last executing test programs: 17.273612347s ago: executing program 2 (id=15302): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf, 0x5d, 0x0) 14.15757405s ago: executing program 4 (id=15313): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(0xffffffffffffffff, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 12.113914034s ago: executing program 2 (id=15316): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [0x0, 0xffffff00], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffd, 0x2, 0x0, 0x7}}, @common=@unspec=@rateest={{0x68}, {'macsec0\x00', 'ipvlan1\x00', 0x20, 0x1, 0x8, 0x1, 0x59, 0x4c65, {0x56c}, {0x81}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) semget$private(0x0, 0x3, 0x698) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000800)={r4}, &(0x7f0000000700)=0x8) 11.508950944s ago: executing program 4 (id=15319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x200, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11.393968817s ago: executing program 3 (id=15320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0xb}]}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 10.509505361s ago: executing program 3 (id=15325): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e90200", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6", 0x76}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.357576554s ago: executing program 3 (id=15327): openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) 10.204953s ago: executing program 4 (id=15329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x28c2008, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) 9.856795007s ago: executing program 2 (id=15333): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1d, r3}, 0x10) 9.369259194s ago: executing program 3 (id=15340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000040)) 8.237912755s ago: executing program 2 (id=15342): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) 7.402047589s ago: executing program 4 (id=15343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.340171587s ago: executing program 3 (id=15344): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0xa, 0x10000) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = gettid() clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 7.136812702s ago: executing program 1 (id=15346): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, 0x0, 0x6) 5.310728474s ago: executing program 1 (id=15348): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) syz_open_dev$usbfs(0x0, 0x76, 0x160341) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5.199629728s ago: executing program 2 (id=15350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) 3.637383333s ago: executing program 1 (id=15352): getgroups(0x1, &(0x7f0000000100)=[0xee00]) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[], 0x2c, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2.829031995s ago: executing program 0 (id=15354): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd26c, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 2.593268609s ago: executing program 3 (id=15355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) 2.593028597s ago: executing program 0 (id=15356): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_dev$dri(0x0, 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.564245064s ago: executing program 1 (id=15357): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x18, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.519099121s ago: executing program 4 (id=15358): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d2", 0x61}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4c", 0x5}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.361471389s ago: executing program 0 (id=15359): syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x204, 0x0) write$dsp(r3, &(0x7f0000000100)="60328d95fce84b59e3adcffdc4d614796d1cd4c6d4d0c6eca1e99179b46e2208881c4de135f7eb75bf8f6b2cc04c3f9b7ef69654271ae7c06294d0205032313dfb7c3ae5ee0f4d0cac942ea7b5c7b3cf00cff1d09c19acde1f6dc01f0e275c0313c3384f6587542bad6c35e2056de81d772b3eac9d22baae22f89553a63b3856431821d5baa268af04934a796d977977f918d177467edfed3483b1d4299a6a2a7b0de08516d3e95094e624837805a30bc1c19fd063ba85bfb0805ebf98eadb216d2434d9fd8c892ce8df3eaa14a02ed1c8", 0xd1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x89c0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000400)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0x1, 0xb7, 0x10000}}) 2.278724804s ago: executing program 1 (id=15360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1, 0x5, 0x0) close(r3) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) 2.218519216s ago: executing program 0 (id=15361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.168263962s ago: executing program 4 (id=15362): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x9, 0x0) io_uring_setup(0x6a1e, &(0x7f0000000200)={0x0, 0x2b68, 0x8, 0x3, 0x2ae, 0x0, r0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xb, 0x102, 0xfffffffe, 0x595f3152, 0xe, "00e47903e59500"}) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) 706.552022ms ago: executing program 0 (id=15363): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0xd2f0, 0x2000, 0x2, 0xadea}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'pimreg1\x00', {0x2, 0x4e20, @multicast1}}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x7, 0x7e, 0x3, @random="14741d13f4d2", 'ipvlan0\x00'}) fanotify_init(0xf00, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 411.656914ms ago: executing program 2 (id=15364): io_uring_setup(0x6a1e, &(0x7f0000000200)={0x0, 0x2b68, 0x8, 0x3, 0x2ae}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 361.191808ms ago: executing program 1 (id=15365): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e25, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x74}}}, &(0x7f0000000280)=0x84) 0s ago: executing program 0 (id=15366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) kernel console output (not intermixed with test programs): T30456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11349'. [ 961.677898][T30464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11352'. [ 962.018615][ T10] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 962.028728][ T10] usb 3-1: Warning! Unlikely big volume step count (=31861), linear volume or wrong cval->res? [ 962.028806][ T10] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = -31861/0/1 [ 962.330835][ T10] usb 3-1: USB disconnect, device number 52 [ 962.575633][ T36] audit: type=1400 audit(2000000395.202:1744): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=30475 comm="syz.1.11358" daddr=fc00::1 dest=20004 [ 962.998174][T30482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input46 [ 964.166534][T30524] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11376'. [ 965.984869][ T5891] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 966.135300][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 966.137575][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.137609][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.137650][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 966.137676][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.197239][ T5891] usb 4-1: config 0 descriptor?? [ 966.211271][ T5891] hub 4-1:0.0: USB hub found [ 966.407963][ T5891] hub 4-1:0.0: 1 port detected [ 966.809209][T30602] input: syz0 as /devices/virtual/input/input47 [ 966.878465][ T5891] usb 4-1: USB disconnect, device number 66 [ 969.458514][T30687] netlink: 'syz.4.11454': attribute type 6 has an invalid length. [ 969.929028][ T36] audit: type=1400 audit(2000000402.562:1745): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=30701 comm="syz.4.11462" daddr=::ffff:172.20.20.187 dest=16385 [ 971.793282][T30761] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11487'. [ 972.034990][ T6077] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 972.187247][ T6077] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 972.187282][ T6077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.238498][ T6077] usb 5-1: config 0 descriptor?? [ 972.254410][ T6077] cp210x 5-1:0.0: cp210x converter detected [ 972.876094][ T6077] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 972.876153][ T6077] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 972.917875][T30789] sctp: [Deprecated]: syz.2.11502 (pid 30789) Use of int in max_burst socket option. [ 972.917875][T30789] Use struct sctp_assoc_value instead [ 973.009076][ T6077] usb 5-1: cp210x converter now attached to ttyUSB0 [ 973.083660][ T6077] usb 5-1: USB disconnect, device number 53 [ 973.124214][ T6077] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 973.137504][ T6077] cp210x 5-1:0.0: device disconnected [ 973.392277][ T36] audit: type=1400 audit(2000000406.022:1746): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=30805 comm="syz.1.11509" daddr=fc00::1 dest=20004 [ 973.553051][T30811] bond0: option mode: unable to set because the bond device has slaves [ 973.621289][T30814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11513'. [ 974.411682][T30846] delete_channel: no stack [ 974.441391][T30845] delete_channel: no stack [ 976.093218][T30907] program syz.2.11557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.477162][T30924] netlink: 'syz.3.11565': attribute type 3 has an invalid length. [ 977.497913][T30959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11580'. [ 978.032545][ T36] audit: type=1326 audit(2000000410.662:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30971 comm="syz.2.11586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x0 [ 980.128515][T23791] kernel write not supported for file /input/event2 (pid: 23791 comm: kworker/1:2) [ 980.654866][ T5905] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 980.805544][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 980.809232][ T5905] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 980.809263][ T5905] usb 4-1: config 0 has no interface number 0 [ 980.809359][ T5905] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.809392][ T5905] usb 4-1: config 0 interface 85 has no altsetting 0 [ 980.833771][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 980.833839][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.833868][ T5905] usb 4-1: Product: syz [ 980.833913][ T5905] usb 4-1: Manufacturer: syz [ 980.833965][ T5905] usb 4-1: SerialNumber: syz [ 980.901929][ T5905] usb 4-1: config 0 descriptor?? [ 980.970840][T31076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11636'. [ 981.535220][ T5905] appletouch 4-1:0.85: Geyser mode initialized. [ 981.541512][ T5905] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input48 [ 981.758090][ T5905] usb 4-1: USB disconnect, device number 67 [ 981.758244][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 981.939383][ T5905] appletouch 4-1:0.85: input: appletouch disconnected [ 983.227575][T31143] program syz.3.11669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 983.905264][T31168] tap0: tun_chr_ioctl cmd 2147767507 [ 984.065151][T23791] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 984.214720][T23791] usb 4-1: Using ep0 maxpacket: 32 [ 984.217485][T23791] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.217516][T23791] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.219811][T23791] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 984.219843][T23791] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 984.219867][T23791] usb 4-1: Product: syz [ 984.219882][T23791] usb 4-1: Manufacturer: syz [ 984.310130][T23791] hub 4-1:4.0: USB hub found [ 984.495232][T31184] netlink: 'syz.2.11687': attribute type 1 has an invalid length. [ 984.495260][T31184] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11687'. [ 984.495533][T31184] netlink: 'syz.2.11687': attribute type 1 has an invalid length. [ 984.495552][T31184] netlink: 634 bytes leftover after parsing attributes in process `syz.2.11687'. [ 984.567882][T23791] hub 4-1:4.0: 2 ports detected [ 984.785637][T23791] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 984.785674][T23791] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 984.846129][T23791] usb 4-1: USB disconnect, device number 68 [ 985.060474][T28523] Bluetooth: hci4: command 0x0406 tx timeout [ 985.408719][T31215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11700'. [ 986.194880][ T5891] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 986.397210][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 986.403695][ T5891] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 986.403726][ T5891] usb 4-1: config 0 has no interface number 0 [ 986.403775][ T5891] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 986.403805][ T5891] usb 4-1: config 0 interface 85 has no altsetting 0 [ 986.446679][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 986.446714][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.446736][ T5891] usb 4-1: Product: syz [ 986.446752][ T5891] usb 4-1: Manufacturer: syz [ 986.446769][ T5891] usb 4-1: SerialNumber: syz [ 986.505143][ T5891] usb 4-1: config 0 descriptor?? [ 986.944139][ T5891] appletouch 4-1:0.85: Geyser mode initialized. [ 986.977169][ T5891] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input49 [ 987.392240][T23791] usb 4-1: USB disconnect, device number 69 [ 987.571919][T23791] appletouch 4-1:0.85: input: appletouch disconnected [ 987.655120][T31274] netlink: 'syz.2.11729': attribute type 8 has an invalid length. [ 987.655145][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11729'. [ 987.728521][T31276] loop2: detected capacity change from 0 to 1 [ 987.805513][T31276] Dev loop2: unable to read RDB block 1 [ 987.805569][T31276] loop2: AHDI p1 p2 p3 [ 987.805602][T31276] loop2: partition table partially beyond EOD, truncated [ 987.805865][T31276] loop2: p1 start 1601398130 is beyond EOD, truncated [ 987.805888][T31276] loop2: p2 start 1702059890 is beyond EOD, truncated [ 990.684687][T31371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.675577][ T5889] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 991.834779][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 991.839707][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.839743][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.839784][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 991.839810][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.890819][ T5889] usb 5-1: config 0 descriptor?? [ 991.909414][ T5889] hub 5-1:0.0: USB hub found [ 992.131309][ T5889] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 992.179105][T31420] netlink: 'syz.3.11797': attribute type 64 has an invalid length. [ 992.338425][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 992.338556][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 992.395799][ T5889] usb 5-1: USB disconnect, device number 54 [ 992.641972][T31433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11803'. [ 992.695862][ T5891] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 992.844682][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 992.847894][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 992.873699][ T5891] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 992.873733][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.873756][ T5891] usb 4-1: Product: syz [ 992.873773][ T5891] usb 4-1: Manufacturer: syz [ 992.873788][ T5891] usb 4-1: SerialNumber: syz [ 993.184692][ T5891] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 993.211211][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.523309][T31456] netlink: 'syz.4.11814': attribute type 9 has an invalid length. [ 993.523337][T31456] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.11814'. [ 993.557621][ T5891] gspca_vc032x: reg_w err -71 [ 993.557661][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557673][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557685][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557695][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557706][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557716][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557727][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557738][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557749][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557760][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557770][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557781][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557791][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557802][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557813][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557824][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557834][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557844][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557863][ T5891] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.557875][ T5891] gspca_vc032x: Unknown sensor... [ 993.557966][ T5891] vc032x 4-1:12.0: probe with driver vc032x failed with error -22 [ 993.704984][ T5891] usb 4-1: USB disconnect, device number 70 [ 994.479237][T31482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.378586][T31553] program syz.3.11856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.072352][ T10] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 997.354227][ T10] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1000.683665][T31670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11904'. [ 1002.691891][T31728] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1002.924749][ T5889] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1003.020693][T31740] loop2: detected capacity change from 0 to 1 [ 1003.070737][T31740] Dev loop2: unable to read RDB block 1 [ 1003.070775][T31740] loop2: AHDI p1 p2 p3 p4 [ 1003.070805][T31740] loop2: partition table partially beyond EOD, truncated [ 1003.071087][T31740] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1003.071111][T31740] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1003.071131][T31740] loop2: p3 start 10750 is beyond EOD, truncated [ 1003.117028][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.117063][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.117103][ T5889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1003.117127][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.125158][ T5891] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1003.221467][ T5889] usb 5-1: config 0 descriptor?? [ 1003.333569][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.333640][ T5891] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1003.370558][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.370656][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.370678][ T5891] usb 4-1: Product: syz [ 1003.370694][ T5891] usb 4-1: Manufacturer: syz [ 1003.370709][ T5891] usb 4-1: SerialNumber: syz [ 1003.683430][ T5889] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x2 [ 1003.683473][ T5889] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1003.683929][ T5889] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1003.683965][ T5889] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1003.813144][ T5889] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1003.897613][ T5889] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 1003.897733][ T5889] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 1003.987999][ T5889] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -71 [ 1004.060569][ T5889] usb 5-1: USB disconnect, device number 55 [ 1004.585468][ T5891] cdc_ncm 4-1:1.0: bind() failure [ 1004.635376][ T5891] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1004.638095][ T5891] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1004.641398][ T5891] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1004.707612][ T5891] usb 4-1: USB disconnect, device number 71 [ 1004.743186][T31782] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11955'. [ 1005.568762][T31805] pim6reg: entered allmulticast mode [ 1005.588760][T31805] pim6reg: left allmulticast mode [ 1005.920002][T31813] batadv_slave_1: entered promiscuous mode [ 1005.923323][T31810] batadv_slave_1: left promiscuous mode [ 1007.834828][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1007.989386][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.989416][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.991908][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1007.991937][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1007.991959][ T10] usb 5-1: SerialNumber: syz [ 1008.096421][ T36] audit: type=1400 audit(2000000440.732:1748): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=31883 comm="syz.3.12003" dest=20003 [ 1008.345235][ T10] usb 5-1: 0:2 : does not exist [ 1008.578625][ T10] usb 5-1: USB disconnect, device number 56 [ 1008.839828][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.324840][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1009.477301][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1009.477339][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1009.480303][ T10] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1009.480334][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.480358][ T10] usb 5-1: Product: syz [ 1009.480374][ T10] usb 5-1: Manufacturer: syz [ 1009.480390][ T10] usb 5-1: SerialNumber: syz [ 1009.554274][ T10] usb 5-1: config 0 descriptor?? [ 1009.569780][T31908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1009.570153][T31908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1009.803375][T31908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1009.803516][T31908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1010.212436][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1010.625383][ T10] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1010.663213][ T10] usb 5-1: USB disconnect, device number 57 [ 1012.463167][T31979] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12045'. [ 1013.334402][T32008] Invalid argument reading file caps for ./file0 [ 1013.764959][T32026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12066'. [ 1013.826291][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12066'. [ 1013.898114][T32030] netlink: 186364 bytes leftover after parsing attributes in process `syz.2.12069'. [ 1013.898225][T32030] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1014.125644][ T36] audit: type=1400 audit(2000000446.752:1749): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=32036 comm="syz.2.12073" daddr=::ffff:172.20.20.187 dest=19994 [ 1014.865064][T32055] sctp: [Deprecated]: syz.1.12081 (pid 32055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.865064][T32055] Use struct sctp_sack_info instead [ 1015.895080][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1016.060897][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1016.081917][ T31] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1016.081947][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.081973][ T31] usb 3-1: Product: syz [ 1016.081984][ T31] usb 3-1: Manufacturer: syz [ 1016.081995][ T31] usb 3-1: SerialNumber: syz [ 1016.406966][ T31] usb 3-1: unit 5 not found! [ 1016.406991][ T31] usb 3-1: unit 3 not found! [ 1016.437075][T32097] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1016.439106][T32097] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1016.623677][T32099] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 1016.834859][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1017.010835][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1017.010871][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.010894][ T10] usb 5-1: Product: syz [ 1017.010911][ T10] usb 5-1: Manufacturer: syz [ 1017.010928][ T10] usb 5-1: SerialNumber: syz [ 1017.073412][ T10] usb 5-1: config 0 descriptor?? [ 1017.339572][ T31] usb 3-1: us122l: couldn't allocate write buffer [ 1017.340272][ T31] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1017.421955][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 1017.421987][ T10] usb 5-1: Please update to version 0.2 or newer [ 1017.513477][ T31] usb 3-1: USB disconnect, device number 53 [ 1017.986506][ T36] audit: type=1326 audit(2000000450.622:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1017.987027][ T36] audit: type=1326 audit(2000000450.622:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1017.990175][ T36] audit: type=1326 audit(2000000450.622:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f2174db99 code=0x7ffc0000 [ 1017.998405][ T36] audit: type=1326 audit(2000000450.622:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1017.999256][ T36] audit: type=1326 audit(2000000450.632:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1018.003738][ T36] audit: type=1326 audit(2000000450.632:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1018.011825][ T36] audit: type=1326 audit(2000000450.642:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1018.013216][ T36] audit: type=1326 audit(2000000450.642:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1018.014039][ T36] audit: type=1326 audit(2000000450.642:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32114 comm="syz.1.12106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f217ac819 code=0x7ffc0000 [ 1018.425722][ T10] usb 5-1: USB disconnect, device number 58 [ 1020.423289][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12135'. [ 1021.015856][T32203] kernel read not supported for file /cpuacct.usage_percpu (pid: 32203 comm: syz.2.12146) [ 1021.017386][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 1021.017405][ T36] audit: type=1800 audit(2000000453.652:1800): pid=32203 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.12146" name="cpuacct.usage_percpu" dev="mqueue" ino=101754 res=0 errno=0 [ 1021.503234][T32211] netlink: 'syz.4.12147': attribute type 1 has an invalid length. [ 1024.494860][ T5890] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1024.686825][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 1024.693453][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1024.693485][ T5890] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1024.693505][ T5890] usb 5-1: Product: syz [ 1024.693521][ T5890] usb 5-1: Manufacturer: syz [ 1024.693536][ T5890] usb 5-1: SerialNumber: syz [ 1024.772269][ T5890] usb 5-1: config 0 descriptor?? [ 1024.814305][ T5890] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1025.234800][ T5905] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1025.384734][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1025.387198][ T5905] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1025.387227][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.387248][ T5905] usb 3-1: config 0 has no interface number 0 [ 1025.426970][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1025.427000][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.427022][ T5905] usb 3-1: Product: syz [ 1025.427039][ T5905] usb 3-1: Manufacturer: syz [ 1025.427055][ T5905] usb 3-1: SerialNumber: syz [ 1025.444234][ T5890] gspca_zc3xx: reg_w_i err -71 [ 1025.444503][ T5890] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1025.525867][ T5890] usb 5-1: USB disconnect, device number 59 [ 1025.567079][ T5905] usb 3-1: config 0 descriptor?? [ 1025.645536][ T5905] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 1025.821908][ T5905] usb 3-1: USB disconnect, device number 54 [ 1026.344283][ T36] audit: type=1400 audit(2000000458.972:1801): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=32335 comm="syz.1.12204" daddr=::ffff:0.0.0.0 dest=20003 [ 1027.408489][T32372] netlink: 'syz.2.12220': attribute type 34 has an invalid length. [ 1028.537377][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1028.538096][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1030.300498][ T36] audit: type=1400 audit(2000000462.932:1802): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=32436 comm="syz.2.12248" daddr=2001::2 [ 1032.524322][T32512] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 1033.592829][T32559] IPVS: stopping backup sync thread 25699 ... [ 1035.017312][ T5890] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1035.184972][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 1035.187531][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.187582][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1035.187609][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.246874][ T5890] usb 3-1: config 0 descriptor?? [ 1035.263267][ T5890] hub 3-1:0.0: USB hub found [ 1035.472098][ T5890] hub 3-1:0.0: 1 port detected [ 1036.302810][ T31] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1036.304326][ T31] usb 3-1: USB disconnect, device number 55 [ 1037.451573][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12359'. [ 1038.456963][T32715] loop5: detected capacity change from 0 to 7 [ 1038.473269][T32718] netlink: 'syz.1.12374': attribute type 1 has an invalid length. [ 1038.473298][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12374'. [ 1038.524935][T32715] Dev loop5: unable to read RDB block 7 [ 1038.524969][T32715] loop5: AHDI p1 [ 1038.525003][T32715] loop5: partition table partially beyond EOD, truncated [ 1041.926526][ T354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1042.860955][ T36] audit: type=1400 audit(2000000475.492:1803): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=389 comm="syz.4.12441" daddr=fc01:: [ 1042.864457][ T36] audit: type=1400 audit(2000000475.492:1804): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=389 comm="syz.4.12441" daddr=fc02:: [ 1045.677679][ T5889] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1045.834823][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 1045.838420][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1045.839713][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.839739][ T5889] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1045.842471][ T5889] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1045.842501][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.842523][ T5889] usb 5-1: Product: syz [ 1045.842539][ T5889] usb 5-1: Manufacturer: syz [ 1045.842556][ T5889] usb 5-1: SerialNumber: syz [ 1046.356262][ T5889] usb 5-1: USB disconnect, device number 60 [ 1046.952824][ T36] audit: type=1400 audit(2000000479.582:1805): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=530 comm="syz.4.12506" [ 1048.116628][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12523'. [ 1049.164769][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1049.327575][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.327613][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.329408][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1049.329437][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1049.329460][ T10] usb 5-1: Manufacturer: syz [ 1049.370716][ T10] usb 5-1: config 0 descriptor?? [ 1050.050004][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1050.050659][ T10] uclogic 0003:256C:006D.0030: failed retrieving Huion firmware version: -71 [ 1050.050723][ T10] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 1050.050842][ T10] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 1050.144824][ T10] usb 5-1: USB disconnect, device number 61 [ 1051.481542][ T659] smc: net device bridge0 erased user defined pnetid SYZ1 [ 1052.399822][T28523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1052.499599][T28523] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1052.502202][T28523] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1052.520865][T28523] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1052.546879][T28523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1052.989993][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.544890][ T705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12586'. [ 1053.628861][ T31] kernel read not supported for file /610/timers (pid: 31 comm: kworker/1:0) [ 1054.435615][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.657711][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.735171][ T5825] Bluetooth: hci0: command tx timeout [ 1055.366442][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.777015][ T67] team0: Port device netdevsim0 removed [ 1055.783019][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.311228][ T674] chnl_net:caif_netlink_parms(): no params data found [ 1056.706025][ T36] audit: type=1400 audit(2000000489.342:1806): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=790 comm="syz.4.12625" [ 1056.733206][ T36] audit: type=1400 audit(2000000489.342:1807): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=790 comm="syz.4.12625" [ 1056.805019][ T5825] Bluetooth: hci0: command tx timeout [ 1057.405489][ T674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.405624][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.405870][ T674] bridge_slave_0: entered allmulticast mode [ 1057.413787][ T674] bridge_slave_0: entered promiscuous mode [ 1057.459648][ T674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.459782][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.460031][ T674] bridge_slave_1: entered allmulticast mode [ 1057.491286][ T674] bridge_slave_1: entered promiscuous mode [ 1058.039006][ T674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.189139][ T674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.884855][ T5825] Bluetooth: hci0: command tx timeout [ 1059.005373][ T67] bridge_slave_1: left allmulticast mode [ 1059.005405][ T67] bridge_slave_1: left promiscuous mode [ 1059.106290][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.198539][ T67] bridge_slave_0: left allmulticast mode [ 1059.198572][ T67] bridge_slave_0: left promiscuous mode [ 1059.198854][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.635042][ T5890] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1060.825199][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.825230][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.827252][ T5890] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1060.827281][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.827304][ T5890] usb 5-1: SerialNumber: syz [ 1060.964801][ T5825] Bluetooth: hci0: command tx timeout [ 1061.269116][ T5890] usb 5-1: 0:2 : does not exist [ 1061.508503][ T5890] usb 5-1: USB disconnect, device number 62 [ 1061.727343][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.757987][ T67] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1062.706059][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.834492][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.985685][ T67] bond0 (unregistering): Released all slaves [ 1063.019231][ T67] bond1 (unregistering): Released all slaves [ 1063.123114][ T67] bond2 (unregistering): Released all slaves [ 1063.203066][ T67] bond3 (unregistering): Released all slaves [ 1063.288686][ T67] bond4 (unregistering): Released all slaves [ 1063.476866][ T674] team0: Port device team_slave_0 added [ 1063.590114][ T674] team0: Port device team_slave_1 added [ 1063.847526][ T985] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12706'. [ 1063.937238][ T674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.937255][ T674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.937279][ T674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.941045][ T674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.941060][ T674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.941085][ T674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.269191][ T674] hsr_slave_0: entered promiscuous mode [ 1064.270579][ T674] hsr_slave_1: entered promiscuous mode [ 1064.271501][ T674] debugfs: 'hsr0' already exists in 'hsr' [ 1064.271528][ T674] Cannot create hsr debugfs directory [ 1065.485248][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1065.680387][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1065.682704][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1065.682732][ T10] usb 5-1: config 0 has no interface number 0 [ 1065.682787][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1065.694221][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1065.694255][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.694277][ T10] usb 5-1: Product: syz [ 1065.694292][ T10] usb 5-1: Manufacturer: syz [ 1065.694308][ T10] usb 5-1: SerialNumber: syz [ 1065.764090][ T10] usb 5-1: config 0 descriptor?? [ 1066.392218][ T1040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1066.541466][ T67] IPVS: stopping master sync thread 20555 ... [ 1066.583641][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1066.583676][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1066.792836][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1066.792872][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1066.792894][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1066.792914][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1066.793206][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1066.829845][ T10] usb 5-1: USB disconnect, device number 63 [ 1067.350284][ T1066] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1067.350314][ T1066] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1068.089962][ T5476] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1069.492536][ T1099] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12744'. [ 1072.657639][ T5476] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1072.764746][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1072.857565][ T1171] block nbd1: shutting down sockets [ 1072.914725][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1072.917777][ T10] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1072.982818][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1072.982850][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.982882][ T10] usb 3-1: Product: syz [ 1072.982897][ T10] usb 3-1: Manufacturer: syz [ 1072.982913][ T10] usb 3-1: SerialNumber: syz [ 1073.108667][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1073.108695][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 1073.662850][ T6077] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 1073.786194][ T67] hsr_slave_0: left promiscuous mode [ 1073.845721][ T67] hsr_slave_1: left promiscuous mode [ 1073.846823][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.846851][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.906885][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.906915][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.966340][ T67] batman_adv: batadv0: Removing interface: ipvlan2 [ 1074.311123][ T36] audit: type=1400 audit(2000000506.942:1808): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=1206 comm="syz.1.12784" [ 1074.311177][ T36] audit: type=1400 audit(2000000506.942:1809): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=1206 comm="syz.1.12784" [ 1074.541935][ T67] veth1_vlan: left promiscuous mode [ 1074.542028][ T67] veth0_vlan: left promiscuous mode [ 1076.825695][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1076.930424][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1077.849930][ T1217] pim6reg1: entered promiscuous mode [ 1077.849958][ T1217] pim6reg1: entered allmulticast mode [ 1078.044204][ T1244] wg2: entered promiscuous mode [ 1078.044253][ T1244] wg2: entered allmulticast mode [ 1078.056864][ T1254] gre0: entered promiscuous mode [ 1078.056891][ T1254] gre0: entered allmulticast mode [ 1079.700685][ T10] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1079.730396][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1079.968693][ T1310] tap0: tun_chr_ioctl cmd 1074025675 [ 1079.973223][ T1310] tap0: persist enabled [ 1079.973309][ T1311] tap0: tun_chr_ioctl cmd 1074025675 [ 1079.973329][ T1311] tap0: persist disabled [ 1081.250039][ T1367] hid-generic 0000:0000:0000.0031: pid 1367 passed too short report [ 1081.459327][ T1400] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1082.780311][ T36] audit: type=1400 audit(2000000515.402:1810): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=1439 comm="syz.1.12862" dest=20001 [ 1083.272473][ T1453] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 1083.655911][ T1462] Invalid argument reading file caps for ./file0 [ 1084.898649][ T67] IPVS: stop unused estimator thread 0... [ 1085.962395][ T674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1086.161519][ T674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.207294][ T674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1086.492039][ T674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.493086][ T674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1086.706507][ T674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.711389][ T674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.094183][ T674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.396791][T32098] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1087.444744][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.544796][T32098] usb 5-1: Using ep0 maxpacket: 32 [ 1087.549090][T32098] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1087.549130][T32098] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1087.549168][T32098] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1087.549195][T32098] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1087.549223][T32098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1087.551993][T32098] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1087.552024][T32098] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1087.552047][T32098] usb 5-1: Product: syz [ 1087.552063][T32098] usb 5-1: Manufacturer: syz [ 1087.552077][T32098] usb 5-1: SerialNumber: syz [ 1087.691247][T32098] usb 5-1: config 0 descriptor?? [ 1087.701892][T32098] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1087.718632][T32098] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1087.810865][ T674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.976882][T32098] usb 5-1: USB disconnect, device number 64 [ 1088.047763][T32098] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1088.087243][ T674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.182815][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.208212][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.459186][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.462097][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.896061][ T10] IPVS: starting estimator thread 0... [ 1088.985527][ T1599] IPVS: using max 7 ests per chain, 16800 per kthread [ 1089.641968][ T674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.558125][ T674] veth0_vlan: entered promiscuous mode [ 1090.653472][ T674] veth1_vlan: entered promiscuous mode [ 1091.017965][ T674] veth0_macvtap: entered promiscuous mode [ 1091.169763][ T674] veth1_macvtap: entered promiscuous mode [ 1091.366185][ T674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.386461][ T674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.428251][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.428890][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.432238][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.432951][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.947350][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.947375][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.112899][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.112995][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.469627][ T1692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12954'. [ 1094.860264][ T5905] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1095.022963][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1095.023001][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.023944][ T5905] usb 3-1: Product: syz [ 1095.023971][ T5905] usb 3-1: Manufacturer: syz [ 1095.023986][ T5905] usb 3-1: SerialNumber: syz [ 1095.960416][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.967267][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.123936][ T5905] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1096.123979][ T5905] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 1096.849817][ T1752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.936921][ T1752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.625609][ T1360] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.625742][ T5905] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1098.694322][ T5905] usb 3-1: USB disconnect, device number 57 [ 1098.707697][ T5905] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1098.839091][ T1850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13029'. [ 1099.185546][ T1360] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.476841][ T1360] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.476899][ T1360] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.914828][ T5905] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1100.076512][ T5905] usb 3-1: device descriptor read/all, error -71 [ 1100.509428][ T1901] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13053'. [ 1102.185085][ T6077] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1102.334998][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 1102.362261][ T6077] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1102.362293][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.362314][ T6077] usb 4-1: Product: syz [ 1102.362330][ T6077] usb 4-1: Manufacturer: syz [ 1102.362347][ T6077] usb 4-1: SerialNumber: syz [ 1102.401769][ T6077] usb 4-1: config 0 descriptor?? [ 1102.414208][ T6077] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1102.681909][ T6077] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 1102.682101][ T6077] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1102.722200][ T6077] usb 4-1: USB disconnect, device number 72 [ 1103.425931][ T36] audit: type=1400 audit(2000000536.052:1811): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2001 comm="syz.4.13101" daddr=fc00::1 dest=20003 [ 1103.528219][ T36] audit: type=1400 audit(2000000536.162:1812): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2005 comm="syz.3.13103" daddr=::ffff:0.0.0.0 dest=20000 [ 1104.280286][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13116'. [ 1104.449885][ T2042] ip6gre4: entered promiscuous mode [ 1104.449911][ T2042] ip6gre4: entered allmulticast mode [ 1104.934693][ T6077] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1105.087269][ T6077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.087305][ T6077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.087346][ T6077] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1105.087371][ T6077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.151000][ T6077] usb 3-1: config 0 descriptor?? [ 1105.593000][ T6077] playstation 0003:054C:0DF2.0032: unknown main item tag 0x0 [ 1105.593041][ T6077] playstation 0003:054C:0DF2.0032: unknown main item tag 0x0 [ 1105.593072][ T6077] playstation 0003:054C:0DF2.0032: unknown main item tag 0x0 [ 1105.593101][ T6077] playstation 0003:054C:0DF2.0032: unknown main item tag 0x0 [ 1105.593130][ T6077] playstation 0003:054C:0DF2.0032: unknown main item tag 0x0 [ 1105.720287][ T6077] playstation 0003:054C:0DF2.0032: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1106.197288][ T6077] playstation 0003:054C:0DF2.0032: Failed to retrieve feature with reportID 5: -71 [ 1106.197318][ T6077] playstation 0003:054C:0DF2.0032: Failed to retrieve DualSense calibration info: -71 [ 1106.197372][ T6077] playstation 0003:054C:0DF2.0032: Failed to get calibration data from DualSense [ 1106.197396][ T6077] playstation 0003:054C:0DF2.0032: Failed to create dualsense. [ 1106.251061][ T6077] playstation 0003:054C:0DF2.0032: probe with driver playstation failed with error -71 [ 1106.288275][ T6077] usb 3-1: USB disconnect, device number 60 [ 1106.637160][ T2107] netlink: 'syz.3.13148': attribute type 7 has an invalid length. [ 1106.692816][ T2110] netlink: 'syz.3.13148': attribute type 7 has an invalid length. [ 1106.751213][ T2107] netlink: 'syz.3.13148': attribute type 7 has an invalid length. [ 1107.386378][ T36] audit: type=1326 audit(2000000540.022:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.391258][ T36] audit: type=1326 audit(2000000540.022:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.450222][ T36] audit: type=1326 audit(2000000540.082:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.450611][ T36] audit: type=1326 audit(2000000540.082:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.452483][ T36] audit: type=1326 audit(2000000540.082:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.452628][ T36] audit: type=1326 audit(2000000540.082:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.452850][ T36] audit: type=1326 audit(2000000540.082:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.462226][ T36] audit: type=1326 audit(2000000540.092:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2134 comm="syz.2.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1107.555033][ T5890] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1107.709139][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.709185][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1107.711866][ T5890] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1107.711898][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.711920][ T5890] usb 5-1: Product: syz [ 1107.711937][ T5890] usb 5-1: Manufacturer: syz [ 1107.711953][ T5890] usb 5-1: SerialNumber: syz [ 1107.799567][ T5890] usb 5-1: config 0 descriptor?? [ 1107.815750][ T5890] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1107.872731][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1107.873594][ T5890] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1107.873654][ T5890] usb 5-1: media controller created [ 1107.935311][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.102870][ T5890] DVB: Unable to find symbol tda10046_attach() [ 1108.102889][ T5890] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1108.103019][ T5890] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1108.338379][ T2129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.339450][ T2129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.485322][T32098] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1108.661558][T32098] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.661588][T32098] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.664245][T32098] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1108.664329][T32098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.664349][T32098] usb 4-1: SerialNumber: syz [ 1108.759469][ T5890] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1108.790453][ T5890] usb 5-1: USB disconnect, device number 65 [ 1109.028779][T32098] usb 4-1: 0:2 : does not exist [ 1109.112584][T32098] usb 4-1: USB disconnect, device number 73 [ 1109.228449][ T6077] kernel write not supported for file bpf-prog (pid: 6077 comm: kworker/0:6) [ 1109.266769][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.527690][ T2213] loop2: detected capacity change from 0 to 7 [ 1110.650787][ T2212] input: syz0 as /devices/virtual/input/input50 [ 1110.688604][ T2213] Dev loop2: unable to read RDB block 7 [ 1110.688665][ T2213] loop2: unable to read partition table [ 1110.688902][ T2213] loop2: partition table beyond EOD, truncated [ 1110.688938][ T2213] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1111.175204][ T2221] binder: 2220:2221 ioctl c0306201 200000000080 returned -14 [ 1111.176113][ T2224] binder: 2220:2224 ioctl c0306201 2000000003c0 returned -14 [ 1111.442401][ T2236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1111.503739][ T2241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1112.785105][ T5890] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1112.884819][T32098] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1112.884847][T32098] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1112.890057][T28523] Bluetooth: hci2: command 0x0406 tx timeout [ 1112.934967][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 1112.938741][ T5890] usb 4-1: config 0 has no interfaces? [ 1112.965363][ T5890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1112.965396][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.965418][ T5890] usb 4-1: Product: syz [ 1112.965433][ T5890] usb 4-1: Manufacturer: syz [ 1112.965448][ T5890] usb 4-1: SerialNumber: syz [ 1113.014072][ T5890] usb 4-1: config 0 descriptor?? [ 1113.271003][ T6077] usb 4-1: USB disconnect, device number 74 [ 1114.589335][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 1114.589356][ T36] audit: type=1400 audit(2000000547.222:1824): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2358 comm="syz.2.13259" daddr=::ffff:172.20.20.170 [ 1114.964734][T28523] Bluetooth: hci3: command 0x0406 tx timeout [ 1114.964857][T32098] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1114.964877][T32098] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1115.003967][ T2377] fuse: Bad value for 'fd' [ 1116.106877][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.049313][T28523] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.053557][T32098] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1117.053583][T32098] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1119.284871][T32098] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1119.284885][T28523] Bluetooth: hci1: command 0x0406 tx timeout [ 1119.284901][T32098] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1123.205623][T28523] Bluetooth: hci0: command 0x0c1a tx timeout [ 1123.269498][T32098] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1123.269582][T32098] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1124.714128][ T2770] loop8: detected capacity change from 0 to 7 [ 1124.828893][ T2770] Dev loop8: unable to read RDB block 7 [ 1124.828942][ T2770] loop8: unable to read partition table [ 1124.829168][ T2770] loop8: partition table beyond EOD, truncated [ 1124.829205][ T2770] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1125.503339][ T2802] gre0: left promiscuous mode [ 1125.503369][ T2802] gre0: left allmulticast mode [ 1125.530093][ T2802] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1125.856759][ T36] audit: type=1400 audit(2000000558.482:1825): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2823 comm="syz.4.13445" daddr=::ffff:172.20.20.187 [ 1126.532055][ T36] audit: type=1400 audit(2000000559.162:1826): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=2842 comm="syz.1.13452" daddr=::ffff:172.20.20.187 [ 1126.709274][ T2850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1127.425001][ T5889] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1127.584418][ T5889] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1127.584453][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.584476][ T5889] usb 5-1: Product: syz [ 1127.585135][ T5889] usb 5-1: Manufacturer: syz [ 1127.585154][ T5889] usb 5-1: SerialNumber: syz [ 1127.636529][ T5889] usb 5-1: config 0 descriptor?? [ 1127.899012][ T5889] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1128.036475][ T2911] netlink: 'syz.3.13475': attribute type 3 has an invalid length. [ 1128.718387][ T5889] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1128.758636][ T5889] usb 5-1: USB disconnect, device number 66 [ 1129.068896][ T2946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1129.371655][ T2946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1129.371686][ T2946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1129.596194][ T2946] vhci_hcd vhci_hcd.0: Device attached [ 1129.717595][ T5798] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 1129.865923][ T5889] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1129.919869][ T5798] usb 3-1: config 0 has no interfaces? [ 1129.919911][ T5798] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1129.919938][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.973715][ T5798] usb 3-1: config 0 descriptor?? [ 1130.126890][ T2978] afs: Unknown parameter 'smackfshat0#/00#' [ 1130.209072][ T2956] usb 37-1: recv xbuf, 0 [ 1130.235773][ T5798] usb 3-1: USB disconnect, device number 61 [ 1130.326279][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13504'. [ 1130.326314][ T2982] netlink: 'syz.4.13504': attribute type 30 has an invalid length. [ 1130.326330][ T2982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13504'. [ 1130.494694][ T5889] usb 37-1: device descriptor read/64, error -71 [ 1130.512646][ T1360] vhci_hcd vhci_hcd.2: stop threads [ 1130.523142][ T1360] vhci_hcd vhci_hcd.2: release socket [ 1130.628873][ T2989] Bluetooth: MGMT ver 1.23 [ 1130.684978][ T1360] vhci_hcd vhci_hcd.2: disconnect device [ 1130.755184][ T5889] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1130.804863][ T5798] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1130.964227][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.964265][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.964306][ T5798] usb 4-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1130.964332][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.016883][ T5798] usb 4-1: config 0 descriptor?? [ 1131.447143][ T5798] hid (null): invalid report_count 43684 [ 1131.447167][ T5798] hid (null): global environment stack underflow [ 1131.447191][ T5798] hid (null): invalid report_size 28056 [ 1131.479206][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482674][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482721][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482751][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482780][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482809][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482838][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482867][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482897][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.482927][ T5798] hid-generic 0003:0B05:1AFE.0033: unknown main item tag 0x0 [ 1131.543786][ T5798] hid-generic 0003:0B05:1AFE.0033: invalid report_count 43684 [ 1131.544124][ T5798] hid-generic 0003:0B05:1AFE.0033: item 0 2 1 9 parsing failed [ 1131.557814][ T5798] hid-generic 0003:0B05:1AFE.0033: probe with driver hid-generic failed with error -22 [ 1131.696293][ T5798] usb 4-1: USB disconnect, device number 75 [ 1132.461155][ T3033] loop2: detected capacity change from 0 to 7 [ 1132.484126][ T3033] Dev loop2: unable to read RDB block 7 [ 1132.484157][ T3033] loop2: AHDI p2 [ 1132.484186][ T3033] loop2: partition table partially beyond EOD, truncated [ 1132.580606][ T3033] Dev loop2: unable to read RDB block 7 [ 1132.580639][ T3033] loop2: AHDI p2 [ 1132.580674][ T3033] loop2: partition table partially beyond EOD, truncated [ 1133.217421][ T3061] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13540'. [ 1133.594057][ T3073] netlink: 'syz.2.13545': attribute type 10 has an invalid length. [ 1133.867001][ T3073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.958326][ T3073] .`: (slave team0): Enslaving as an active interface with an up link [ 1134.141168][ T36] audit: type=1804 audit(2000000566.772:1827): pid=3094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.13554" name="/newroot/2628/file0" dev="tmpfs" ino=13290 res=1 errno=0 [ 1137.657481][ T6077] kernel read not supported for file /5526 (pid: 6077 comm: kworker/0:6) [ 1141.494710][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1141.644742][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1141.650658][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1141.650690][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.650712][ T10] usb 3-1: Product: syz [ 1141.650727][ T10] usb 3-1: Manufacturer: syz [ 1141.650744][ T10] usb 3-1: SerialNumber: syz [ 1141.707150][ T10] usb 3-1: config 0 descriptor?? [ 1142.151500][ T10] airspy 3-1:0.0: Board ID: 00 [ 1142.151525][ T10] airspy 3-1:0.0: Firmware version: [ 1142.265081][ T6077] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1142.415153][ T6077] usb 4-1: Using ep0 maxpacket: 32 [ 1142.418802][ T6077] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1142.418832][ T6077] usb 4-1: config 0 has no interface number 0 [ 1142.423684][ T6077] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1142.423966][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.423992][ T6077] usb 4-1: Product: syz [ 1142.424008][ T6077] usb 4-1: Manufacturer: syz [ 1142.424024][ T6077] usb 4-1: SerialNumber: syz [ 1142.490283][ T6077] usb 4-1: config 0 descriptor?? [ 1142.531784][ T6077] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1142.646976][ T3325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13661'. [ 1142.757896][ T6077] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1142.805679][ T6077] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1142.931231][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1142.975074][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 1143.129566][ T10] airspy 3-1:0.0: Registered as swradio24 [ 1143.129652][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1143.162118][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1143.162861][ T6077] usb 4-1: USB disconnect, device number 76 [ 1143.190477][ T10] usb 3-1: USB disconnect, device number 62 [ 1143.389645][ T6077] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1143.521360][ T6077] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1143.549059][ T6077] quatech2 4-1:0.51: device disconnected [ 1144.659246][ T3367] netlink: 'syz.2.13681': attribute type 2 has an invalid length. [ 1145.308105][ T36] audit: type=1400 audit(2000000577.942:1828): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3393 comm="syz.3.13691" daddr=::ffff:172.20.20.64 dest=20001 [ 1145.984795][ T3415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13701'. [ 1148.881491][ T36] audit: type=1400 audit(2000000581.452:1829): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=3515 comm="syz.1.13744" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 [ 1153.014389][ T3636] kvm: user requested TSC rate below hardware speed [ 1154.172565][ T36] audit: type=1400 audit(2000000586.802:1830): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3680 comm="syz.3.13815" daddr=::ffff:0.0.0.0 dest=20002 [ 1154.950712][ T36] audit: type=1400 audit(2000000587.582:1831): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3709 comm="syz.2.13828" daddr=::ffff:172.20.20.187 dest=5 [ 1159.342535][ T3828] trusted_key: syz.1.13870 sent an empty control message without MSG_MORE. [ 1161.435635][ T36] audit: type=1400 audit(2000000594.072:1832): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3869 comm="syz.4.13890" dest=16385 [ 1161.682655][ T36] audit: type=1400 audit(2000000594.312:1833): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=3878 comm="syz.4.13893" daddr=::ffff:0.0.0.0 dest=20002 [ 1162.109890][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13898'. [ 1165.312508][ T3979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13936'. [ 1165.361508][ T3979] netem: incorrect gi model size [ 1165.361561][ T3979] netem: change failed [ 1166.050518][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13947'. [ 1166.184610][ T5889] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1166.365332][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1166.365369][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.365417][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1166.365443][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.694013][ T5889] usb 4-1: usb_control_msg returned -32 [ 1166.694068][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 1167.266228][ T4026] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 1167.284756][ T5889] usb 4-1: USB disconnect, device number 77 [ 1168.348438][ T36] audit: type=1400 audit(2000000600.982:1834): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4066 comm="syz.2.13975" dest=20001 [ 1171.585601][ T5798] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1171.751632][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1171.751671][ T5798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1171.751716][ T5798] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1171.751742][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.833811][ T5798] usb 4-1: config 0 descriptor?? [ 1171.839580][ T4151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1172.267503][ T5798] hid_parser_main: 173 callbacks suppressed [ 1172.267530][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267566][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267595][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267624][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267652][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267681][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267709][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267737][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267766][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.267794][ T5798] kye 0003:0458:4018.0034: unknown main item tag 0x0 [ 1172.360176][ T5798] kye 0003:0458:4018.0034: hidraw0: USB HID v0.20 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 1172.468239][ T5798] usb 4-1: USB disconnect, device number 78 [ 1172.749646][ T4170] fido_id[4170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1174.590454][ T4234] ipip0: entered promiscuous mode [ 1174.590484][ T4234] ipip0: entered allmulticast mode [ 1176.382118][ T4292] KVM: debugfs: duplicate directory 4292-4 [ 1176.903361][ T4311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1177.017489][ T4310] bond0: (slave batadv0): Releasing backup interface [ 1177.263186][ T4310] bridge_slave_0: left allmulticast mode [ 1177.263217][ T4310] bridge_slave_0: left promiscuous mode [ 1177.263477][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.450904][ T4310] bridge_slave_1: left allmulticast mode [ 1177.450936][ T4310] bridge_slave_1: left promiscuous mode [ 1177.451214][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.528528][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.598203][ T4310] bond0: (slave bond_slave_0): Releasing backup interface [ 1177.737042][ T4310] bond0: (slave bond_slave_1): Releasing backup interface [ 1177.861955][ T4310] team0: Port device team_slave_0 removed [ 1177.918598][ T4310] team0: Port device 0 removed [ 1177.919786][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.919815][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.979340][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.979373][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.006982][ T4310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.193508][ T4311] team0: Mode "" not found [ 1181.367475][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1181.514989][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1181.518627][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1181.518658][ T10] usb 3-1: config 0 has no interface number 0 [ 1181.518709][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1181.524398][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1181.524431][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.524454][ T10] usb 3-1: Product: syz [ 1181.526980][ T10] usb 3-1: Manufacturer: syz [ 1181.527001][ T10] usb 3-1: SerialNumber: syz [ 1181.595005][ T5889] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1181.603280][ T10] usb 3-1: config 0 descriptor?? [ 1181.756149][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1181.782054][ T5889] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1181.782088][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.782111][ T5889] usb 5-1: Product: syz [ 1181.782127][ T5889] usb 5-1: Manufacturer: syz [ 1181.782144][ T5889] usb 5-1: SerialNumber: syz [ 1182.183012][ T5889] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1182.256586][ T5889] usb 5-1: USB disconnect, device number 67 [ 1182.353750][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.635344][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14137'. [ 1182.664386][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14137'. [ 1182.914147][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1182.914180][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1182.914851][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1182.914880][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1182.914902][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1182.914921][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1182.915269][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1183.010309][ T10] usb 3-1: USB disconnect, device number 63 [ 1183.438658][ T4463] ubi31: attaching mtd0 [ 1183.438683][ T4463] ubi31 error: ubi_attach_mtd_dev: bad VID header (16648320) or data offsets (16648384) [ 1185.362200][ T4524] evm: overlay not supported [ 1186.016609][ T4544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14180'. [ 1186.339073][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14182'. [ 1188.605520][ T36] audit: type=1400 audit(2000000624.244:1835): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4635 comm="syz.4.14217" daddr=fc02:: dest=20004 [ 1189.132411][ T36] audit: type=1400 audit(2000000624.764:1836): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4655 comm="syz.2.14226" daddr=::ffff:172.20.20.170 [ 1190.359347][ T4653] kexec: Could not allocate control_code_buffer [ 1191.138857][ T36] audit: type=1400 audit(2000000626.774:1837): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4691 comm="syz.2.14241" dest=20001 [ 1192.436704][ T5905] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1192.585084][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 1192.587564][ T5905] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1192.587597][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.631521][ T5905] usb 3-1: config 0 descriptor?? [ 1192.648080][ T5905] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1193.465516][ T5905] gspca_sunplus: reg_r err -71 [ 1193.465620][ T5905] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1193.508971][ T5905] usb 3-1: USB disconnect, device number 64 [ 1194.329868][ T36] audit: type=1400 audit(2000000629.964:1838): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4767 comm="syz.2.14275" daddr=::ffff:127.0.0.1 dest=20000 [ 1194.585707][ T4772] bridge4: entered promiscuous mode [ 1194.585737][ T4772] bridge4: entered allmulticast mode [ 1194.617328][ T4772] team0: Port device bridge4 added [ 1196.705112][ T4842] netlink: 'syz.3.14304': attribute type 1 has an invalid length. [ 1196.705137][ T4842] netlink: 'syz.3.14304': attribute type 4 has an invalid length. [ 1196.705152][ T4842] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.14304'. [ 1199.058123][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14336'. [ 1199.058164][ T4911] netlink: 'syz.1.14336': attribute type 5 has an invalid length. [ 1199.058180][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14336'. [ 1199.201504][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1199.202953][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1199.203002][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1199.203058][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1199.215140][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14336'. [ 1199.215238][ T4911] netlink: 'syz.1.14336': attribute type 5 has an invalid length. [ 1199.215282][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14336'. [ 1200.092785][ T36] audit: type=1400 audit(2000000635.724:1839): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=4942 comm="syz.2.14351" daddr=::ffff:0.0.0.0 dest=20002 [ 1207.738280][ T36] audit: type=1400 audit(2000000643.374:1840): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=5091 comm="syz.4.14419" daddr=::ffff:172.20.20.170 dest=20002 [ 1208.657883][ T36] audit: type=1800 audit(2000000644.284:1841): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.14428" name="file1" dev="tmpfs" ino=2633 res=0 errno=0 [ 1211.630327][ T36] audit: type=1400 audit(2000000647.264:1842): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=5199 comm="syz.1.14457" dest=20002 [ 1212.375066][T32098] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1212.555010][T32098] usb 5-1: Using ep0 maxpacket: 16 [ 1212.570671][T32098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.570710][T32098] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1212.570731][T32098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.614089][T32098] usb 5-1: config 0 descriptor?? [ 1213.051589][T32098] hid_parser_main: 27 callbacks suppressed [ 1213.051618][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051657][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051687][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051715][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051743][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051772][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051799][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051825][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051854][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.051885][T32098] thrustmaster 0003:044F:B323.0035: unknown main item tag 0x0 [ 1213.165593][T32098] thrustmaster 0003:044F:B323.0035: hidraw0: USB HID v0.0b Device [HID 044f:b323] on usb-dummy_hcd.4-1/input0 [ 1213.165630][T32098] thrustmaster 0003:044F:B323.0035: no inputs found [ 1213.234725][ T10] usb 5-1: USB disconnect, device number 68 [ 1213.415618][ T5245] loop5: detected capacity change from 0 to 7 [ 1213.420838][ T5241] fido_id[5241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1213.567401][ T5245] loop5: [ 1213.567440][ T5245] loop5: partition table partially beyond EOD, truncated [ 1214.198312][ T5257] kvm: emulating exchange as write [ 1216.203729][ T36] audit: type=1400 audit(2000000651.834:1843): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=5328 comm="syz.4.14514" daddr=::ffff:172.20.20.170 [ 1216.246916][ T5905] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1216.521601][ T5905] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1216.521636][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.521659][ T5905] usb 4-1: Product: syz [ 1216.521675][ T5905] usb 4-1: Manufacturer: syz [ 1216.521692][ T5905] usb 4-1: SerialNumber: syz [ 1217.073005][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1217.073072][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1218.145653][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1218.145732][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1218.260870][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1218.321740][ T5905] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1218.352483][ T5905] usb 4-1: USB disconnect, device number 79 [ 1219.884714][ T5905] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1220.037434][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1220.037468][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.080278][ T5905] usb 3-1: config 0 descriptor?? [ 1220.106661][ T5905] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1221.310643][ T5905] gspca_stv06xx: I2C: Read error writing address: -71 [ 1221.329986][ T5905] usb 3-1: USB disconnect, device number 65 [ 1224.926710][ T5550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.953663][ T5550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.989973][ T5649] lo: entered allmulticast mode [ 1229.005964][ T5649] tunl0: entered allmulticast mode [ 1229.014389][ T5649] gre0: entered allmulticast mode [ 1229.095553][ T5649] gretap0: entered allmulticast mode [ 1229.161944][ T5649] erspan0: entered allmulticast mode [ 1229.163627][ T5649] ip_vti0: entered allmulticast mode [ 1229.189924][ T5649] ip6_vti0: entered allmulticast mode [ 1229.226655][ T5649] sit0: entered allmulticast mode [ 1229.426968][ T5649] ip6tnl0: entered allmulticast mode [ 1229.443382][ T5649] ip6gre0: entered allmulticast mode [ 1229.476409][ T5649] syz_tun: entered allmulticast mode [ 1229.609756][ T5649] ip6gretap0: entered allmulticast mode [ 1229.666137][ T5649] bridge0: entered allmulticast mode [ 1229.876977][ T5649] vcan0: entered allmulticast mode [ 1230.094600][ T5649] bond0: entered allmulticast mode [ 1230.340453][ T5649] team0: entered allmulticast mode [ 1230.394942][ T5649] dummy0: entered allmulticast mode [ 1230.514843][ T5649] nlmon0: entered allmulticast mode [ 1230.523101][ T5649] caif0: entered allmulticast mode [ 1230.587706][ T5649] batadv0: entered allmulticast mode [ 1230.588396][ T5649] vxcan0: entered allmulticast mode [ 1230.598746][ T5649] vxcan1: entered allmulticast mode [ 1230.632643][ T5649] veth0: entered allmulticast mode [ 1230.695456][ T5649] veth1: entered allmulticast mode [ 1230.835734][ T5649] wg0: entered allmulticast mode [ 1230.955583][ T5649] wg1: entered allmulticast mode [ 1231.095771][ T5649] wg2: entered allmulticast mode [ 1231.151991][ T5649] veth0_to_bridge: entered allmulticast mode [ 1231.184822][ T5649] bridge_slave_0: entered allmulticast mode [ 1231.229847][ T5649] veth1_to_bridge: entered allmulticast mode [ 1231.318935][ T5649] bridge_slave_1: entered allmulticast mode [ 1231.367898][ T5649] veth0_to_bond: entered allmulticast mode [ 1231.387691][ T5649] bond_slave_0: entered allmulticast mode [ 1231.426761][ T5649] veth1_to_bond: entered allmulticast mode [ 1231.449980][ T5649] bond_slave_1: entered allmulticast mode [ 1231.485575][ T5649] veth0_to_team: entered allmulticast mode [ 1231.517115][ T5649] team_slave_0: entered allmulticast mode [ 1231.545191][ T5649] veth1_to_team: entered allmulticast mode [ 1231.592141][ T5649] : entered allmulticast mode [ 1231.592610][ T5649] veth0_to_batadv: entered allmulticast mode [ 1231.705454][ T5649] batadv_slave_0: entered allmulticast mode [ 1231.735848][ T5649] veth1_to_batadv: entered allmulticast mode [ 1231.811943][ T5649] batadv_slave_1: entered allmulticast mode [ 1231.888455][ T5649] veth0_to_hsr: entered allmulticast mode [ 1232.002702][ T5649] hsr_slave_0: entered allmulticast mode [ 1232.089964][ T5649] veth1_to_hsr: entered allmulticast mode [ 1232.146672][ T5649] hsr_slave_1: entered allmulticast mode [ 1232.250035][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14677'. [ 1232.305456][ T5649] hsr0: entered allmulticast mode [ 1232.335931][ T5649] veth1_virt_wifi: entered allmulticast mode [ 1232.434407][ T5649] veth0_virt_wifi: entered allmulticast mode [ 1232.496022][ T5649] virt_wifi0: entered allmulticast mode [ 1232.496244][ T5649] veth1_macvtap: entered allmulticast mode [ 1232.539007][ T5649] veth0_macvtap: entered allmulticast mode [ 1232.646145][ T5649] macvtap0: entered allmulticast mode [ 1232.686178][ T5649] macsec0: entered allmulticast mode [ 1232.745607][ T5649] geneve0: entered allmulticast mode [ 1232.939919][ T5649] geneve1: entered allmulticast mode [ 1233.014933][ T5649] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 1233.015154][ T5649] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1233.111386][ T5649] ip6gretap1: entered allmulticast mode [ 1233.247940][ T5649] bond1: entered allmulticast mode [ 1233.268746][ T5649] bridge1: entered allmulticast mode [ 1233.268885][ T5649] ip6tnl1: entered allmulticast mode [ 1233.268990][ T5649] gre1: entered allmulticast mode [ 1233.269095][ T5649] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 1233.269212][ T5649] xfrm1: entered allmulticast mode [ 1233.269326][ T5649] ip6tnl2: entered allmulticast mode [ 1233.269417][ T5649] erspan1: entered allmulticast mode [ 1233.269516][ T5649] ip6gre1: entered allmulticast mode [ 1233.346017][ T5649] mac80211_hwsim hwsim25 wlan3: entered allmulticast mode [ 1233.349003][ T5649] mac80211_hwsim hwsim26 wlan4: entered allmulticast mode [ 1233.349212][ T5649] bridge2: left promiscuous mode [ 1233.349375][ T5649] syztnl2: entered allmulticast mode [ 1233.349518][ T5649] gretap1: entered allmulticast mode [ 1233.349675][ T5649] syztnl0: entered allmulticast mode [ 1233.350007][ T5649] ipip0: entered allmulticast mode [ 1233.395409][ T5649] batadv0.5: entered allmulticast mode [ 1233.396072][ T5649] bond2: entered allmulticast mode [ 1233.505294][ T5649] hsr0: left promiscuous mode [ 1233.544778][ T5649] macvlan2: entered allmulticast mode [ 1233.551955][ T5649] netdevsim netdevsim4 eth0: entered allmulticast mode [ 1233.552211][ T5649] netdevsim netdevsim4 eth1: entered allmulticast mode [ 1233.552450][ T5649] netdevsim netdevsim4 eth2: entered allmulticast mode [ 1233.552724][ T5649] netdevsim netdevsim4 eth3: entered allmulticast mode [ 1233.553271][ T5649] vxlan0: entered allmulticast mode [ 1233.553426][ T5649] geneve2: entered allmulticast mode [ 1233.815348][ T5649] vxlan1: entered allmulticast mode [ 1233.852608][ T5649] bridge3: entered allmulticast mode [ 1234.030479][ T5649] ipvlan2: entered allmulticast mode [ 1234.058899][ T5649] mac80211_hwsim hwsim9 nicvf0: entered allmulticast mode [ 1234.059456][ T5649] macsec1: entered allmulticast mode [ 1234.091558][ T5649] ip6tnl4: entered allmulticast mode [ 1234.091753][ T5649] team_slave_0.10: entered allmulticast mode [ 1234.091930][ T5649] ip6tnl5: entered allmulticast mode [ 1234.092225][ T5649] sit1: entered allmulticast mode [ 1234.289745][ T5649] ip6tnl6: entered allmulticast mode [ 1234.293739][ T5649] bridge4: left promiscuous mode [ 1234.577936][ T5673] tipc: Enabling not permitted [ 1234.577973][ T5673] tipc: Enabling of bearer rejected, failed to enable media [ 1234.579442][ T5732] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1234.614767][ T1353] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.614806][ T1353] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.615136][ T1353] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.615159][ T1353] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.615188][ T1353] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.615208][ T1353] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.615235][ T1353] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.615254][ T1353] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.894148][ T5785] input: syz1 as /devices/virtual/input/input51 [ 1237.470479][ T5904] batadv_slave_1: entered promiscuous mode [ 1237.504123][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14737'. [ 1238.310335][ T5901] batadv_slave_1: left promiscuous mode [ 1239.335950][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.342372][ T5946] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1242.201443][ T5998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.245638][ T5998] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1243.393903][ T36] audit: type=1400 audit(2000000679.024:1844): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=6024 comm="syz.3.14792" daddr=::ffff:0.0.0.0 dest=20002 [ 1246.785794][ T36] audit: type=1326 audit(2000000682.424:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.785964][ T36] audit: type=1326 audit(2000000682.424:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.791319][ T36] audit: type=1326 audit(2000000682.424:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.791478][ T36] audit: type=1326 audit(2000000682.424:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.791655][ T36] audit: type=1326 audit(2000000682.424:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.829741][ T36] audit: type=1326 audit(2000000682.424:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.829917][ T36] audit: type=1326 audit(2000000682.424:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.831984][ T36] audit: type=1326 audit(2000000682.464:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1246.832124][ T36] audit: type=1326 audit(2000000682.464:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.14842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x7ffc0000 [ 1247.625060][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1247.775062][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1247.777507][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.777563][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1247.777592][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1247.777616][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1247.777641][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.779100][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1247.779127][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1247.779149][ T10] usb 5-1: Manufacturer: syz [ 1247.881988][ T10] usb 5-1: config 0 descriptor?? [ 1248.220383][ T6173] binder: 6172:6173 unknown command 0 [ 1248.220409][ T6173] binder: 6172:6173 ioctl c0306201 200000000080 returned -22 [ 1248.304710][ T10] rc_core: IR keymap rc-hauppauge not found [ 1248.304734][ T10] Registered IR keymap rc-empty [ 1248.304931][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.333181][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.346697][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1248.349978][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 1248.362727][ T6177] binder: 6176:6177 ioctl c0306201 200000000080 returned -14 [ 1248.393157][ T6177] binder: 6176:6177 ioctl c0306201 2000000003c0 returned -14 [ 1248.416809][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.436968][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.454782][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.474700][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.494971][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.514740][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.535235][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.562351][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.578311][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.594664][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1248.623036][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1248.623065][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1248.725007][T32098] usb 5-1: USB disconnect, device number 69 [ 1249.162146][T29221] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.162294][T29221] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.162337][T29221] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.162375][T29221] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.388219][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14891'. [ 1256.120621][ T6295] binder: 6293:6295 unknown command 0 [ 1256.120653][ T6295] binder: 6293:6295 ioctl c0306201 200000000080 returned -22 [ 1256.138695][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14902'. [ 1259.791338][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 1259.791361][ T36] audit: type=1400 audit(2000000695.424:1861): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=6358 comm="syz.3.14928" daddr=::ffff:0.0.0.0 dest=20002 [ 1261.956604][ T5890] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1262.115431][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 1262.117987][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.118044][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1262.118066][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1262.118082][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1262.118105][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1262.119684][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1262.119715][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1262.119738][ T5890] usb 4-1: Manufacturer: syz [ 1262.163226][ T5890] usb 4-1: config 0 descriptor?? [ 1262.594979][ T5890] rc_core: IR keymap rc-hauppauge not found [ 1262.595004][ T5890] Registered IR keymap rc-empty [ 1262.595335][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.614701][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.640541][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1262.658979][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 1262.681868][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.695323][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.715762][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.735376][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.766589][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.795072][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.814617][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.834954][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.856292][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1262.874630][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1263.020305][ T5890] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1263.020333][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1263.058054][ T5890] usb 4-1: USB disconnect, device number 80 [ 1264.016052][ T6434] netlink: 'syz.2.14959': attribute type 10 has an invalid length. [ 1264.090453][ T6436] netlink: 'syz.2.14959': attribute type 10 has an invalid length. [ 1264.264824][ T6434] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1264.283881][ T6434] team0: Failed to send options change via netlink (err -105) [ 1264.283986][ T6434] team0: Port device dummy0 added [ 1264.325946][ T6436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1264.410446][ T6436] team0: Failed to send options change via netlink (err -105) [ 1264.410740][ T6436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1264.438883][ T6436] team0: Port device dummy0 removed [ 1264.528085][ T6436] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1268.292478][ T6504] netlink: 'syz.4.14988': attribute type 1 has an invalid length. [ 1268.363649][ T6504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1269.334935][T32098] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1269.504543][T32098] usb 4-1: Using ep0 maxpacket: 16 [ 1269.521573][T32098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1269.524353][T32098] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1269.524385][T32098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.524407][T32098] usb 4-1: Product: syz [ 1269.524424][T32098] usb 4-1: Manufacturer: syz [ 1269.524575][T32098] usb 4-1: SerialNumber: syz [ 1269.566792][T32098] usb 4-1: config 0 descriptor?? [ 1269.590615][T32098] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1269.590653][T32098] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1269.727762][ T6531] binder: 6527:6531 ioctl c0285840 0 returned -22 [ 1270.260561][T32098] em28xx 4-1:0.0: chip ID is em2765 [ 1271.031407][T32098] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1271.031457][T32098] em28xx 4-1:0.0: board has no eeprom [ 1271.674643][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1271.830204][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1271.832166][ T10] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1271.832194][ T10] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.832216][ T10] usb 5-1: config 63 has no interface number 0 [ 1271.832251][ T10] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1271.878039][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1271.878073][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.878096][ T10] usb 5-1: Product: syz [ 1271.878113][ T10] usb 5-1: Manufacturer: syz [ 1271.878128][ T10] usb 5-1: SerialNumber: syz [ 1272.285176][T32098] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1272.285221][T32098] em28xx 4-1:0.0: dvb set to bulk mode. [ 1272.287853][ T5891] em28xx 4-1:0.0: Binding DVB extension [ 1272.530580][ T10] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1272.530665][ T10] uvcvideo 5-1:63.66: No valid video chain found. [ 1272.565146][ T10] usb 5-1: USB disconnect, device number 70 [ 1272.632219][ T6511] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1272.718509][ T5905] usb 4-1: USB disconnect, device number 81 [ 1272.723188][ T5905] em28xx 4-1:0.0: Disconnecting em28xx [ 1273.355896][ T5891] em28xx 4-1:0.0: Registering input extension [ 1273.357642][ T5905] em28xx 4-1:0.0: Closing input extension [ 1273.728923][ T36] audit: type=1326 audit(2000000709.364:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.729344][ T36] audit: type=1326 audit(2000000709.364:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.762383][ T36] audit: type=1326 audit(2000000709.394:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.765827][ T36] audit: type=1326 audit(2000000709.394:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.768946][ T36] audit: type=1326 audit(2000000709.404:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.770458][ T36] audit: type=1326 audit(2000000709.404:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.771421][ T36] audit: type=1326 audit(2000000709.404:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.794227][ T36] audit: type=1326 audit(2000000709.404:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.796985][ T36] audit: type=1326 audit(2000000709.434:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1273.803400][ T36] audit: type=1326 audit(2000000709.434:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6605 comm="syz.2.15030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x7ffc0000 [ 1274.331309][ T6605] delete_channel: no stack [ 1274.470659][ T6626] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.15038'. [ 1274.541478][ T6626] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.15038'. [ 1275.475874][ T5891] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1276.070400][ T5891] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1276.070431][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.070452][ T5891] usb 5-1: Product: syz [ 1276.070465][ T5891] usb 5-1: Manufacturer: syz [ 1276.070480][ T5891] usb 5-1: SerialNumber: syz [ 1277.318277][ T5891] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1277.318345][ T5891] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1277.423795][ T5905] em28xx 4-1:0.0: Freeing device [ 1278.084138][ T5891] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1278.084201][ T5891] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1278.085409][ T5891] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1278.772115][ T5891] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1279.317312][ T6077] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1279.518629][ T5891] usb 5-1: USB disconnect, device number 71 [ 1279.715130][ T6077] usb 3-1: Using ep0 maxpacket: 8 [ 1280.351445][ T6077] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1280.353477][ T6077] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1280.353512][ T6077] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1280.353539][ T6077] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1280.353585][ T6077] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1280.353611][ T6077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.915949][ T6077] usb 3-1: GET_CAPABILITIES returned 0 [ 1280.916001][ T6077] usbtmc 3-1:16.0: can't read capabilities [ 1280.986511][ T6736] pim6reg1: entered promiscuous mode [ 1280.986535][ T6736] pim6reg1: entered allmulticast mode [ 1281.361003][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1281.422082][ T6706] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1281.503644][ T6077] usb 3-1: USB disconnect, device number 66 [ 1282.978041][ T6759] misc userio: No port type given on /dev/userio [ 1284.064790][ T6077] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1284.217073][ T6077] usb 3-1: Using ep0 maxpacket: 16 [ 1284.222968][ T6077] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1284.223001][ T6077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.223024][ T6077] usb 3-1: Product: syz [ 1284.223042][ T6077] usb 3-1: Manufacturer: syz [ 1284.223058][ T6077] usb 3-1: SerialNumber: syz [ 1284.337282][ T6077] usb 3-1: config 0 descriptor?? [ 1284.368678][ T6077] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1284.563576][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 1284.563590][ T36] audit: type=1326 audit(2000000720.194:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.2.15098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57b9ac819 code=0x0 [ 1285.254595][ T5890] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1285.407914][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 1285.465307][ T5890] usb 4-1: config 0 has no interfaces? [ 1285.465359][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1285.465385][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.509566][ T5890] usb 4-1: config 0 descriptor?? [ 1285.719339][ T6803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.719861][ T6803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.777063][ T6077] usb 4-1: USB disconnect, device number 82 [ 1286.664596][ T6077] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1286.871947][ T6077] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1286.871984][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.872006][ T6077] usb 4-1: Product: syz [ 1286.872022][ T6077] usb 4-1: Manufacturer: syz [ 1286.872038][ T6077] usb 4-1: SerialNumber: syz [ 1287.032345][ T5891] usb 3-1: USB disconnect, device number 67 [ 1287.373433][ T6077] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1287.373497][ T6077] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1288.503717][ T6894] vivid-004: disconnect [ 1288.558810][ T6889] vivid-004: reconnect [ 1288.614153][ T6077] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1288.614218][ T6077] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1288.680232][ T6077] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1288.718938][ T6077] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1288.740120][ T6077] usb 4-1: USB disconnect, device number 83 [ 1294.138412][ T36] audit: type=1400 audit(2000000729.774:1876): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=6948 comm="syz.4.15163" daddr=::ffff:172.30.1.5 dest=20003 [ 1294.582340][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15169'. [ 1294.649104][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15169'. [ 1294.810078][ T6967] syz_tun: entered promiscuous mode [ 1294.896816][ T6967] macvtap1: entered promiscuous mode [ 1294.896998][ T6967] macvtap1: entered allmulticast mode [ 1294.897010][ T6967] syz_tun: entered allmulticast mode [ 1295.258119][ T6970] syz_tun: left allmulticast mode [ 1295.258393][ T6970] syz_tun: left promiscuous mode [ 1295.404874][ T5891] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1295.570389][ T5891] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1295.570421][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1295.603550][ T5891] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1295.603584][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.603606][ T5891] usb 4-1: Product: syz [ 1295.603622][ T5891] usb 4-1: Manufacturer: syz [ 1295.603638][ T5891] usb 4-1: SerialNumber: syz [ 1295.652802][ T5891] usb 4-1: config 0 descriptor?? [ 1295.751270][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15176'. [ 1296.207480][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.210684][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.274045][ T6987] could not allocate digest TFM handle sha1_mb [ 1296.378496][ T6995] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1296.380154][ T6995] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 1296.380414][ T6995] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1296.382949][ T6995] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1296.383210][ T6995] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1296.384386][ T6995] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 1296.433538][ T6995] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 1296.444945][ T6995] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1296.445447][ T6995] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 1296.446234][ T6995] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1296.448079][ T5891] mos7840 4-1:0.0: required endpoints missing [ 1296.506004][ T5891] usb 4-1: USB disconnect, device number 84 [ 1300.186370][ T6077] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1300.337871][ T6077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1300.337909][ T6077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.340601][ T6077] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1300.340631][ T6077] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1300.340653][ T6077] usb 3-1: Manufacturer: syz [ 1300.410280][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.435012][ T6077] usb 3-1: config 0 descriptor?? [ 1301.024042][ T6077] hid (null): unknown global tag 0xe [ 1301.086315][ T6077] cougar 0003:060B:700A.0036: unknown global tag 0xe [ 1301.086344][ T6077] cougar 0003:060B:700A.0036: item 0 1 1 14 parsing failed [ 1301.087192][ T6077] cougar 0003:060B:700A.0036: parse failed [ 1301.087322][ T6077] cougar 0003:060B:700A.0036: probe with driver cougar failed with error -22 [ 1301.944475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1301.994449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.164469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.254450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.604479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.614497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.624475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1302.634477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1303.031818][ T36] audit: type=1400 audit(2000000738.574:1877): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=7095 comm="syz.4.15219" dest=20004 [ 1303.578045][T32098] usb 3-1: USB disconnect, device number 68 [ 1303.853128][ T7112] binder_alloc: 7110: pid 7110 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1303.853608][ T7112] binder_alloc: 7110: pid 7110 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1305.055010][ T6077] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1305.208028][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 1305.210859][ T6077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.210886][ T6077] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.237847][ T6077] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1305.237937][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.238006][ T6077] usb 4-1: Product: syz [ 1305.238051][ T6077] usb 4-1: Manufacturer: syz [ 1305.238087][ T6077] usb 4-1: SerialNumber: syz [ 1305.264619][T32098] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1305.283571][ T6077] usb 4-1: config 0 descriptor?? [ 1305.435399][T32098] usb 5-1: Using ep0 maxpacket: 16 [ 1305.437769][T32098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.437825][T32098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1305.437856][T32098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1305.437880][T32098] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1305.437905][T32098] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.440113][T32098] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1305.440142][T32098] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1305.440165][T32098] usb 5-1: Manufacturer: syz [ 1305.548651][T32098] usb 5-1: config 0 descriptor?? [ 1305.916090][T32098] rc_core: IR keymap rc-hauppauge not found [ 1305.916114][T32098] Registered IR keymap rc-empty [ 1305.916289][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1305.945097][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1305.967251][T32098] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1305.988680][T32098] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 1306.275328][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1306.294709][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1306.301681][ T5890] usb 4-1: USB disconnect, device number 85 [ 1306.650216][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.143925][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.171399][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.194881][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.326483][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.344669][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.364649][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.384956][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1307.410128][T32098] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1307.410157][T32098] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1307.442768][T32098] usb 5-1: USB disconnect, device number 72 [ 1308.743313][ T7168] pim6reg: entered allmulticast mode [ 1315.721788][ T5891] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1315.895027][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 1315.897359][ T5891] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1315.897395][ T5891] usb 4-1: config 0 has no interface number 0 [ 1315.900459][ T5891] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1315.900489][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.900512][ T5891] usb 4-1: Product: syz [ 1315.900528][ T5891] usb 4-1: Manufacturer: syz [ 1315.900544][ T5891] usb 4-1: SerialNumber: syz [ 1315.975880][ T5891] usb 4-1: config 0 descriptor?? [ 1316.001068][ T5891] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1316.457514][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1316.535895][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1316.821823][ T7223] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15261'. [ 1317.256685][T32098] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1317.435046][T32098] usb 5-1: Using ep0 maxpacket: 16 [ 1317.437416][T32098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.437566][T32098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1317.437598][T32098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1317.437622][T32098] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1317.437712][T32098] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.439030][T32098] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1317.439062][T32098] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1317.439151][T32098] usb 5-1: Manufacturer: syz [ 1317.540258][T32098] usb 5-1: config 0 descriptor?? [ 1317.577994][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1317.653853][ T10] usb 4-1: USB disconnect, device number 86 [ 1317.945733][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1318.010281][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1319.166751][ T10] quatech2 4-1:0.51: device disconnected [ 1319.315652][T32098] rc_core: IR keymap rc-hauppauge not found [ 1319.315675][T32098] Registered IR keymap rc-empty [ 1319.315838][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.343327][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.366596][T32098] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1319.374045][T32098] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 1319.419911][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.435227][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.454891][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.475121][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.494682][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.515036][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.534684][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.554781][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.575088][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.594801][T32098] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1319.650695][T32098] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1319.650724][T32098] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1319.694920][T32098] usb 5-1: USB disconnect, device number 73 [ 1321.913902][ T7317] hub 8-0:1.0: USB hub found [ 1321.932166][ T7317] hub 8-0:1.0: 1 port detected [ 1324.501647][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15301'. [ 1324.508698][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15301'. [ 1324.555833][ T5798] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1324.706948][ T5798] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1324.706979][ T5798] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1324.707002][ T5798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1324.707052][ T5798] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1324.707079][ T5798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1324.707107][ T5798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1324.709071][ T5798] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1324.709098][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1324.709117][ T5798] usb 3-1: Product: syz [ 1324.709130][ T5798] usb 3-1: Manufacturer: syz [ 1324.819279][ T7327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1324.838725][ T36] audit: type=1326 audit(2000000760.474:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7339 comm="syz.4.15304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f0873c819 code=0x0 [ 1324.882801][ T5798] cdc_wdm 3-1:1.0: skipping garbage [ 1324.882826][ T5798] cdc_wdm 3-1:1.0: skipping garbage [ 1324.919821][ T5798] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1324.919845][ T5798] cdc_wdm 3-1:1.0: Unknown control protocol [ 1325.600554][ T36] audit: type=1400 audit(2000000761.234:1879): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="vxcan0" requested=w pid=7343 comm="syz.1.15306" dest=20004 [ 1325.880873][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.881066][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.881643][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.881669][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.881914][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.881938][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.882186][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.882208][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.882457][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.882488][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.882731][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.882754][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.883014][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.883036][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.883271][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.883292][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.883532][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.883554][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1325.883791][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1325.883815][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1327.697787][ T10] usb 3-1: USB disconnect, device number 69 [ 1330.232827][ T36] audit: type=1804 audit(2000000765.864:1880): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.15329" name="/newroot/2855/file0" dev="tmpfs" ino=14490 res=1 errno=0 [ 1341.445292][ T820] ------------[ cut here ]------------ [ 1341.445310][ T820] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1341.445338][ T820] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:2/820 [ 1341.445391][ T820] Modules linked in: [ 1341.445419][ T820] CPU: 0 UID: 0 PID: 820 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1341.445449][ T820] Tainted: [L]=SOFTLOCKUP [ 1341.445458][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1341.445474][ T820] Workqueue: events drm_fb_helper_damage_work [ 1341.445507][ T820] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1341.445539][ T820] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 8a 94 d1 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1341.445558][ T820] RSP: 0018:ffffc900056378c0 EFLAGS: 00010246 [ 1341.445577][ T820] RAX: 1ffff11004be4c00 RBX: ffffffff8f96ab20 RCX: 0000000000000000 [ 1341.445594][ T820] RDX: ffffffff8bc02b40 RSI: ffffffff8bc1f1e0 RDI: ffffffff8f96ab20 [ 1341.445611][ T820] RBP: ffffc900056379a8 R08: 0000000000000000 R09: 0000000000000000 [ 1341.445626][ T820] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: ffffffff8bc1f1e0 [ 1341.445643][ T820] R13: ffff888025f26000 R14: 0000000000000000 R15: ffffffff8bc02b40 [ 1341.445660][ T820] FS: 0000000000000000(0000) GS:ffff888126104000(0000) knlGS:0000000000000000 [ 1341.445679][ T820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1341.445695][ T820] CR2: 00007f0fefb87dac CR3: 000000005592e000 CR4: 00000000003526f0 [ 1341.445716][ T820] Call Trace: [ 1341.445726][ T820] [ 1341.445742][ T820] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1341.445774][ T820] ? rt_spin_unlock+0x14f/0x200 [ 1341.445803][ T820] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1341.445833][ T820] ? rt_spin_unlock+0x160/0x200 [ 1341.445864][ T820] ? drm_vblank_get+0x147/0x260 [ 1341.445898][ T820] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1341.445928][ T820] drm_fb_helper_damage_work+0x131/0x6f0 [ 1341.445964][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.446007][ T820] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1341.446040][ T820] ? preempt_schedule_thunk+0x16/0x30 [ 1341.446074][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.446109][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.446148][ T820] process_scheduled_works+0xb5d/0x1860 [ 1341.446231][ T820] ? __pfx_process_scheduled_works+0x10/0x10 [ 1341.446277][ T820] ? assign_work+0x3d5/0x5e0 [ 1341.446319][ T820] worker_thread+0xa53/0xfc0 [ 1341.446382][ T820] kthread+0x388/0x470 [ 1341.446411][ T820] ? __pfx_worker_thread+0x10/0x10 [ 1341.446431][ T820] ? __pfx_kthread+0x10/0x10 [ 1341.446461][ T820] ret_from_fork+0x514/0xb70 [ 1341.446488][ T820] ? __pfx_ret_from_fork+0x10/0x10 [ 1341.446511][ T820] ? __switch_to+0xc79/0x1410 [ 1341.446546][ T820] ? __pfx_kthread+0x10/0x10 [ 1341.446577][ T820] ret_from_fork_asm+0x1a/0x30 [ 1341.446624][ T820] [ 1341.446636][ T820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1341.446655][ T820] CPU: 0 UID: 0 PID: 820 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1341.446685][ T820] Tainted: [L]=SOFTLOCKUP [ 1341.446697][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1341.446712][ T820] Workqueue: events drm_fb_helper_damage_work [ 1341.446742][ T820] Call Trace: [ 1341.446752][ T820] [ 1341.446761][ T820] vpanic+0x56c/0xa60 [ 1341.446786][ T820] ? __pfx__printk+0x10/0x10 [ 1341.446814][ T820] ? __pfx_vpanic+0x10/0x10 [ 1341.446835][ T820] ? is_bpf_text_address+0x292/0x2b0 [ 1341.446862][ T820] ? is_bpf_text_address+0x26/0x2b0 [ 1341.446901][ T820] panic+0xc5/0xd0 [ 1341.446924][ T820] ? __pfx_panic+0x10/0x10 [ 1341.446961][ T820] ? ret_from_fork_asm+0x1a/0x30 [ 1341.446993][ T820] __warn+0x315/0x4c0 [ 1341.447016][ T820] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1341.447048][ T820] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1341.447082][ T820] __report_bug+0x29a/0x540 [ 1341.447123][ T820] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1341.447155][ T820] ? __pfx___report_bug+0x10/0x10 [ 1341.447222][ T820] report_bug_entry+0x19a/0x290 [ 1341.447256][ T820] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1341.447284][ T820] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1341.447314][ T820] handle_bug+0xce/0x200 [ 1341.447338][ T820] exc_invalid_op+0x1a/0x50 [ 1341.447362][ T820] asm_exc_invalid_op+0x1a/0x20 [ 1341.447384][ T820] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1341.447415][ T820] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 8a 94 d1 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1341.447434][ T820] RSP: 0018:ffffc900056378c0 EFLAGS: 00010246 [ 1341.447454][ T820] RAX: 1ffff11004be4c00 RBX: ffffffff8f96ab20 RCX: 0000000000000000 [ 1341.447470][ T820] RDX: ffffffff8bc02b40 RSI: ffffffff8bc1f1e0 RDI: ffffffff8f96ab20 [ 1341.447488][ T820] RBP: ffffc900056379a8 R08: 0000000000000000 R09: 0000000000000000 [ 1341.447503][ T820] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: ffffffff8bc1f1e0 [ 1341.447521][ T820] R13: ffff888025f26000 R14: 0000000000000000 R15: ffffffff8bc02b40 [ 1341.447563][ T820] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1341.447593][ T820] ? rt_spin_unlock+0x14f/0x200 [ 1341.447620][ T820] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1341.447650][ T820] ? rt_spin_unlock+0x160/0x200 [ 1341.447681][ T820] ? drm_vblank_get+0x147/0x260 [ 1341.447714][ T820] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1341.447744][ T820] drm_fb_helper_damage_work+0x131/0x6f0 [ 1341.447779][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.447820][ T820] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1341.447852][ T820] ? preempt_schedule_thunk+0x16/0x30 [ 1341.447886][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.447921][ T820] ? process_scheduled_works+0xa70/0x1860 [ 1341.447960][ T820] process_scheduled_works+0xb5d/0x1860 [ 1341.448035][ T820] ? __pfx_process_scheduled_works+0x10/0x10 [ 1341.448079][ T820] ? assign_work+0x3d5/0x5e0 [ 1341.448121][ T820] worker_thread+0xa53/0xfc0 [ 1341.448184][ T820] kthread+0x388/0x470 [ 1341.448213][ T820] ? __pfx_worker_thread+0x10/0x10 [ 1341.448233][ T820] ? __pfx_kthread+0x10/0x10 [ 1341.448263][ T820] ret_from_fork+0x514/0xb70 [ 1341.448290][ T820] ? __pfx_ret_from_fork+0x10/0x10 [ 1341.448312][ T820] ? __switch_to+0xc79/0x1410 [ 1341.448348][ T820] ? __pfx_kthread+0x10/0x10 [ 1341.448378][ T820] ret_from_fork_asm+0x1a/0x30 [ 1341.448424][ T820] [ 1341.449217][ T820] Kernel Offset: disabled