last executing test programs: 3m18.900216957s ago: executing program 0 (id=22397): unshare(0x26020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x1}) 3m18.344496114s ago: executing program 0 (id=22405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 3m17.993006395s ago: executing program 0 (id=22412): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100)=0x4, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) dup2(r2, r0) 3m17.856697303s ago: executing program 0 (id=22416): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 3m17.315437964s ago: executing program 0 (id=22427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m15.81118643s ago: executing program 0 (id=22454): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x65d6, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 3m15.35279072s ago: executing program 32 (id=22454): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x65d6, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 11.322702416s ago: executing program 4 (id=24971): fadvise64(0xffffffffffffffff, 0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 9.912027111s ago: executing program 4 (id=24978): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket(0x2, 0x80805, 0x0) flistxattr(r4, 0x0, 0x0) 9.319043604s ago: executing program 5 (id=24988): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 8.600864707s ago: executing program 2 (id=24997): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close(r0) 8.324850959s ago: executing program 2 (id=25000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendfile(r3, r4, 0x0, 0x10001) 7.187939082s ago: executing program 5 (id=25005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r2 = socket(0x23, 0x5, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 7.101470701s ago: executing program 2 (id=25006): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r5}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20004000) 6.611000832s ago: executing program 2 (id=25010): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000480)=ANY=[], 0x37) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.306253012s ago: executing program 2 (id=25022): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9}, 0xc) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="186bf7ffffffffffffffef0a325469a1d60279ef266e55c695ac33b5af73c0941bd44b7c45b3e9b2383620d9dfd32895f1fb54d8b8a372a62b84eea278cb5ad37faf6cd836af0d91f43dc05a0a621b0c592d44953c82b00b82586b61341ea3d1512ce06e23391c45fdca450a4d8a1a2469414e0b96fcf30d4492a3573e578361383c470e0fb7e2056a26c6683627c85cb9875549797f9caf7d9328c110815ea20f8ba7c1c0d472a9f23b24f37b9203b927286de3ecb6bf64d8d97ddc4fd8baf166febafe7b1f30513d36436add6d07aa49533d198b0b", 0x0, 0xff, 0x60000009, 0xffffffffffffff69, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.245593291s ago: executing program 4 (id=25023): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x40000006}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.673466592s ago: executing program 5 (id=25029): execve(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x413a, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) fstat(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) 4.423842464s ago: executing program 5 (id=25034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x3, 0x4000, 0x200, &(0x7f0000ab8000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0xfc2c) 4.013807018s ago: executing program 4 (id=25036): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20044000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x178, 0xb, 0x148, 0x178, 0x148, 0x250, 0x240, 0x240, 0x250, 0x215, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'bridge0\x00', {}, {}, 0x11}, 0x2e8, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e28, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x21, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3], 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x9, 0x8001, 0xffffffff, '\x00', 'syz0\x00', {0x7}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'pim6reg0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x5, 'snmp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 3.099227933s ago: executing program 5 (id=25041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 2.967832342s ago: executing program 1 (id=25042): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x4) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 2.685077602s ago: executing program 3 (id=25044): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000026c0)='\\', 0x1) 2.572556907s ago: executing program 1 (id=25045): accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80800) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x28400210}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48050) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.215237709s ago: executing program 3 (id=25046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x190) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000100)={0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.000313s ago: executing program 1 (id=25047): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$unix(0x1, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1.967202996s ago: executing program 3 (id=25048): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x4004040) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.836154426s ago: executing program 4 (id=25049): syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, 0x0, 0x0, &(0x7f0000000000)) r0 = eventfd(0xfffffff9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0x80001da}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0x0, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000180)=0x6, 0x8) 1.767967231s ago: executing program 3 (id=25050): r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f00000000c0)=@rnullb, 0x0, 0x0, 0x10, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000003940)={0x60, 0x0, 0x0, {{0x7, 0x9, 0xb, 0x0, 0x9, 0x40, 0x10000, 0x1}}}, 0x60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, 0x0, 0x5, 0x0, 0x3}}) 1.757525283s ago: executing program 2 (id=25051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="150327bd7000fdeddf2504"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) 1.750535196s ago: executing program 1 (id=25052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0xfff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000940), 0x23, r3}, 0x38) 1.607934128s ago: executing program 3 (id=25053): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46544, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000e0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f00000002c0)=r2}, 0x20) 1.49632445s ago: executing program 5 (id=25054): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.495631918s ago: executing program 1 (id=25055): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1af8f6fb43dde4511d2d33ac757b2ca2969b564858684f7d06517d22eeff37a3582afa569de4cc5cf909e915e63586ad5893c591d3350318039aa823756960dfcf4498e24f80c5c0f1b058026e527124cc4630ce72"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.495099657s ago: executing program 4 (id=25056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c0000040042800c00000000000000000914bb140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc}) socket$inet(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.099564811s ago: executing program 3 (id=25057): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0xe00}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=25058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): iver returned -16 [ 1132.102023][ T1802] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1132.102051][ T1802] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1132.123439][ T1802] usb 3-1: USB disconnect, device number 26 [ 1132.279638][ T5885] usb 5-1: USB disconnect, device number 18 [ 1133.063290][ T5885] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1133.219671][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.219706][ T5885] usb 1-1: config 0 has no interface number 0 [ 1133.219768][ T5885] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1133.219798][ T5885] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.219822][ T5885] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.219852][ T5885] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1133.219891][ T5885] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1133.219917][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.241853][ T5885] usb 1-1: config 0 descriptor?? [ 1133.282786][T14492] sctp: [Deprecated]: syz.4.19676 (pid 14492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1133.282786][T14492] Use struct sctp_sack_info instead [ 1133.709332][ T5885] hid (null): invalid report_count 252767622 [ 1133.926139][ T5885] uclogic 0003:145F:0212.0041: pen parameters not found [ 1133.926169][ T5885] uclogic 0003:145F:0212.0041: interface is invalid, ignoring [ 1133.959972][ T5885] usb 1-1: USB disconnect, device number 15 [ 1134.193255][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19694'. [ 1135.503296][T23973] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1135.678332][T23973] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1135.678369][T23973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.678391][T23973] usb 5-1: Product: syz [ 1135.678407][T23973] usb 5-1: Manufacturer: syz [ 1135.678423][T23973] usb 5-1: SerialNumber: syz [ 1136.052461][T23973] rtl8150 5-1:1.0: couldn't reset the device [ 1136.059269][T23973] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1136.100293][T23973] usb 5-1: USB disconnect, device number 19 [ 1136.662264][T14658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19757'. [ 1137.038075][ T37] audit: type=1326 audit(1136.306:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.039998][ T37] audit: type=1326 audit(1136.306:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.041621][ T37] audit: type=1326 audit(1136.306:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.042019][ T37] audit: type=1326 audit(1136.306:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.042297][ T37] audit: type=1326 audit(1136.306:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.042556][ T37] audit: type=1326 audit(1136.306:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.042847][ T37] audit: type=1326 audit(1136.306:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.046604][ T37] audit: type=1326 audit(1136.316:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.046916][ T37] audit: type=1326 audit(1136.316:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.047405][ T37] audit: type=1326 audit(1136.316:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.0.19769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1137.243116][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1137.393521][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1137.402433][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1137.418499][ T10] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1137.418535][ T10] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1137.418558][ T10] usb 3-1: Product: syz [ 1137.418584][ T10] usb 3-1: Manufacturer: syz [ 1137.418601][ T10] usb 3-1: SerialNumber: syz [ 1137.663140][ T10] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1137.663174][ T10] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1137.663196][ T10] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1137.663216][ T10] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1137.859210][ T10] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1137.873757][ T10] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1137.892039][ T10] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1138.065478][ T5988] usb 3-1: USB disconnect, device number 27 [ 1138.089456][ T5988] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1138.126959][ T5988] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1138.127880][ T5988] visor 3-1:1.0: device disconnected [ 1139.271767][T14754] IPVS: persistence engine module ip_vs_pe_À not found [ 1139.393964][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19809'. [ 1139.394002][T14766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19809'. [ 1139.394022][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19809'. [ 1139.700209][T14782] netlink: 'syz.0.19816': attribute type 12 has an invalid length. [ 1139.700241][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19816'. [ 1140.619013][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19838'. [ 1140.619053][T14829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19838'. [ 1141.661129][T14881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1142.015454][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19869'. [ 1142.015739][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19869'. [ 1142.078367][T14904] netlink: 'syz.0.19875': attribute type 5 has an invalid length. [ 1142.963488][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1143.123372][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1143.127909][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1143.127945][ T10] usb 1-1: config 0 has no interface number 0 [ 1143.132649][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1143.132686][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.132709][ T10] usb 1-1: Product: syz [ 1143.132725][ T10] usb 1-1: Manufacturer: syz [ 1143.132742][ T10] usb 1-1: SerialNumber: syz [ 1143.152069][ T10] usb 1-1: config 0 descriptor?? [ 1143.188101][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1143.246983][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1143.247007][ T37] audit: type=1326 audit(1142.516:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14963 comm="syz.2.19904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x0 [ 1143.434875][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1143.498598][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1143.912712][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1143.915918][ T10] usb 1-1: USB disconnect, device number 16 [ 1143.959756][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1143.979696][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1143.980727][ T10] quatech2 1-1:0.51: device disconnected [ 1143.993240][ T1802] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1144.144305][ T1802] usb 5-1: Using ep0 maxpacket: 16 [ 1144.146516][ T1802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.146555][ T1802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.146580][ T1802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1144.146627][ T1802] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1144.146653][ T1802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.223519][ T1802] usb 5-1: config 0 descriptor?? [ 1144.655678][ T1802] microsoft 0003:045E:07DA.0042: unbalanced collection at end of report description [ 1144.656762][ T1802] microsoft 0003:045E:07DA.0042: parse failed [ 1144.656873][ T1802] microsoft 0003:045E:07DA.0042: probe with driver microsoft failed with error -22 [ 1144.793423][ T5988] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1144.837048][ T5957] usb 5-1: USB disconnect, device number 20 [ 1144.973334][ T5988] usb 1-1: Using ep0 maxpacket: 16 [ 1144.975851][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.975888][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.975930][ T5988] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1144.975956][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.037316][ T5988] usb 1-1: config 0 descriptor?? [ 1145.481754][ T5988] apple 0003:05AC:024B.0043: fixing up MacBook JIS keyboard report descriptor [ 1145.482470][ T5988] apple 0003:05AC:024B.0043: unknown global tag 0xe [ 1145.482489][ T5988] apple 0003:05AC:024B.0043: item 0 1 1 14 parsing failed [ 1145.526154][ T5988] apple 0003:05AC:024B.0043: parse failed [ 1145.526285][ T5988] apple 0003:05AC:024B.0043: probe with driver apple failed with error -22 [ 1145.705152][ T5988] usb 1-1: USB disconnect, device number 17 [ 1147.426199][ T1802] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1147.577175][ T1802] usb 5-1: Using ep0 maxpacket: 16 [ 1147.587118][ T1802] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1147.587150][ T1802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.587169][ T1802] usb 5-1: Product: syz [ 1147.587184][ T1802] usb 5-1: Manufacturer: syz [ 1147.587198][ T1802] usb 5-1: SerialNumber: syz [ 1147.633811][ T1802] usb 5-1: config 0 descriptor?? [ 1147.891367][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19995'. [ 1148.054014][ T1802] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1148.073702][ T1802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1148.074740][ T1802] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1148.074801][ T1802] usb 5-1: media controller created [ 1148.122758][ T1802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1148.717968][T15116] dtv5100: wlen = 0, aborting. [ 1148.718067][ T1802] zl10353_read_register: readreg error (reg=127, ret==0) [ 1148.718135][ T1802] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1148.718150][ T1802] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1148.782550][ T1802] usb 5-1: USB disconnect, device number 21 [ 1148.934107][ T1802] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1149.490728][T15211] netlink: 'syz.4.20023': attribute type 6 has an invalid length. [ 1149.490759][T15211] netlink: 104 bytes leftover after parsing attributes in process `syz.4.20023'. [ 1149.843178][ T1802] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1149.993670][ T1802] usb 1-1: Using ep0 maxpacket: 16 [ 1149.998077][ T1802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1150.001145][ T1802] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1150.001177][ T1802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.001199][ T1802] usb 1-1: Product: syz [ 1150.001215][ T1802] usb 1-1: Manufacturer: syz [ 1150.001231][ T1802] usb 1-1: SerialNumber: syz [ 1150.014238][ T1802] usb 1-1: config 0 descriptor?? [ 1150.039127][ T1802] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1150.240738][ T1802] usb 1-1: USB disconnect, device number 18 [ 1150.338554][T15251] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.20043'. [ 1150.581454][T15260] kvm: user requested TSC rate below hardware speed [ 1150.971253][T15283] netlink: 'syz.2.20056': attribute type 3 has an invalid length. [ 1151.184818][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1151.192286][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20063'. [ 1151.333954][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1151.338711][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.338746][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.374782][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.374821][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.374843][ T10] usb 1-1: Product: syz [ 1151.374859][ T10] usb 1-1: Manufacturer: syz [ 1151.374875][ T10] usb 1-1: SerialNumber: syz [ 1151.638035][ T10] usb 1-1: 0:2 : does not exist [ 1151.650573][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1151.859983][ T10] usb 1-1: USB disconnect, device number 19 [ 1151.962067][T15316] vxcan1 speed is unknown, defaulting to 1000 [ 1152.034885][T12878] udevd[12878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1152.913208][ T5988] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1152.987002][T15361] mkiss: ax0: crc mode is auto. [ 1153.095690][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 1153.101980][ T5988] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1153.102021][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1153.102061][ T5988] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1153.102087][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.162739][ T5988] usb 3-1: config 0 descriptor?? [ 1153.650978][T15386] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1154.005981][ T5988] corsair-cpro 0003:1B1C:0C10.0044: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1154.150280][ T5988] corsair-cpro 0003:1B1C:0C10.0044: probe with driver corsair-cpro failed with error -61 [ 1154.381569][ T5988] usb 3-1: USB disconnect, device number 28 [ 1155.284130][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20128'. [ 1155.284427][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20128'. [ 1156.058939][ T7717] Bluetooth: hci0: SCO packet too small [ 1157.314132][T15519] loop5: detected capacity change from 0 to 7 [ 1157.327842][T15519] Dev loop5: unable to read RDB block 7 [ 1157.327895][T15519] loop5: unable to read partition table [ 1157.328148][T15519] loop5: partition table beyond EOD, truncated [ 1157.328206][T15519] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1157.606511][T15530] netlink: 'syz.0.20171': attribute type 2 has an invalid length. [ 1160.309472][ T37] audit: type=1326 audit(1415.572:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.309511][ T37] audit: type=1326 audit(1415.582:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.309538][ T37] audit: type=1326 audit(1415.582:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.317227][ T37] audit: type=1326 audit(1415.592:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.317283][ T37] audit: type=1326 audit(1415.592:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.317327][ T37] audit: type=1326 audit(1415.592:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.317368][ T37] audit: type=1326 audit(1415.592:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.317410][ T37] audit: type=1326 audit(1415.592:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.319229][ T37] audit: type=1326 audit(1415.592:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1160.319278][ T37] audit: type=1326 audit(1415.592:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15643 comm="syz.2.20225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1ff6c819 code=0x7ffc0000 [ 1161.283219][T15679] vxcan1 speed is unknown, defaulting to 1000 [ 1165.333296][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1165.603354][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1165.753445][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1165.760953][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1165.760987][ T10] usb 5-1: config 0 has no interface number 0 [ 1165.761038][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1165.796026][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1165.796059][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.796079][ T10] usb 5-1: Product: syz [ 1165.796092][ T10] usb 5-1: Manufacturer: syz [ 1165.796107][ T10] usb 5-1: SerialNumber: syz [ 1165.807380][ T10] usb 5-1: config 0 descriptor?? [ 1165.819954][T15823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1165.873089][ T5957] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1166.038495][T15823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.043520][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 1166.058687][ T5957] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1166.058722][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.058744][ T5957] usb 1-1: Product: syz [ 1166.058761][ T5957] usb 1-1: Manufacturer: syz [ 1166.058777][ T5957] usb 1-1: SerialNumber: syz [ 1166.110105][ T5957] usb 1-1: config 0 descriptor?? [ 1166.127128][ T5957] gspca_main: se401-2.14.0 probing 047d:5003 [ 1166.545270][ T5957] gspca_se401: ExtraFeatures: 48 [ 1166.545293][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545309][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545322][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545336][ T5957] gspca_se401: Frame size: 1x0 bayer [ 1166.545347][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545361][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545384][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545397][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545410][ T5957] gspca_se401: Frame size: 0x0 1/16th janggu [ 1166.545423][ T5957] gspca_se401: Frame size: 68x8196 bayer [ 1166.646531][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1166.752206][ T5957] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input82 [ 1166.780098][ T5957] usb 1-1: USB disconnect, device number 20 [ 1166.847462][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1166.847500][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1166.847840][ T10] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1166.876701][ T10] usb 5-1: USB disconnect, device number 22 [ 1168.015427][T15907] netlink: 256 bytes leftover after parsing attributes in process `syz.2.20351'. [ 1170.623434][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1170.776795][ T5885] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1170.776857][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.776887][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.776911][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1170.778323][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1170.778357][ T5885] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1170.778381][ T5885] usb 1-1: Manufacturer: syz [ 1170.790105][ T5885] usb 1-1: config 0 descriptor?? [ 1171.248852][ T5885] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 1171.310623][ T5885] appleir 0003:05AC:8243.0045: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1171.682684][ T5885] usb 1-1: USB disconnect, device number 21 [ 1171.753521][ T5988] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1171.930024][ T5988] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1171.930066][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.930082][ T5988] usb 3-1: Product: syz [ 1171.930093][ T5988] usb 3-1: Manufacturer: syz [ 1171.930102][ T5988] usb 3-1: SerialNumber: syz [ 1171.967725][ T5988] usb 3-1: config 0 descriptor?? [ 1172.000516][ T5988] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1172.402807][ T5988] sonixb 3-1:0.0: Error writing register 01: -71 [ 1172.411322][ T5988] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 1172.432805][ T5988] usb 3-1: USB disconnect, device number 29 [ 1172.884102][T16115] netlink: 196 bytes leftover after parsing attributes in process `syz.0.20446'. [ 1173.484360][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20460'. [ 1173.893153][ T1802] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1174.043131][ T1802] usb 3-1: Using ep0 maxpacket: 16 [ 1174.052362][ T1802] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1174.052401][ T1802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.052424][ T1802] usb 3-1: Product: syz [ 1174.052441][ T1802] usb 3-1: Manufacturer: syz [ 1174.052457][ T1802] usb 3-1: SerialNumber: syz [ 1174.073251][ T1802] usb 3-1: config 0 descriptor?? [ 1174.508931][ T1802] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1174.515151][ T1802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1174.523725][ T1802] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1174.523789][ T1802] usb 3-1: media controller created [ 1174.588860][ T1802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1175.193434][ T1802] zl10353_read_register: readreg error (reg=127, ret==0) [ 1175.193508][ T1802] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1175.193522][ T1802] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1175.312224][ T1802] usb 3-1: USB disconnect, device number 30 [ 1175.443900][ T1802] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1178.149670][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.228286][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20572'. [ 1179.228323][T16373] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1179.490859][ T5885] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1179.504309][ T5885] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1180.218152][T16376] hid-generic 0000:0000:0000.0046: pid 16376 passed too short report [ 1180.301402][T16410] syzkaller1: entered promiscuous mode [ 1180.301427][T16410] syzkaller1: entered allmulticast mode [ 1181.993367][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1182.148683][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.148714][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1182.150231][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1182.150259][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1182.150280][ T10] usb 1-1: SerialNumber: syz [ 1182.203339][ T5885] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1182.353412][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1182.370190][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1182.370227][ T5885] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1182.370765][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.425440][ T5885] usb 3-1: config 0 descriptor?? [ 1182.470335][ T10] usb 1-1: 0:2 : does not exist [ 1182.654679][ T5885] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1182.818496][ T10] usb 1-1: USB disconnect, device number 22 [ 1182.919886][T23973] usb 3-1: USB disconnect, device number 31 [ 1182.966564][T12878] udevd[12878]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.808405][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20661'. [ 1184.579982][T16588] loop5: detected capacity change from 0 to 7 [ 1184.617580][T16588] Dev loop5: unable to read RDB block 7 [ 1184.617643][T16588] loop5: unable to read partition table [ 1184.617894][T16588] loop5: partition table beyond EOD, truncated [ 1184.617955][T16588] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1187.057110][T16694] overlay: filesystem on ./file0 is read-only [ 1187.351441][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20734'. [ 1187.363655][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20734'. [ 1187.883164][ T5885] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1188.005609][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20751'. [ 1188.008690][T16742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1188.018675][T16742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1188.020647][T16742] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 1188.044114][ T5885] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 1188.044143][ T5885] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1188.044162][ T5885] usb 3-1: config 0 has no interface number 0 [ 1188.044205][ T5885] usb 3-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1188.044231][ T5885] usb 3-1: config 0 interface 66 has no altsetting 0 [ 1188.044286][ T5885] usb 3-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 1188.044308][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.095135][ T5885] usb 3-1: config 0 descriptor?? [ 1188.323819][ T5885] usb 3-1: string descriptor 0 read error: -71 [ 1188.373213][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1188.453937][ T5885] usb 3-1: USB disconnect, device number 32 [ 1189.857164][T16806] loop8: detected capacity change from 0 to 8 [ 1189.912771][T16806] Dev loop8: unable to read RDB block 8 [ 1189.912836][T16806] loop8: unable to read partition table [ 1189.913399][T16806] loop8: partition table beyond EOD, truncated [ 1189.913448][T16806] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1189.983050][ T5885] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1190.137766][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1190.140267][ T5885] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.140303][ T5885] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.144827][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1190.144857][ T5885] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1190.144878][ T5885] usb 3-1: Product: syz [ 1190.144892][ T5885] usb 3-1: Manufacturer: syz [ 1190.238928][ T5885] hub 3-1:4.0: USB hub found [ 1190.288301][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20786'. [ 1190.403727][ T5885] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1190.727866][ T5885] usb 3-1: USB disconnect, device number 33 [ 1191.082314][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20805'. [ 1191.104780][T16856] ip6gre3: entered promiscuous mode [ 1191.104809][T16856] ip6gre3: entered allmulticast mode [ 1191.335006][T16862] kvm: kvm [16861]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 1191.626177][T16877] overlayfs: upper fs does not support tmpfile. [ 1191.903103][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1192.063096][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1192.066551][ T10] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 1192.066581][ T10] usb 1-1: config 139 has no interface number 0 [ 1192.066618][ T10] usb 1-1: config 139 interface 49 has no altsetting 0 [ 1192.069125][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1192.069156][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.069177][ T10] usb 1-1: Product: syz [ 1192.069194][ T10] usb 1-1: Manufacturer: syz [ 1192.069210][ T10] usb 1-1: SerialNumber: syz [ 1192.189250][ T1182] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1192.222381][ T1802] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1192.226882][ T1182] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1192.281916][ T1802] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1192.655601][ T10] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1192.913454][T23973] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1193.013597][ T5885] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1193.072789][T23973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.072848][T23973] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1193.101793][T23973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1193.101834][T23973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.101858][T23973] usb 5-1: Product: syz [ 1193.101875][T23973] usb 5-1: Manufacturer: syz [ 1193.101892][T23973] usb 5-1: SerialNumber: syz [ 1193.157465][T23973] cdc_mbim 5-1:1.0: skipping garbage [ 1193.278541][ T10] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1193.279164][ T10] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 1193.312632][ T10] usb 1-1: USB disconnect, device number 23 [ 1193.384721][T16916] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1193.983069][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1193.990976][T16916] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1193.991810][T23973] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1194.024128][T23973] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1194.090360][T23973] wwan wwan0: port wwan0mbim0 attached [ 1194.113620][T23973] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 7e:4a:11:46:6d:c4 [ 1194.133207][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1194.144193][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1194.144245][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.144266][ T10] usb 3-1: Product: syz [ 1194.144282][ T10] usb 3-1: Manufacturer: syz [ 1194.144299][ T10] usb 3-1: SerialNumber: syz [ 1194.210734][ T10] usb 3-1: config 0 descriptor?? [ 1194.224779][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1194.226854][ T10] usb 3-1: Detected FT-X [ 1194.229915][T23973] usb 5-1: USB disconnect, device number 23 [ 1194.232591][T23973] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1194.421706][T23973] wwan wwan0: port wwan0mbim0 disconnected [ 1194.437140][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1194.857933][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1195.056989][ T10] usb 3-1: USB disconnect, device number 34 [ 1195.243646][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1195.244600][ T10] ftdi_sio 3-1:0.0: device disconnected [ 1195.760071][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20883'. [ 1196.069107][ T5988] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1196.230693][ T5988] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.230730][ T5988] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1196.254122][ T5988] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1196.254161][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.254184][ T5988] usb 5-1: Product: syz [ 1196.254201][ T5988] usb 5-1: Manufacturer: syz [ 1196.254217][ T5988] usb 5-1: SerialNumber: syz [ 1196.313304][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1196.453235][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1196.463541][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1196.466255][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1196.466292][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.471853][ T10] usb 3-1: config 0 descriptor?? [ 1196.531335][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1197.083720][ T5988] usb 5-1: USB disconnect, device number 24 [ 1197.500541][ T10] gspca_sunplus: reg_w_riv err -71 [ 1197.500650][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1197.509393][ T10] usb 3-1: USB disconnect, device number 35 [ 1198.142268][T17105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20926'. [ 1198.581677][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20937'. [ 1198.581719][T17128] netlink: 'syz.2.20937': attribute type 7 has an invalid length. [ 1198.581734][T17128] netlink: 'syz.2.20937': attribute type 8 has an invalid length. [ 1198.581749][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20937'. [ 1198.602283][T17128] erspan0: entered promiscuous mode [ 1198.605759][T17128] gretap0: entered promiscuous mode [ 1198.614749][ T9] kworker/0:0 (9) used greatest stack depth: 15808 bytes left [ 1198.657217][T17128] erspan0: left promiscuous mode [ 1198.694343][T17128] gretap0: left promiscuous mode [ 1199.685544][T17171] ALSA: mixer_oss: invalid OSS volume 'lags:' [ 1199.685568][T17171] ALSA: mixer_oss: invalid OSS volume 'mnt_id:' [ 1199.685580][T17171] ALSA: mixer_oss: invalid OSS volume 'ino:' [ 1199.685592][T17171] ALSA: mixer_oss: invalid OSS volume '' [ 1200.179758][T17187] syzkaller1: entered promiscuous mode [ 1200.179798][T17187] syzkaller1: entered allmulticast mode [ 1201.633061][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1201.787866][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1201.789375][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.789403][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1201.789474][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 37, changing to 7 [ 1201.838322][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=8782, bcdDevice= 0.54 [ 1201.838356][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.838377][ T10] usb 3-1: Product: syz [ 1201.838393][ T10] usb 3-1: Manufacturer: syz [ 1201.838408][ T10] usb 3-1: SerialNumber: syz [ 1202.129271][ T10] usb 3-1: Can't get UAC3 power state for id 11 [ 1202.131951][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-71) [ 1202.160626][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1202.311769][ T10] usb 3-1: USB disconnect, device number 36 [ 1202.438194][T12840] udevd[12840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1205.013125][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1207.057068][T17470] syzkaller1: entered promiscuous mode [ 1207.057102][T17470] syzkaller1: entered allmulticast mode [ 1209.384251][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21141'. [ 1209.742648][T17575] batadv_slave_1: entered promiscuous mode [ 1209.745962][T17572] batadv_slave_1: left promiscuous mode [ 1210.391388][T17602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1212.162271][T17677] pim6reg1: entered promiscuous mode [ 1212.162302][T17677] pim6reg1: entered allmulticast mode [ 1213.143298][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1213.313375][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1213.316094][ T10] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1213.316128][ T10] usb 1-1: config 1 has no interface number 0 [ 1213.316181][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1213.316210][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1213.316238][ T10] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1213.333690][ T10] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1213.333728][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1213.333750][ T10] usb 1-1: Product: syz [ 1213.333765][ T10] usb 1-1: Manufacturer: syz [ 1213.333782][ T10] usb 1-1: SerialNumber: syz [ 1213.427848][T17707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1213.427995][T17707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1213.840602][T17707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1213.840821][T17707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1213.963508][ T5988] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1214.130759][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 1214.134903][ T5988] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1214.134932][ T5988] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1214.134952][ T5988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1214.134972][ T5988] usb 5-1: config 1 has no interface number 0 [ 1214.135021][ T5988] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1214.135049][ T5988] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1214.135090][ T5988] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1214.135113][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.159289][ T5988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1214.367727][ T5988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1214.446355][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1214.446939][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1214.504104][ T10] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 1214.511415][ T10] usb 1-1: USB disconnect, device number 24 [ 1214.546786][ T10] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1214.703301][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1214.703465][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1214.703618][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1214.879454][ T5988] usb 5-1: USB disconnect, device number 25 [ 1214.886043][ T5988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1215.131169][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1215.131193][ T37] audit: type=1326 audit(1470.402:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.131660][ T37] audit: type=1326 audit(1470.402:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.131709][ T37] audit: type=1326 audit(1470.402:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.203242][ T37] audit: type=1326 audit(1470.482:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.204255][ T37] audit: type=1326 audit(1470.482:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.204417][ T37] audit: type=1326 audit(1470.482:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.204566][ T37] audit: type=1326 audit(1470.482:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.214312][ T37] audit: type=1326 audit(1470.492:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.215063][ T37] audit: type=1326 audit(1470.492:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1215.215289][ T37] audit: type=1326 audit(1470.492:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.0.21246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feecf73c819 code=0x7ffc0000 [ 1216.436317][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21271'. [ 1219.075211][ T5988] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1219.233192][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 1219.260880][ T5988] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1219.260913][ T5988] usb 1-1: config 0 has no interface number 0 [ 1219.310914][ T5988] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1219.310937][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.310951][ T5988] usb 1-1: Product: syz [ 1219.310960][ T5988] usb 1-1: Manufacturer: syz [ 1219.310969][ T5988] usb 1-1: SerialNumber: syz [ 1219.358083][ T5988] usb 1-1: config 0 descriptor?? [ 1219.835518][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1219.835560][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1220.246191][ T5988] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1220.246564][ T5988] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1220.344602][ T5988] usb 1-1: USB disconnect, device number 25 [ 1220.997478][T17986] tipc: Resetting bearer [ 1221.259351][T17986] tipc: Disabling bearer [ 1221.397211][T17986] team0 (unregistering): Port device team_slave_0 removed [ 1221.481788][T17986] team0 (unregistering): Port device team_slave_1 removed [ 1221.816140][T17986] team0 (unregistering): Port device syz_tun removed [ 1221.891966][T17998] evm: overlay not supported [ 1222.108999][T18011] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.21358'. [ 1222.293138][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1222.583402][T18026] loop5: detected capacity change from 0 to 7 [ 1222.588510][T18026] Dev loop5: unable to read RDB block 7 [ 1222.588562][T18026] loop5: unable to read partition table [ 1222.588826][T18026] loop5: partition table beyond EOD, truncated [ 1222.588979][T18026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1222.894802][T18041] netlink: 49 bytes leftover after parsing attributes in process `syz.2.21367'. [ 1222.894832][T18041] netlink: 140 bytes leftover after parsing attributes in process `syz.2.21367'. [ 1224.198823][T18094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21395'. [ 1224.214201][T23973] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1224.391644][T23973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.391709][T23973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1224.391739][T23973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.391764][T23973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1224.391812][T23973] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1224.391838][T23973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.461220][T23973] usb 1-1: config 0 descriptor?? [ 1224.730812][T23973] usbhid 1-1:0.0: can't add hid device: -71 [ 1224.730950][T23973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1224.754079][T23973] usb 1-1: USB disconnect, device number 26 [ 1225.195395][ T5957] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1225.353223][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 1225.355707][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.355767][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.355795][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.355820][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1225.355863][ T5957] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1225.356013][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.433208][ T5957] usb 1-1: config 0 descriptor?? [ 1225.983150][ T5957] betop 0003:20BC:5500.0047: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0 [ 1225.983193][ T5957] betop 0003:20BC:5500.0047: no inputs found [ 1226.078177][ T5885] usb 1-1: USB disconnect, device number 27 [ 1226.133403][ T7717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1226.133445][ T5115] Bluetooth: hci5: command 0x1003 tx timeout [ 1226.332254][T18161] fido_id[18161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1227.607751][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21461'. [ 1227.678652][T18214] bridge0: port 3(vlan4) entered blocking state [ 1227.686074][T18214] bridge0: port 3(vlan4) entered disabled state [ 1227.686328][T18214] vlan4: entered allmulticast mode [ 1227.706765][T18214] vlan4: entered promiscuous mode [ 1227.774643][T18233] dummy0: entered promiscuous mode [ 1227.776442][T18232] dummy0: left promiscuous mode [ 1229.335991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1230.324869][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1230.473517][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1230.475968][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1230.475996][ T10] usb 1-1: config 0 has no interface number 0 [ 1230.476044][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1230.481321][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1230.481355][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.481376][ T10] usb 1-1: Product: syz [ 1230.481391][ T10] usb 1-1: Manufacturer: syz [ 1230.481406][ T10] usb 1-1: SerialNumber: syz [ 1230.518243][ T10] usb 1-1: config 0 descriptor?? [ 1231.369350][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1231.369420][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1231.369439][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1231.369542][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1231.443160][ T10] usb 1-1: USB disconnect, device number 28 [ 1232.086461][T18395] netlink: 'syz.0.21540': attribute type 21 has an invalid length. [ 1232.086539][T18395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.21540'. [ 1232.103276][T18395] netlink: 'syz.0.21540': attribute type 21 has an invalid length. [ 1232.103350][T18395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.21540'. [ 1232.563962][T18416] veth0: entered promiscuous mode [ 1232.565247][T18415] veth0: left promiscuous mode [ 1232.927878][T18435] netlink: 25 bytes leftover after parsing attributes in process `syz.0.21559'. [ 1232.927931][T18435] lo: left allmulticast mode [ 1233.395757][T18453] Invalid argument reading file caps for ./file0 [ 1233.818521][T18475] loop8: detected capacity change from 0 to 7 [ 1233.876779][T18475] Dev loop8: unable to read RDB block 7 [ 1233.876834][T18475] loop8: unable to read partition table [ 1233.877092][T18475] loop8: partition table beyond EOD, truncated [ 1233.877115][T18475] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1234.668128][T18514] netlink: 'syz.2.21596': attribute type 29 has an invalid length. [ 1234.670140][T18514] netlink: 'syz.2.21596': attribute type 29 has an invalid length. [ 1234.671258][T18514] netlink: 500 bytes leftover after parsing attributes in process `syz.2.21596'. [ 1236.195032][T18592] Invalid logical block size (530) [ 1236.697387][T18611] loop5: detected capacity change from 0 to 7 [ 1236.698628][T18611] Dev loop5: unable to read RDB block 7 [ 1236.698674][T18611] loop5: unable to read partition table [ 1236.698902][T18611] loop5: partition table beyond EOD, truncated [ 1236.698926][T18611] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1236.738827][T18614] loop8: detected capacity change from 0 to 4 [ 1236.770851][T18614] Dev loop8: unable to read RDB block 4 [ 1236.770911][T18614] loop8: unable to read partition table [ 1236.771161][T18614] loop8: partition table beyond EOD, truncated [ 1236.771204][T18614] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1237.455765][T18636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1238.397195][T18683] sit0: entered promiscuous mode [ 1238.453743][T18683] netlink: 'syz.2.21676': attribute type 1 has an invalid length. [ 1238.453771][T18683] netlink: 9 bytes leftover after parsing attributes in process `syz.2.21676'. [ 1239.202598][T18717] batadv_slave_1: entered promiscuous mode [ 1239.207039][T18716] batadv_slave_1: left promiscuous mode [ 1239.587179][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.989660][ T5115] Bluetooth: hci3: unexpected event for opcode 0x080d [ 1241.165947][T18818] loop5: detected capacity change from 0 to 7 [ 1241.167875][T18818] Dev loop5: unable to read RDB block 7 [ 1241.167908][T18818] loop5: AHDI p1 p2 [ 1241.168029][T18818] loop5: partition table partially beyond EOD, truncated [ 1241.168319][T18818] loop5: p1 size 150995456 extends beyond EOD, truncated [ 1241.253389][ T5957] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1241.357205][T18826] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.21745'. [ 1241.367895][T12878] udevd[12878]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1241.393454][ T5957] usb 3-1: device descriptor read/64, error -71 [ 1241.663038][ T5957] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1241.826625][ T5957] usb 3-1: device descriptor read/64, error -71 [ 1241.943970][ T5957] usb usb3-port1: attempt power cycle [ 1242.303150][ T5957] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1242.324107][ T5957] usb 3-1: device descriptor read/8, error -71 [ 1242.593099][ T5957] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1242.614200][ T5957] usb 3-1: device descriptor read/8, error -71 [ 1242.733625][ T5957] usb usb3-port1: unable to enumerate USB device [ 1242.887731][T18911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21786'. [ 1243.562971][ T5957] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1243.730019][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 1243.733574][ T5957] usb 5-1: config 0 has no interfaces? [ 1243.734938][ T5957] usb 5-1: config 0 has no interfaces? [ 1243.736050][ T5957] usb 5-1: config 0 has no interfaces? [ 1243.737139][ T5957] usb 5-1: config 0 has no interfaces? [ 1243.737178][ T5957] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1243.737203][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.752147][ T5957] usb 5-1: config 0 descriptor?? [ 1244.405996][ T10] usb 5-1: USB disconnect, device number 26 [ 1244.423440][T18971] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.21814'. [ 1248.287582][T19112] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 1248.287614][T19112] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1248.311656][T19112] bond3 (unregistering): Released all slaves [ 1252.094459][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21913'. [ 1252.094507][T19222] netlink: 'syz.4.21913': attribute type 30 has an invalid length. [ 1252.268215][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21913'. [ 1252.269912][T19222] netlink: 'syz.4.21913': attribute type 30 has an invalid length. [ 1252.270513][T19226] Invalid logical block size (257) [ 1252.960197][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1252.960229][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1252.960248][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1252.960734][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1253.864333][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21952'. [ 1254.715883][T19334] netlink: 'syz.4.21967': attribute type 1 has an invalid length. [ 1254.715996][T19334] netlink: 188 bytes leftover after parsing attributes in process `syz.4.21967'. [ 1254.933115][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1256.463173][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1256.621461][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.621502][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1256.621545][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1256.621571][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.635583][ T10] usb 1-1: config 0 descriptor?? [ 1257.066040][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066081][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066109][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066135][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066162][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066188][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066213][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066238][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066265][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.066290][ T10] waltop 0003:172F:0500.0048: unknown main item tag 0x0 [ 1257.134391][ T10] waltop 0003:172F:0500.0048: hidraw0: USB HID v0.08 Device [HID 172f:0500] on usb-dummy_hcd.0-1/input0 [ 1257.304647][ T5957] usb 1-1: USB disconnect, device number 29 [ 1257.358730][T19446] fido_id[19446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1259.217321][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 1259.223392][ T5885] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1259.273163][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1259.373392][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 1259.382532][ T5885] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1259.382557][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.382570][ T5885] usb 3-1: Product: syz [ 1259.382579][ T5885] usb 3-1: Manufacturer: syz [ 1259.382589][ T5885] usb 3-1: SerialNumber: syz [ 1259.427630][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.427672][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.427715][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1259.427740][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.476714][ T10] usb 5-1: config 0 descriptor?? [ 1259.986713][ T10] playstation 0003:054C:0DF2.0049: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1260.108691][ T10] playstation 0003:054C:0DF2.0049: Invalid byte count transferred, expected 20 got 0 [ 1260.108726][ T10] playstation 0003:054C:0DF2.0049: Failed to retrieve DualSense pairing info: -22 [ 1260.108785][ T10] playstation 0003:054C:0DF2.0049: Failed to get MAC address from DualSense [ 1260.108864][ T10] playstation 0003:054C:0DF2.0049: Failed to create dualsense. [ 1260.191711][ T10] playstation 0003:054C:0DF2.0049: probe with driver playstation failed with error -22 [ 1260.350946][T23973] usb 5-1: USB disconnect, device number 27 [ 1260.618822][T19590] netlink: 67 bytes leftover after parsing attributes in process `syz.0.22087'. [ 1260.693521][ T5885] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1260.713353][ T5885] usb 3-1: USB disconnect, device number 41 [ 1260.737058][T19153] udevd[19153]: setting mode of /dev/bus/usb/003/041 to 020664 failed: No such file or directory [ 1260.737267][T19153] udevd[19153]: setting owner of /dev/bus/usb/003/041 to uid=0, gid=0 failed: No such file or directory [ 1268.533025][T19550] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1268.687649][T19550] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.687680][T19550] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.688932][T19550] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1268.688962][T19550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1268.688992][T19550] usb 5-1: SerialNumber: syz [ 1269.008204][T19550] usb 5-1: 0:2 : does not exist [ 1269.076676][T19550] usb 5-1: USB disconnect, device number 28 [ 1269.193043][T19153] udevd[19153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.993088][T19550] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1271.147450][T19550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.147488][T19550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.147513][T19550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1271.147560][T19550] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.147585][T19550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.221050][T19550] usb 5-1: config 0 descriptor?? [ 1271.655738][T19550] hid_parser_main: 31 callbacks suppressed [ 1271.655770][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.655803][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.655829][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.658426][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.658460][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.658483][T19550] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1271.810855][T19550] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1272.060525][ T5988] usb 5-1: USB disconnect, device number 29 [ 1272.693579][ T5885] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1272.765646][T20115] netlink: 33 bytes leftover after parsing attributes in process `syz.2.22331'. [ 1272.765675][T20115] netlink: 140 bytes leftover after parsing attributes in process `syz.2.22331'. [ 1272.846380][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1272.847140][ T5885] usb 1-1: not running at top speed; connect to a high speed hub [ 1272.848881][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1272.880482][ T5885] usb 1-1: string descriptor 0 read error: -22 [ 1272.880698][ T5885] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.40 [ 1272.880728][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.344722][ T5885] thrustmaster 0003:044F:B324.004B: invalid report_size 11124 [ 1273.344753][ T5885] thrustmaster 0003:044F:B324.004B: item 0 2 1 7 parsing failed [ 1273.345649][ T5885] thrustmaster 0003:044F:B324.004B: parse failed [ 1273.345730][ T5885] thrustmaster 0003:044F:B324.004B: probe with driver thrustmaster failed with error -22 [ 1273.552133][ T10] usb 1-1: USB disconnect, device number 30 [ 1275.229134][T20228] batadv_slave_1: entered promiscuous mode [ 1275.232454][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22386'. [ 1275.447865][T20228] batadv_slave_1 (unregistering): left promiscuous mode [ 1275.447997][T20228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.028040][T20327] ip6gretap0: entered promiscuous mode [ 1280.046215][ T7717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1280.059949][ T7717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1280.061993][ T7717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1280.086688][ T7717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1280.093051][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1280.127334][ T7717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1280.296686][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1280.296745][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1280.296771][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.302781][ T10] usb 3-1: config 0 descriptor?? [ 1280.340152][T20393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1280.374795][T23973] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1280.538611][T23973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.538651][T23973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.538676][T23973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1280.538724][T23973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.538750][T23973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.560474][T23973] usb 5-1: config 0 descriptor?? [ 1280.787033][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787071][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787099][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787126][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787153][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787179][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787266][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787292][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787320][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.787346][ T10] logitech-djreceiver 0003:046D:C71F.004C: unknown main item tag 0x0 [ 1280.891466][ T10] logitech-djreceiver 0003:046D:C71F.004C: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 1280.983489][ T5957] usb 3-1: USB disconnect, device number 42 [ 1281.158859][T23973] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1281.258623][T20399] vxcan1 speed is unknown, defaulting to 1000 [ 1281.377220][ T10] usb 5-1: USB disconnect, device number 30 [ 1281.482468][T20427] fido_id[20427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1282.150120][ T1012] vlan4: left allmulticast mode [ 1282.150911][ T1012] vlan4: left promiscuous mode [ 1282.206463][ T1012] bridge0: port 3(vlan4) entered disabled state [ 1282.234367][T23973] Process accounting resumed [ 1282.279502][T19550] Process accounting resumed [ 1282.300826][ T5115] Bluetooth: hci0: command tx timeout [ 1282.342015][T20453] Process accounting resumed [ 1282.479332][ T1012] bridge_slave_1: left allmulticast mode [ 1282.479538][ T1012] bridge_slave_1: left promiscuous mode [ 1282.479861][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.607446][ T1012] dummy0: left allmulticast mode [ 1282.608690][ T1012] bridge0: port 1(dummy0) entered disabled state [ 1284.039113][T20528] netlink: 'syz.2.22516': attribute type 4 has an invalid length. [ 1284.118729][T20530] netlink: 'syz.2.22516': attribute type 4 has an invalid length. [ 1284.373333][ T5115] Bluetooth: hci0: command tx timeout [ 1284.912484][ T1012] bond1 (unregistering): Released all slaves [ 1284.960228][ T1012] bond0 (unregistering): Released all slaves [ 1285.026817][ T1012] bond2 (unregistering): Released all slaves [ 1285.080534][ T1012] bond3 (unregistering): Released all slaves [ 1285.823544][ T1012] æÿîÿ: left promiscuous mode [ 1286.177864][ T1012] tipc: Disabling bearer [ 1286.178620][ T1012] tipc: Left network mode [ 1286.453327][ T5115] Bluetooth: hci0: command tx timeout [ 1286.503184][ T5988] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1286.576574][T20399] chnl_net:caif_netlink_parms(): no params data found [ 1286.721411][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 1286.735663][ T5988] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1286.735700][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.735722][ T5988] usb 5-1: Product: syz [ 1286.735738][ T5988] usb 5-1: Manufacturer: syz [ 1286.735755][ T5988] usb 5-1: SerialNumber: syz [ 1286.742425][ T5988] usb 5-1: config 0 descriptor?? [ 1286.993408][ T5988] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1287.209121][ T5988] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1287.257909][ T5988] usb 5-1: USB disconnect, device number 31 [ 1287.311328][T20399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.311562][T20399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.311775][T20399] bridge_slave_0: entered allmulticast mode [ 1287.337117][T20399] bridge_slave_0: entered promiscuous mode [ 1287.341201][T20399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.341429][T20399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.341667][T20399] bridge_slave_1: entered allmulticast mode [ 1287.385327][T20399] bridge_slave_1: entered promiscuous mode [ 1287.514583][T20399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.525571][T20399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.631924][T20399] team0: Port device team_slave_0 added [ 1287.640635][ T1012] IPVS: stopping backup sync thread 29048 ... [ 1287.643347][T20399] team0: Port device team_slave_1 added [ 1287.905255][T20399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.905280][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.905310][T20399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.908258][T20399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.908274][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.908299][T20399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.541698][ T5115] Bluetooth: hci0: command tx timeout [ 1289.184147][ T5957] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1289.353110][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 1289.359571][ T5957] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.359627][ T5957] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.359654][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1289.359695][ T5957] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1289.359720][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.386967][ T5957] usb 5-1: config 0 descriptor?? [ 1289.863639][ T5957] hid_parser_main: 474 callbacks suppressed [ 1289.863671][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863704][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863729][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863756][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863782][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863809][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863834][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863882][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863909][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.863935][ T5957] apple 0003:05AC:029C.004E: unknown main item tag 0x0 [ 1289.877743][ T5957] apple 0003:05AC:029C.004E: hidraw0: USB HID vff.fc Device [HID 05ac:029c] on usb-dummy_hcd.4-1/input0 [ 1290.024657][ T5957] usb 5-1: USB disconnect, device number 32 [ 1290.150231][T20399] hsr_slave_0: entered promiscuous mode [ 1290.151769][T20399] hsr_slave_1: entered promiscuous mode [ 1290.152733][T20399] debugfs: 'hsr0' already exists in 'hsr' [ 1290.152761][T20399] Cannot create hsr debugfs directory [ 1290.298705][T20707] fido_id[20707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1290.773192][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1294.585817][ T1012] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 1294.585855][ T1012] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode [ 1294.668777][ T1012] team0: Port device wlan1 removed [ 1294.837289][T20399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1294.882423][T20399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1295.071904][T20399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1295.160051][T20399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1296.346739][T20399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.441000][T20399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.467617][T19037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.474805][T19037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.572155][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22680'. [ 1296.572193][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22680'. [ 1296.615529][T19037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.615693][T19037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.619659][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22680'. [ 1296.619683][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22680'. [ 1296.934834][ T1012] hsr_slave_0: left promiscuous mode [ 1296.973471][ T1012] hsr_slave_1: left promiscuous mode [ 1296.976565][ T1012] batman_adv: batadv0: Removing interface: vlan1 [ 1297.188679][ T1012] batman_adv: batadv0: Removing interface: macvlan0 [ 1301.026547][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.181679][T20399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.523301][T21149] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1302.523332][T21149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1302.548737][T21149] vhci_hcd vhci_hcd.0: Device attached [ 1302.550418][T21153] vhci_hcd: connection closed [ 1302.552243][T28869] vhci_hcd vhci_hcd.4: stop threads [ 1302.552271][T28869] vhci_hcd vhci_hcd.4: release socket [ 1302.552312][T28869] vhci_hcd vhci_hcd.4: disconnect device [ 1302.640217][ T1012] IPVS: stop unused estimator thread 0... [ 1303.232614][T20399] veth0_vlan: entered promiscuous mode [ 1303.316946][T20399] veth1_vlan: entered promiscuous mode [ 1303.539784][T20399] veth0_macvtap: entered promiscuous mode [ 1303.594370][T20399] veth1_macvtap: entered promiscuous mode [ 1303.698655][T20399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.745360][T20399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.795239][ T1012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.810643][ T1012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.814723][ T1012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.828489][ T1012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.488046][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.488075][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.679774][T19037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.679806][T19037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.546964][T21291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.590941][T21291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.593189][ T5145] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1306.772931][ T5145] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1306.773000][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.773031][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.773055][ T5145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1306.773104][ T5145] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1306.773130][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.801545][ T5145] usb 3-1: config 0 descriptor?? [ 1307.283277][ T5145] plantronics 0003:047F:FFFF.004F: reserved main item tag 0xd [ 1307.334052][ T5145] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1307.530908][T19550] usb 3-1: USB disconnect, device number 43 [ 1307.635131][T21322] fido_id[21322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1310.028752][T21409] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1311.415842][T21463] macvlan2: entered promiscuous mode [ 1313.672282][ T1802] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1313.846316][ T1802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.846355][ T1802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.847619][ T1802] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1313.847648][ T1802] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1313.847670][ T1802] usb 3-1: Manufacturer: syz [ 1313.906792][ T1802] usb 3-1: config 0 descriptor?? [ 1314.003263][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1314.155718][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1314.160918][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1314.160949][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1314.160972][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1314.161056][ T10] usb 5-1: config 1 has no interface number 0 [ 1314.161108][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1314.161147][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1314.161252][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1314.161278][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.324045][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1314.520091][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1314.759506][ T1802] uclogic 0003:256C:006D.0050: failed retrieving string descriptor #200: -71 [ 1314.759804][ T1802] uclogic 0003:256C:006D.0050: failed retrieving pen parameters: -71 [ 1314.760321][ T1802] uclogic 0003:256C:006D.0050: failed probing pen v2 parameters: -71 [ 1314.760385][ T1802] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 1314.760741][ T1802] uclogic 0003:256C:006D.0050: probe with driver uclogic failed with error -71 [ 1314.831127][ T1802] usb 3-1: USB disconnect, device number 44 [ 1314.945281][ T5145] usb 5-1: USB disconnect, device number 33 [ 1314.984410][ T5145] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1316.373190][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1321.493213][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1326.407768][T22166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23231'. [ 1326.409014][T22166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23231'. [ 1327.249699][T22198] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.23245'. [ 1328.128264][T22225] overlayfs: overlapping lowerdir path [ 1328.530435][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23265'. [ 1328.530471][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23265'. [ 1328.818467][ T37] audit: type=1326 audit(1584.092:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.818539][ T37] audit: type=1326 audit(1584.092:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.847382][ T37] audit: type=1326 audit(1584.122:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.847527][ T37] audit: type=1326 audit(1584.122:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.847692][ T37] audit: type=1326 audit(1584.122:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.848035][ T37] audit: type=1326 audit(1584.122:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3acbe6c4ab code=0x7ffc0000 [ 1328.848177][ T37] audit: type=1326 audit(1584.122:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.854334][ T37] audit: type=1326 audit(1584.132:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.854475][ T37] audit: type=1326 audit(1584.132:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1328.857136][ T37] audit: type=1326 audit(1584.132:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22254 comm="syz.5.23273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1329.734038][T22288] netlink: 65019 bytes leftover after parsing attributes in process `syz.5.23288'. [ 1334.370795][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23372'. [ 1334.472044][T22476] netlink: 'syz.2.23375': attribute type 1 has an invalid length. [ 1334.650801][T22476] gretap3: entered allmulticast mode [ 1334.668985][T22476] bond7: (slave gretap3): making interface the new active one [ 1334.677356][T22476] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 1335.157160][T22505] netlink: 'syz.2.23387': attribute type 29 has an invalid length. [ 1335.166546][T22505] netlink: 'syz.2.23387': attribute type 29 has an invalid length. [ 1335.176765][T22505] netlink: 500 bytes leftover after parsing attributes in process `syz.2.23387'. [ 1336.025993][ T5957] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1336.073984][T22539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.23403'. [ 1336.074024][T22539] netlink: 'syz.5.23403': attribute type 7 has an invalid length. [ 1336.074039][T22539] netlink: 'syz.5.23403': attribute type 8 has an invalid length. [ 1336.074053][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23403'. [ 1336.206656][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 1336.210771][ T5957] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1336.210804][ T5957] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1336.210831][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1336.221854][ T5957] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1336.221884][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.221904][ T5957] usb 5-1: Product: syz [ 1336.221918][ T5957] usb 5-1: Manufacturer: syz [ 1336.221932][ T5957] usb 5-1: SerialNumber: syz [ 1336.248785][ T5957] usb 5-1: config 0 descriptor?? [ 1336.694522][ T5957] gs_usb 5-1:0.0: Configuring for 112 interfaces [ 1337.098057][ T5957] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1337.098651][ T5957] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1337.099016][ T5957] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1337.172410][ T5957] usb 5-1: USB disconnect, device number 34 [ 1339.023071][T19550] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1339.173151][T19550] usb 5-1: Using ep0 maxpacket: 8 [ 1339.175587][T19550] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1339.175655][T19550] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1339.175681][T19550] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1339.175711][T19550] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1339.175739][T19550] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.175787][T19550] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1339.175813][T19550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.475030][T19550] usb 5-1: usb_control_msg returned -32 [ 1339.475095][T19550] usbtmc 5-1:16.0: can't read capabilities [ 1339.871552][T22621] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1339.878192][T19550] usb 5-1: USB disconnect, device number 35 [ 1340.200352][T22662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23459'. [ 1340.368968][T22668] netlink: 'syz.2.23462': attribute type 9 has an invalid length. [ 1340.368997][T22668] netlink: 184592 bytes leftover after parsing attributes in process `syz.2.23462'. [ 1341.133295][T19550] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1341.283521][T19550] usb 3-1: Using ep0 maxpacket: 32 [ 1341.293374][T19550] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1341.293408][T19550] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.293428][T19550] usb 3-1: Product: syz [ 1341.293442][T19550] usb 3-1: Manufacturer: syz [ 1341.293457][T19550] usb 3-1: SerialNumber: syz [ 1341.318484][T19550] usb 3-1: config 0 descriptor?? [ 1341.337199][T19550] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1342.780275][T19550] gspca_ov534_9: reg_r err -71 [ 1343.032959][T19550] gspca_ov534_9: Unknown sensor 0000 [ 1343.033079][T19550] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1343.039598][T19550] usb 3-1: USB disconnect, device number 45 [ 1343.143908][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1343.143939][ T37] audit: type=1326 audit(1598.422:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.144531][ T37] audit: type=1326 audit(1598.422:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.144700][ T37] audit: type=1326 audit(1598.422:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155574][ T37] audit: type=1326 audit(1598.432:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155636][ T37] audit: type=1326 audit(1598.432:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155687][ T37] audit: type=1326 audit(1598.432:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155734][ T37] audit: type=1326 audit(1598.432:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155784][ T37] audit: type=1326 audit(1598.432:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155834][ T37] audit: type=1326 audit(1598.432:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.155882][ T37] audit: type=1326 audit(1598.432:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22749 comm="syz.4.23501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7ffc0000 [ 1343.891689][T22774] netlink: 7 bytes leftover after parsing attributes in process `syz.2.23513'. [ 1344.854902][T22807] kvm: kvm [22805]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1345.681788][T22833] trusted_key: syz.2.23541 sent an empty control message without MSG_MORE. [ 1346.092046][T22846] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1346.669412][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23558'. [ 1346.677611][T22864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.842133][T22864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.511965][T22939] netlink: 'syz.2.23590': attribute type 10 has an invalid length. [ 1348.555933][T22939] netlink: 'syz.2.23590': attribute type 10 has an invalid length. [ 1348.560741][T22939] dummy0: entered promiscuous mode [ 1348.561288][T22939] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1349.133279][ T5145] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1349.299409][ T5145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.299447][ T5145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1349.300711][ T5145] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1349.300743][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1349.300763][ T5145] usb 3-1: SerialNumber: syz [ 1349.602290][ T5145] usb 3-1: 0:2 : does not exist [ 1349.623422][ T5957] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1349.776877][ T5145] usb 3-1: USB disconnect, device number 46 [ 1349.883894][ T5957] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1349.883936][ T5957] usb 5-1: config 0 has no interface number 0 [ 1349.883972][ T5957] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1349.884025][ T5957] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1349.884054][ T5957] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1349.884093][ T5957] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1349.884120][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.925109][ T5957] usb 5-1: config 0 descriptor?? [ 1349.952195][ T5957] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1350.018919][T22317] udevd[22317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.154221][ T5885] usb 5-1: USB disconnect, device number 36 [ 1351.666151][T23058] netlink: 'syz.2.23646': attribute type 1 has an invalid length. [ 1351.666177][T23058] netlink: 'syz.2.23646': attribute type 4 has an invalid length. [ 1351.666192][T23058] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.23646'. [ 1352.638649][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1352.638671][ T37] audit: type=1326 audit(1607.912:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.638739][ T37] audit: type=1326 audit(1607.912:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.641163][ T37] audit: type=1326 audit(1607.912:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.641218][ T37] audit: type=1326 audit(1607.912:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.643842][ T37] audit: type=1326 audit(1607.912:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.644781][ T37] audit: type=1326 audit(1607.922:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.644830][ T37] audit: type=1326 audit(1607.922:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.648842][ T37] audit: type=1326 audit(1607.922:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.649175][ T37] audit: type=1326 audit(1607.922:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1352.649971][ T37] audit: type=1326 audit(1607.922:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23086 comm="syz.5.23660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acbe6c819 code=0x7ffc0000 [ 1353.200932][T23102] batadv_slave_0: entered promiscuous mode [ 1353.207686][T23101] batadv_slave_0: left promiscuous mode [ 1354.561577][T23152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1356.997554][T23234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.997728][T23234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.998394][T23234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.998621][T23234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.073321][ T5145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1357.244702][ T5145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1357.343400][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1357.682004][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1358.719048][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1358.719413][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1359.573384][ T5957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1362.458252][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.773512][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1362.786017][T23334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1363.413061][ T1802] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1363.563044][ T1802] usb 3-1: Using ep0 maxpacket: 8 [ 1363.581074][ T1802] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1363.581110][ T1802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.581132][ T1802] usb 3-1: Product: syz [ 1363.581148][ T1802] usb 3-1: Manufacturer: syz [ 1363.581163][ T1802] usb 3-1: SerialNumber: syz [ 1363.627995][ T1802] usb 3-1: config 0 descriptor?? [ 1363.678697][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23843'. [ 1363.840802][ T1802] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1364.464286][ T1802] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1364.472578][ T1802] usb 3-1: USB disconnect, device number 47 [ 1365.338079][ T5957] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1365.526388][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1365.526431][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.526492][ T5957] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1365.526516][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.532277][ T5957] usb 6-1: config 0 descriptor?? [ 1365.970924][ T5957] hid_parser_main: 31 callbacks suppressed [ 1365.970958][ T5957] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1365.970989][ T5957] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1365.971015][ T5957] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1365.971040][ T5957] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1365.971065][ T5957] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1365.994527][ T5957] elan 0003:04F3:0755.0051: failed to start in urb: -90 [ 1366.006442][ T5957] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1366.214191][ T1802] usb 6-1: USB disconnect, device number 2 [ 1366.299926][T23575] fido_id[23575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1367.293853][ T1802] libceph: connect (1)[c::]:6789 error -101 [ 1367.294868][ T1802] libceph: mon0 (1)[c::]:6789 connect error [ 1367.317838][ T1802] libceph: connect (1)[c::]:6789 error -101 [ 1367.317889][T23606] ceph: No mds server is up or the cluster is laggy [ 1367.318070][ T1802] libceph: mon0 (1)[c::]:6789 connect error [ 1367.580917][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1367.581131][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1367.804924][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1368.034677][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1368.037191][ T10] usb 3-1: config 5 has an invalid interface number: 91 but max is 0 [ 1368.037221][ T10] usb 3-1: config 5 has no interface number 0 [ 1368.037253][ T10] usb 3-1: config 5 interface 91 has no altsetting 0 [ 1368.040350][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ef.b4 [ 1368.040380][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.040403][ T10] usb 3-1: Product: syz [ 1368.040419][ T10] usb 3-1: Manufacturer: syz [ 1368.040435][ T10] usb 3-1: SerialNumber: syz [ 1368.566067][ T10] ftdi_sio 3-1:5.91: FTDI USB Serial Device converter detected [ 1368.568161][ T10] ftdi_sio ttyUSB0: unknown device type: 0xefb4 [ 1368.600486][ T10] usb 3-1: USB disconnect, device number 48 [ 1368.614191][ T10] ftdi_sio 3-1:5.91: device disconnected [ 1369.374333][T23681] kvm: MWAIT instruction emulated as NOP! [ 1370.667987][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23955'. [ 1371.423189][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1374.558697][T23865] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24010'. [ 1374.891442][T23865] bond0: (slave dummy0): Releasing backup interface [ 1378.124753][T23928] netlink: 'syz.2.24042': attribute type 1 has an invalid length. [ 1378.311214][T23928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1378.428001][T23933] bond8: (slave ip6erspan0): making interface the new active one [ 1378.448150][T23933] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1378.827496][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24053'. [ 1378.904668][T23958] netlink: 'syz.4.24053': attribute type 1 has an invalid length. [ 1379.026780][T23954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1379.931842][T24000] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1379.931875][T24000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1379.950676][T24000] vhci_hcd vhci_hcd.0: Device attached [ 1380.192993][ T5957] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 1380.213469][T19550] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1380.365163][T19550] usb 3-1: Using ep0 maxpacket: 8 [ 1380.367753][T19550] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1380.367834][T19550] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1380.367859][T19550] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1380.367886][T19550] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1380.367911][T19550] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.367954][T19550] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1380.367981][T19550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.637498][T24002] usb 37-1: recv xbuf, 0 [ 1380.638556][T19550] usb 3-1: usb_control_msg returned -32 [ 1380.638588][T19550] usbtmc 3-1:16.0: can't read capabilities [ 1380.665876][ T1182] vhci_hcd vhci_hcd.2: stop threads [ 1380.665907][ T1182] vhci_hcd vhci_hcd.2: release socket [ 1380.665988][ T1182] vhci_hcd vhci_hcd.2: disconnect device [ 1380.683142][T19550] usb 3-1: USB disconnect, device number 49 [ 1380.703350][ T5957] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1380.951761][T24025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1381.005361][T24024] kvm: pic: level sensitive irq not supported [ 1381.005508][T24024] kvm: pic: level sensitive irq not supported [ 1387.413282][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1389.083134][ T5885] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1389.235357][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 1389.251188][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.251259][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.251290][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1389.251312][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1389.251345][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1389.252732][ T5885] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1389.252771][ T5885] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1389.256464][ T5885] usb 6-1: Manufacturer: syz [ 1389.273105][ T1802] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1389.282043][ T5885] usb 6-1: config 0 descriptor?? [ 1389.423145][ T1802] usb 3-1: Using ep0 maxpacket: 8 [ 1389.426954][ T1802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.426996][ T1802] usb 3-1: config 0 has no interfaces? [ 1389.431449][ T1802] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1389.431522][ T1802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.431544][ T1802] usb 3-1: Product: syz [ 1389.431560][ T1802] usb 3-1: Manufacturer: syz [ 1389.431575][ T1802] usb 3-1: SerialNumber: syz [ 1389.469532][ T1802] usb 3-1: config 0 descriptor?? [ 1389.592934][ T5885] rc_core: IR keymap rc-hauppauge not found [ 1389.592962][ T5885] Registered IR keymap rc-empty [ 1389.593147][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.629709][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.657289][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1389.661380][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input85 [ 1389.725332][T24312] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1389.729042][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.738680][ C0] mceusb 6-1:0.0: long-range (0x75) receiver active [ 1389.743860][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.775878][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.793376][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.816703][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.833526][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.855754][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.879594][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.899754][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.928744][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1389.949700][ T5885] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1390.075151][ T5885] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version b6 [ 1390.075185][ T5885] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x75 active) [ 1390.114428][ T5885] usb 6-1: USB disconnect, device number 3 [ 1390.265003][T24318] Invalid option length (1046127) for dns_resolver key [ 1390.611949][T24333] netlink: 168 bytes leftover after parsing attributes in process `syz.4.24221'. [ 1392.213162][ T5145] usb 3-1: USB disconnect, device number 50 [ 1395.082910][ T5145] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1395.252982][ T5145] usb 6-1: Using ep0 maxpacket: 32 [ 1395.258871][ T5145] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1395.259183][ T5145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.259209][ T5145] usb 6-1: Product: syz [ 1395.259224][ T5145] usb 6-1: Manufacturer: syz [ 1395.259240][ T5145] usb 6-1: SerialNumber: syz [ 1395.332506][ T5145] usb 6-1: config 0 descriptor?? [ 1395.416044][ T5145] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1396.169126][T24412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.185362][T24412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.211620][ T5145] gspca_ov534_9: reg_w failed -71 [ 1397.294598][T24494] netlink: 'syz.4.24299': attribute type 1 has an invalid length. [ 1397.473174][ T5145] gspca_ov534_9: Unknown sensor 0000 [ 1397.473286][ T5145] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1397.477735][ T5145] usb 6-1: USB disconnect, device number 4 [ 1397.555611][T24494] veth5: entered promiscuous mode [ 1397.585029][T24494] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1397.776177][T24513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24307'. [ 1397.888247][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24310'. [ 1397.890519][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24310'. [ 1397.955002][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24310'. [ 1400.619207][T24583] netlink: 'syz.2.24340': attribute type 3 has an invalid length. [ 1401.264698][T24607] netlink: 'syz.4.24351': attribute type 2 has an invalid length. [ 1401.863043][T24625] serio: Serial port ttyS3 [ 1403.806537][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1403.806558][ T37] audit: type=1326 audit(1659.082:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24724 comm="syz.4.24406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44e978c819 code=0x0 [ 1405.502113][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 1407.207486][T24840] binder: 24838:24840 ioctl c0306201 2000000004c0 returned -14 [ 1409.084100][ T5957] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1410.075483][T24893] orangefs_mount: mount request failed with -4 [ 1410.184551][T24896] netlink: 'syz.1.24482': attribute type 32 has an invalid length. [ 1410.224609][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 1410.265172][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1410.265205][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.265228][ T5957] usb 3-1: Product: syz [ 1410.265245][ T5957] usb 3-1: Manufacturer: syz [ 1410.265261][ T5957] usb 3-1: SerialNumber: syz [ 1410.326842][ T5957] usb 3-1: config 0 descriptor?? [ 1410.565649][ T5957] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1411.451125][ T5957] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1411.499889][ T5957] usb 3-1: USB disconnect, device number 51 [ 1411.665318][T19550] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1411.815778][T19550] usb 5-1: Using ep0 maxpacket: 16 [ 1411.819837][T19550] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1411.819876][T19550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1411.824242][T19550] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1411.824276][T19550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.824298][T19550] usb 5-1: Product: syz [ 1411.824313][T19550] usb 5-1: Manufacturer: syz [ 1411.824328][T19550] usb 5-1: SerialNumber: syz [ 1411.849635][T19550] usb 5-1: config 0 descriptor?? [ 1411.874714][T19550] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1411.874753][T19550] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1412.494677][T19550] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1412.496535][T19550] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1413.119850][T19550] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1413.358688][T19550] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1413.361497][T19550] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1413.362097][T19550] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1413.384920][T19550] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1413.525886][T19550] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1413.590522][T19550] usb 5-1: USB disconnect, device number 37 [ 1416.233962][T19550] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1416.413690][T19550] usb 5-1: Using ep0 maxpacket: 32 [ 1416.419481][T19550] usb 5-1: config 0 has no interfaces? [ 1416.425446][T19550] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1416.425481][T19550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.425503][T19550] usb 5-1: Product: syz [ 1416.425518][T19550] usb 5-1: Manufacturer: syz [ 1416.425534][T19550] usb 5-1: SerialNumber: syz [ 1416.432591][T19550] usb 5-1: config 0 descriptor?? [ 1417.538608][T25079] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1418.133152][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1418.266727][T25122] binder: 25121:25122 ioctl c0306201 2000000004c0 returned -14 [ 1418.655410][T21218] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1418.835558][T21218] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1418.835635][T21218] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1418.835664][T21218] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1418.841665][T21218] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1418.841703][T21218] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1418.841725][T21218] usb 6-1: Product: syz [ 1418.841748][T21218] usb 6-1: Manufacturer: syz [ 1418.841776][T21218] usb 6-1: SerialNumber: syz [ 1418.919572][T21218] usb 6-1: config 0 descriptor?? [ 1418.938023][T21218] hub 6-1:0.0: bad descriptor, ignoring hub [ 1418.938073][T21218] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1418.959610][T21218] usb 6-1: selecting invalid altsetting 0 [ 1418.979816][T19550] usb 5-1: USB disconnect, device number 38 [ 1420.090783][T21218] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 1420.643096][ T5145] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1420.685139][T25126] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 1420.692204][T21218] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 1420.768354][T21218] usb 6-1: USB disconnect, device number 5 [ 1420.833809][ T5145] usb 3-1: Using ep0 maxpacket: 16 [ 1420.837860][ T5145] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.837900][ T5145] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.837947][ T5145] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1420.837974][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.887425][ T5145] usb 3-1: config 0 descriptor?? [ 1421.338354][ T5145] nzxt-smart2 0003:1E71:2009.0052: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1421.845793][ T1802] usb 3-1: USB disconnect, device number 52 [ 1422.696749][T25262] binder: 25260:25262 unknown command 0 [ 1422.696786][T25262] binder: 25260:25262 ioctl c0306201 200000000080 returned -22 [ 1423.088823][ T5885] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1423.251377][ T5885] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1423.251417][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.251440][ T5885] usb 3-1: Product: syz [ 1423.251458][ T5885] usb 3-1: Manufacturer: syz [ 1423.251475][ T5885] usb 3-1: SerialNumber: syz [ 1424.493417][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.589938][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1424.590016][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1426.886030][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1426.886799][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1426.887352][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1426.887414][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1426.896356][ T5885] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1426.980603][ T5885] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1427.045314][ T5885] usb 3-1: USB disconnect, device number 53 [ 1429.674572][ T5145] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1429.905928][ T5145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1429.905956][ T5145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.905985][ T5145] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1429.906002][ T5145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.910166][ T5145] usb 6-1: config 0 descriptor?? [ 1429.916986][ T5145] hub 6-1:0.0: USB hub found [ 1430.185772][ T5145] hub 6-1:0.0: 1 port detected [ 1430.791041][T25401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.791643][T25401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.011304][ T5988] hub 6-1:0.0: activate --> -90 [ 1431.420138][ T5988] usb 6-1: USB disconnect, device number 6 [ 1431.420348][T21218] usb 6-1-port1: cannot reset (err = -71) [ 1431.420961][T21218] usb 6-1-port1: attempt power cycle [ 1435.706702][T25496] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1440.735396][T25579] vxcan1 speed is unknown, defaulting to 1000 [ 1441.333213][ T5885] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1441.422874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1441.452816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1441.938214][ T5885] usb 6-1: config 0 has no interfaces? [ 1441.950832][ T5885] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1441.950855][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.950869][ T5885] usb 6-1: Product: syz [ 1441.950878][ T5885] usb 6-1: Manufacturer: syz [ 1441.950895][ T5885] usb 6-1: SerialNumber: syz [ 1442.005821][ T5885] usb 6-1: config 0 descriptor?? [ 1445.316815][T25663] syz.2.24814 (25663): drop_caches: 2 [ 1445.879347][ T37] audit: type=1804 audit(1701.122:1199): pid=25675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.24825" name="/newroot/3833/file1" dev="fuse" ino=1 res=1 errno=0 [ 1448.352693][ T5145] usb 6-1: USB disconnect, device number 11 [ 1449.932839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1449.952830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1449.962835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1449.972833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1449.982843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1449.992833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1450.002839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1450.012824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1455.132961][T21216] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1455.287079][T21216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.287111][T21216] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1455.287164][T21216] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1455.333377][T21216] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1455.333413][T21216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.333433][T21216] usb 3-1: Product: syz [ 1455.333448][T21216] usb 3-1: Manufacturer: syz [ 1455.333464][T21216] usb 3-1: SerialNumber: syz [ 1455.389255][T21216] cdc_mbim 3-1:1.0: skipping garbage [ 1455.389279][T21216] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 1455.389325][T21216] cdc_mbim 3-1:1.0: bind() failure [ 1455.703706][ T5988] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1455.862250][ T5988] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1455.862282][ T5988] usb 5-1: config 0 has no interface number 0 [ 1455.862332][ T5988] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1455.862359][ T5988] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1455.862388][ T5988] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1455.881329][ T5988] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1455.881361][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1455.881381][ T5988] usb 5-1: Product: syz [ 1455.881396][ T5988] usb 5-1: SerialNumber: syz [ 1455.906006][ T5988] usb 5-1: config 0 descriptor?? [ 1455.917752][ T5988] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1455.932092][ T5988] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input86 [ 1456.014794][ T5988] usb 3-1: USB disconnect, device number 54 [ 1456.159438][T25841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.24891'. [ 1456.304125][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.314428][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.315595][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.315850][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.316084][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.316326][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.316558][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.316789][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.317021][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.317868][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1456.403928][T21216] usb 5-1: USB disconnect, device number 39 [ 1456.403999][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1456.457472][T21216] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1459.733072][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1460.633365][T21216] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1460.796713][T25970] binder: BINDER_SET_CONTEXT_MGR already set [ 1460.796735][T25970] binder: 25966:25970 ioctl 4018620d 200000004a80 returned -16 [ 1460.845094][T21216] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1460.846339][T21216] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1460.846382][T21216] usb 6-1: can't read configurations, error -71 [ 1463.352939][T26017] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 1464.033457][T26038] kvm: pic: non byte read [ 1464.033954][T26038] kvm: pic: non byte read [ 1464.034557][T26038] kvm: pic: non byte read [ 1464.034995][T26038] kvm: pic: non byte read [ 1464.035376][T26038] kvm: pic: level sensitive irq not supported [ 1464.035456][T26038] kvm: pic: non byte read [ 1464.036076][T26038] kvm: pic: single mode not supported [ 1464.036087][T26038] kvm: pic: level sensitive irq not supported [ 1464.036177][T26038] kvm: pic: non byte read [ 1464.036565][T26038] kvm: pic: level sensitive irq not supported [ 1464.036642][T26038] kvm: pic: non byte read [ 1464.037009][T26038] kvm: pic: single mode not supported [ 1464.037021][T26038] kvm: pic: level sensitive irq not supported [ 1464.037098][T26038] kvm: pic: non byte read [ 1464.037538][T26038] kvm: pic: non byte read [ 1466.511408][T26100] syz_tun: entered allmulticast mode [ 1466.517583][T26100] syz_tun: left allmulticast mode [ 1470.605293][ T37] audit: type=1326 audit(1725.872:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26161 comm="syz.4.25023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e978c819 code=0x7fc00000 [ 1471.928712][T26207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25041'. [ 1472.065191][T26207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.25041'. [ 1473.182130][T26208] veth3: entered promiscuous mode [ 1473.188008][T26208] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1473.214538][T26207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1473.926341][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25051'. [ 1474.552785][T26247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.25054'. [ 1475.795136][ T5145] ------------[ cut here ]------------ [ 1475.795155][ T5145] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1475.795170][ T5145] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:0/5145 [ 1475.795229][ T5145] Modules linked in: [ 1475.795255][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.795286][ T5145] Tainted: [L]=SOFTLOCKUP [ 1475.795295][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1475.795309][ T5145] Workqueue: events drm_fb_helper_damage_work [ 1475.795341][ T5145] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1475.795372][ T5145] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1475.795392][ T5145] RSP: 0018:ffffc9000612f8c0 EFLAGS: 00010246 [ 1475.795411][ T5145] RAX: 1ffff110048c7200 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 1475.795430][ T5145] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 1475.795447][ T5145] RBP: ffffc9000612f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1475.795461][ T5145] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 1475.795515][ T5145] R13: ffff888024639000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1475.795532][ T5145] FS: 0000000000000000(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 1475.795552][ T5145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1475.795568][ T5145] CR2: 000055557591b9e8 CR3: 00000000937c6000 CR4: 00000000003526f0 [ 1475.795598][ T5145] Call Trace: [ 1475.795608][ T5145] [ 1475.795624][ T5145] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1475.795654][ T5145] ? rt_spin_unlock+0x14f/0x200 [ 1475.795688][ T5145] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1475.795726][ T5145] ? rt_spin_unlock+0x160/0x200 [ 1475.795763][ T5145] ? drm_vblank_get+0x147/0x260 [ 1475.795796][ T5145] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1475.795826][ T5145] drm_fb_helper_damage_work+0x131/0x6f0 [ 1475.795869][ T5145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1475.795907][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 1475.795938][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 1475.795972][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 1475.796045][ T5145] ? __pfx_process_scheduled_works+0x10/0x10 [ 1475.796084][ T5145] ? assign_work+0x3d5/0x5e0 [ 1475.796120][ T5145] worker_thread+0xa53/0xfc0 [ 1475.796189][ T5145] kthread+0x388/0x470 [ 1475.796224][ T5145] ? __pfx_worker_thread+0x10/0x10 [ 1475.796255][ T5145] ? __pfx_kthread+0x10/0x10 [ 1475.796282][ T5145] ret_from_fork+0x51e/0xb90 [ 1475.796320][ T5145] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.796351][ T5145] ? __switch_to+0xc7d/0x1450 [ 1475.796386][ T5145] ? __pfx_kthread+0x10/0x10 [ 1475.796414][ T5145] ret_from_fork_asm+0x1a/0x30 [ 1475.796458][ T5145] [ 1475.796470][ T5145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1475.796489][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1475.796518][ T5145] Tainted: [L]=SOFTLOCKUP [ 1475.796527][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1475.796541][ T5145] Workqueue: events drm_fb_helper_damage_work [ 1475.796571][ T5145] Call Trace: [ 1475.796580][ T5145] [ 1475.796590][ T5145] vpanic+0x56c/0xa60 [ 1475.796625][ T5145] ? __pfx__printk+0x10/0x10 [ 1475.796651][ T5145] ? __pfx_vpanic+0x10/0x10 [ 1475.796683][ T5145] ? is_bpf_text_address+0x292/0x2b0 [ 1475.796715][ T5145] ? is_bpf_text_address+0x26/0x2b0 [ 1475.796758][ T5145] panic+0xc5/0xd0 [ 1475.796791][ T5145] ? __pfx_panic+0x10/0x10 [ 1475.796837][ T5145] ? ret_from_fork_asm+0x1a/0x30 [ 1475.796868][ T5145] __warn+0x315/0x4f0 [ 1475.796899][ T5145] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1475.796932][ T5145] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1475.796964][ T5145] __report_bug+0x29a/0x540 [ 1475.796997][ T5145] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1475.797029][ T5145] ? __pfx___report_bug+0x10/0x10 [ 1475.797079][ T5145] report_bug_entry+0x19a/0x290 [ 1475.797106][ T5145] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1475.797134][ T5145] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1475.797162][ T5145] handle_bug+0xce/0x200 [ 1475.797192][ T5145] exc_invalid_op+0x1a/0x50 [ 1475.797230][ T5145] asm_exc_invalid_op+0x1a/0x20 [ 1475.797251][ T5145] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1475.797282][ T5145] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1475.797300][ T5145] RSP: 0018:ffffc9000612f8c0 EFLAGS: 00010246 [ 1475.797317][ T5145] RAX: 1ffff110048c7200 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 1475.797333][ T5145] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 1475.797349][ T5145] RBP: ffffc9000612f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1475.797363][ T5145] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 1475.797379][ T5145] R13: ffff888024639000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 1475.797422][ T5145] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1475.797451][ T5145] ? rt_spin_unlock+0x14f/0x200 [ 1475.797482][ T5145] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1475.797517][ T5145] ? rt_spin_unlock+0x160/0x200 [ 1475.797553][ T5145] ? drm_vblank_get+0x147/0x260 [ 1475.797585][ T5145] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1475.797615][ T5145] drm_fb_helper_damage_work+0x131/0x6f0 [ 1475.797655][ T5145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1475.797690][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 1475.797720][ T5145] ? process_scheduled_works+0xa8d/0x18c0 [ 1475.797754][ T5145] process_scheduled_works+0xb6e/0x18c0 [ 1475.797825][ T5145] ? __pfx_process_scheduled_works+0x10/0x10 [ 1475.797866][ T5145] ? assign_work+0x3d5/0x5e0 [ 1475.797904][ T5145] worker_thread+0xa53/0xfc0 [ 1475.797971][ T5145] kthread+0x388/0x470 [ 1475.797996][ T5145] ? __pfx_worker_thread+0x10/0x10 [ 1475.798027][ T5145] ? __pfx_kthread+0x10/0x10 [ 1475.798053][ T5145] ret_from_fork+0x51e/0xb90 [ 1475.798089][ T5145] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.798120][ T5145] ? __switch_to+0xc7d/0x1450 [ 1475.798153][ T5145] ? __pfx_kthread+0x10/0x10 [ 1475.798179][ T5145] ret_from_fork_asm+0x1a/0x30 [ 1475.798235][ T5145] [ 1475.798404][ T5145] Kernel Offset: disabled