363350][ T5681] quatech2 2-1:0.51: device disconnected [ 427.656783][T15410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.698356][ T39] hsr_slave_0: left promiscuous mode [ 427.702588][ T39] hsr_slave_1: left promiscuous mode [ 427.703570][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.703645][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.721323][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.721387][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.779637][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 427.810514][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 427.882200][ T39] veth1_macvtap: left promiscuous mode [ 427.882337][ T39] veth1_vlan: left promiscuous mode [ 427.882426][ T39] veth0_vlan: left promiscuous mode [ 428.079221][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 428.079242][ T31] audit: type=1326 audit(1791021227.979:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.079464][ T31] audit: type=1326 audit(1791021227.979:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.080752][ T31] audit: type=1326 audit(1791021227.979:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.081750][ T31] audit: type=1326 audit(1791021227.979:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.082456][ T31] audit: type=1326 audit(1791021227.979:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.082680][ T31] audit: type=1326 audit(1791021227.979:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.083823][ T31] audit: type=1326 audit(1791021227.979:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.084642][ T31] audit: type=1326 audit(1791021227.979:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.085141][ T31] audit: type=1326 audit(1791021227.979:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=24 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.085192][ T31] audit: type=1326 audit(1791021227.979:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.4.4084" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 428.666532][ T5619] Bluetooth: hci0: command tx timeout [ 428.715092][ T39] team0 (unregistering): Port device team_slave_1 removed [ 428.735480][ T39] team0 (unregistering): Port device team_slave_0 removed [ 428.916321][ T2235] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 428.941304][T15410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.943270][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 429.021320][T15410] team0: Port device team_slave_0 added [ 429.044823][T15410] team0: Port device team_slave_1 added [ 429.066468][ T2235] usb 3-1: Using ep0 maxpacket: 16 [ 429.068086][ T2235] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 429.072451][ T2235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.072500][ T2235] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.072528][ T2235] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.072552][ T2235] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 429.072580][ T2235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.072616][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.093664][ T2235] usb 3-1: config 0 descriptor?? [ 429.182684][T15410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.182703][T15410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.182728][T15410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.219909][T15410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.219950][T15410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.219973][T15410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.399533][T15410] hsr_slave_0: entered promiscuous mode [ 429.400631][T15410] hsr_slave_1: entered promiscuous mode [ 429.401391][T15410] debugfs: 'hsr0' already exists in 'hsr' [ 429.401411][T15410] Cannot create hsr debugfs directory [ 429.528141][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'. [ 429.571571][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'. [ 429.575007][ T2235] logitech-djreceiver 0003:046D:C53A.0035: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 429.669417][ T39] IPVS: stop unused estimator thread 0... [ 429.839725][ T2235] usb 3-1: USB disconnect, device number 55 [ 429.874320][T15521] fido_id[15521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 430.536363][T15554] loop4: detected capacity change from 0 to 8 [ 430.540158][T15554] Dev loop4: unable to read RDB block 8 [ 430.540201][T15554] loop4: unable to read partition table [ 430.542679][T15554] loop4: partition table beyond EOD, truncated [ 430.542713][T15554] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 430.685288][T15410] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.747483][ T5619] Bluetooth: hci0: command tx timeout [ 430.793300][T15410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.794233][T15410] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.899340][T15410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.904846][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 430.924183][T15410] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.944359][T15410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.962828][T15410] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.988681][T15410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.615565][T15410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.658647][T15410] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.690015][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.690121][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.732614][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.732724][ T9515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.067876][T15603] input: syz0 as /devices/virtual/input/input84 [ 432.351002][T15410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.692669][T15410] veth0_vlan: entered promiscuous mode [ 432.785505][T15410] veth1_vlan: entered promiscuous mode [ 432.826802][ T5619] Bluetooth: hci0: command tx timeout [ 432.973953][T15410] veth0_macvtap: entered promiscuous mode [ 433.014502][T15410] veth1_macvtap: entered promiscuous mode [ 433.130835][T15410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.144993][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 433.179450][T15410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.235656][T15635] bridge: RTM_NEWNEIGH with invalid ether address [ 433.249981][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4128'. [ 433.258434][T15635] bridge: RTM_NEWNEIGH with invalid ether address [ 433.259228][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.297169][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.297499][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.297537][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.602493][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.602515][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.921946][ T207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.921988][ T207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.452156][T15685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.471717][T15685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.533968][T15689] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.4145'. [ 434.765930][T15695] input: syz0 as /devices/virtual/input/input85 [ 434.844951][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 435.224486][T15708] netlink: 'syz.4.4151': attribute type 15 has an invalid length. [ 435.250461][T15708] netlink: 'syz.4.4151': attribute type 15 has an invalid length. [ 435.328655][T15714] vlan2: entered allmulticast mode [ 435.329181][T15714] bridge0: port 5(vlan2) entered blocking state [ 435.329372][T15714] bridge0: port 5(vlan2) entered disabled state [ 435.331801][T15714] vlan2: entered promiscuous mode [ 435.536880][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.537382][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.739383][T15733] input: syz0 as /devices/virtual/input/input86 [ 435.775475][T15734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4161'. [ 435.872236][T15734] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 435.890775][T15734] bridge2: entered promiscuous mode [ 436.699370][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4172'. [ 436.716680][T15758] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4172'. [ 438.229802][T15800] pim6reg: left allmulticast mode [ 438.745442][T15828] loop5: detected capacity change from 0 to 7 [ 438.749833][T15828] Dev loop5: unable to read RDB block 7 [ 438.749875][T15828] loop5: unable to read partition table [ 438.750422][T15828] loop5: partition table beyond EOD, truncated [ 438.750473][T15828] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 438.863400][ T991] hid_parser_main: 24 callbacks suppressed [ 438.863427][ T991] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 438.882455][ T991] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.024616][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 439.024654][T15836] netlink: 'syz.1.4202': attribute type 20 has an invalid length. [ 439.024670][T15836] netlink: 'syz.1.4202': attribute type 21 has an invalid length. [ 439.603189][T15854] loop5: detected capacity change from 0 to 33558527 [ 439.625614][ T5621] Buffer I/O error on dev loop5, logical block 4194815, async page read [ 439.754920][T15830] hid-generic 0000:0000:0000.0036: pid 15830 passed too large report [ 440.028297][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028358][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.234231][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4217'. [ 440.577724][ T5707] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 440.746898][ T5707] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.747941][ T5707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.747989][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 440.748018][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 440.748046][ T5707] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 440.750258][ T5707] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.750282][ T5707] usb 6-1: Manufacturer: syz [ 440.756054][ T5707] usb 6-1: config 0 descriptor?? [ 441.268629][ T5707] rc_core: IR keymap rc-hauppauge not found [ 441.268648][ T5707] Registered IR keymap rc-empty [ 441.270741][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.297070][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.327506][ T5707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 441.332997][ T5707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input87 [ 441.367536][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.407163][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.437209][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.456522][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.476391][ T5668] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 441.476621][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.502971][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.526535][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.546693][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.566667][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.596530][ T5707] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 441.627070][ T5668] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 441.628528][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.657078][ T5668] usb 3-1: config 0 descriptor?? [ 441.663818][ T5707] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 441.663851][ T5707] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 441.709092][ T5707] usb 6-1: USB disconnect, device number 19 [ 441.873372][ T5668] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 442.100964][ T5668] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 442.100993][ T5668] [drm] Initialized udl on minor 1 [ 442.405903][T15922] syzkaller1: entered promiscuous mode [ 442.405928][T15922] syzkaller1: entered allmulticast mode [ 443.637719][T15951] vlan2: entered allmulticast mode [ 443.638017][T15951] bridge0: port 3(vlan2) entered blocking state [ 443.638214][T15951] bridge0: port 3(vlan2) entered disabled state [ 443.640528][T15951] vlan2: entered promiscuous mode [ 443.746982][T15956] kvm: user requested TSC rate below hardware speed [ 443.998838][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.999327][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.884729][ T5707] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 445.921318][ T5707] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.109091][T16056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4275'. [ 447.146918][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 447.147396][ T5668] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 447.150983][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 447.155462][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 447.155655][ T5668] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 447.192510][ T10] usb 3-1: USB disconnect, device number 56 [ 447.250187][T16056] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 447.252044][T16056] bridge1: entered promiscuous mode [ 447.347670][ T5668] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 447.516886][ T5668] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.518382][ T5668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.518416][ T5668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.518440][ T5668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 447.518482][ T5668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.576726][ T5668] usb 2-1: config 0 descriptor?? [ 447.804958][T16080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.805435][T16080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.062307][ T5668] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 448.832491][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4297'. [ 449.268043][ T2235] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 449.417376][ T2235] usb 6-1: Using ep0 maxpacket: 16 [ 449.420623][ T2235] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 449.421791][ T2235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.421841][ T2235] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.421870][ T2235] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.421894][ T2235] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 449.421922][ T2235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.421957][ T2235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.509798][ T2235] usb 6-1: config 0 descriptor?? [ 449.738316][ T5764] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 449.886421][ T5764] usb 3-1: Using ep0 maxpacket: 8 [ 449.887547][ T5764] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 449.890141][ T5764] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 449.890168][ T5764] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 449.890190][ T5764] usb 3-1: config 0 has no interface number 0 [ 449.890230][ T5764] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.890257][ T5764] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.890284][ T5764] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 449.892295][ T5764] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 449.892323][ T5764] usb 3-1: Product: syz [ 449.892339][ T5764] usb 3-1: Manufacturer: syz [ 449.927069][ T5764] usb 3-1: config 0 descriptor?? [ 450.025795][ T2235] logitech-djreceiver 0003:046D:C53A.0039: hiddev1,hidraw1: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 450.141072][ T5668] usb 2-1: USB disconnect, device number 54 [ 450.210727][ T5681] usb 6-1: USB disconnect, device number 20 [ 450.598770][ T5764] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input89 [ 450.618630][ T5764] input: failed to attach handler kbd to device input89, error: -5 [ 450.829592][T16164] input: syz0 as /devices/virtual/input/input90 [ 450.864693][ T5764] usb 3-1: USB disconnect, device number 57 [ 451.226361][ T5668] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 451.390448][ T5668] usb 6-1: Using ep0 maxpacket: 8 [ 451.396503][ T5668] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.404166][ T5668] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.404275][ T5668] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.404360][ T5668] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.404424][ T5668] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.404527][ T5668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.680761][ T5668] usb 6-1: GET_CAPABILITIES returned 0 [ 451.680813][ T5668] usbtmc 6-1:16.0: can't read capabilities [ 451.907951][ T5681] usb 6-1: USB disconnect, device number 21 [ 452.280769][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.285023][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.480876][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 452.480897][ T31] audit: type=1326 audit(1791021252.379:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.480952][ T31] audit: type=1326 audit(1791021252.379:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.546530][ T5707] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 452.546946][ T31] audit: type=1326 audit(1791021252.449:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.547607][ T31] audit: type=1326 audit(1791021252.449:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.547802][ T31] audit: type=1326 audit(1791021252.449:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.555213][ T31] audit: type=1326 audit(1791021252.449:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.555391][ T31] audit: type=1326 audit(1791021252.449:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.555556][ T31] audit: type=1326 audit(1791021252.449:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.591246][ T31] audit: type=1326 audit(1791021252.449:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.591306][ T31] audit: type=1326 audit(1791021252.459:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16206 comm="syz.1.4334" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 452.719878][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 452.731040][ T5707] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.759826][ T5707] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 452.760020][ T5707] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 452.760173][ T5707] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.760245][ T5707] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 452.760318][ T5707] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 452.760382][ T5707] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.760494][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.892985][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4335'. [ 453.053912][ T5707] usb 3-1: GET_CAPABILITIES returned 0 [ 453.053965][ T5707] usbtmc 3-1:16.0: can't read capabilities [ 453.197037][T16221] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 453.302645][T16200] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 453.320468][ T5707] usb 3-1: USB disconnect, device number 58 [ 453.452374][T16226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4341'. [ 454.433329][T16257] random: crng reseeded on system resumption [ 454.461159][T16257] Unrecognized hibernate image header format! [ 454.461176][T16257] PM: hibernation: Image mismatch: architecture specific data [ 455.183516][T16295] netlink: NAT attribute has 4 unknown bytes [ 455.183562][T16295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.039067][T16314] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4379'. [ 456.242720][T16318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.243207][T16318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.614547][T16334] batadv_slave_0: entered promiscuous mode [ 456.615781][T16333] batadv_slave_0: left promiscuous mode [ 457.246309][ T5707] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 457.272307][T16361] cifs: Unknown parameter '0,' [ 457.338232][ T5764] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 457.408350][ T5707] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 457.409842][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.414802][ T5707] usb 6-1: config 0 descriptor?? [ 457.496367][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 457.497175][ T5764] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.498296][ T5764] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 457.498339][ T5764] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 457.498357][ T5764] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.498374][ T5764] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.498404][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.624952][ T5707] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 457.757682][ T5764] usb 2-1: GET_CAPABILITIES returned 0 [ 457.757737][ T5764] usbtmc 2-1:16.0: can't read capabilities [ 457.899786][ T5707] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 457.903371][ T5707] [drm] Initialized udl on minor 1 [ 458.009617][ T5681] usb 2-1: USB disconnect, device number 55 [ 458.110324][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 458.110343][ T31] audit: type=1326 audit(1791021258.009:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.110588][ T31] audit: type=1326 audit(1791021258.009:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.114755][ T31] audit: type=1326 audit(1791021258.009:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.114809][ T31] audit: type=1326 audit(1791021258.009:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.114854][ T31] audit: type=1326 audit(1791021258.009:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.115306][ T31] audit: type=1326 audit(1791021258.009:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.115911][ T31] audit: type=1326 audit(1791021258.009:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.201561][ T31] audit: type=1326 audit(1791021258.079:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.279504][ T31] audit: type=1326 audit(1791021258.159:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.279571][ T31] audit: type=1326 audit(1791021258.159:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.4.4409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f780ec code=0x7ffc0000 [ 458.647819][T16386] input: syz0 as /devices/virtual/input/input91 [ 459.019953][T16407] random: crng reseeded on system resumption [ 459.090155][T16409] syzkaller1: entered promiscuous mode [ 459.090173][T16409] syzkaller1: entered allmulticast mode [ 459.180041][T16414] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 461.244061][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 461.244103][T16457] netlink: 'syz.1.4442': attribute type 30 has an invalid length. [ 461.282815][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 461.282855][T16457] netlink: 'syz.1.4442': attribute type 30 has an invalid length. [ 461.318557][ T1170] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.328788][ T39] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.329036][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.329076][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.471496][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.471957][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.974881][T16474] kvm: user requested TSC rate below hardware speed [ 462.271041][T16478] loop3: detected capacity change from 0 to 7 [ 462.283321][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.283422][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.323318][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.323434][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.327057][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.327350][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.347286][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.347603][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.348877][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.349164][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.355890][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.356271][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.361554][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.361804][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.363448][T16478] ldm_validate_partition_table(): Disk read failed. [ 462.363930][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.364228][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.365040][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.365288][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.368827][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 462.369146][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 462.371325][T16478] Dev loop3: unable to read RDB block 0 [ 462.388038][T16478] loop3: unable to read partition table [ 462.389020][T16478] loop3: partition table beyond EOD, truncated [ 462.389199][T16478] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 462.849256][T16488] loop5: detected capacity change from 0 to 7 [ 462.863223][T16488] Dev loop5: unable to read RDB block 7 [ 462.863255][T16488] loop5: AHDI p1 p4 [ 462.863277][T16488] loop5: partition table partially beyond EOD, truncated [ 462.863569][T16488] loop5: p1 size 100663296 extends beyond EOD, truncated [ 462.965888][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 462.988867][ T5707] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 462.989333][ T5707] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 463.025117][T16407] Unrecognized hibernate image header format! [ 463.025134][T16407] PM: hibernation: Image mismatch: architecture specific data [ 463.043419][ T5707] usb 6-1: USB disconnect, device number 22 [ 463.051360][ T5764] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 463.186599][ T2235] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 463.336269][ T2235] usb 3-1: Using ep0 maxpacket: 32 [ 463.337169][ T2235] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 463.338603][ T2235] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 463.338690][ T2235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 463.338721][ T2235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 463.344407][ T2235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.344438][ T2235] usb 3-1: Product: syz [ 463.344455][ T2235] usb 3-1: Manufacturer: syz [ 463.344472][ T2235] usb 3-1: SerialNumber: syz [ 463.419207][ T2235] usb 3-1: config 0 descriptor?? [ 463.421689][ T2235] hub 3-1:0.0: bad descriptor, ignoring hub [ 463.421713][ T2235] hub 3-1:0.0: probe with driver hub failed with error -5 [ 463.450557][ T2235] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input92 [ 463.475646][ T2235] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 463.506433][ T2235] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 463.748775][ T5707] usb 3-1: USB disconnect, device number 59 [ 464.030006][T16524] random: crng reseeded on system resumption [ 464.057162][T16524] Unrecognized hibernate image header format! [ 464.057176][T16524] PM: hibernation: Image mismatch: architecture specific data [ 464.062248][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 464.062265][ T31] audit: type=1326 audit(1791021263.959:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16520 comm="syz.5.4467" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x0 [ 465.355640][T16555] random: crng reseeded on system resumption [ 465.374300][T16555] Unrecognized hibernate image header format! [ 465.374316][T16555] PM: hibernation: Image mismatch: architecture specific data [ 466.400588][T16591] vivid-008: disconnect [ 466.407449][T16590] vivid-008: reconnect [ 466.555971][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'. [ 467.351646][T16624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4512'. [ 467.426229][ T2235] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 467.576248][ T2235] usb 2-1: Using ep0 maxpacket: 32 [ 467.577081][ T2235] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 467.578513][ T2235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.585993][ T2235] usb 2-1: config 0 descriptor?? [ 467.629839][ T2235] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 468.623809][ T5689] logitech-hidpp-device 0005:046D:B012.003A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 468.659896][ T2235] gspca_vc032x: reg_w err -71 [ 468.659936][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659948][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659958][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659966][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659975][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659983][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.659992][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660001][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660009][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660018][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660026][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660034][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660042][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660051][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660059][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660067][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660082][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660092][ T2235] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.660106][ T2235] gspca_vc032x: Unknown sensor... [ 468.660179][ T2235] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 468.662288][ T2235] usb 2-1: USB disconnect, device number 56 [ 469.063641][T16661] input: syz0 as /devices/virtual/input/input93 [ 469.063759][T16661] input: failed to attach handler leds to device input93, error: -6 [ 469.185830][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4529'. [ 469.185859][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4529'. [ 469.185887][T16663] netlink: 'syz.4.4529': attribute type 13 has an invalid length. [ 469.185903][T16663] netlink: 'syz.4.4529': attribute type 14 has an invalid length. [ 469.250773][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4528'. [ 469.546398][ T2235] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 469.696296][ T2235] usb 6-1: Using ep0 maxpacket: 8 [ 469.697150][ T2235] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.698537][ T2235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.698584][ T2235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.705875][ T2235] usb 6-1: config 0 descriptor?? [ 469.978380][ T2235] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 470.212219][ T2235] wiimote 0005:057E:0330.003B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 470.329085][ T2235] wiimote 0005:057E:0330.003B: New device registered [ 470.352508][T16690] wiimote 0005:057E:0330.003B: Device removed [ 470.493308][ T2235] usb 6-1: USB disconnect, device number 23 [ 470.540982][T16693] fido_id[16693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 470.667979][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 470.924387][T16711] syzkaller1: entered promiscuous mode [ 470.924414][T16711] syzkaller1: entered allmulticast mode [ 471.388834][ T5689] wiimote 0005:057E:0330.003B: detected device: Nintendo Wii Remote Plus (Gen 2) [ 471.512530][ T5689] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.003B/input/input95 [ 471.585188][ T5689] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.003B/input/input96 [ 471.654603][ T5689] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.003B/input/input94 [ 472.884355][T16764] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4568'. [ 473.093070][T16776] sg_write: data in/out 335872/136 bytes for SCSI command 0x0-- guessing data in; [ 473.093070][T16776] program syz.2.4574 not setting count and/or reply_len properly [ 473.122540][T16778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4575'. [ 473.846295][ T30] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 474.007124][ T30] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 474.008467][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 474.008490][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 474.008529][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 474.008556][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 474.010422][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.010440][ T30] usb 3-1: Product: syz [ 474.010451][ T30] usb 3-1: Manufacturer: syz [ 474.010461][ T30] usb 3-1: SerialNumber: syz [ 474.013324][ T30] usb 3-1: config 0 descriptor?? [ 474.223437][ T30] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 474.441375][ T5681] usb 3-1: USB disconnect, device number 60 [ 474.878217][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4599'. [ 475.460960][T16843] syzkaller1: entered promiscuous mode [ 475.460986][T16843] syzkaller1: entered allmulticast mode [ 475.657405][ T5707] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 475.822512][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4610'. [ 475.839936][ T5707] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 475.841406][ T5707] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 475.841437][ T5707] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 475.843972][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.844000][ T5707] usb 6-1: Product: syz [ 475.844015][ T5707] usb 6-1: Manufacturer: syz [ 475.844030][ T5707] usb 6-1: SerialNumber: syz [ 475.876056][ T5707] usb 6-1: config 0 descriptor?? [ 475.914437][ T5707] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 475.951433][T16859] netlink: zone id is out of range [ 475.951719][T16859] netlink: zone id is out of range [ 475.952248][T16859] netlink: zone id is out of range [ 475.952637][T16859] netlink: zone id is out of range [ 475.952857][T16859] netlink: zone id is out of range [ 475.953357][T16859] netlink: zone id is out of range [ 475.953632][T16859] netlink: zone id is out of range [ 475.953675][T16859] netlink: zone id is out of range [ 475.954061][T16859] netlink: zone id is out of range [ 475.954234][T16859] netlink: zone id is out of range [ 476.240437][ T30] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 476.245642][ T30] hid-generic 0000:0000:0000.003C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 476.367406][T16873] fido_id[16873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.679929][ T5764] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 476.846459][ T5764] usb 3-1: Using ep0 maxpacket: 8 [ 476.847199][ T5764] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 476.848241][ T5764] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.848274][ T5764] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.848304][ T5764] usb 3-1: config 0 interface 0 has no altsetting 0 [ 476.848337][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.851516][ T5764] usb 3-1: config 0 descriptor?? [ 476.948042][ T5689] usb 6-1: USB disconnect, device number 24 [ 477.268567][ T5764] hid (null): report_id 3688329021 is invalid [ 477.268594][ T5764] hid (null): unknown global tag 0xc [ 477.268625][ T5764] hid (null): nested delimiters [ 477.297898][ T5764] magicmouse 0003:05AC:0269.003D: report_id 3688329021 is invalid [ 477.297928][ T5764] magicmouse 0003:05AC:0269.003D: item 0 4 1 8 parsing failed [ 477.298789][ T5764] magicmouse 0003:05AC:0269.003D: magicmouse hid parse failed [ 477.298907][ T5764] magicmouse 0003:05AC:0269.003D: probe with driver magicmouse failed with error -22 [ 477.508060][ T5764] usb 3-1: USB disconnect, device number 61 [ 477.784082][T16898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.784581][T16898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.826416][ T30] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 477.976923][ T30] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 477.978327][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.980822][ T30] usb 6-1: config 0 descriptor?? [ 477.984878][ T30] cp210x 6-1:0.0: cp210x converter detected [ 478.399413][ T30] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 478.420911][ T30] usb 6-1: cp210x converter now attached to ttyUSB0 [ 478.462852][T16914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.463356][T16914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.654921][ T30] usb 6-1: USB disconnect, device number 25 [ 478.671808][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.693598][ T30] cp210x 6-1:0.0: device disconnected [ 478.793856][T16924] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4635'. [ 478.793883][T16924] gretap0: entered promiscuous mode [ 478.794734][T16924] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4635'. [ 478.794867][T16924] 0XD: renamed from gretap0 [ 478.797744][T16924] 0XD: left promiscuous mode [ 478.797797][T16924] 0XD: entered allmulticast mode [ 479.063001][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4638'. [ 479.189520][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 479.956356][ T1170] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.963923][ T1170] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.963976][ T1170] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.964019][ T1170] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.266610][ T31] audit: type=1326 audit(1791021280.159:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.266671][ T31] audit: type=1326 audit(1791021280.159:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.325618][ T31] audit: type=1326 audit(1791021280.219:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.358349][ T31] audit: type=1326 audit(1791021280.259:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.358523][ T31] audit: type=1326 audit(1791021280.259:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.407695][ T31] audit: type=1326 audit(1791021280.269:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.418306][ T31] audit: type=1326 audit(1791021280.269:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.418687][ T31] audit: type=1326 audit(1791021280.309:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.440170][ T31] audit: type=1326 audit(1791021280.339:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.440317][ T31] audit: type=1326 audit(1791021280.339:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 480.564089][T16976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4651'. [ 480.576042][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4651'. [ 481.461920][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4665'. [ 481.461952][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4665'. [ 482.658494][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.661030][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.687241][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.788637][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.794883][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.830612][T17045] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.831299][T17045] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.866872][T17045] veth1_vlan: left promiscuous mode [ 482.868501][T17045] veth0_vlan: left promiscuous mode [ 482.870756][T17045] veth0_vlan: entered promiscuous mode [ 482.874012][T17045] veth1_vlan: entered promiscuous mode [ 482.902076][T17045] veth1_macvtap: left promiscuous mode [ 482.903364][T17045] veth0_macvtap: left promiscuous mode [ 482.904860][T17045] veth0_macvtap: entered promiscuous mode [ 482.911967][T17045] veth1_macvtap: entered promiscuous mode [ 482.947391][T17045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.948643][T17045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.950399][T17045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.951635][T17045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.998245][T17045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.020676][T17045] hsr0: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 483.037448][T17045] net_ratelimit: 13 callbacks suppressed [ 483.037469][T17045] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 483.072474][ T9515] bridge0: port 3(veth0) entered blocking state [ 483.076978][ T9515] bridge0: port 3(veth0) entered forwarding state [ 483.095892][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.096024][ T9515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.111264][ T9515] bridge0: port 5(vlan2) entered blocking state [ 483.111379][ T9515] bridge0: port 5(vlan2) entered forwarding state [ 483.132973][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.133113][ T9515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.258145][ T9515] bridge0: port 4(team0) entered blocking state [ 483.258275][ T9515] bridge0: port 4(team0) entered forwarding state [ 483.419527][T17056] input: syz0 as /devices/virtual/input/input97 [ 483.477167][ T207] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.477202][ T207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.486424][ T207] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.486458][ T207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.487696][ T207] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.487727][ T207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.487762][ T207] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.487788][ T207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.569420][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4688'. [ 483.751876][T17069] netlink: zone id is out of range [ 483.752116][T17069] netlink: zone id is out of range [ 483.752512][T17069] netlink: zone id is out of range [ 483.754052][T17069] netlink: zone id is out of range [ 483.755766][T17069] netlink: zone id is out of range [ 483.759130][T17069] netlink: zone id is out of range [ 483.759681][T17069] netlink: zone id is out of range [ 483.759810][T17069] netlink: zone id is out of range [ 483.765804][T17069] netlink: zone id is out of range [ 484.634564][T17099] ================================================================== [ 484.634584][T17099] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 484.634612][T17099] Read of size 8 at addr ffff88802b72b818 by task syz.1.4703/17099 [ 484.634630][T17099] [ 484.634645][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.1.4703 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.634674][T17099] Tainted: [L]=SOFTLOCKUP [ 484.634683][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 484.634704][T17099] Call Trace: [ 484.634722][T17099] [ 484.634731][T17099] dump_stack_lvl+0xe8/0x150 [ 484.634764][T17099] print_address_description+0x55/0x1e0 [ 484.634796][T17099] ? dvb_device_open+0xc4/0x340 [ 484.634816][T17099] print_report+0x58/0x70 [ 484.634845][T17099] kasan_report+0x117/0x150 [ 484.634877][T17099] ? dvb_device_open+0xc4/0x340 [ 484.634903][T17099] dvb_device_open+0xc4/0x340 [ 484.634924][T17099] ? do_raw_spin_unlock+0xf5/0x200 [ 484.634961][T17099] chrdev_open+0x4d9/0x600 [ 484.634991][T17099] ? __pfx_chrdev_open+0x10/0x10 [ 484.635019][T17099] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 484.635051][T17099] ? __pfx_chrdev_open+0x10/0x10 [ 484.635077][T17099] do_dentry_open+0x816/0x1380 [ 484.635111][T17099] vfs_open+0x3b/0x340 [ 484.635133][T17099] ? path_openat+0x1428/0x1d60 [ 484.635169][T17099] path_openat+0x1443/0x1d60 [ 484.635203][T17099] do_file_open+0x23e/0x4a0 [ 484.635229][T17099] ? __pfx_do_file_open+0x10/0x10 [ 484.635265][T17099] ? _raw_spin_unlock+0x28/0x50 [ 484.635291][T17099] ? alloc_fd+0x651/0x6c0 [ 484.635327][T17099] do_sys_openat2+0x115/0x200 [ 484.635358][T17099] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.635388][T17099] ? rcu_is_watching+0x16/0xb0 [ 484.635421][T17099] __ia32_compat_sys_openat+0x131/0x160 [ 484.635456][T17099] do_int80 ** replaying previous printk message ** [ 484.635456][T17099] do_int80_emulation+0x198/0x500 [ 484.635490][T17099] ? trace_irq_disable+0x3b/0x140 [ 484.635514][T17099] ? asm_int80_emulation+0x1a/0x20 [ 484.635536][T17099] ? clear_bhb_loop+0x70/0xc0 [ 484.635559][T17099] ? clear_bhb_loop+0x70/0xc0 [ 484.635584][T17099] asm_int80_emulation+0x1a/0x20 [ 484.635606][T17099] RIP: 0023:0xf71275ab [ 484.635625][T17099] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 484.635646][T17099] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 484.635671][T17099] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 484.635688][T17099] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.635703][T17099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.635730][T17099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 484.635742][T17099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.635761][T17099] [ 484.635769][T17099] [ 484.635774][T17099] Allocated by task 16967: [ 484.635790][T17099] kasan_save_track+0x3e/0x80 [ 484.635810][T17099] __kasan_kmalloc+0x93/0xb0 [ 484.635831][T17099] __kmalloc_cache_noprof+0x321/0x600 [ 484.635851][T17099] dev_ethtool+0x13f/0x29e0 [ 484.635874][T17099] dev_ioctl+0x392/0x1150 [ 484.635896][T17099] compat_sock_ioctl+0xc60/0xcc0 [ 484.635914][T17099] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 484.635934][T17099] __do_fast_syscall_32+0x27a/0x6a0 [ 484.635960][T17099] do_fast_syscall_32+0x33/0x70 [ 484.635986][T17099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.636007][T17099] [ 484.636012][T17099] Freed by task 16967: [ 484.636020][T17099] kasan_save_track+0x3e/0x80 [ 484.636039][T17099] kasan_save_free_info+0x40/0x50 [ 484.636066][T17099] __kasan_slab_free+0x5c/0x80 [ 484.636087][T17099] kfree+0x1c5/0x650 [ 484.636101][T17099] dev_ethtool+0x230e/0x29e0 [ 484.636124][T17099] dev_ioctl+0x392/0x1150 [ 484.636148][T17099] compat_sock_ioctl+0xc60/0xcc0 [ 484.636167][T17099] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 484.636188][T17099] __do_fast_syscall_32+0x27a/0x6a0 [ 484.636217][T17099] do_fast_syscall_32+0x33/0x70 [ 484.636245][T17099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.636269][T17099] [ 484.636274][T17099] The buggy address belongs to the object at ffff88802b72b800 [ 484.636274][T17099] which belongs to the cache kmalloc-256 of size 256 [ 484.636292][T17099] The buggy address is located 24 bytes inside of [ 484.636292][T17099] freed 256-byte region [ffff88802b72b800, ffff88802b72b900) [ 484.636315][T17099] [ 484.636321][T17099] The buggy address belongs to the physical page: [ 484.636338][T17099] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b72a [ 484.636358][T17099] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 484.636375][T17099] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 484.636394][T17099] page_type: f5(slab) [ 484.636418][T17099] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 484.636437][T17099] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 484.636459][T17099] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122 [ 484.636479][T17099] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 484.636500][T17099] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 484.636521][T17099] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 484.636533][T17099] page dumped because: kasan: bad access detected [ 484.636549][T17099] page_owner tracks the page as allocated [ 484.636556][T17099] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17952904297 [ 484.636587][T17099] post_alloc_hook+0x1f9/0x250 [ 484.636603][T17099] get_page_from_freelist+0x2209/0x2280 [ 484.636624][T17099] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 484.636644][T17099] allocate_slab+0x7d/0x620 [ 484.636668][T17099] refill_objects+0x2d5/0x350 [ 484.636692][T17099] __pcs_replace_empty_main+0x2c8/0x6c0 [ 484.636728][T17099] __kmalloc_cache_noprof+0x39b/0x600 [ 484.636747][T17099] bus_add_driver+0x162/0x670 [ 484.636841][T17099] driver_register+0x23a/0x320 [ 484.636893][T17099] i2c_register_driver+0xbb/0x1a0 [ 484.636917][T17099] do_one_initcall+0x250/0x870 [ 484.636946][T17099] do_initcall_level+0x10a/0x1a0 [ 484.636971][T17099] do_initcalls+0x59/0xa0 [ 484.636993][T17099] kernel_init_freeable+0x29d/0x3e0 [ 484.637016][T17099] kernel_init+0x22/0x1d0 [ 484.637036][T17099] ret_from_fork+0x514/0xb70 [ 484.637054][T17099] page_owner free stack trace missing [ 484.637062][T17099] [ 484.637068][T17099] Memory state around the buggy address: [ 484.637080][T17099] ffff88802b72b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 484.637095][T17099] ffff88802b72b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 484.637110][T17099] >ffff88802b72b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.637122][T17099] ^ [ 484.637133][T17099] ffff88802b72b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 484.637148][T17099] ffff88802b72b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 484.637160][T17099] ================================================================== [ 484.727943][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4702'. [ 484.821725][T17099] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.360269][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.1.4703 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.371675][T17099] Tainted: [L]=SOFTLOCKUP [ 485.376030][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.386106][T17099] Call Trace: [ 485.389411][T17099] [ 485.392367][T17099] vpanic+0x56d/0xa60 [ 485.396383][T17099] ? __pfx_vpanic+0x10/0x10 [ 485.400923][T17099] ? __pfx___schedule+0x10/0x10 [ 485.405812][T17099] panic+0xc5/0xd0 [ 485.409579][T17099] ? __pfx_panic+0x10/0x10 [ 485.414037][T17099] ? preempt_schedule_thunk+0x16/0x40 [ 485.419543][T17099] ? dvb_device_open+0xc4/0x340 [ 485.424440][T17099] check_panic_on_warn+0x89/0xb0 [ 485.429410][T17099] ? dvb_device_open+0xc4/0x340 [ 485.434295][T17099] end_report+0x73/0x170 [ 485.438573][T17099] ? dvb_device_open+0xc4/0x340 [ 485.443450][T17099] kasan_report+0x128/0x150 [ 485.447997][T17099] ? dvb_device_open+0xc4/0x340 [ 485.452872][T17099] dvb_device_open+0xc4/0x340 [ 485.457564][T17099] ? do_raw_spin_unlock+0xf5/0x200 [ 485.462701][T17099] chrdev_open+0x4d9/0x600 [ 485.467146][T17099] ? __pfx_chrdev_open+0x10/0x10 [ 485.472119][T17099] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 485.478484][T17099] ? __pfx_chrdev_open+0x10/0x10 [ 485.483462][T17099] do_dentry_open+0x816/0x1380 [ 485.488254][T17099] vfs_open+0x3b/0x340 [ 485.492345][T17099] ? path_openat+0x1428/0x1d60 [ 485.497131][T17099] path_openat+0x1443/0x1d60 [ 485.501761][T17099] do_file_open+0x23e/0x4a0 [ 485.506295][T17099] ? __pfx_do_file_open+0x10/0x10 [ 485.511346][T17099] ? _raw_spin_unlock+0x28/0x50 [ 485.516227][T17099] ? alloc_fd+0x651/0x6c0 [ 485.520597][T17099] do_sys_openat2+0x115/0x200 [ 485.525308][T17099] ? __pfx_do_sys_openat2+0x10/0x10 [ 485.530538][T17099] ? rcu_is_watching+0x16/0xb0 [ 485.535329][T17099] __ia32_compat_sys_openat+0x131/0x160 [ 485.540926][T17099] do_int80_emulation+0x198/0x500 [ 485.545978][T17099] ? trace_irq_disable+0x3b/0x140 [ 485.551018][T17099] ? asm_int80_emulation+0x1a/0x20 [ 485.556150][T17099] ? clear_bhb_loop+0x70/0xc0 [ 485.560854][T17099] ? clear_bhb_loop+0x70/0xc0 [ 485.565551][T17099] asm_int80_emulation+0x1a/0x20 [ 485.570522][T17099] RIP: 0023:0xf71275ab [ 485.574610][T17099] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 485.594242][T17099] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 485.602693][T17099] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 485.610701][T17099] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.618729][T17099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.626719][T17099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 485.634718][T17099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.642725][T17099] [ 485.646403][T17099] Kernel Offset: disabled [ 485.650757][T17099] Rebooting in 86400 seconds..