last executing test programs: 6m56.509370091s ago: executing program 32 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m54.489738856s ago: executing program 33 (id=1895): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xd, 0x2, 0x1, 0x6, 0x7, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 4m43.888282007s ago: executing program 34 (id=3810): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r1}}, 0x30) 4m6.757493775s ago: executing program 6 (id=4417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m6.704691324s ago: executing program 6 (id=4419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) 4m6.619915028s ago: executing program 6 (id=4422): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}}}}}}, 0x0) listen(r0, 0x10001) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x8}}}}}}, 0x0) 4m6.596215279s ago: executing program 6 (id=4423): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='.\x00') 4m6.512415703s ago: executing program 6 (id=4425): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") 4m6.354767228s ago: executing program 6 (id=4428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0x1076, &(0x7f0000000bc0)=ANY=[], 0x0) 4m6.222442195s ago: executing program 35 (id=4428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0x1076, &(0x7f0000000bc0)=ANY=[], 0x0) 3m19.596858924s ago: executing program 1 (id=5026): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d}, 0x14}}, 0x0) 3m19.510028572s ago: executing program 1 (id=5029): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00'], 0x6) 3m19.475324007s ago: executing program 1 (id=5030): mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f24109"], 0xd) 3m19.427424101s ago: executing program 1 (id=5032): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) 3m19.335590847s ago: executing program 1 (id=5037): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33) 3m19.230662934s ago: executing program 1 (id=5038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000c00)={0x1, 0x0, @ioapic={0xa000, 0x7, 0x1, 0x9, 0x0, [{0x40, 0xc, 0xf, '\x00', 0x5}, {0x3, 0x9, 0x67, '\x00', 0x8}, {0xc, 0x2, 0xc, '\x00', 0x8}, {0xf, 0x7, 0x8, '\x00', 0xc}, {0x3, 0x6, 0x6, '\x00', 0x7}, {0x1, 0x1, 0x2, '\x00', 0x40}, {0x7f, 0x2, 0xee, '\x00', 0x5}, {0x5, 0x6, 0x0, '\x00', 0x5}, {0xb, 0x4, 0x0, '\x00', 0x8}, {0x6, 0x3, 0x27, '\x00', 0x5}, {0x7, 0x58, 0x6, '\x00', 0x2}, {0xff, 0xa0, 0x80, '\x00', 0x8}, {0xe, 0xfa, 0x10}, {0x84, 0x40}, {0x3, 0x4, 0x94, '\x00', 0x7}, {0x2, 0x81, 0x7, '\x00', 0xe5}, {0x4, 0x8, 0xe, '\x00', 0x8}, {0x7, 0x8, 0x1, '\x00', 0x1}, {0x6, 0xe, 0x85, '\x00', 0x83}, {0x82, 0x7, 0x9}, {0xbe, 0x6, 0x8, '\x00', 0x9a}, {0x19, 0xfe, 0x4, '\x00', 0x6}, {0x5, 0x3, 0x6, '\x00', 0x2}, {0x2, 0x3, 0x7, '\x00', 0x8}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x8, 0x5f, 0xec, 0x5, 0x3, 0xe, 0xff, 0x2, 0xf7, 0x9, 0x9, 0x10, 0x1, 0xc6, 0x6, 0x1}}) 3m4.202654702s ago: executing program 36 (id=5038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000c00)={0x1, 0x0, @ioapic={0xa000, 0x7, 0x1, 0x9, 0x0, [{0x40, 0xc, 0xf, '\x00', 0x5}, {0x3, 0x9, 0x67, '\x00', 0x8}, {0xc, 0x2, 0xc, '\x00', 0x8}, {0xf, 0x7, 0x8, '\x00', 0xc}, {0x3, 0x6, 0x6, '\x00', 0x7}, {0x1, 0x1, 0x2, '\x00', 0x40}, {0x7f, 0x2, 0xee, '\x00', 0x5}, {0x5, 0x6, 0x0, '\x00', 0x5}, {0xb, 0x4, 0x0, '\x00', 0x8}, {0x6, 0x3, 0x27, '\x00', 0x5}, {0x7, 0x58, 0x6, '\x00', 0x2}, {0xff, 0xa0, 0x80, '\x00', 0x8}, {0xe, 0xfa, 0x10}, {0x84, 0x40}, {0x3, 0x4, 0x94, '\x00', 0x7}, {0x2, 0x81, 0x7, '\x00', 0xe5}, {0x4, 0x8, 0xe, '\x00', 0x8}, {0x7, 0x8, 0x1, '\x00', 0x1}, {0x6, 0xe, 0x85, '\x00', 0x83}, {0x82, 0x7, 0x9}, {0xbe, 0x6, 0x8, '\x00', 0x9a}, {0x19, 0xfe, 0x4, '\x00', 0x6}, {0x5, 0x3, 0x6, '\x00', 0x2}, {0x2, 0x3, 0x7, '\x00', 0x8}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x8, 0x5f, 0xec, 0x5, 0x3, 0xe, 0xff, 0x2, 0xf7, 0x9, 0x9, 0x10, 0x1, 0xc6, 0x6, 0x1}}) 2m53.82227036s ago: executing program 0 (id=5451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 2m53.822023669s ago: executing program 0 (id=5452): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)='\x00', &(0x7f00000001c0)='mqueue\x00']}, 0x0) 2m53.785132087s ago: executing program 0 (id=5453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m51.043042668s ago: executing program 0 (id=5462): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) 2m50.997576332s ago: executing program 0 (id=5456): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) unlink(&(0x7f0000000100)='./file0/file1\x00') 2m50.673808991s ago: executing program 0 (id=5458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48800, 0x1c1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) 2m50.578301215s ago: executing program 37 (id=5458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48800, 0x1c1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) 1m45.842762513s ago: executing program 5 (id=6411): unshare(0x64000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1m45.639587463s ago: executing program 5 (id=6415): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x408, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m45.351269446s ago: executing program 5 (id=6420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) 1m45.162746412s ago: executing program 5 (id=6422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m45.093205185s ago: executing program 5 (id=6424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 1m40.552942901s ago: executing program 5 (id=6475): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 1m40.447802085s ago: executing program 38 (id=6475): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 1m5.079578318s ago: executing program 8 (id=6848): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 1m2.037007586s ago: executing program 8 (id=6902): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfef", 0x4}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m1.917516097s ago: executing program 8 (id=6905): r0 = timerfd_create(0x1, 0x0) r1 = syz_io_uring_setup(0x7e72, &(0x7f0000000340)={0x0, 0xa723, 0x10000, 0x1, 0xc7}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m1.842031492s ago: executing program 8 (id=6906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m1.780909917s ago: executing program 8 (id=6910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x806}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @private=0xa010101, @broadcast}}}, 0x22) 1m1.361274988s ago: executing program 8 (id=6920): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300044d, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0xa}}, 0x20) write$cgroup_int(r0, &(0x7f0000000300)=0x7f, 0xfdef) 1m1.276250805s ago: executing program 39 (id=6920): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300044d, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0xa}}, 0x20) write$cgroup_int(r0, &(0x7f0000000300)=0x7f, 0xfdef) 19.970620977s ago: executing program 3 (id=7427): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3}]}, 0x8) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 19.902473858s ago: executing program 3 (id=7429): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000002640)=0x9) listen(r0, 0x1) accept4(r0, 0x0, 0x0, 0x80800) 19.902128458s ago: executing program 3 (id=7431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0) 19.811851026s ago: executing program 3 (id=7432): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 19.73936636s ago: executing program 3 (id=7434): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 19.472894519s ago: executing program 3 (id=7437): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x445, 0x1003, r1, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) 19.373405006s ago: executing program 40 (id=7437): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x445, 0x1003, r1, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) 2.052360174s ago: executing program 9 (id=7623): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) 1.829625375s ago: executing program 9 (id=7624): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.768661573s ago: executing program 4 (id=7626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.765350362s ago: executing program 2 (id=7627): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}, 0xffffffff}) write$sndseq(r1, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c) 1.703054243s ago: executing program 4 (id=7628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x1, 0x7, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.697565311s ago: executing program 2 (id=7629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1) 1.630672622s ago: executing program 4 (id=7630): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002bc0)='P', 0x1}], 0x1}, 0x4000005) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="c0", 0x1}], 0x1}, 0x4015) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) 1.302334366s ago: executing program 2 (id=7631): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e&my_read_msr1 msr/read_msr', 0x1b) 1.219544646s ago: executing program 2 (id=7632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.15950388s ago: executing program 2 (id=7633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x4}, 0x8) 751.982288ms ago: executing program 4 (id=7639): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 682.975141ms ago: executing program 4 (id=7641): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x14d400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 594.363969ms ago: executing program 9 (id=7645): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x7, 0x400, 0x7}}) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 591.860969ms ago: executing program 7 (id=7646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000"], 0xfdef) 522.703728ms ago: executing program 4 (id=7647): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 472.066536ms ago: executing program 9 (id=7648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/188, 0xbc}, 0x8}, {{&(0x7f0000000540)=@pppoe, 0x80, &(0x7f0000001f00)}, 0x5}], 0x2, 0x40, 0x0) 471.781761ms ago: executing program 9 (id=7649): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 410.952063ms ago: executing program 7 (id=7650): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{@in=@local, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x40004800) 361.777357ms ago: executing program 9 (id=7651): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) 361.611534ms ago: executing program 7 (id=7652): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF ', 0x12) 292.778633ms ago: executing program 2 (id=7653): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 292.555121ms ago: executing program 7 (id=7654): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x28800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 113.118741ms ago: executing program 7 (id=7655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="270086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 0s ago: executing program 7 (id=7656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=7657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) write(r0, &(0x7f0000000400)='!non_existent_event:mod:syz_mod_123\n', 0x24) kernel console output (not intermixed with test programs): [ 481.655705][T22091] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 481.660136][T22091] kvm_intel: FSBase=0000000000000000 GSBase=ffff888096df3000 TRBase=fffffe0000003000 [ 481.663629][T22091] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 481.667021][T22091] kvm_intel: CR0=0000000080050033 CR3=000000005bae4000 CR4=0000000000352ef0 [ 481.670165][T22091] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff81001e70 [ 481.673394][T22091] kvm_intel: EFER= 0x0000000000000d01 [ 481.675396][T22091] kvm_intel: PAT = 0x0407050600070106 [ 481.677668][T22091] kvm_intel: *** Control State *** [ 481.679397][T22091] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 481.682677][T22091] kvm_intel: PinBased=0x0000007f EntryControls=0000d3ff ExitControls=002befff [ 481.685895][T22091] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 481.691003][T22091] kvm_intel: VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 481.694680][T22091] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 481.698116][T22091] kvm_intel: reason=80000021 qualification=0000000000000000 [ 481.700729][T22091] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 481.703151][T22091] kvm_intel: TSC Offset = 0xfffffedb3c9d737e [ 481.705505][T22091] kvm_intel: EPT pointer = 0x00000000719c205e [ 481.708365][T22091] kvm_intel: Virtual processor ID = 0x0001 [ 481.853367][T22108] syzkaller1: entered promiscuous mode [ 481.858124][T22108] syzkaller1: entered allmulticast mode [ 482.546376][ T41] tipc: Node number set to 43690 [ 482.856427][ T3264] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 483.007155][ T3264] usb 12-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 483.012779][ T3264] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 483.017174][ T3264] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 483.023007][ T3264] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.026436][ T3264] usb 12-1: Product: syz [ 483.028322][ T3264] usb 12-1: Manufacturer: syz [ 483.030258][ T3264] usb 12-1: SerialNumber: syz [ 483.251150][ T3264] usblp 12-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 483.496553][ T41] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 483.525106][ T65] block nbd8: Receive control failed (result -107) [ 483.571697][T22213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6760'. [ 483.597064][T22209] block nbd8: shutting down sockets [ 483.662112][ T41] usb 14-1: Using ep0 maxpacket: 8 [ 483.662733][T18967] usb 12-1: USB disconnect, device number 17 [ 483.667760][ T41] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 483.673762][T18967] usblp0: removed [ 483.677256][ T41] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 483.681207][ T41] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.685731][ T41] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.692974][ T41] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.701769][ T41] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.714853][ T41] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.937846][ T41] usb 14-1: usb_control_msg returned -32 [ 483.942167][ T41] usbtmc 14-1:16.0: can't read capabilities [ 484.301155][T22233] usb 14-1: usbtmc_ioctl_clear_in_halt returned -32 [ 484.880748][T22266] input: syz0 as /devices/virtual/input/input64 [ 485.014075][T22275] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6794'. [ 485.444453][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6799'. [ 485.449451][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6799'. [ 485.554566][T22311] tun0: tun_chr_ioctl cmd 1074025675 [ 485.557242][T22311] tun0: persist enabled [ 485.559238][T22311] tun0: tun_chr_ioctl cmd 1074025675 [ 485.561526][T22311] tun0: persist disabled [ 486.064127][T22320] netlink: 27 bytes leftover after parsing attributes in process `syz.7.6806'. [ 486.239702][ T42] kauditd_printk_skb: 132 callbacks suppressed [ 486.239721][ T42] audit: type=1800 audit(1786294668.340:18867): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 486.270435][ T41] usb 14-1: USB disconnect, device number 11 [ 486.380298][ T42] audit: type=1800 audit(1786294668.480:18868): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 486.418358][ T42] audit: type=1800 audit(1786294668.510:18869): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 486.433167][ T42] audit: type=1800 audit(1786294668.530:18870): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 486.562739][ T42] audit: type=1800 audit(1786294668.660:18871): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 486.676507][ T42] audit: type=1800 audit(1786294668.770:18872): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 486.896023][ T42] audit: type=1800 audit(1786294668.990:18873): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 486.914431][ T42] audit: type=1800 audit(1786294669.010:18874): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 486.917690][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 486.924844][T18967] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 486.926083][T18967] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 487.021867][ T42] audit: type=1800 audit(1786294669.120:18875): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 487.088518][ T42] audit: type=1800 audit(1786294669.190:18876): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226445 res=0 errno=0 [ 487.399831][T22357] jffs2: notice: (22357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 487.789061][T22373] syzkaller1: entered promiscuous mode [ 487.791224][T22373] syzkaller1: entered allmulticast mode [ 487.837456][ T850] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 487.846153][T22376] retu-mfd 0-0001: could not read Retu revision: -6 [ 487.849848][T22376] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 487.860443][T22376] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 487.871097][T22376] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 488.006435][ T850] usb 13-1: Using ep0 maxpacket: 8 [ 488.016736][ T850] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.020598][ T850] usb 13-1: config index 0 descriptor too short (expected 74, got 45) [ 488.024978][ T850] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 488.028887][ T850] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.032137][ T850] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 488.036016][ T850] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 488.039584][ T850] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.043796][ T850] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.206830][ T3264] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 488.253519][ T850] usb 13-1: GET_CAPABILITIES returned 0 [ 488.255361][ T850] usbtmc 13-1:16.0: can't read capabilities [ 488.356396][ T3264] usb 14-1: Using ep0 maxpacket: 16 [ 488.359595][ T3264] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 488.365065][ T3264] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.370196][ T3264] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.374460][ T3264] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 488.380122][ T3264] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.385972][ T3264] usb 14-1: config 0 descriptor?? [ 488.457793][ C2] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 488.463450][T22368] usbtmc 13-1:16.0: Unable to send data, error -71 [ 488.467383][T18541] usb 13-1: USB disconnect, device number 8 [ 488.813309][ T3264] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:045E:07DA.0015/input/input65 [ 489.187468][ T3264] microsoft 0003:045E:07DA.0015: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 489.197679][ T3264] usb 14-1: USB disconnect, device number 12 [ 489.266390][ T41] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 489.348599][T22420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6850'. [ 489.437354][ T41] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.441779][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.461596][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.465822][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.471495][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.477110][ T41] usb 7-1: config 0 descriptor?? [ 489.565941][T22428] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6855'. [ 489.570665][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6855'. [ 489.576339][T18541] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 489.726492][T18541] usb 13-1: Using ep0 maxpacket: 8 [ 489.735894][T18541] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.741924][T18541] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 489.744663][T18541] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.750534][T18541] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.754375][T18541] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.762766][T18541] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.774155][T18541] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.800058][T22449] netlink: 'syz.9.6865': attribute type 10 has an invalid length. [ 489.819393][T22449] syz_tun: entered promiscuous mode [ 489.821562][T22449] syz_tun: entered allmulticast mode [ 489.839604][T22449] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 489.895957][ T41] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 490.029443][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6870'. [ 490.039563][T22461] gretap1: entered promiscuous mode [ 490.159983][ T850] usb 7-1: USB disconnect, device number 5 [ 491.131592][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6878'. [ 491.135245][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6878'. [ 491.252341][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 491.252362][ T42] audit: type=1800 audit(1786294673.350:18992): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 491.321792][ T42] audit: type=1800 audit(1786294673.420:18993): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 491.330657][ T42] audit: type=1800 audit(1786294673.430:18994): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 491.378572][ T42] audit: type=1800 audit(1786294673.480:18995): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 491.395538][ T42] audit: type=1800 audit(1786294673.490:18996): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 491.432087][ T42] audit: type=1800 audit(1786294673.530:18997): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 491.560850][ T42] audit: type=1800 audit(1786294673.660:18998): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 491.592571][ T42] audit: type=1800 audit(1786294673.690:18999): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 491.947337][ T42] audit: type=1800 audit(1786294674.050:19000): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 491.964913][ T42] audit: type=1800 audit(1786294674.060:19001): pid=22509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6888" name="max_speed" dev="configfs" ino=101019 res=0 errno=0 [ 492.007891][T22511] loop5: detected capacity change from 0 to 7 [ 492.011370][T22511] Dev loop5: unable to read RDB block 7 [ 492.013925][T22511] loop5: unable to read partition table [ 492.019587][T22511] loop5: partition table beyond EOD, truncated [ 492.026356][T22511] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 492.225713][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6891'. [ 492.228894][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6901'. [ 492.373004][ T5821] usb 13-1: USB disconnect, device number 9 [ 493.063683][T22571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.151398][T10901] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.159063][T10901] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.273069][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.289380][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.293361][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.305133][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.308434][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.347574][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.351930][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.355964][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.361857][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.365122][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.455874][T10901] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.460622][T10901] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.571295][T10901] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.575584][T10901] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.685022][T10901] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.688339][T10901] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.828330][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6925'. [ 493.834590][T22601] jffs2: notice: (22601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 494.001337][T22611] jffs2: notice: (22611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 494.183409][ T34] IPVS: starting estimator thread 0... [ 494.307955][T22626] IPVS: using max 28 ests per chain, 67200 per kthread [ 494.360803][T10901] bond0 (unregistering): Released all slaves [ 494.425296][T22577] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.432472][T22577] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.440888][T22577] bridge_slave_0: entered allmulticast mode [ 494.448087][T22577] bridge_slave_0: entered promiscuous mode [ 494.478063][T22577] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.480433][T22577] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.482758][T22577] bridge_slave_1: entered allmulticast mode [ 494.486588][T22577] bridge_slave_1: entered promiscuous mode [ 494.574978][T22577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.584568][T22577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.640004][T22577] team0: Port device team_slave_0 added [ 494.663740][T22577] team0: Port device team_slave_1 added [ 494.678802][T22638] jffs2: notice: (22638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 494.727384][T22577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.730191][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.739214][T22577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.743829][T22577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.746171][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.775698][T22577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.845428][T22577] hsr_slave_0: entered promiscuous mode [ 494.864401][T22577] hsr_slave_1: entered promiscuous mode [ 494.867548][T22577] debugfs: 'hsr0' already exists in 'hsr' [ 494.871978][T22577] Cannot create hsr debugfs directory [ 494.938025][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 495.009298][T22657] netlink: 'syz.9.6945': attribute type 4 has an invalid length. [ 495.258141][T22669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6947'. [ 495.330277][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 495.466547][ T5097] Bluetooth: hci2: command tx timeout [ 495.623347][T22682] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 495.645958][T10901] hsr_slave_0: left promiscuous mode [ 495.660766][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 495.671848][T10901] hsr_slave_1: left promiscuous mode [ 495.693049][T10901] veth1_vlan: left promiscuous mode [ 495.694766][T10901] veth0_vlan: left promiscuous mode [ 495.816761][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 495.819191][ T41] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 495.823551][ T41] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 495.827309][ T41] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.830474][ T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.833523][ T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 495.837091][ T41] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.841102][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.055782][ T41] usb 7-1: usb_control_msg returned -32 [ 496.058469][ T41] usbtmc 7-1:16.0: can't read capabilities [ 496.202460][T22680] syzkaller1: entered promiscuous mode [ 496.205118][T22680] syzkaller1: entered allmulticast mode [ 496.409071][T22698] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 496.512707][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 496.517810][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 496.517821][ T42] audit: type=1800 audit(1786294678.620:19098): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 496.612794][T10290] usb 7-1: USB disconnect, device number 6 [ 496.728465][ T42] audit: type=1800 audit(1786294678.830:19099): pid=22577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 496.744110][ T42] audit: type=1800 audit(1786294678.830:19100): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=247320 res=0 errno=0 [ 496.823406][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 496.833179][T10901] IPVS: stop unused estimator thread 0... [ 496.868566][T22577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 496.874785][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.878583][T22577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 496.885248][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.889482][T22577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.895646][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.899291][T22577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.903734][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.985954][T22577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.986365][ T42] audit: type=1800 audit(1786294679.070:19101): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 497.001332][T22577] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.013043][T18642] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.015566][T18642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.021124][T18642] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.023257][T18642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.165960][ T42] audit: type=1800 audit(1786294679.260:19102): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 497.278907][ T42] audit: type=1800 audit(1786294679.380:19103): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 497.325716][ T42] audit: type=1800 audit(1786294679.420:19104): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 497.375231][T22738] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 497.422406][ T42] audit: type=1800 audit(1786294679.520:19105): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 497.459104][ T42] audit: type=1800 audit(1786294679.560:19106): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 497.548810][ T5097] Bluetooth: hci2: command tx timeout [ 497.574943][ T42] audit: type=1800 audit(1786294679.670:19107): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 497.757587][T22577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.810051][T22577] veth0_vlan: entered promiscuous mode [ 497.859758][T22577] veth1_vlan: entered promiscuous mode [ 497.915734][T22577] veth0_macvtap: entered promiscuous mode [ 497.932628][T22577] veth1_macvtap: entered promiscuous mode [ 497.942599][T22577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.042055][T22577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.057409][T10900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.061203][T10900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.077837][T10907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.117989][T10907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.154086][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.176792][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.245057][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.248062][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.286418][ T61] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 498.456421][T18967] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 498.456780][ T61] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 498.466522][ T61] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.469744][ T61] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 498.483043][ T61] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.488881][ T61] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 498.491536][ T61] usb 14-1: Product: syz [ 498.492925][ T61] usb 14-1: Manufacturer: syz [ 498.501931][T22778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 498.505596][ T61] garmin_gps 14-1:1.0: Garmin GPS usb/tty converter detected [ 498.520964][ T61] usb 14-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 498.607085][T18967] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.612216][T18967] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 498.615871][T18967] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 70, changing to 10 [ 498.620897][T18967] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42393, setting to 1024 [ 498.629844][T18967] usb 12-1: config 0 interface 0 has no altsetting 0 [ 498.636953][T18967] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 498.642491][T18967] usb 12-1: Product: syz [ 498.644392][T18967] usb 12-1: Manufacturer: syz [ 498.647726][T18967] usb 12-1: SerialNumber: syz [ 498.650842][T22808] Bluetooth: MGMT ver 1.23 [ 498.652717][T18967] usb 12-1: config 0 descriptor?? [ 498.655840][T22787] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 498.663895][T18967] hub 12-1:0.0: bad descriptor, ignoring hub [ 498.666719][T18967] hub 12-1:0.0: probe with driver hub failed with error -5 [ 498.672346][T18967] usb 12-1: selecting invalid altsetting 0 [ 498.730172][ T10] usb 14-1: USB disconnect, device number 13 [ 498.761315][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 498.769869][ T10] garmin_gps 14-1:1.0: device disconnected [ 498.820160][T22818] bridge_slave_0: left allmulticast mode [ 498.822558][T22818] bridge_slave_0: left promiscuous mode [ 498.825251][T22818] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.849381][T22818] bridge_slave_1: left allmulticast mode [ 498.852545][T22818] bridge_slave_1: left promiscuous mode [ 498.855166][T22818] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.864704][T22818] bond0: (slave bond_slave_0): Releasing backup interface [ 498.881908][T22818] bond0: (slave bond_slave_1): Releasing backup interface [ 498.902471][T22818] team0: Port device team_slave_0 removed [ 498.909942][T22818] team0: Port device team_slave_1 removed [ 498.913078][T22818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.916172][T22818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.922878][T22818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.925635][T22818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.932047][T22818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.436140][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6992'. [ 499.447147][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6992'. [ 499.596619][T22787] usb 12-1: reset high-speed USB device number 18 using dummy_hcd [ 499.629361][T22875] netlink: 'syz.3.6997': attribute type 5 has an invalid length. [ 499.636691][ T5097] Bluetooth: hci2: command tx timeout [ 499.646392][T22875] netlink: 'syz.3.6997': attribute type 9 has an invalid length. [ 499.650824][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6997'. [ 499.651697][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 499.755813][T22887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7001'. [ 499.802767][T22822] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 500.028396][T22822] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 500.076872][T22901] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 500.080203][T22901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.086382][T18595] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 500.127910][T22903] loop7: detected capacity change from 0 to 7 [ 500.223033][T22903] Dev loop7: unable to read RDB block 7 [ 500.225367][T22903] loop7: unable to read partition table [ 500.229082][T22903] loop7: partition table beyond EOD, truncated [ 500.231811][T22903] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 500.241962][T18920] usb 12-1: USB disconnect, device number 18 [ 500.247162][T18595] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.252839][T18595] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.257507][T18595] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.261490][T18595] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.267004][T18595] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.274557][T18595] usb 14-1: config 0 descriptor?? [ 500.353259][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.358612][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.362023][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.365280][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.370468][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.373868][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.377309][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.380706][ T5147] ldm_validate_partition_table(): Disk read failed. [ 500.383562][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.387520][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.390771][ T5147] Buffer I/O error on dev loop7, logical block 0, async page read [ 500.394009][ T5147] Dev loop7: unable to read RDB block 0 [ 500.396717][ T5147] loop7: unable to read partition table [ 500.399282][ T5147] loop7: partition table beyond EOD, truncated [ 500.585806][T22910] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 500.705016][T18595] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 500.958467][T18967] usb 14-1: USB disconnect, device number 14 [ 500.991847][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.994366][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.248601][T22886] Set syz1 is full, maxelem 65536 reached [ 501.308513][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7025'. [ 501.318634][T22941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7025'. [ 501.321810][T22941] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 501.570076][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 501.570104][ T42] audit: type=1800 audit(1786294683.670:19225): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 501.583472][ T42] audit: type=1800 audit(1786294683.680:19226): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 501.778469][ T42] audit: type=1800 audit(1786294683.880:19227): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 501.817015][T18595] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 501.819477][ T42] audit: type=1800 audit(1786294683.920:19228): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 501.986612][T18595] usb 7-1: Using ep0 maxpacket: 16 [ 501.989677][T18595] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 501.994485][T18595] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 501.998793][T18595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.003236][T18595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.007259][T18595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 502.012421][T18595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.018680][ T42] audit: type=1800 audit(1786294684.120:19229): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249295 res=0 errno=0 [ 502.026880][ T42] audit: type=1800 audit(1786294684.120:19230): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249324 res=0 errno=0 [ 502.027260][T18595] usb 7-1: config 0 descriptor?? [ 502.035320][ T42] audit: type=1800 audit(1786294684.120:19231): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249302 res=0 errno=0 [ 502.035366][ T42] audit: type=1800 audit(1786294684.120:19232): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249303 res=0 errno=0 [ 502.035402][ T42] audit: type=1800 audit(1786294684.120:19233): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=249304 res=0 errno=0 [ 502.066478][ T42] audit: type=1800 audit(1786294684.170:19234): pid=21837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249344 res=0 errno=0 [ 502.483612][T18595] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0018/input/input66 [ 502.579372][T18595] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.0018/input/input67 [ 502.628349][T18595] kye 0003:0458:5013.0018: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 502.682073][T18595] usb 7-1: USB disconnect, device number 7 [ 503.305360][T22972] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7037'. [ 503.706581][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.708708][T22961] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 504.573722][T22961] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 504.578834][T22961] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 504.749003][T23013] syzkaller1: entered promiscuous mode [ 504.751432][T23013] syzkaller1: entered allmulticast mode [ 505.076709][T18920] e1000 0000:00:06.0 eth0: Reset adapter [ 505.186667][T18920] e1000 0000:00:06.0 eth0: Reset adapter [ 505.786520][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 507.307416][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 507.866401][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.828368][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 515.828386][ T42] audit: type=1800 audit(1786294697.930:19298): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 515.898595][ T42] audit: type=1800 audit(1786294698.000:19299): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 515.916526][ T42] audit: type=1800 audit(1786294698.000:19300): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 515.928142][ T42] audit: type=1800 audit(1786294698.020:19301): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 515.967656][ T42] audit: type=1800 audit(1786294698.070:19302): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16196 res=0 errno=0 [ 515.982220][ T42] audit: type=1800 audit(1786294698.080:19303): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 516.013201][ T42] audit: type=1800 audit(1786294698.090:19304): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 516.028854][ T42] audit: type=1800 audit(1786294698.110:19305): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 516.035868][ T42] audit: type=1800 audit(1786294698.130:19306): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249850 res=0 errno=0 [ 516.046512][ T42] audit: type=1800 audit(1786294698.140:19307): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=249865 res=0 errno=0 [ 516.062627][T23124] input: syz0 as /devices/virtual/input/input68 [ 516.172280][T23131] No fuse device found [ 516.172946][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7088'. [ 516.182572][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7088'. [ 516.538593][T18566] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 516.687094][T18566] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.690897][T18566] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 516.694620][T18566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 516.698072][T18566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 516.701169][T18566] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.705218][T18566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.710394][T18566] usb 7-1: config 0 descriptor?? [ 516.970372][T23181] syzkaller1: entered promiscuous mode [ 516.973103][T23181] syzkaller1: entered allmulticast mode [ 517.287335][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.290526][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.293049][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.295452][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.298059][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.301289][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.304320][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.308415][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.310806][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.313205][T18566] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 517.323524][T18566] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 517.413309][ T5838] usb 7-1: USB disconnect, device number 8 [ 517.906000][T23186] fido_id[23186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 518.297768][T23203] netlink: 'syz.7.7113': attribute type 11 has an invalid length. [ 518.391003][T23208] all (unregistering): Released all slaves [ 518.845588][T23242] jffs2: notice: (23242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 518.949033][T18566] hid-generic 0006:0008:0001.001A: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 518.991586][T23250] fido_id[23250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 519.862880][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7163'. [ 520.126696][T23324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7167'. [ 520.356415][T18566] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 520.506670][T18566] usb 12-1: Using ep0 maxpacket: 16 [ 520.509575][T18566] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.513660][T18566] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.517348][T18566] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.520489][T18566] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.524543][T18566] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.528980][T18566] usb 12-1: config 0 descriptor?? [ 520.946216][ T42] kauditd_printk_skb: 660 callbacks suppressed [ 520.949159][ T42] audit: type=1800 audit(1786294703.040:19968): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250856 res=0 errno=0 [ 520.950543][T18566] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:045E:07DA.001B/input/input69 [ 520.957352][ T42] audit: type=1800 audit(1786294703.050:19969): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250873 res=0 errno=0 [ 520.967020][ T42] audit: type=1800 audit(1786294703.060:19970): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=250889 res=0 errno=0 [ 520.972790][ T42] audit: type=1800 audit(1786294703.060:19971): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=250892 res=0 errno=0 [ 520.979345][ T42] audit: type=1800 audit(1786294703.060:19972): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=250891 res=0 errno=0 [ 520.985168][ T42] audit: type=1800 audit(1786294703.060:19973): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=250890 res=0 errno=0 [ 520.991322][ T42] audit: type=1800 audit(1786294703.060:19974): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=250881 res=0 errno=0 [ 520.997614][ T42] audit: type=1800 audit(1786294703.060:19975): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=250884 res=0 errno=0 [ 521.003384][ T42] audit: type=1800 audit(1786294703.060:19976): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=250839 res=0 errno=0 [ 521.010734][ T42] audit: type=1800 audit(1786294703.060:19977): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=250842 res=0 errno=0 [ 521.033581][T18566] microsoft 0003:045E:07DA.001B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 521.150190][T16863] usb 12-1: USB disconnect, device number 19 [ 521.682256][T23337] netlink: 'syz.2.7175': attribute type 10 has an invalid length. [ 521.691076][T23337] tipc: Resetting bearer [ 521.698287][T23337] syz_tun: entered promiscuous mode [ 521.702809][T23337] tipc: Resetting bearer [ 521.708038][T23337] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 521.740103][T23337] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 521.890677][T23352] bond0: (slave syz_tun): Releasing backup interface [ 521.898703][T23352] syz_tun: left promiscuous mode [ 521.903797][T23352] syz_tun: left allmulticast mode [ 521.915883][T23352] bridge_slave_0: left allmulticast mode [ 521.918902][T23352] bridge_slave_0: left promiscuous mode [ 521.921337][T23352] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.925806][T23352] bridge_slave_1: left allmulticast mode [ 521.927690][T23352] bridge_slave_1: left promiscuous mode [ 521.929596][T23352] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.945982][T23352] bond0: (slave bond_slave_0): Releasing backup interface [ 521.952078][T23352] bond_slave_0: left promiscuous mode [ 521.954654][T23352] bond_slave_0: left allmulticast mode [ 521.967696][T23352] bond0: (slave bond_slave_1): Releasing backup interface [ 521.979422][T23352] bond_slave_1: left promiscuous mode [ 521.982008][T23352] bond_slave_1: left allmulticast mode [ 521.998067][T23352] team0: Port device team_slave_0 removed [ 522.006974][T23352] team0: Port device team_slave_1 removed [ 522.010445][T23352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.013732][T23352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.020924][T23352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.023530][T23352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.034660][T23352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.460716][T23368] jffs2: notice: (23368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 522.571254][T23374] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 522.757272][T21742] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 522.769447][ T3264] IPVS: starting estimator thread 0... [ 522.867724][T23382] IPVS: using max 44 ests per chain, 105600 per kthread [ 522.932875][T21742] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 522.937155][T21742] usb 14-1: config 0 has an invalid interface number: 50 but max is 0 [ 522.940325][T21742] usb 14-1: config 0 has no interface number 0 [ 522.942734][T21742] usb 14-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.953246][T21742] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.959160][T21742] usb 14-1: Product: syz [ 522.961057][T21742] usb 14-1: Manufacturer: syz [ 522.962876][T21742] usb 14-1: SerialNumber: syz [ 522.968292][T21742] usb 14-1: config 0 descriptor?? [ 523.009400][T21742] yurex 14-1:0.50: USB YUREX device now attached to Yurex #0 [ 523.238788][ C3] usb 14-1: yurex_control_callback - control failed: -71 [ 523.239537][ T850] usb 14-1: USB disconnect, device number 15 [ 523.252381][ T850] yurex 14-1:0.50: USB YUREX #0 now disconnected [ 523.842394][T23404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7200'. [ 523.845456][T23404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7200'. [ 523.866699][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7201'. [ 523.875514][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7201'. [ 523.950113][T23412] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 523.952954][T23412] CPU: 0 UID: 0 PID: 23412 Comm: syz.2.7203 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.952977][T23412] Tainted: [L]=SOFTLOCKUP [ 523.952982][T23412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.952990][T23412] Call Trace: [ 523.952996][T23412] [ 523.953001][T23412] dump_stack_lvl+0x100/0x190 [ 523.953023][T23412] sysfs_warn_dup.cold+0x1c/0x28 [ 523.953045][T23412] sysfs_create_dir_ns+0x24b/0x2b0 [ 523.953066][T23412] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.953084][T23412] ? find_held_lock+0x2b/0x80 [ 523.953102][T23412] ? kobject_add_internal+0x25f/0x930 [ 523.953115][T23412] ? kobject_add_internal+0x25f/0x930 [ 523.953127][T23412] ? class_dir_child_ns_type+0xd/0x60 [ 523.953149][T23412] kobject_add_internal+0x2c8/0x930 [ 523.953163][T23412] kobject_add+0x16a/0x1e0 [ 523.953175][T23412] ? __pfx_kobject_add+0x10/0x10 [ 523.953187][T23412] ? get_device_parent+0x1b3/0x4c0 [ 523.953204][T23412] ? kobject_put+0xb9/0x640 [ 523.953220][T23412] device_add+0x294/0x1970 [ 523.953232][T23412] ? lockdep_init_map_type+0x5c/0x250 [ 523.953243][T23412] ? __pfx_device_add+0x10/0x10 [ 523.953253][T23412] ? lockdep_init_map_type+0x5c/0x250 [ 523.953268][T23412] ? __init_waitqueue_head+0xca/0x150 [ 523.953284][T23412] tty_register_device_attr+0x388/0x7f0 [ 523.953304][T23412] ? lockdep_init_map_type+0x5c/0x250 [ 523.953316][T23412] ? __pfx_tty_register_device_attr+0x10/0x10 [ 523.953336][T23412] ? tty_port_init+0x156/0x1c0 [ 523.953357][T23412] gsm_activate_mux+0x155/0x2a0 [ 523.953375][T23412] gsmld_ioctl+0xbbc/0x15c0 [ 523.953392][T23412] ? __pfx_gsmld_ioctl+0x10/0x10 [ 523.953414][T23412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 523.953435][T23412] ? __pfx_gsmld_ioctl+0x10/0x10 [ 523.953445][T23412] tty_compat_ioctl+0x396/0x420 [ 523.953459][T23412] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 523.953475][T23412] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 523.953494][T23412] __do_fast_syscall_32+0xe7/0x970 [ 523.953514][T23412] do_fast_syscall_32+0x32/0x70 [ 523.953531][T23412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.953545][T23412] RIP: 0023:0xf6ffefec [ 523.953560][T23412] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 523.953566][T23412] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 523.953577][T23412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 523.953584][T23412] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.953590][T23412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.953596][T23412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 523.953602][T23412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.953615][T23412] [ 523.953628][T23412] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 524.106430][ T5852] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 524.280556][ T5852] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.285649][ T5852] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 524.288134][ T5852] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.291214][ T5852] usb 14-1: config 0 interface 0 has no altsetting 0 [ 524.295334][ T5852] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 524.298186][ T5852] usb 14-1: Product: syz [ 524.299784][ T5852] usb 14-1: Manufacturer: syz [ 524.301553][ T5852] usb 14-1: SerialNumber: syz [ 524.316046][ T5852] usb 14-1: config 0 descriptor?? [ 524.352463][ T5852] hub 14-1:0.0: bad descriptor, ignoring hub [ 524.358509][ T5852] hub 14-1:0.0: probe with driver hub failed with error -5 [ 524.376510][ T5852] usb 14-1: selecting invalid altsetting 0 [ 524.637338][ T5838] usb 14-1: USB disconnect, device number 16 [ 524.844329][T23446] netlink: 83 bytes leftover after parsing attributes in process `syz.2.7218'. [ 525.067967][T23454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 525.079176][T23454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 525.209586][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7227'. [ 525.234608][T23463] netlink: 'syz.9.7227': attribute type 2 has an invalid length. [ 525.257984][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7229'. [ 525.477875][T23481] jffs2: notice: (23481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 525.609601][T21742] libceph: connect (2)127.0.0.1:6789 error -101 [ 525.613258][T21742] libceph: ceph_tcp_connect failed: -101 [ 525.615846][T21742] libceph: mon0 (2)127.0.0.1:6789 connect error [ 525.876471][T21742] libceph: connect (2)127.0.0.1:6789 error -101 [ 525.884212][T21742] libceph: ceph_tcp_connect failed: -101 [ 525.889525][T21742] libceph: mon0 (2)127.0.0.1:6789 connect error [ 525.952917][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 525.952937][ T42] audit: type=1800 audit(1786294708.050:20150): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 525.970563][ T42] audit: type=1800 audit(1786294708.070:20151): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16196 res=0 errno=0 [ 526.025829][ T42] audit: type=1800 audit(1786294708.120:20152): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 526.044035][ T42] audit: type=1800 audit(1786294708.140:20153): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16196 res=0 errno=0 [ 526.086342][ T42] audit: type=1800 audit(1786294708.180:20154): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 526.146036][ T42] audit: type=1800 audit(1786294708.240:20155): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253817 res=0 errno=0 [ 526.211224][ T42] audit: type=1800 audit(1786294708.310:20156): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 526.215152][T23522] device-mapper: ioctl: Unable to rename non-existent device, to j f [ 526.241304][ T42] audit: type=1800 audit(1786294708.340:20157): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16196 res=0 errno=0 [ 526.279036][ T42] audit: type=1800 audit(1786294708.380:20158): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 526.295965][T23526] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7254'. [ 526.297288][ T42] audit: type=1800 audit(1786294708.400:20159): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16196 res=0 errno=0 [ 526.396415][T21742] libceph: connect (2)127.0.0.1:6789 error -101 [ 526.398808][T21742] libceph: ceph_tcp_connect failed: -101 [ 526.400810][T21742] libceph: mon0 (2)127.0.0.1:6789 connect error [ 526.427575][T23489] ceph: No mds server is up or the cluster is laggy [ 526.452931][T23536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.456103][T23536] IPv6: NLM_F_CREATE should be set when creating new route [ 526.466777][ T850] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 526.648177][ T850] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.653341][ T850] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.658067][ T850] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.666362][ T850] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.677685][ T850] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 526.683035][ T850] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 526.690907][ T850] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.694422][ T850] usb 12-1: Product: syz [ 526.696013][ T850] usb 12-1: Manufacturer: syz [ 526.700614][ T850] cdc_wdm 12-1:1.0: skipping garbage [ 526.702544][ T850] cdc_wdm 12-1:1.0: skipping garbage [ 526.706107][ T850] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 526.708503][ T850] cdc_wdm 12-1:1.0: Unknown control protocol [ 526.927237][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.930265][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.932966][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.935685][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.938593][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.941160][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.944056][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.946697][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.949414][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.952338][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.955218][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.958091][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.960838][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.963584][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.966403][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.969154][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.972041][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.974839][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.977738][ C0] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 526.980526][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 526.988963][ T5838] usb 12-1: USB disconnect, device number 20 [ 526.991827][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 527.217692][T23576] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7275'. [ 527.461651][T23588] batadv_slave_1: entered promiscuous mode [ 527.465709][T23587] batadv_slave_1: left promiscuous mode [ 528.405353][T23666] loop3: detected capacity change from 0 to 7 [ 528.439271][T23666] Dev loop3: unable to read RDB block 7 [ 528.441772][T23666] loop3: unable to read partition table [ 528.444297][T23666] loop3: partition table beyond EOD, truncated [ 528.450018][T23666] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 528.852792][T23690] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 528.855426][T23690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 528.873254][T23690] vhci_hcd vhci_hcd.0: Device attached [ 528.889600][T23693] vhci_hcd: connection closed [ 528.892461][ T13] vhci_hcd vhci_hcd.9: stop threads [ 528.898527][ T13] vhci_hcd vhci_hcd.9: release socket [ 528.903629][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 529.142484][T23701] Bluetooth: hci0: load_link_keys: too big key_count value 49152 [ 529.688083][T23668] syz.7.7307 (23668) used greatest stack depth: 19016 bytes left [ 530.074764][T23725] netlink: 'syz.9.7338': attribute type 5 has an invalid length. [ 530.136776][T23728] netlink: 'syz.9.7338': attribute type 5 has an invalid length. [ 530.246426][ T5852] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 530.411195][ T5852] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 530.415371][ T5852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.419899][ T5852] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 530.423488][ T5852] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.430395][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 530.435368][ T5852] usb 7-1: Product: syz [ 530.437621][ T5852] usb 7-1: Manufacturer: syz [ 530.458487][T23720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.465978][ T5852] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 530.477812][ T5852] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 530.683824][ T5852] usb 7-1: USB disconnect, device number 9 [ 530.702766][ T5852] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 530.709518][ T5852] garmin_gps 7-1:1.0: device disconnected [ 531.040754][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 531.040767][ T42] audit: type=1800 audit(1786294713.140:20265): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.087765][ T42] audit: type=1800 audit(1786294713.190:20266): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.133051][ T42] audit: type=1800 audit(1786294713.230:20267): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.153844][T23755] tipc: Started in network mode [ 531.155506][T23755] tipc: Node identity ac14140f, cluster identity 4711 [ 531.168104][T23755] tipc: New replicast peer: 255.255.255.255 [ 531.170690][T23755] tipc: Enabled bearer , priority 10 [ 531.214568][ T42] audit: type=1800 audit(1786294713.310:20268): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.241785][ T42] audit: type=1800 audit(1786294713.340:20269): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 531.303474][ T42] audit: type=1800 audit(1786294713.400:20270): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 531.333435][ T42] audit: type=1800 audit(1786294713.430:20271): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.337758][T23766] syzkaller1: entered promiscuous mode [ 531.343468][T23766] syzkaller1: entered allmulticast mode [ 531.417221][ T42] audit: type=1800 audit(1786294713.520:20272): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.459792][ T42] audit: type=1800 audit(1786294713.560:20273): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 531.485323][T23775] device-mapper: ioctl: Unable to rename non-existent device, to [ 531.517426][ T42] audit: type=1800 audit(1786294713.610:20274): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 531.521137][T23777] IPv6: A: Disabled Multicast RS [ 531.587000][T23782] netlink: 'syz.3.7365': attribute type 3 has an invalid length. [ 531.618772][T23785] jffs2: notice: (23785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 531.716422][T18968] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 531.735493][ T65] block nbd2: Receive control failed (result -107) [ 531.811473][T23414] block nbd2: shutting down sockets [ 531.867310][T18968] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 531.871836][T18968] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 531.880083][T18968] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.893034][T18968] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.897112][T18968] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 531.899866][T23803] vlan2: entered allmulticast mode [ 531.903511][T23803] bond0: entered allmulticast mode [ 531.905076][T18968] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 531.905726][T23803] bond_slave_0: entered allmulticast mode [ 531.908451][T18968] usb 14-1: Manufacturer: syz [ 531.911491][T23803] bond_slave_1: entered allmulticast mode [ 531.917234][T23803] bridge0: port 3(vlan2) entered blocking state [ 531.918011][T18968] usb 14-1: config 0 descriptor?? [ 531.924248][T23803] bridge0: port 3(vlan2) entered disabled state [ 531.924555][T23806] loop5: detected capacity change from 0 to 7 [ 531.928924][T23803] vlan2: entered promiscuous mode [ 531.930861][T23806] Dev loop5: unable to read RDB block 7 [ 531.931230][T23803] bond0: entered promiscuous mode [ 531.935297][T23803] bond_slave_0: entered promiscuous mode [ 531.936398][T23806] loop5: unable to read partition table [ 531.938051][T23803] bond_slave_1: entered promiscuous mode [ 531.940096][T23806] loop5: partition table beyond EOD, truncated [ 531.948064][T23806] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 532.283988][T23826] kvm: apic: phys broadcast and lowest prio [ 532.300907][ T5838] tipc: Node number set to 2886997007 [ 532.345506][T18968] hid_parser_main: 23 callbacks suppressed [ 532.345528][T18968] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 532.355500][T18968] appleir 0003:05AC:8243.001C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 532.603624][ T5838] usb 14-1: USB disconnect, device number 17 [ 533.101558][T23871] input: syz1 as /devices/virtual/input/input70 [ 533.135230][T23873] syzkaller1: entered promiscuous mode [ 533.137669][T23873] syzkaller1: entered allmulticast mode [ 533.426391][T18968] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 533.576855][T18968] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 533.581771][T18968] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.585906][T18968] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 533.589671][T18968] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.596011][T18968] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 533.599069][T18968] usb 14-1: Product: syz [ 533.600903][T18968] usb 14-1: Manufacturer: syz [ 533.604976][T23875] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 533.609943][T18968] garmin_gps 14-1:1.0: Garmin GPS usb/tty converter detected [ 533.617772][T18968] usb 14-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 533.826944][T18968] usb 14-1: USB disconnect, device number 18 [ 533.839927][T18968] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 533.848299][T18968] garmin_gps 14-1:1.0: device disconnected [ 534.227496][T23903] team0: Device ipvlan2 failed to register rx_handler [ 534.346603][ T5828] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 534.509356][ T5828] usb 12-1: Using ep0 maxpacket: 8 [ 534.520085][ T5828] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 534.540931][ T5828] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 534.560158][ T5828] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 534.573018][ T5828] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 534.579759][ T5828] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.585467][ T5828] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.628838][T23934] netlink: 'syz.9.7433': attribute type 11 has an invalid length. [ 534.802318][ T5828] usb 12-1: GET_CAPABILITIES returned 0 [ 534.805027][ T5828] usbtmc 12-1:16.0: can't read capabilities [ 534.933162][T22577] syz-executor (22577) used greatest stack depth: 18688 bytes left [ 535.008361][ T5828] usb 12-1: USB disconnect, device number 21 [ 535.113784][T10900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.168963][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.190830][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.202369][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.210933][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.216685][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.374289][T10900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.579657][T10900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.738548][T10900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.945140][T23943] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.948465][T23943] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.951242][T23943] bridge_slave_0: entered allmulticast mode [ 535.954462][T23943] bridge_slave_0: entered promiscuous mode [ 536.120049][T10900] bond0 (unregistering): Released all slaves [ 536.124790][T23943] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.127642][T23943] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.130788][T23943] bridge_slave_1: entered allmulticast mode [ 536.135532][T23943] bridge_slave_1: entered promiscuous mode [ 536.163075][T23943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.176828][T23943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.220500][T23943] team0: Port device team_slave_0 added [ 536.224742][T23943] team0: Port device team_slave_1 added [ 536.258427][T23943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.260861][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.269785][T23943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.276190][T23943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.278643][T23943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.289554][T23943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.354158][T23943] hsr_slave_0: entered promiscuous mode [ 536.359202][T23943] hsr_slave_1: entered promiscuous mode [ 536.360880][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 536.360895][ T42] audit: type=1800 audit(1786294718.460:20379): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248567 res=0 errno=0 [ 536.362093][T23943] debugfs: 'hsr0' already exists in 'hsr' [ 536.374829][T23943] Cannot create hsr debugfs directory [ 536.486455][T10900] hsr_slave_0: left promiscuous mode [ 536.488896][T10900] hsr_slave_1: left promiscuous mode [ 536.494947][T10900] veth1_macvtap: left promiscuous mode [ 536.498093][T10900] veth0_macvtap: left promiscuous mode [ 536.500104][T10900] veth1_vlan: left promiscuous mode [ 536.501897][T10900] veth0_vlan: left promiscuous mode [ 536.958412][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 536.974595][ T42] audit: type=1800 audit(1786294719.070:20380): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 537.173590][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 537.306407][ T5097] Bluetooth: hci2: command tx timeout [ 537.336026][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 537.521509][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 537.581355][T10900] IPVS: stop unused estimator thread 0... [ 538.037869][ T42] audit: type=1800 audit(1786294720.140:20381): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 538.044937][ T42] audit: type=1800 audit(1786294720.140:20382): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=262952 res=0 errno=0 [ 538.126997][T23943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.131453][T23943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.134291][T23943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 538.139217][T23943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.142402][T23943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.146482][T23943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.150070][T23943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.155712][T23943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.198026][T23943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.211475][T23943] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.217434][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.219951][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.229886][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.232934][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.633241][T23943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.796606][T23943] veth0_vlan: entered promiscuous mode [ 538.802583][T23943] veth1_vlan: entered promiscuous mode [ 538.818752][T23943] veth0_macvtap: entered promiscuous mode [ 538.823086][T23943] veth1_macvtap: entered promiscuous mode [ 538.834885][T23943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.843526][T23943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.897119][ T42] audit: type=1800 audit(1786294721.000:20383): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263312 res=0 errno=0 [ 538.930136][T10900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.933314][T10900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.936115][T10900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.942040][T10900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.953316][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.955776][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.957481][ T42] audit: type=1800 audit(1786294721.050:20384): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263438 res=0 errno=0 [ 538.971582][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.974214][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.008665][ T42] audit: type=1800 audit(1786294721.110:20385): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 539.037970][ T42] audit: type=1800 audit(1786294721.140:20386): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 539.052398][ T42] audit: type=1800 audit(1786294721.150:20387): pid=23411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263564 res=0 errno=0 [ 539.064229][ T42] audit: type=1800 audit(1786294721.150:20388): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=263575 res=0 errno=0 [ 539.386638][ T5738] Bluetooth: hci2: command tx timeout [ 541.072253][ T5097] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 541.115794][T24103] netlink: 'syz.9.7458': attribute type 14 has an invalid length. [ 541.119193][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7458'. [ 541.168485][T24111] netlink: 'syz.9.7458': attribute type 14 has an invalid length. [ 541.171669][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7458'. [ 541.386054][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 541.386073][ T42] audit: type=1800 audit(1786294723.480:20396): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 541.419277][ T42] audit: type=1800 audit(1786294723.520:20397): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 541.437484][ T42] audit: type=1800 audit(1786294723.520:20398): pid=24125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7459" name="current_governor" dev="sysfs" ino=674 res=0 errno=0 [ 541.445907][ T42] audit: type=1800 audit(1786294723.530:20399): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 541.466436][ T5097] Bluetooth: hci2: command tx timeout [ 541.468100][ T42] audit: type=1800 audit(1786294723.570:20400): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 541.487116][ T42] audit: type=1800 audit(1786294723.590:20401): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 541.541846][ T42] audit: type=1800 audit(1786294723.640:20402): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 541.563443][ T42] audit: type=1800 audit(1786294723.650:20403): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 541.578316][ T42] audit: type=1800 audit(1786294723.670:20404): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 541.602778][ T42] audit: type=1800 audit(1786294723.700:20405): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 541.677873][T24148] overlayfs: upper fs does not support file handles, falling back to index=off. [ 542.456337][ T5828] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 542.636343][ T5828] usb 12-1: Using ep0 maxpacket: 8 [ 542.640196][ T5828] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.647685][ T5828] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 542.656339][ T5828] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.659429][ T5828] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.662986][ T5828] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.675297][ T5828] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.679606][ T5828] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.951317][ T5828] usb 12-1: GET_CAPABILITIES returned 0 [ 542.953449][ T5828] usbtmc 12-1:16.0: can't read capabilities [ 543.163680][ T5828] usb 12-1: USB disconnect, device number 22 [ 543.540678][T24211] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 543.546399][ T5738] Bluetooth: hci2: command tx timeout [ 544.524719][ T5097] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 544.525534][ T5738] Bluetooth: hci4: command 0x1003 tx timeout [ 544.966395][ T5828] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 545.136361][ T5828] usb 9-1: Using ep0 maxpacket: 16 [ 545.139797][ T5828] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 545.144550][ T5828] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 545.149568][ T5828] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.153510][ T5828] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.157787][ T5828] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 545.163257][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.168699][ T5828] usb 9-1: config 0 descriptor?? [ 545.591597][ T5828] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.001D/input/input71 [ 545.608309][ T5828] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.001D/input/input72 [ 545.674452][ T5828] kye 0003:0458:5013.001D: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 545.784082][ T5821] usb 9-1: USB disconnect, device number 4 [ 546.428075][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 546.428090][ T42] audit: type=1800 audit(1786294728.530:20486): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 546.525112][ T42] audit: type=1800 audit(1786294728.620:20487): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 546.582628][ T42] audit: type=1800 audit(1786294728.680:20488): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 546.634497][ T42] audit: type=1800 audit(1786294728.730:20489): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 546.726796][ T42] audit: type=1800 audit(1786294728.830:20490): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 547.178850][ T42] audit: type=1800 audit(1786294729.280:20491): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 547.300262][ T42] audit: type=1800 audit(1786294729.400:20492): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 547.341758][ T42] audit: type=1800 audit(1786294729.440:20493): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 547.374099][ T42] audit: type=1800 audit(1786294729.470:20494): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 547.433077][ T42] audit: type=1800 audit(1786294729.530:20495): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 547.886437][T18968] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 547.959348][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7532'. [ 548.057028][T18968] usb 12-1: Using ep0 maxpacket: 8 [ 548.059910][T18968] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.063871][T18968] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 548.068660][T18968] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 548.073011][T18968] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.082046][T18968] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.096311][T18968] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.324435][T18968] usb 12-1: GET_CAPABILITIES returned 0 [ 548.327475][T18968] usbtmc 12-1:16.0: can't read capabilities [ 548.415422][T24321] input: syz1 as /devices/virtual/input/input73 [ 548.436826][T24316] smpboot: CPU 1 is now offline [ 548.576270][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.579454][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.582587][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.585920][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.588948][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.618749][ T5821] usb 12-1: USB disconnect, device number 23 [ 548.647596][T24316] smpboot: CPU 3 is now offline [ 548.766472][T24323] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 548.805077][T24323] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 549.156434][ T5821] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 549.197682][T21099] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 549.317456][ T5821] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 549.323273][ T5821] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 188, changing to 11 [ 549.329179][ T5821] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33848, setting to 1024 [ 549.336135][ T5821] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 188, changing to 11 [ 549.341353][ T5821] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33848, setting to 1024 [ 549.349580][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.352903][ T5821] usb 9-1: Product: syz [ 549.354775][ T5821] usb 9-1: Manufacturer: syz [ 549.356819][T21099] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 549.358095][T21099] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 549.361165][ T5821] usb 9-1: SerialNumber: syz [ 549.364293][T21099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.364318][T21099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.373022][T21099] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 549.374798][T24337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.378643][T21099] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 549.382455][ T5821] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 549.382995][T21099] usb 7-1: Manufacturer: syz [ 549.390558][T21099] usb 7-1: config 0 descriptor?? [ 549.391105][ T5821] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 549.399855][ T5821] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 549.605265][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.608205][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.611169][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.614440][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.617592][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.620780][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.623951][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.627084][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.629814][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.632329][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.634783][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.637224][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.639925][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.642469][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.644855][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.647852][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.653137][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.655567][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.658454][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.661390][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.666706][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.669788][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.674655][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.678433][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.684333][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.687398][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.690468][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.693507][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.696539][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.699530][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.704281][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.707540][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.710467][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.712913][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.715398][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.717856][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.720931][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.723388][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.725924][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.728548][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.731194][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.733722][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.736211][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.738782][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.741273][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.743746][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.746336][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.748908][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.751397][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.753895][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.756351][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.758838][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.761341][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.763983][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.766975][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.769513][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.772273][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.774841][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.777722][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.780175][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.782656][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.785265][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.788625][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.792099][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.795660][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.798922][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.802094][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.805363][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.808661][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.811917][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.815112][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.818393][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.820908][T21099] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 549.821626][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.828002][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.830480][T21099] appleir 0003:05AC:8243.001E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 549.831126][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.838188][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.841877][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.845139][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.848890][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.852141][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.855363][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.860698][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.866323][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.869507][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.872619][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.875637][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.883534][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.886816][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.890428][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.899691][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.904235][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.907463][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.911600][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7557'. [ 549.914687][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.915577][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.917457][T24369] netlink: 'syz.7.7557': attribute type 10 has an invalid length. [ 549.920421][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.923032][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7557'. [ 549.925957][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.931801][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.935015][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.938246][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.941415][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.944600][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.954168][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.957297][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.960568][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.964275][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.967631][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.970852][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.974062][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.977265][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.980429][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.983686][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.986950][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.990184][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.993484][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.996716][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 549.999964][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.003054][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.006103][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.009621][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.012981][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.016413][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.019564][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.022950][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.026042][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.029218][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.032388][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.035584][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.038839][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.042058][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.045137][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.048267][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.051431][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.054640][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.057850][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.061033][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.064819][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.068108][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.071542][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.074722][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.078025][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.082042][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.085244][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.088442][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.091536][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.094754][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.097858][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.101012][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.104192][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.107424][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.110614][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.111584][ T5821] usb 7-1: USB disconnect, device number 10 [ 550.113805][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.119425][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.122819][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.126015][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.129315][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.132510][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.135687][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.138897][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.142074][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.145282][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.148478][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.151681][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.154917][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.158107][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.161328][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.164418][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.167571][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.170739][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.173931][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.177345][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.180627][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.183784][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.186990][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.190204][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.193397][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.196618][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.199744][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.202877][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.206122][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.209373][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.212028][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.215092][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.218284][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.221679][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.224776][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.227916][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.231274][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.234358][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.237511][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.240646][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.243902][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.246982][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.249986][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.253027][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.256008][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.259037][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.262097][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.265242][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.268440][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.271529][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.274696][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.277858][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.281020][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.284341][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.287593][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.290952][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.294194][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.297298][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.300314][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.303480][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.306736][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.309907][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.313242][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.316567][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.319811][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.323070][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.326330][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.329516][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.332860][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.336355][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.339446][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.342650][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.345817][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.348968][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.352214][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.355407][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.358599][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.361792][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.365003][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.368237][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.371501][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.374690][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.378021][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.381239][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.384450][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.385598][T24384] IPVS: You probably need to specify IP address on multicast interface. [ 550.387668][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.387915][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.388137][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.388350][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.393634][T24384] IPVS: Error connecting to the multicast addr [ 550.395058][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.409010][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.412256][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.415479][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.418632][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.421778][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.424932][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.428102][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.431036][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.434181][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.437897][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.441065][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.444490][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.447695][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.450924][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.454264][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.457837][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.460945][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.464141][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.467598][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.470666][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.473782][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.476934][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.480404][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.483675][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.486942][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.490182][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.493395][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.496953][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.500205][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.503485][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.506782][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.509918][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.513031][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.516304][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.519595][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.522782][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.525910][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.528961][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.532129][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.535336][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.538521][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.541734][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.544810][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.547929][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.550960][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.554125][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.557373][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.560648][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.563849][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.567052][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.570491][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.573669][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.576819][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.579918][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.583110][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.586330][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.589565][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.592694][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.595914][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.599149][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.602342][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.605625][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.608890][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.612123][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.615410][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.618611][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.621802][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.625028][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.628347][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.631474][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.634602][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.637759][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.641020][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.644384][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.647531][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.650642][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.653831][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.657068][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.660219][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.663320][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.666541][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.669676][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.673806][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.676040][T24337] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 550.678059][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.682856][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.682947][T24337] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 550.685694][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.688827][T24337] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 550.691735][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.698997][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.699246][T24337] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 550.702314][ C1] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 550.710328][ C1] usb 9-1: ti_interrupt_callback - resubmit interrupt urb failed, -1 [ 550.719262][T24407] jffs2: notice: (24407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 550.752416][ T5821] usb 9-1: USB disconnect, device number 5 [ 550.812603][ T5821] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 550.839186][ T5821] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 550.844473][ T5821] ti_usb_3410_5052 9-1:2.0: device disconnected [ 551.039803][T24429] syzkaller1: entered promiscuous mode [ 551.042306][T24429] syzkaller1: entered allmulticast mode [ 551.403110][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7590'. [ 551.453610][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 551.453633][ T42] audit: type=1800 audit(1786294733.550:20600): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 551.478257][ T42] audit: type=1800 audit(1786294733.580:20601): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 551.625878][ T42] audit: type=1800 audit(1786294733.720:20602): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 551.685014][ T42] audit: type=1800 audit(1786294733.780:20603): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 551.699407][ T42] audit: type=1800 audit(1786294733.800:20604): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 551.731276][ T42] audit: type=1800 audit(1786294733.830:20605): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 551.748903][ T42] audit: type=1800 audit(1786294733.840:20606): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=266989 res=0 errno=0 [ 551.947133][ T42] audit: type=1800 audit(1786294734.050:20607): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 552.034334][ T42] audit: type=1800 audit(1786294734.130:20608): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 552.062180][ T42] audit: type=1800 audit(1786294734.160:20609): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7602" name="num" dev="configfs" ino=113055 res=0 errno=0 [ 552.138789][T24506] loop5: detected capacity change from 0 to 7 [ 552.144636][T24506] Dev loop5: unable to read RDB block 7 [ 552.148048][T24506] loop5: unable to read partition table [ 552.150612][T24506] loop5: partition table beyond EOD, truncated [ 552.152905][T24506] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 552.433309][T24525] loop3: detected capacity change from 0 to 7 [ 552.437780][T24525] Dev loop3: unable to read RDB block 7 [ 552.440600][T24525] loop3: unable to read partition table [ 552.443020][T24525] loop3: partition table beyond EOD, truncated [ 552.450801][T24525] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 552.886362][ T850] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 553.054806][ T850] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 553.058978][ T850] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.061870][ T850] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.065980][ T850] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.069567][ T850] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.073450][ T850] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.081522][ T850] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 553.086421][ T850] usb 14-1: Product: syz [ 553.087833][ T850] usb 14-1: Manufacturer: syz [ 553.092837][ T850] cdc_wdm 14-1:1.0: skipping garbage [ 553.094669][ T850] cdc_wdm 14-1:1.0: skipping garbage [ 553.097982][ T850] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 553.100178][ T850] cdc_wdm 14-1:1.0: Unknown control protocol [ 553.310015][ T5821] usb 14-1: USB disconnect, device number 19 [ 553.314466][T24539] cdc_wdm 14-1:1.0: Error submitting int urb - -19 [ 553.703235][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7639'. [ 553.992389][T24604] loop5: detected capacity change from 0 to 7 [ 554.001864][T24604] Dev loop5: unable to read RDB block 7 [ 554.003913][T24604] loop5: unable to read partition table [ 554.007666][T24604] loop5: partition table beyond EOD, truncated [ 554.010851][T24604] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 554.087160][T24609] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 554.091038][T24609] lpc_ich 0000:00:00.0: No MFD cells added [ 554.094126][T24609] lpc_ich 0000:00:04.0: I/O space for ACPI uninitialized [ 554.098125][T24609] lpc_ich 0000:00:04.0: No MFD cells added [ 554.104010][T24609] lpc_ich 0000:00:1f.3: I/O space for ACPI uninitialized [ 554.107198][T24609] lpc_ich 0000:00:1f.3: No MFD cells added [ 554.146431][ T5821] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 554.296311][ T5821] usb 9-1: Using ep0 maxpacket: 8 [ 554.299417][ T5821] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 554.304819][ T5821] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 554.309736][ T5821] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.314101][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 554.319225][ T5821] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 554.323651][ T5821] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.329973][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.336988][T18541] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 554.517460][T18541] usb 14-1: Using ep0 maxpacket: 8 [ 554.522947][T18541] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 554.528463][T18541] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.532567][T18541] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 554.536080][T18541] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 554.540554][T18541] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 554.544338][ T5821] usb 9-1: usb_control_msg returned -32 [ 554.545215][T18541] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.549226][ T5821] usbtmc 9-1:16.0: can't read capabilities [ 554.559654][T18541] hub 14-1:1.0: bad descriptor, ignoring hub [ 554.562232][T18541] hub 14-1:1.0: probe with driver hub failed with error -5 [ 554.571065][T18541] cdc_wdm 14-1:1.0: skipping garbage [ 554.573341][T18541] cdc_wdm 14-1:1.0: skipping garbage [ 554.577178][T18541] cdc_wdm 14-1:1.0: cdc-wdm1: USB WDM device [ 554.579663][T18541] cdc_wdm 14-1:1.0: Unknown control protocol [ 554.628883][T24623] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 554.634083][T24623] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 554.637906][T24623] CPU: 0 UID: 0 PID: 24623 Comm: syz.7.7657 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.642564][T24623] Tainted: [L]=SOFTLOCKUP [ 554.644393][T24623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.648627][T24623] RIP: 0010:strcmp+0x39/0xb0 [ 554.650679][T24623] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 554.659011][T24623] RSP: 0018:ffffc9000303fae8 EFLAGS: 00010246 SYZFAIL: failed to recv rpc [ 554.661693][T24623] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90007ffb000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 554.665409][T24623] RDX: 0000000000000000 RSI: ffff888000318a01 RDI: 0000000000000000 [ 554.668918][T24623] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 554.672405][T24623] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ec7cc30 [ 554.675814][T24623] R13: dffffc0000000000 R14: ffff8880753db700 R15: ffff888000318a01 [ 554.679129][T24623] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f53edb40 [ 554.682687][T24623] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 554.685679][T24623] CR2: 00000000f721ea06 CR3: 000000004fea2000 CR4: 0000000000352ef0 [ 554.689127][T24623] Call Trace: [ 554.690598][T24623] [ 554.691911][T24623] __ftrace_set_clr_event_nolock+0x8dc/0xbb0 [ 554.694522][T24623] ftrace_set_clr_event+0x1b7/0x3f0 [ 554.696785][T24623] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 554.699275][T24623] ? trace_get_user+0x3ae/0xa70 [ 554.701482][T24623] ftrace_event_write+0x259/0x2c0 [ 554.703729][T24623] ? __pfx_ftrace_event_write+0x10/0x10 [ 554.706121][T24623] vfs_write+0x2aa/0x1050 [ 554.707973][T24623] ? __pfx_ftrace_event_write+0x10/0x10 [ 554.710386][T24623] ? __pfx_vfs_write+0x10/0x10 [ 554.712526][T24623] ? find_held_lock+0x2b/0x80 [ 554.714609][T24623] ? __fget_files+0x215/0x3d0 [ 554.716659][T24623] ? __fget_files+0x21f/0x3d0 [ 554.718732][T24623] ksys_write+0x12a/0x250 [ 554.720679][T24623] ? __pfx_ksys_write+0x10/0x10 [ 554.722814][T24623] __do_fast_syscall_32+0xe7/0x970 [ 554.725086][T24623] do_fast_syscall_32+0x32/0x70 [ 554.727226][T24623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.730001][T24623] RIP: 0023:0xf6ffefec [ 554.731819][T24623] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 554.734710][T24623] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 554.738078][T24623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 554.741263][T24623] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.744710][T24623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.748024][T24623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 554.751200][T24623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.754412][T24623] [ 554.755696][T24623] Modules linked in: [ 554.758946][T24623] ---[ end trace 0000000000000000 ]--- [ 554.781314][T24623] RIP: 0010:strcmp+0x39/0xb0 [ 554.783690][T24623] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 554.792730][T24623] RSP: 0018:ffffc9000303fae8 EFLAGS: 00010246 [ 554.795725][T24623] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90007ffb000 [ 554.796586][T24616] block nbd2: shutting down sockets [ 554.800088][T24623] RDX: 0000000000000000 RSI: ffff888000318a01 RDI: 0000000000000000 [ 554.806063][T24623] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 554.810156][T24623] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ec7cc30 [ 554.813979][T24623] R13: dffffc0000000000 R14: ffff8880753db700 R15: ffff888000318a01 [ 554.817900][T24623] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f53edb40 [ 554.822123][T24623] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 554.825378][T24623] CR2: 0000000057a5d4ec CR3: 000000004fea2000 CR4: 0000000000352ef0 [ 554.829219][T24623] Kernel panic - not syncing: Fatal exception [ 554.832615][T24623] Kernel Offset: disabled [ 554.834527][T24623] Rebooting in 86400 seconds..