last executing test programs: 6m42.718470456s ago: executing program 2 (id=13715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x21, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) 6m42.550387129s ago: executing program 2 (id=13718): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x0, 0x0}) 6m42.27481464s ago: executing program 2 (id=13724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000400)=0xa, 0x4) 6m42.1251837s ago: executing program 2 (id=13726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 6m41.936488714s ago: executing program 2 (id=13731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 6m41.716336646s ago: executing program 2 (id=13735): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000), 0x4) 6m41.437437179s ago: executing program 32 (id=13735): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000), 0x4) 5m39.911615436s ago: executing program 1 (id=14626): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000240)="240000001a005f0214f9f407000904001f00000000000000000000000800040001001000", 0x24) 5m39.740249899s ago: executing program 1 (id=14631): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f0000000500)) 5m39.453496517s ago: executing program 1 (id=14638): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b0a2a7cf704005cd"}}, 0x48}}, 0x0) 5m39.273003707s ago: executing program 1 (id=14642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 5m39.034710574s ago: executing program 1 (id=14647): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) symlinkat(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 5m38.791774167s ago: executing program 1 (id=14653): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0xe68, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xe54, 0x1, [@m_pedit={0xe50, 0xe, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9d90, 0x401, 0x7, 0x1000, 0x2}, 0x9, 0x8}, [{0x71e, 0x2, 0x3, 0x10001, 0x50b, 0xfff}, {0x8, 0x3, 0x3, 0x7, 0x7, 0xfffffff7}, {0x6, 0x0, 0x8fb, 0xfffff59e, 0x3386a6e8, 0x9f}, {0x7fffffff, 0x1, 0xa7, 0xdd, 0xbe3, 0x6}, {0x6, 0x401, 0x0, 0x3, 0x6, 0x63}, {0xfffffffd, 0xf7, 0xfffffffc, 0xc00, 0x1000}, {0x2, 0x40, 0x7ff, 0xc7e, 0x8, 0x6}, {0x7e, 0x1c3, 0x6, 0x6, 0xfffffffc, 0x9}, {0x3, 0xfffffff5, 0xd, 0x1ff, 0xa0, 0x8}, {0x9, 0x0, 0x4, 0x0, 0x6, 0x99c}, {0xf349, 0xfffffff4, 0x5, 0x6, 0x6, 0x4}, {0xa, 0xf, 0x2, 0x0, 0x0, 0x9}, {0x9, 0xf, 0x100, 0x0, 0x2, 0x1}, {0x1000, 0x5, 0x800, 0xfffffff7, 0x4, 0xffff}, {0xff, 0xffffffff, 0x0, 0xbbb, 0x0, 0x5}, {0x1, 0x78, 0x0, 0x10, 0x8001, 0x3}, {0x2, 0x2, 0x2, 0x2406, 0x6}, {0x3, 0x80, 0x9, 0x8, 0x4, 0xfffffff9}, {0x7, 0x3, 0x2, 0xcb1, 0x1, 0x8}, {0x0, 0x0, 0xfffffff9, 0x6, 0x3, 0x5}, {0x8, 0x8, 0x4, 0x7, 0x7, 0x5}, {0x9, 0x3, 0x80000001, 0x55683259, 0x1000, 0x8000}, {0xfffffff8, 0x9, 0x1, 0xf9, 0xa, 0x7}, {0x5, 0xfffffff9, 0x5, 0x1, 0x8, 0x1000}, {0x4, 0x5, 0x7, 0x7, 0x1, 0x1}, {0xfffffffe, 0xa, 0xbd, 0x4, 0x1f, 0x1}, {0x2, 0x401, 0x10, 0x6, 0x3e3, 0xffff}, {0xfffffffd, 0x1, 0x3, 0x3, 0x4, 0x3}, {0x10, 0x8001, 0x8, 0x3, 0x6, 0x6}, {0x81, 0x0, 0xe8, 0x5, 0x9, 0x9}, {0x7, 0x7, 0x6, 0xc2, 0x10001, 0x48}, {0x0, 0xd, 0x2, 0xfffffffd, 0xa, 0x3}, {0x2, 0x7, 0x6, 0x43, 0x9c4, 0x7fffffff}, {0x0, 0x3, 0xfffffff7, 0xf2, 0x72d1000, 0x69}, {0x3, 0x7, 0x80000001, 0xfee, 0x709, 0x8}, {0x100, 0x967a, 0x4, 0xffffffff, 0x5, 0x5}, {0x2c30, 0x5, 0x5, 0x69cb, 0x3d, 0x3000000}, {0x0, 0x3, 0x100, 0x7, 0xfffffac7, 0x4}, {0x300, 0x3f1d, 0x3de5, 0x8, 0x7, 0x80000001}, {0xffffff80, 0x7, 0x80, 0xfffffc01, 0x0, 0x1}, {0x7fffffff, 0x6, 0x9, 0xd, 0x3, 0xd5}, {0xe, 0xef, 0x5, 0xc, 0x9, 0xae03}, {0x0, 0x0, 0x80, 0x2, 0x3ff, 0x5}, {0x10, 0x11e, 0x2, 0x9, 0x101, 0x3}, {0xffffffff, 0x9, 0x8, 0xff, 0x92, 0x43}, {0xfff, 0xe, 0x1, 0xb, 0x17, 0x9}, {0x5, 0xf314, 0x9, 0x0, 0x1, 0x80000001}, {0x4, 0x2, 0x3, 0x95b1, 0x5, 0x8}, {0x7, 0x92, 0x1ff, 0x401, 0x7fffffff, 0x61}, {0x9, 0x2, 0x4, 0xf0c6, 0x5, 0x40}, {0x2, 0xffffff81, 0x0, 0xfffffffe, 0x10, 0xffff4bc1}, {0x6, 0x90000000, 0x8, 0x81, 0x2, 0x3}, {0xffd, 0x4, 0x2, 0x9, 0x8, 0x8}, {0x8001, 0x6, 0xfffffff7, 0x8, 0x1, 0x1}, {0x7fff, 0x3, 0xffffffff, 0xa1a3, 0x1, 0x7}, {0x5, 0xfffffff7, 0x101, 0x9, 0xe, 0x95af}, {0x100, 0x3, 0x4, 0x2, 0x5, 0x70}, {0x8, 0x0, 0x4, 0x959, 0x2, 0x8}, {0x0, 0x0, 0x1, 0x401, 0x7, 0x5}, {0x9, 0x3, 0x61da, 0x5, 0x2, 0xe722}, {0x0, 0xe, 0x3, 0x6, 0xfcca, 0x8679}, {0x3, 0x2, 0x7, 0x800000, 0x9, 0x8}, {0x2, 0x2, 0x4, 0xa7f2, 0x10, 0x3ff}, {0x7, 0x1, 0x9, 0x3, 0x8, 0xf}, {0x3, 0x0, 0x81, 0x6, 0xfffffffa, 0xfffff7b4}, {0x9, 0xf, 0x5, 0x9, 0x8, 0x3}, {0xfff, 0x3, 0x0, 0x80, 0xc, 0x9}, {0x5, 0x9, 0x8, 0x9, 0x400, 0x1}, {0x1, 0x9, 0xe20c, 0xce4, 0x4, 0x7}, {0x0, 0x6, 0x221, 0x1, 0x0, 0x1}, {0x6, 0xf1, 0x6, 0x5, 0xb, 0x8}, {0x800, 0x7ff, 0x80000001, 0x4, 0x9, 0x8}, {0x3, 0x1, 0x0, 0x1, 0x5, 0x1}, {0x1, 0x9, 0x8001, 0x6, 0x1, 0x20}, {0x7, 0x1, 0xf7, 0x6, 0x8001, 0x5}, {0x3, 0xfffffffa, 0x5, 0x8, 0x9, 0xa}, {0x7, 0x6, 0x4, 0x6, 0x1000, 0x3e71}, {0x63, 0x5, 0x4, 0x4, 0x5, 0xdccc}, {0x8000, 0x3, 0xf, 0x4c, 0x2, 0x5}, {0x554bad20, 0x61c9182f, 0x5, 0x4, 0xd25c, 0xb02}, {0x7fffffff, 0xfffffffc, 0x6, 0x0, 0x1, 0x4}, {0x8, 0xffffffc0, 0x5, 0x2, 0x1ff, 0x5}, {0x0, 0x3, 0x6, 0x81, 0xfffffffd, 0x4b86}, {0x38, 0x6, 0x9, 0x9, 0x3, 0x7fff}, {0x9, 0x8, 0xfffffffa, 0x6, 0x4, 0xf}, {0xb93, 0x20000, 0x81, 0x1000, 0x2, 0x9}, {0x1000, 0x6, 0x417, 0x401, 0x2, 0x80000001}, {0x9, 0x7f, 0x0, 0xd, 0x100, 0xe}, {0x9, 0x8, 0x75b0, 0x6, 0x80000000, 0xe}, {0xf587bde, 0x6, 0xd, 0x1, 0x8000, 0x79}, {0x4, 0x8, 0x80000000, 0x0, 0x101, 0x1}, {0x9, 0x52, 0x3, 0x1, 0x8, 0x3}, {0x3f, 0x6, 0xb80, 0x2, 0x0, 0x9}, {0x40, 0xd, 0x8, 0x0, 0x9, 0x8}, {0x4, 0x4, 0x7ff, 0xfffffffa, 0x7f, 0x1}, {0x3, 0xfff9, 0x3, 0x10001, 0x0, 0x5}, {0xe1, 0x4, 0x6, 0x2, 0x1, 0xa643}, {0x9, 0x6, 0x10001, 0xfd4, 0x8, 0x5}, {0x5, 0x402, 0x1, 0x70, 0x1, 0x4cd5}, {0x8, 0x3, 0x8000, 0xff, 0x6, 0x4}, {0x3, 0x10001, 0x10, 0x2, 0x4, 0x9}, {0x5, 0x7, 0x3, 0x91, 0x5, 0x5}, {0x100, 0x5, 0x0, 0x1, 0xa00000}, {0x1, 0x4, 0x6, 0x7, 0x3, 0x6}, {0x4, 0x9, 0xffffffff, 0x5, 0xa0, 0x3}, {0x3, 0x474, 0x800, 0x33, 0x0, 0x8}, {0x1, 0x98a2, 0x7f, 0x89fa, 0x1ff, 0x5}, {0x1, 0x2, 0x1, 0x1, 0x3, 0x6}, {0x3, 0x1, 0x1, 0x0, 0xab6, 0x9}, {0x80, 0x2, 0x5, 0x3, 0x2}, {0x1ff, 0x5, 0x100, 0x7, 0x7ff, 0x6}, {0x7fff, 0xfff, 0x9, 0xe91d, 0x9, 0x5}, {0x3, 0xffff, 0x52f, 0xb1, 0x3, 0xf2}, {0x7, 0xfff, 0x4, 0x8, 0xd, 0x7f}, {0x5, 0x1, 0x9, 0x2, 0x6, 0x8}, {0x10, 0xff1c, 0xb, 0x6, 0x80000000, 0xd6b}, {0x5a1a60e7, 0x2, 0xa, 0x9, 0x8, 0x7ff}, {0xd52, 0x9, 0x3ff, 0x3, 0xff, 0xfc}, {0x100, 0x5, 0x9, 0x5, 0x0, 0xfffffff8}, {0x4, 0x2, 0x10, 0x2, 0x401}, {0x5, 0xba, 0x5, 0x9, 0x6a32f5, 0x6da3}, {0x20e491fd, 0x2, 0x3ff, 0x10000, 0x8, 0xdf40}, {0x0, 0x80000001, 0x0, 0x3, 0x3, 0xeb0}, {0x28, 0x6, 0x6, 0x8f16, 0x2, 0x8}, {0xd6, 0x1, 0x101, 0x3, 0x29, 0x4}, {0x1ff, 0x101, 0x7, 0x3, 0xc, 0x5}, {0x8, 0x5be, 0xd, 0xeb, 0x80000000, 0x1}, {0x7, 0x8, 0x8, 0xe0000000, 0xbe1}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0xf2c0b13b54e2ffff}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x7}, {}, {0x2}, {0x3}, {0x3}, {0x5}, {0x2}, {0x5}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0xf, 0x1}, {0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x2}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x3}, {}, {}, {0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x7acacdad03d67748, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m22.627266057s ago: executing program 33 (id=14653): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtaction={0xe68, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xe54, 0x1, [@m_pedit={0xe50, 0xe, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9d90, 0x401, 0x7, 0x1000, 0x2}, 0x9, 0x8}, [{0x71e, 0x2, 0x3, 0x10001, 0x50b, 0xfff}, {0x8, 0x3, 0x3, 0x7, 0x7, 0xfffffff7}, {0x6, 0x0, 0x8fb, 0xfffff59e, 0x3386a6e8, 0x9f}, {0x7fffffff, 0x1, 0xa7, 0xdd, 0xbe3, 0x6}, {0x6, 0x401, 0x0, 0x3, 0x6, 0x63}, {0xfffffffd, 0xf7, 0xfffffffc, 0xc00, 0x1000}, {0x2, 0x40, 0x7ff, 0xc7e, 0x8, 0x6}, {0x7e, 0x1c3, 0x6, 0x6, 0xfffffffc, 0x9}, {0x3, 0xfffffff5, 0xd, 0x1ff, 0xa0, 0x8}, {0x9, 0x0, 0x4, 0x0, 0x6, 0x99c}, {0xf349, 0xfffffff4, 0x5, 0x6, 0x6, 0x4}, {0xa, 0xf, 0x2, 0x0, 0x0, 0x9}, {0x9, 0xf, 0x100, 0x0, 0x2, 0x1}, {0x1000, 0x5, 0x800, 0xfffffff7, 0x4, 0xffff}, {0xff, 0xffffffff, 0x0, 0xbbb, 0x0, 0x5}, {0x1, 0x78, 0x0, 0x10, 0x8001, 0x3}, {0x2, 0x2, 0x2, 0x2406, 0x6}, {0x3, 0x80, 0x9, 0x8, 0x4, 0xfffffff9}, {0x7, 0x3, 0x2, 0xcb1, 0x1, 0x8}, {0x0, 0x0, 0xfffffff9, 0x6, 0x3, 0x5}, {0x8, 0x8, 0x4, 0x7, 0x7, 0x5}, {0x9, 0x3, 0x80000001, 0x55683259, 0x1000, 0x8000}, {0xfffffff8, 0x9, 0x1, 0xf9, 0xa, 0x7}, {0x5, 0xfffffff9, 0x5, 0x1, 0x8, 0x1000}, {0x4, 0x5, 0x7, 0x7, 0x1, 0x1}, {0xfffffffe, 0xa, 0xbd, 0x4, 0x1f, 0x1}, {0x2, 0x401, 0x10, 0x6, 0x3e3, 0xffff}, {0xfffffffd, 0x1, 0x3, 0x3, 0x4, 0x3}, {0x10, 0x8001, 0x8, 0x3, 0x6, 0x6}, {0x81, 0x0, 0xe8, 0x5, 0x9, 0x9}, {0x7, 0x7, 0x6, 0xc2, 0x10001, 0x48}, {0x0, 0xd, 0x2, 0xfffffffd, 0xa, 0x3}, {0x2, 0x7, 0x6, 0x43, 0x9c4, 0x7fffffff}, {0x0, 0x3, 0xfffffff7, 0xf2, 0x72d1000, 0x69}, {0x3, 0x7, 0x80000001, 0xfee, 0x709, 0x8}, {0x100, 0x967a, 0x4, 0xffffffff, 0x5, 0x5}, {0x2c30, 0x5, 0x5, 0x69cb, 0x3d, 0x3000000}, {0x0, 0x3, 0x100, 0x7, 0xfffffac7, 0x4}, {0x300, 0x3f1d, 0x3de5, 0x8, 0x7, 0x80000001}, {0xffffff80, 0x7, 0x80, 0xfffffc01, 0x0, 0x1}, {0x7fffffff, 0x6, 0x9, 0xd, 0x3, 0xd5}, {0xe, 0xef, 0x5, 0xc, 0x9, 0xae03}, {0x0, 0x0, 0x80, 0x2, 0x3ff, 0x5}, {0x10, 0x11e, 0x2, 0x9, 0x101, 0x3}, {0xffffffff, 0x9, 0x8, 0xff, 0x92, 0x43}, {0xfff, 0xe, 0x1, 0xb, 0x17, 0x9}, {0x5, 0xf314, 0x9, 0x0, 0x1, 0x80000001}, {0x4, 0x2, 0x3, 0x95b1, 0x5, 0x8}, {0x7, 0x92, 0x1ff, 0x401, 0x7fffffff, 0x61}, {0x9, 0x2, 0x4, 0xf0c6, 0x5, 0x40}, {0x2, 0xffffff81, 0x0, 0xfffffffe, 0x10, 0xffff4bc1}, {0x6, 0x90000000, 0x8, 0x81, 0x2, 0x3}, {0xffd, 0x4, 0x2, 0x9, 0x8, 0x8}, {0x8001, 0x6, 0xfffffff7, 0x8, 0x1, 0x1}, {0x7fff, 0x3, 0xffffffff, 0xa1a3, 0x1, 0x7}, {0x5, 0xfffffff7, 0x101, 0x9, 0xe, 0x95af}, {0x100, 0x3, 0x4, 0x2, 0x5, 0x70}, {0x8, 0x0, 0x4, 0x959, 0x2, 0x8}, {0x0, 0x0, 0x1, 0x401, 0x7, 0x5}, {0x9, 0x3, 0x61da, 0x5, 0x2, 0xe722}, {0x0, 0xe, 0x3, 0x6, 0xfcca, 0x8679}, {0x3, 0x2, 0x7, 0x800000, 0x9, 0x8}, {0x2, 0x2, 0x4, 0xa7f2, 0x10, 0x3ff}, {0x7, 0x1, 0x9, 0x3, 0x8, 0xf}, {0x3, 0x0, 0x81, 0x6, 0xfffffffa, 0xfffff7b4}, {0x9, 0xf, 0x5, 0x9, 0x8, 0x3}, {0xfff, 0x3, 0x0, 0x80, 0xc, 0x9}, {0x5, 0x9, 0x8, 0x9, 0x400, 0x1}, {0x1, 0x9, 0xe20c, 0xce4, 0x4, 0x7}, {0x0, 0x6, 0x221, 0x1, 0x0, 0x1}, {0x6, 0xf1, 0x6, 0x5, 0xb, 0x8}, {0x800, 0x7ff, 0x80000001, 0x4, 0x9, 0x8}, {0x3, 0x1, 0x0, 0x1, 0x5, 0x1}, {0x1, 0x9, 0x8001, 0x6, 0x1, 0x20}, {0x7, 0x1, 0xf7, 0x6, 0x8001, 0x5}, {0x3, 0xfffffffa, 0x5, 0x8, 0x9, 0xa}, {0x7, 0x6, 0x4, 0x6, 0x1000, 0x3e71}, {0x63, 0x5, 0x4, 0x4, 0x5, 0xdccc}, {0x8000, 0x3, 0xf, 0x4c, 0x2, 0x5}, {0x554bad20, 0x61c9182f, 0x5, 0x4, 0xd25c, 0xb02}, {0x7fffffff, 0xfffffffc, 0x6, 0x0, 0x1, 0x4}, {0x8, 0xffffffc0, 0x5, 0x2, 0x1ff, 0x5}, {0x0, 0x3, 0x6, 0x81, 0xfffffffd, 0x4b86}, {0x38, 0x6, 0x9, 0x9, 0x3, 0x7fff}, {0x9, 0x8, 0xfffffffa, 0x6, 0x4, 0xf}, {0xb93, 0x20000, 0x81, 0x1000, 0x2, 0x9}, {0x1000, 0x6, 0x417, 0x401, 0x2, 0x80000001}, {0x9, 0x7f, 0x0, 0xd, 0x100, 0xe}, {0x9, 0x8, 0x75b0, 0x6, 0x80000000, 0xe}, {0xf587bde, 0x6, 0xd, 0x1, 0x8000, 0x79}, {0x4, 0x8, 0x80000000, 0x0, 0x101, 0x1}, {0x9, 0x52, 0x3, 0x1, 0x8, 0x3}, {0x3f, 0x6, 0xb80, 0x2, 0x0, 0x9}, {0x40, 0xd, 0x8, 0x0, 0x9, 0x8}, {0x4, 0x4, 0x7ff, 0xfffffffa, 0x7f, 0x1}, {0x3, 0xfff9, 0x3, 0x10001, 0x0, 0x5}, {0xe1, 0x4, 0x6, 0x2, 0x1, 0xa643}, {0x9, 0x6, 0x10001, 0xfd4, 0x8, 0x5}, {0x5, 0x402, 0x1, 0x70, 0x1, 0x4cd5}, {0x8, 0x3, 0x8000, 0xff, 0x6, 0x4}, {0x3, 0x10001, 0x10, 0x2, 0x4, 0x9}, {0x5, 0x7, 0x3, 0x91, 0x5, 0x5}, {0x100, 0x5, 0x0, 0x1, 0xa00000}, {0x1, 0x4, 0x6, 0x7, 0x3, 0x6}, {0x4, 0x9, 0xffffffff, 0x5, 0xa0, 0x3}, {0x3, 0x474, 0x800, 0x33, 0x0, 0x8}, {0x1, 0x98a2, 0x7f, 0x89fa, 0x1ff, 0x5}, {0x1, 0x2, 0x1, 0x1, 0x3, 0x6}, {0x3, 0x1, 0x1, 0x0, 0xab6, 0x9}, {0x80, 0x2, 0x5, 0x3, 0x2}, {0x1ff, 0x5, 0x100, 0x7, 0x7ff, 0x6}, {0x7fff, 0xfff, 0x9, 0xe91d, 0x9, 0x5}, {0x3, 0xffff, 0x52f, 0xb1, 0x3, 0xf2}, {0x7, 0xfff, 0x4, 0x8, 0xd, 0x7f}, {0x5, 0x1, 0x9, 0x2, 0x6, 0x8}, {0x10, 0xff1c, 0xb, 0x6, 0x80000000, 0xd6b}, {0x5a1a60e7, 0x2, 0xa, 0x9, 0x8, 0x7ff}, {0xd52, 0x9, 0x3ff, 0x3, 0xff, 0xfc}, {0x100, 0x5, 0x9, 0x5, 0x0, 0xfffffff8}, {0x4, 0x2, 0x10, 0x2, 0x401}, {0x5, 0xba, 0x5, 0x9, 0x6a32f5, 0x6da3}, {0x20e491fd, 0x2, 0x3ff, 0x10000, 0x8, 0xdf40}, {0x0, 0x80000001, 0x0, 0x3, 0x3, 0xeb0}, {0x28, 0x6, 0x6, 0x8f16, 0x2, 0x8}, {0xd6, 0x1, 0x101, 0x3, 0x29, 0x4}, {0x1ff, 0x101, 0x7, 0x3, 0xc, 0x5}, {0x8, 0x5be, 0xd, 0xeb, 0x80000000, 0x1}, {0x7, 0x8, 0x8, 0xe0000000, 0xbe1}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0xf2c0b13b54e2ffff}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x7}, {}, {0x2}, {0x3}, {0x3}, {0x5}, {0x2}, {0x5}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0xf, 0x1}, {0x3}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x2}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x3}, {}, {}, {0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x7acacdad03d67748, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m34.696159513s ago: executing program 0 (id=16383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000040a01f3"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 3m34.493848742s ago: executing program 0 (id=16386): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 3m34.286604986s ago: executing program 0 (id=16390): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 3m34.092306826s ago: executing program 0 (id=16394): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000080)=0xfffffffd) 3m33.165423507s ago: executing program 0 (id=16414): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000040)='./bus\x00') 3m33.031533662s ago: executing program 0 (id=16415): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) 3m16.821939251s ago: executing program 34 (id=16415): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) 1m44.88670848s ago: executing program 6 (id=17876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1m44.614318969s ago: executing program 6 (id=17877): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) pselect6(0x40, &(0x7f0000000040)={0x9, 0x4, 0x7, 0x6, 0x2, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) 1m44.452703094s ago: executing program 6 (id=17879): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 1m44.101117108s ago: executing program 6 (id=17882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="69fcc5d50c", 0x5}], 0x1) 1m43.906948678s ago: executing program 6 (id=17884): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m43.694055255s ago: executing program 6 (id=17888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {0x0, 0xc}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m27.600801973s ago: executing program 35 (id=17888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}, {0x0, 0xc}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.432483752s ago: executing program 7 (id=19408): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 4.313670228s ago: executing program 7 (id=19412): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 4.040764285s ago: executing program 7 (id=19426): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000500), 0x0}, 0x20) 3.923702137s ago: executing program 7 (id=19419): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3.798447298s ago: executing program 7 (id=19420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000520001000a0000000000124c02d4"], 0x18}}, 0x0) 3.344461268s ago: executing program 7 (id=19431): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0) 3.076260545s ago: executing program 36 (id=19431): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0) 2.780392003s ago: executing program 8 (id=19436): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 2.693744075s ago: executing program 8 (id=19437): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='SYNTH\nVOLUME ', @ANYRESHEX=r0, @ANYRESDEC], 0xb9) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 2.693662463s ago: executing program 3 (id=19438): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 2.425752846s ago: executing program 3 (id=19440): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1fffe, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf5c7921"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 2.425416065s ago: executing program 8 (id=19441): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800107a, r0, 0x0) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0) 2.165569945s ago: executing program 8 (id=19443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x4004000, &(0x7f0000000280)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) 2.164785919s ago: executing program 3 (id=19444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x294, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x260, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_MARK_BLOCK={0x66, 0x6, 0x6c00}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6}]}, 0x294}}, 0x0) 1.92435201s ago: executing program 8 (id=19447): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.513091728s ago: executing program 5 (id=19450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0xa40000, 0x0, 0x3e, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 1.333232838s ago: executing program 5 (id=19451): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.107512883s ago: executing program 3 (id=19452): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60742, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.064965036s ago: executing program 5 (id=19453): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, r2, 0xb6, &(0x7f0000000440)=""/182}) 996.672516ms ago: executing program 8 (id=19454): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287090502"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 977.518941ms ago: executing program 4 (id=19455): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x0) 791.579574ms ago: executing program 3 (id=19456): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x4004000, &(0x7f0000000280)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) 722.490699ms ago: executing program 5 (id=19457): r0 = epoll_create1(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002100)={0x40000013}) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x5) 721.900513ms ago: executing program 4 (id=19458): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000005000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) 609.02452ms ago: executing program 3 (id=19459): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x180) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x6e, {0x3, 0xac1}, {0x5, 0x2}, @ramp={0x3, 0x5, {0xcdb0, 0x1000, 0xc, 0xfffe}}}) 461.456335ms ago: executing program 4 (id=19460): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) getcwd(&(0x7f0000000000)=""/146, 0x92) 412.11638ms ago: executing program 5 (id=19461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000f3000100c00000e7ff0000000000b100004eedf79cbe05d9fb84916c4695bff3294a024018"]) 325.823789ms ago: executing program 4 (id=19462): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0x1d, 0xffffffffffffff1e}) 116.393973ms ago: executing program 4 (id=19463): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 83.139693ms ago: executing program 5 (id=19464): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) close(0x3) 0s ago: executing program 4 (id=19465): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) kernel console output (not intermixed with test programs): executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e038d169 code=0x7ffc0000 [ 1120.677446][ T30] audit: type=1326 audit(2000000855.815:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20626 comm="syz.7.16767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e038d169 code=0x7ffc0000 [ 1120.699858][ T30] audit: type=1326 audit(2000000855.815:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20626 comm="syz.7.16767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc7e038d169 code=0x7ffc0000 [ 1121.072310][ T5926] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1121.075506][T20672] hsr0: entered promiscuous mode [ 1121.104391][ T52] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1121.233787][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1121.256823][ T5926] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 1121.271653][ T5926] usb 5-1: config 0 has no interface number 0 [ 1121.279170][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 1121.288875][ T5926] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.306284][ T52] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1121.320035][ T5926] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.339581][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.360968][ T5926] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1121.370176][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.379456][ T52] usb 7-1: config 0 descriptor?? [ 1121.423622][ T5926] usb 5-1: config 0 descriptor?? [ 1121.614503][ T52] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1121.634788][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1121.646193][ T52] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1121.666686][ T52] usb 7-1: media controller created [ 1121.694290][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.888839][ T5926] hid (null): report_id 0 is invalid [ 1122.123631][ T5166] usb 5-1: USB disconnect, device number 76 [ 1122.271169][ T52] az6027: usb out operation failed. (-71) [ 1122.291160][ T52] stb0899_attach: Driver disabled by Kconfig [ 1122.297291][ T52] az6027: no front-end attached [ 1122.297291][ T52] [ 1122.307481][T20726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16793'. [ 1122.317422][ T52] az6027: usb out operation failed. (-71) [ 1122.350513][ T52] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1122.367392][ T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input148 [ 1122.396927][ T52] dvb-usb: schedule remote query interval to 400 msecs. [ 1122.419438][ T52] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1122.480354][ T52] usb 7-1: USB disconnect, device number 17 [ 1122.624775][ T52] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1122.656947][T20744] geneve3: entered promiscuous mode [ 1122.666317][T20744] geneve3: entered allmulticast mode [ 1122.840513][T20756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.052438][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1123.052459][ T30] audit: type=1400 audit(2000000858.322:5989): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=20762 comm="syz.3.16800" daddr=fc02::1 dest=20002 [ 1123.102024][T20767] lo speed is unknown, defaulting to 1000 [ 1123.447633][ T30] audit: type=1400 audit(2000000858.705:5990): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=20804 comm="syz.3.16807" dest=51873 [ 1123.542579][T19129] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1123.723576][T19129] usb 5-1: Using ep0 maxpacket: 32 [ 1123.730785][T19129] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1123.779441][T19129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.845420][T19129] usb 5-1: config 0 descriptor?? [ 1123.866582][T19129] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1124.204529][T20841] program syz.3.16820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.547214][T19129] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1124.559505][T19129] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1124.584579][T20891] netlink: 100 bytes leftover after parsing attributes in process `syz.5.16826'. [ 1124.619850][T19129] usb 5-1: USB disconnect, device number 77 [ 1124.627918][T20891] netlink: 157 bytes leftover after parsing attributes in process `syz.5.16826'. [ 1124.924626][T20906] netlink: 10 bytes leftover after parsing attributes in process `syz.3.16831'. [ 1124.990007][T20910] random: crng reseeded on system resumption [ 1126.493048][T10186] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1126.675421][T10186] usb 4-1: Using ep0 maxpacket: 32 [ 1126.697534][T10186] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1126.722293][T10186] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1126.734039][T10186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.742632][T10186] usb 4-1: Product: syz [ 1126.746854][T10186] usb 4-1: Manufacturer: syz [ 1126.763222][T10186] usb 4-1: SerialNumber: syz [ 1126.819095][T10186] usb 4-1: config 0 descriptor?? [ 1127.133750][T21004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16868'. [ 1127.321970][T10186] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1127.425499][T21017] tap0: tun_chr_ioctl cmd 1074025677 [ 1127.447064][T21017] tap0: linktype set to 821 [ 1127.554375][T21025] nr0: tun_chr_ioctl cmd 1074025676 [ 1127.559762][T21025] nr0: owner set to 774 [ 1127.752010][T10186] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1127.862312][T10186] usb 4-1: USB disconnect, device number 79 [ 1128.046184][T21068] netlink: 'syz.7.16882': attribute type 18 has an invalid length. [ 1129.421578][T21129] netlink: 'syz.5.16901': attribute type 4 has an invalid length. [ 1129.996504][T21152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1130.015663][T21152] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1131.095158][T21241] netlink: 52 bytes leftover after parsing attributes in process `syz.7.16931'. [ 1131.236667][T21243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16932'. [ 1131.316798][T21246] netlink: 'syz.6.16934': attribute type 1 has an invalid length. [ 1131.390288][T21250] tap0: tun_chr_ioctl cmd 35111 [ 1131.654372][T21268] lo speed is unknown, defaulting to 1000 [ 1131.674071][T21268] lo speed is unknown, defaulting to 1000 [ 1131.685522][T21268] lo speed is unknown, defaulting to 1000 [ 1131.728876][T21270] netlink: 'syz.7.16940': attribute type 16 has an invalid length. [ 1131.746179][T21268] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1131.761288][T21270] netlink: 'syz.7.16940': attribute type 17 has an invalid length. [ 1131.773218][T21271] input: syz0 as /devices/virtual/input/input149 [ 1131.829500][T21270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1131.891558][ T5926] lo speed is unknown, defaulting to 1000 [ 1131.892783][T21268] lo speed is unknown, defaulting to 1000 [ 1131.939905][T21268] lo speed is unknown, defaulting to 1000 [ 1131.967036][T21268] lo speed is unknown, defaulting to 1000 [ 1131.973916][T21268] lo speed is unknown, defaulting to 1000 [ 1132.025985][T21268] lo speed is unknown, defaulting to 1000 [ 1132.312564][T21294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1132.321289][T21294] bond0: (slave bond4): Enslaving as an active interface with an up link [ 1133.111505][ T52] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1133.283231][ T52] usb 7-1: Using ep0 maxpacket: 8 [ 1133.316208][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.345128][ T52] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1133.362506][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.374177][ T30] audit: type=1326 audit(2000000867.984:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21382 comm="syz.3.16969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29ad98d169 code=0x0 [ 1133.401354][ T52] usb 7-1: config 0 descriptor?? [ 1133.814348][T21408] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16977'. [ 1133.839067][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16977'. [ 1133.873481][ T52] holtek 0003:1241:5015.0069: unknown main item tag 0x0 [ 1133.895052][ T52] holtek 0003:1241:5015.0069: item fetching failed at offset 3/5 [ 1133.916650][ T52] holtek 0003:1241:5015.0069: parse failed [ 1133.936571][ T52] holtek 0003:1241:5015.0069: probe with driver holtek failed with error -22 [ 1134.026386][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16979'. [ 1134.041466][T21420] vlan3: entered allmulticast mode [ 1134.046669][T21420] dummy0: entered allmulticast mode [ 1134.104577][ T52] usb 7-1: USB disconnect, device number 18 [ 1134.219080][T21437] Falling back ldisc for ttyS3. [ 1134.385671][T21446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.517709][T21455] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1134.533524][T21455] overlayfs: conflicting options: metacopy=off,verity=require [ 1135.568820][ T52] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1135.742139][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1135.771850][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.794567][ T52] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1135.825327][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1135.843654][ T52] usb 6-1: SerialNumber: syz [ 1135.870047][ T52] usb 6-1: config 0 descriptor?? [ 1135.883287][ T52] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 1135.891547][ T52] usb 6-1: No valid video chain found. [ 1136.131272][ T5926] usb 6-1: USB disconnect, device number 24 [ 1136.354188][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17021'. [ 1137.455610][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17038'. [ 1137.515046][ T30] audit: type=1400 audit(2000000871.848:5992): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=21587 comm="syz.6.17039" daddr=fc01::1 dest=2 [ 1137.555969][T21583] syz.5.17036 (21583): drop_caches: 2 [ 1137.759192][T21583] syz.5.17036 (21583): drop_caches: 2 [ 1138.439228][T21631] netlink: 596 bytes leftover after parsing attributes in process `syz.5.17056'. [ 1138.678601][ T30] audit: type=1400 audit(2000000872.942:5993): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=21641 comm="syz.6.17064" name="450" dev="tmpfs" ino=2289 [ 1139.033601][T21659] kvm: user requested TSC rate below hardware speed [ 1139.062634][T21664] kvm: apic: phys broadcast and lowest prio [ 1139.413010][T21679] loop6: detected capacity change from 0 to 524287999 [ 1140.721990][T21738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17097'. [ 1143.059110][T21833] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1143.723313][ T26] kworker/1:0 (26) used greatest stack depth: 11984 bytes left [ 1144.080085][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17141'. [ 1144.103339][T21869] netlink: 27 bytes leftover after parsing attributes in process `syz.6.17141'. [ 1144.929047][T21898] tap0: tun_chr_ioctl cmd 21531 [ 1145.256065][ T30] audit: type=1400 audit(2000000879.078:5994): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=21921 comm="syz.4.17158" daddr=fc00::1 [ 1145.927964][ T52] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1146.129009][ T52] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.148750][ T52] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1146.155642][ T52] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1146.177475][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.192127][ T52] usb 7-1: config 0 descriptor?? [ 1146.647597][ T52] wacom 0003:056A:00BA.006A: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 1146.661130][ T52] wacom 0003:056A:00BA.006A: hidraw0: USB HID v0.03 Device [HID 056a:00ba] on usb-dummy_hcd.6-1/input0 [ 1146.675664][ T52] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00BA.006A/input/input150 [ 1146.725810][T21982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.825761][ C0] hrtimer: interrupt took 56583 ns [ 1146.868768][ T5917] usb 7-1: USB disconnect, device number 19 [ 1147.433728][T22035] ubi: mtd0 is already attached to ubi31 [ 1147.773170][T22052] netem: incorrect gi model size [ 1147.791822][T22052] netem: change failed [ 1148.718828][T22098] lo speed is unknown, defaulting to 1000 [ 1148.764960][T22098] lo speed is unknown, defaulting to 1000 [ 1148.768244][T22094] lo speed is unknown, defaulting to 1000 [ 1148.828933][T22094] lo speed is unknown, defaulting to 1000 [ 1149.423801][T22169] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17220'. [ 1149.552304][ T5917] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1149.694350][T22175] netem: incorrect ge model size [ 1149.700219][T22175] netem: change failed [ 1149.781634][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1149.824969][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1149.845395][ T5917] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1149.858374][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.901827][ T5917] usb 5-1: config 0 descriptor?? [ 1150.390467][ T5917] hid (null): nested delimiters [ 1150.410596][ T5917] hid (null): nested delimiters [ 1150.415670][ T5917] hid (null): nested delimiters [ 1150.423474][ T5917] hid (null): bogus close delimiter [ 1150.445765][ T5917] uclogic 0003:28BD:0042.006B: interface is invalid, ignoring [ 1150.627856][T19129] usb 5-1: USB disconnect, device number 78 [ 1150.974347][T22241] netlink: 'syz.6.17238': attribute type 12 has an invalid length. [ 1150.991714][T22241] netlink: 'syz.6.17238': attribute type 29 has an invalid length. [ 1151.007300][T22241] netlink: 'syz.6.17238': attribute type 2 has an invalid length. [ 1151.026306][T22241] netlink: 'syz.6.17238': attribute type 2 has an invalid length. [ 1151.045127][T22241] netlink: 'syz.6.17238': attribute type 1 has an invalid length. [ 1151.067971][T22241] netlink: 'syz.6.17238': attribute type 37 has an invalid length. [ 1151.087526][T22241] netlink: 'syz.6.17238': attribute type 2 has an invalid length. [ 1151.136198][ T30] audit: type=1400 audit(2000000884.597:5995): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22247 comm="syz.5.17241" daddr=fc00::1 dest=20000 [ 1151.241842][T22251] netlink: 312 bytes leftover after parsing attributes in process `syz.6.17242'. [ 1151.928906][T22262] netpci0: tun_chr_ioctl cmd 1074812118 [ 1152.064993][ T30] audit: type=1400 audit(2000000885.467:5996): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22272 comm="syz.5.17249" daddr=2001:: [ 1152.315996][T22285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17252'. [ 1152.347910][T22285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17252'. [ 1152.769358][ T30] audit: type=1400 audit(2000000886.122:5997): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22303 comm="syz.7.17258" daddr=2001::1 [ 1152.944172][ T30] audit: type=1400 audit(2000000886.290:5998): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22312 comm="syz.7.17261" daddr=::ffff:172.20.20.187 [ 1153.444964][T22335] dccp_invalid_packet: P.Data Offset(0) too small [ 1153.875442][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17277'. [ 1154.134082][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17282'. [ 1154.964965][ T30] audit: type=1326 audit(2000000888.180:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22360 comm="syz.3.17280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7fc00000 [ 1157.204292][T22496] tap0: tun_chr_ioctl cmd 1074025677 [ 1157.210191][T22496] tap0: linktype set to 769 [ 1158.043981][ T30] audit: type=1400 audit(2000000891.061:6000): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22538 comm="syz.4.17344" daddr=::ffff:0.0.0.0 dest=20003 [ 1159.828999][T10186] kernel write not supported for file /input/mouse0 (pid: 10186 comm: kworker/0:3) [ 1160.007403][T19129] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1160.109666][T22628] sctp: [Deprecated]: syz.5.17372 (pid 22628) Use of int in maxseg socket option. [ 1160.109666][T22628] Use struct sctp_assoc_value instead [ 1160.200587][T19129] usb 5-1: Using ep0 maxpacket: 32 [ 1160.208013][T19129] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1160.225771][T19129] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1160.248475][T19129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.260869][T19129] usb 5-1: Product: syz [ 1160.265793][T19129] usb 5-1: Manufacturer: syz [ 1160.270628][T19129] usb 5-1: SerialNumber: syz [ 1160.287088][T19129] usb 5-1: config 0 descriptor?? [ 1160.305276][ T30] audit: type=1400 audit(2000000893.175:6001): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22636 comm="syz.7.17378" dest=2 [ 1160.403265][T22644] netlink: 'syz.7.17380': attribute type 1 has an invalid length. [ 1160.418830][T22644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.510101][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17381'. [ 1160.740319][T19129] gs_usb 5-1:0.0: Configuring for 167 interfaces [ 1160.752175][T19129] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1160.779178][T19129] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 1160.972935][ T52] usb 5-1: USB disconnect, device number 79 [ 1161.211462][T22678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17389'. [ 1161.443943][T22688] netlink: 6 bytes leftover after parsing attributes in process `syz.5.17394'. [ 1161.894159][T22705] netlink: 'syz.3.17401': attribute type 1 has an invalid length. [ 1162.409130][T22725] : renamed from pim6reg1 [ 1162.832826][T22744] lo speed is unknown, defaulting to 1000 [ 1162.839404][T22744] lo speed is unknown, defaulting to 1000 [ 1164.420107][T22835] netlink: 'syz.6.17441': attribute type 25 has an invalid length. [ 1164.443224][T22835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17441'. [ 1164.468883][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17441'. [ 1166.010193][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17462'. [ 1166.044718][T22908] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17462'. [ 1166.107953][T22908] vlan4: entered allmulticast mode [ 1166.114459][T22908] bridge_slave_0: entered allmulticast mode [ 1166.297276][ T30] audit: type=1400 audit(2000000898.769:6002): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22923 comm="syz.5.17468" daddr=2001:: [ 1166.692459][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17475'. [ 1166.743172][T22945] IPVS: Error joining to the multicast group [ 1167.065310][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 1167.072379][ T9273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1167.765164][ T30] audit: type=1400 audit(2000000900.153:6003): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=22991 comm="syz.3.17491" daddr=2001::2 dest=20002 [ 1167.868718][T10186] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1167.881000][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17496'. [ 1167.978430][T23004] team0: Device ipvlan2 failed to register rx_handler [ 1168.089744][T10186] usb 6-1: Using ep0 maxpacket: 8 [ 1168.135806][T10186] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1168.176273][T10186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.194325][T10186] usb 6-1: Product: syz [ 1168.220623][T10186] usb 6-1: Manufacturer: syz [ 1168.225304][T10186] usb 6-1: SerialNumber: syz [ 1168.276860][T10186] usb 6-1: config 0 descriptor?? [ 1168.312801][T10186] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1168.331378][ T30] audit: type=1326 audit(2000000900.686:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23028 comm="syz.7.17501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e038d169 code=0x0 [ 1168.437381][ T30] audit: type=1400 audit(2000000900.780:6005): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23032 comm="syz.6.17502" daddr=2001::1 dest=20003 [ 1168.835878][T23053] input: syz0 as /devices/virtual/input/input153 [ 1168.976850][T10186] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1168.995171][T10186] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1169.018384][T10186] usb 6-1: USB disconnect, device number 25 [ 1170.048705][T23126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.131535][T23165] netlink: 'syz.7.17541': attribute type 1 has an invalid length. [ 1171.149788][T23165] netlink: 224 bytes leftover after parsing attributes in process `syz.7.17541'. [ 1172.314249][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17559'. [ 1172.338427][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17559'. [ 1172.393113][T23221] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1172.681276][T23236] trusted_key: syz.3.17564 sent an empty control message without MSG_MORE. [ 1173.740039][T23285] ptrace attach of "./syz-executor exec"[9267] was attempted by ""[23285] [ 1174.384661][T23316] program syz.4.17594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1174.701194][T23330] bridge_slave_0: default FDB implementation only supports local addresses [ 1174.782228][T19129] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1174.967276][T19129] usb 4-1: Using ep0 maxpacket: 8 [ 1174.980315][T19129] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.997954][T19129] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1175.018053][T19129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1175.031063][T19129] usb 4-1: SerialNumber: syz [ 1175.076709][T19129] usb 4-1: config 0 descriptor?? [ 1175.215899][ T30] audit: type=1800 audit(2000000907.122:6006): pid=23357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.17607" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=143549 res=0 errno=0 [ 1175.303854][T19129] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1175.338624][T19129] usb 4-1: No valid video chain found. [ 1175.522294][T19129] usb 4-1: USB disconnect, device number 80 [ 1176.067583][ T30] audit: type=1400 audit(2000000907.926:6007): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23398 comm="syz.5.17618" daddr=2001::1 [ 1176.136679][T23403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17620'. [ 1176.326748][T23414] netlink: 'syz.3.17626': attribute type 10 has an invalid length. [ 1176.345823][T23414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17626'. [ 1176.481641][ T30] audit: type=1400 audit(2000000908.300:6008): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=23420 comm="syz.4.17628" daddr=::ffff:172.20.20.57 dest=20001 [ 1176.743595][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17633'. [ 1176.778161][T23438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.879560][T23438] bridge_slave_0 (unregistering): left allmulticast mode [ 1176.886667][T23438] bridge_slave_0 (unregistering): left promiscuous mode [ 1176.907035][T23438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.558138][ T30] audit: type=1326 audit(2000000909.310:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23488 comm="syz.6.17651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210358d169 code=0x0 [ 1178.132330][T23517] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.142067][T23517] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.156489][T23517] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.169404][T23517] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.178717][T23517] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.188099][T23517] netlink: 32 bytes leftover after parsing attributes in process `syz.5.17662'. [ 1178.214313][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17663'. [ 1178.428980][T23529] netlink: 'syz.5.17668': attribute type 1 has an invalid length. [ 1178.437982][ T55] Bluetooth: hci4: command tx timeout [ 1178.443937][T23529] netlink: 134708 bytes leftover after parsing attributes in process `syz.5.17668'. [ 1178.784992][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 1178.965735][T23552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.973471][T23552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.073807][T23554] mkiss: ax0: crc mode is auto. [ 1179.199060][T23554] Falling back ldisc for ttyS3. [ 1179.249498][T23568] tap0: tun_chr_ioctl cmd 2147767521 [ 1179.797426][ T5917] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1180.017927][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.044712][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.083426][ T5917] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1180.107580][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.142707][ T5917] usb 5-1: config 0 descriptor?? [ 1180.590498][ T5917] playstation 0003:054C:0DF2.006C: unknown main item tag 0x0 [ 1180.609217][ T5917] playstation 0003:054C:0DF2.006C: unknown main item tag 0x0 [ 1180.629342][ T5917] playstation 0003:054C:0DF2.006C: unknown main item tag 0x0 [ 1180.648308][ T5917] playstation 0003:054C:0DF2.006C: unknown main item tag 0x0 [ 1180.657756][ T5917] playstation 0003:054C:0DF2.006C: unknown main item tag 0x0 [ 1180.685322][ T5917] playstation 0003:054C:0DF2.006C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1181.019151][ T5917] playstation 0003:054C:0DF2.006C: Failed to retrieve feature with reportID 32: -71 [ 1181.028919][T23654] netlink: 'syz.5.17705': attribute type 1 has an invalid length. [ 1181.038637][T23654] netlink: 'syz.5.17705': attribute type 4 has an invalid length. [ 1181.049855][ T5917] playstation 0003:054C:0DF2.006C: Failed to retrieve DualSense firmware info: -71 [ 1181.051087][T23654] netlink: 192 bytes leftover after parsing attributes in process `syz.5.17705'. [ 1181.087191][ T5917] playstation 0003:054C:0DF2.006C: Failed to get firmware info from DualSense [ 1181.108304][ T5917] playstation 0003:054C:0DF2.006C: Failed to create dualsense. [ 1181.119971][ T5917] playstation 0003:054C:0DF2.006C: probe with driver playstation failed with error -71 [ 1181.143169][ T5917] usb 5-1: USB disconnect, device number 80 [ 1181.781861][T23699] input: syz0 as /devices/virtual/input/input155 [ 1182.821232][ T5926] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1182.943051][T23754] netlink: 165 bytes leftover after parsing attributes in process `syz.3.17737'. [ 1183.008334][ T5926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1183.030506][ T5926] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1183.057438][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.066837][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.074985][ T5926] usb 7-1: Product: syz [ 1183.079816][ T5926] usb 7-1: Manufacturer: syz [ 1183.084946][ T5926] usb 7-1: SerialNumber: syz [ 1183.327113][T23735] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1183.799536][ T30] audit: type=1326 audit(2000000915.147:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1183.874104][ T30] audit: type=1326 audit(2000000915.147:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1183.944708][ T30] audit: type=1326 audit(2000000915.147:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.020947][ T5926] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 1184.026946][ T30] audit: type=1326 audit(2000000915.147:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.092303][ T5926] cdc_ncm 7-1:1.0: bind() failure [ 1184.103216][ T5926] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1184.114639][ T30] audit: type=1326 audit(2000000915.147:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.168228][ T5926] cdc_ncm 7-1:1.1: bind() failure [ 1184.187709][ T5926] usb 7-1: USB disconnect, device number 20 [ 1184.221954][ T30] audit: type=1326 audit(2000000915.147:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.306555][ T30] audit: type=1326 audit(2000000915.147:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.345845][ T30] audit: type=1326 audit(2000000915.147:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.378805][ T30] audit: type=1326 audit(2000000915.147:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23783 comm="syz.5.17747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1184.595910][ T5917] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1184.659985][ T5166] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1184.774896][ T5917] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1184.818608][T23828] tap0: tun_chr_ioctl cmd 1074025673 [ 1184.819777][ T5917] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1184.830976][ T5166] usb 6-1: Using ep0 maxpacket: 32 [ 1184.854342][ T5166] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1184.864707][ T5917] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1184.880689][ T5166] usb 6-1: config 0 has no interface number 0 [ 1184.886527][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.905956][ T5166] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.934563][ T5166] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.944885][T23806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1184.952026][ T5166] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1184.962266][ T5917] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.966896][ T5166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.006654][ T5166] usb 6-1: config 0 descriptor?? [ 1185.207888][ T5917] usb 5-1: USB disconnect, device number 81 [ 1185.632907][ T52] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1185.678659][ T5166] uclogic 0003:28BD:0094.006D: pen parameters not found [ 1185.699152][ T5166] uclogic 0003:28BD:0094.006D: interface is invalid, ignoring [ 1185.717921][ T5166] usb 6-1: USB disconnect, device number 26 [ 1185.793332][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 1185.817955][ T52] usb 7-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1185.838875][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.852107][ T52] usb 7-1: Product: syz [ 1185.856422][ T52] usb 7-1: Manufacturer: syz [ 1185.861594][ T52] usb 7-1: SerialNumber: syz [ 1185.875025][ T52] usb 7-1: config 0 descriptor?? [ 1185.884835][ T52] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1186.327074][ T30] audit: type=1326 audit(2000000917.514:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.4.17773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1186.750862][ T52] gspca_sunplus: reg_w_riv err -71 [ 1186.768232][ T52] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1186.787734][ T52] usb 7-1: USB disconnect, device number 21 [ 1187.694990][ T9273] Bluetooth: hci4: link tx timeout [ 1187.702226][ T9273] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1187.715027][ T9273] Bluetooth: hci4: link tx timeout [ 1187.720537][ T9273] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1188.050989][T23998] netlink: 'syz.3.17797': attribute type 1 has an invalid length. [ 1188.065359][T23998] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.17797'. [ 1188.937322][ T52] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1188.965169][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17814'. [ 1189.099272][ T52] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1189.112398][ T52] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.132850][ T52] usb 7-1: config 0 has no interface number 0 [ 1189.149203][ T52] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1189.160781][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.201087][ T52] usb 7-1: Product: syz [ 1189.211819][ T52] usb 7-1: Manufacturer: syz [ 1189.221807][ T52] usb 7-1: SerialNumber: syz [ 1189.245835][ T52] usb 7-1: config 0 descriptor?? [ 1189.716654][ T52] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1189.723097][ T52] usb 7-1: No valid video chain found. [ 1189.908069][ T9273] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.954115][T19129] usb 7-1: USB disconnect, device number 22 [ 1190.439162][T24111] lo speed is unknown, defaulting to 1000 [ 1190.447265][T24111] lo speed is unknown, defaulting to 1000 [ 1192.025745][ T5917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1192.113651][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17861'. [ 1192.125283][ T9273] Bluetooth: hci4: command 0x0406 tx timeout [ 1192.230425][ T5917] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1192.260423][ T5917] usb 4-1: config 0 has no interface number 0 [ 1192.280137][ T5917] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1192.320854][ T5917] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1192.357057][ T5917] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1192.367422][ T5917] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1192.377809][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.399584][ T5917] usb 4-1: config 0 descriptor?? [ 1192.429510][ T5917] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1192.456878][T24216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17864'. [ 1192.689993][T19129] usb 4-1: USB disconnect, device number 81 [ 1192.706399][T24226] [U]  [ 1192.967712][ T5917] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1193.160139][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1193.178591][ T5917] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1193.233442][ T5917] usb 6-1: config 179 has no interface number 0 [ 1193.276156][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1193.352426][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1193.398621][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1193.437821][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1193.491739][ T5917] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1193.549803][ T5917] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1193.573081][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.627101][T24236] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1194.040788][ T5917] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input157 [ 1194.300364][ T5917] usb 6-1: USB disconnect, device number 27 [ 1194.307002][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1194.307053][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1194.370570][ T5917] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1194.831320][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1194.831339][ T30] audit: type=1400 audit(2000001181.450:6022): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=24318 comm="syz.4.17887" daddr=fc00::1 [ 1194.990780][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17890'. [ 1196.239671][T24374] input: syz1 as /devices/virtual/input/input158 [ 1196.397398][ T5917] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1196.594959][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.610902][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.641302][ T5917] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1196.676212][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.721649][ T5917] usb 4-1: config 0 descriptor?? [ 1197.274242][ T5917] sony 0003:054C:024B.006E: unexpected long global item [ 1197.307284][ T5917] sony 0003:054C:024B.006E: parse failed [ 1197.313057][ T5917] sony 0003:054C:024B.006E: probe with driver sony failed with error -22 [ 1197.506671][ T5917] usb 4-1: USB disconnect, device number 82 [ 1198.214027][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17926'. [ 1198.778299][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17934'. [ 1199.777514][T24497] netlink: 11 bytes leftover after parsing attributes in process `syz.3.17946'. [ 1201.333187][T24573] netlink: 'syz.7.17968': attribute type 9 has an invalid length. [ 1201.347981][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17968'. [ 1201.392433][T24573] hsr0: entered promiscuous mode [ 1201.397543][T24573] macvlan2: entered promiscuous mode [ 1201.433094][T24573] macvlan2: entered allmulticast mode [ 1201.443745][T24573] hsr0: entered allmulticast mode [ 1201.465358][T24573] hsr_slave_0: entered allmulticast mode [ 1201.482112][T24573] hsr_slave_1: entered allmulticast mode [ 1202.137207][T24596] netlink: 'syz.4.17975': attribute type 10 has an invalid length. [ 1202.167326][T24596] team0: Port device dummy0 added [ 1202.261520][T24596] team0: Port device dummy0 removed [ 1202.272318][T24596] macvlan1: left allmulticast mode [ 1202.278944][T24601] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 1202.279939][T24596] veth1_vlan: left allmulticast mode [ 1202.297797][T24596] macvlan1: left promiscuous mode [ 1202.297937][T24601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.317599][T24596] bridge0: port 1(macvlan1) entered disabled state [ 1202.339772][T24596] macsec0: left allmulticast mode [ 1202.358227][T24596] veth1_macvtap: left allmulticast mode [ 1202.369032][T24596] macsec0: left promiscuous mode [ 1202.380433][T24596] bridge0: port 2(macsec0) entered disabled state [ 1202.432946][T24596] bond0: (slave bond4): Releasing backup interface [ 1203.198493][T24635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1203.304809][ T5926] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1203.498550][ T5926] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1203.518219][ T5926] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1203.539663][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1203.552141][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1203.567175][ T5926] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1203.586829][ T5926] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1203.600050][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1203.608534][ T5926] usb 5-1: Product: syz [ 1203.612941][ T5926] usb 5-1: Manufacturer: syz [ 1203.623022][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 1203.628515][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 1203.637570][ T5926] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1203.643650][ T5926] cdc_wdm 5-1:1.0: Unknown control protocol [ 1203.817604][ T52] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1203.982381][ T52] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1203.997126][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.011841][ T52] usb 6-1: config 0 descriptor?? [ 1204.077510][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 1204.088529][ T5166] usb 5-1: USB disconnect, device number 82 [ 1204.463515][ T52] uclogic 0003:28BD:0055.006F: interface is invalid, ignoring [ 1204.697540][T19129] usb 6-1: USB disconnect, device number 28 [ 1205.054469][T24690] netlink: 'syz.7.18001': attribute type 1 has an invalid length. [ 1205.090595][ T30] audit: type=1326 audit(2000001191.075:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.158555][ T30] audit: type=1326 audit(2000001191.075:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.262147][ T30] audit: type=1326 audit(2000001191.075:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.286188][ T30] audit: type=1326 audit(2000001191.075:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.314621][ T30] audit: type=1326 audit(2000001191.075:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.449972][ T30] audit: type=1326 audit(2000001191.075:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.522762][ T30] audit: type=1326 audit(2000001191.122:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1205.584671][ T30] audit: type=1326 audit(2000001191.131:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb31b84127 code=0x7ffc0000 [ 1205.617151][ T30] audit: type=1326 audit(2000001191.131:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb31b29359 code=0x7ffc0000 [ 1205.672063][ T30] audit: type=1326 audit(2000001191.131:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24691 comm="syz.4.18002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1206.959251][T24743] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1206.999066][T24743] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1207.734996][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18036'. [ 1208.765202][T24802] netlink: 104 bytes leftover after parsing attributes in process `syz.7.18049'. [ 1209.121502][ T5917] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1209.297037][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.324505][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.344632][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1209.353755][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.379905][ T5917] usb 4-1: config 0 descriptor?? [ 1209.453907][T24832] netlink: 'syz.5.18059': attribute type 10 has an invalid length. [ 1209.482828][T24832] team0: Port device dummy0 added [ 1209.604634][T24832] team0: Port device dummy0 removed [ 1209.629284][T24832] bridge_slave_0: left allmulticast mode [ 1209.644058][T24832] bridge_slave_0: left promiscuous mode [ 1209.657265][T24832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.667437][T24832] bridge_slave_1: left allmulticast mode [ 1209.673227][T24832] bridge_slave_1: left promiscuous mode [ 1209.679543][T24832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.692132][T24832] bond0: (slave bond_slave_0): Releasing backup interface [ 1209.704603][T24832] bond0: (slave bond_slave_1): Releasing backup interface [ 1209.726140][T24832] team0: Port device team_slave_0 removed [ 1209.739648][T24832] team0: Port device team_slave_1 removed [ 1209.749968][T24832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.766078][T24832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.775701][T24832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.783652][T24832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.848245][ T5917] hid-generic 0003:05AC:4262.0070: unbalanced delimiter at end of report description [ 1209.869630][ T5917] hid-generic 0003:05AC:4262.0070: probe with driver hid-generic failed with error -22 [ 1209.985079][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18063'. [ 1210.058358][ T52] usb 4-1: USB disconnect, device number 83 [ 1210.779607][T24875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.819625][T24875] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1211.329150][ T9273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1211.342653][ T9273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1211.357636][ T9273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1211.383159][ T9273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1211.393618][ T9273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1211.401036][ T9273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1211.469938][T24908] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1211.500848][T24894] lo speed is unknown, defaulting to 1000 [ 1211.520471][T24894] lo speed is unknown, defaulting to 1000 [ 1211.717169][T19949] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.959202][T19949] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.137946][T19949] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.197109][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18093'. [ 1212.230026][T24894] chnl_net:caif_netlink_parms(): no params data found [ 1212.371862][T19949] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.698108][T24894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.728376][T24894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.749676][T24894] bridge_slave_0: entered allmulticast mode [ 1212.769875][T24894] bridge_slave_0: entered promiscuous mode [ 1212.797804][T24894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.812068][T24894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.830606][T24894] bridge_slave_1: entered allmulticast mode [ 1212.839132][T24894] bridge_slave_1: entered promiscuous mode [ 1212.985867][T24894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.019277][T19949] bridge_slave_1: left allmulticast mode [ 1213.038596][T19949] bridge_slave_1: left promiscuous mode [ 1213.044622][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.056704][T19949] bridge_slave_0: left allmulticast mode [ 1213.062391][T19949] bridge_slave_0: left promiscuous mode [ 1213.092242][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.589068][ T9273] Bluetooth: hci5: command tx timeout [ 1214.357490][T19949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.376089][T19949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.388724][T19949] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1214.403449][T19949] bond0 (unregistering): Released all slaves [ 1214.693764][T19949] bond1 (unregistering): Released all slaves [ 1214.733965][T24894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.920365][T19949] tipc: Disabling bearer [ 1214.934997][T19949] tipc: Left network mode [ 1214.951551][T24894] team0: Port device team_slave_0 added [ 1214.970443][T19949] IPVS: stopping backup sync thread 18143 ... [ 1214.975240][T24894] team0: Port device team_slave_1 added [ 1215.086941][T25235] netlink: 'syz.3.18118': attribute type 10 has an invalid length. [ 1215.221375][T24894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.240026][T24894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.265962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.291275][T24894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.327301][T25235] team0: Port device dummy0 added [ 1215.358902][T25247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.380029][T25257] loop6: detected capacity change from 0 to 8 [ 1215.384920][T25247] team0: Port device bridge0 removed [ 1215.388517][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.400918][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.415471][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.417653][T25247] team0: Port device dummy0 removed [ 1215.424700][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.446060][T25247] bridge_slave_1: left allmulticast mode [ 1215.446641][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.452003][T25247] bridge_slave_1: left promiscuous mode [ 1215.463063][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.467648][T25247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.481588][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.494789][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.504018][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.514215][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.526434][T25247] bond0: (slave bond_slave_0): Releasing backup interface [ 1215.534427][T25247] bond_slave_0: left promiscuous mode [ 1215.540087][T25247] bond_slave_0: left allmulticast mode [ 1215.546285][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.559933][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.569892][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.579804][T25247] bond0: (slave bond_slave_1): Releasing backup interface [ 1215.587106][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.596292][T25247] bond_slave_1: left promiscuous mode [ 1215.602027][T25247] bond_slave_1: left allmulticast mode [ 1215.611683][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.621214][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.629216][T25257] ldm_validate_partition_table(): Disk read failed. [ 1215.638572][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.644477][T25247] team0: Port device team_slave_0 removed [ 1215.650214][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.661889][T25257] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1215.671344][T25257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1215.679808][T25257] Dev loop6: unable to read RDB block 0 [ 1215.686831][T25247] team0: Port device team_slave_1 removed [ 1215.695537][T25257] loop6: unable to read partition table [ 1215.705577][T25257] loop6: partition table beyond EOD, truncated [ 1215.715420][T25257] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1215.752875][T25249] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1215.761297][T25249] macsec2: entered promiscuous mode [ 1215.766688][T25249] macsec2: entered allmulticast mode [ 1215.774154][T25249] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1215.783812][T24894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.809596][T24894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.835559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.837009][ T9273] Bluetooth: hci5: command tx timeout [ 1215.930008][T24894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.989068][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1215.989088][ T30] audit: type=1326 audit(2000001201.261:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25269 comm="syz.3.18126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1216.022743][ T30] audit: type=1326 audit(2000001201.271:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25269 comm="syz.3.18126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1216.046351][ T30] audit: type=1326 audit(2000001201.271:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25269 comm="syz.3.18126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1216.069067][ T30] audit: type=1326 audit(2000001201.271:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25269 comm="syz.3.18126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x0 [ 1216.304682][T19949] hsr_slave_0: left promiscuous mode [ 1216.326504][T19949] hsr_slave_1: left promiscuous mode [ 1216.342265][T19949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.364873][T19949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.410495][T19949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.434724][T19949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.502105][T19949] veth1_macvtap: left promiscuous mode [ 1216.509382][T19949] veth0_macvtap: left promiscuous mode [ 1216.515097][T19949] veth1_vlan: left promiscuous mode [ 1216.520817][T19949] veth0_vlan: left promiscuous mode [ 1216.943388][T25328] usb usb8: usbfs: process 25328 (syz.7.18138) did not claim interface 0 before use [ 1217.360412][T19949] team0 (unregistering): Port device team_slave_1 removed [ 1217.454011][T19949] team0 (unregistering): Port device team_slave_0 removed [ 1218.020154][T24894] hsr_slave_0: entered promiscuous mode [ 1218.026999][T24894] hsr_slave_1: entered promiscuous mode [ 1218.033328][T24894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.036293][ T9273] Bluetooth: hci5: command tx timeout [ 1218.048668][T24894] Cannot create hsr debugfs directory [ 1218.665841][T24894] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1218.711646][T24894] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1218.736549][T24894] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1218.782226][T24894] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1218.843057][T25435] tc_dump_action: action bad kind [ 1218.973831][T24894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.027073][T24894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.059995][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.067192][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.094276][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.101465][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.460585][T25452] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1219.491679][T25452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.497857][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18164'. [ 1219.741433][T24894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.833187][ T30] audit: type=1400 audit(2000001204.853:6044): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25471 comm="syz.5.18170" dest=20002 [ 1220.079768][ T30] audit: type=1326 audit(2000001205.087:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25486 comm="syz.3.18175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1220.117235][ T30] audit: type=1326 audit(2000001205.087:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25486 comm="syz.3.18175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1220.155686][ T30] audit: type=1326 audit(2000001205.087:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25486 comm="syz.3.18175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1220.197795][ T30] audit: type=1326 audit(2000001205.087:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25486 comm="syz.3.18175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1220.226368][ T30] audit: type=1326 audit(2000001205.087:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25486 comm="syz.3.18175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1220.266086][ T9273] Bluetooth: hci5: command tx timeout [ 1220.291147][T24894] veth0_vlan: entered promiscuous mode [ 1220.319999][T24894] veth1_vlan: entered promiscuous mode [ 1220.334656][T25498] sch_fq: defrate 0 ignored. [ 1220.420888][T24894] veth0_macvtap: entered promiscuous mode [ 1220.455927][T24894] veth1_macvtap: entered promiscuous mode [ 1220.483394][T24894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.494445][T24894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.508828][T24894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.527787][T24894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.569846][T24894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.592312][T24894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.620434][T24894] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.644523][T24894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.666482][T24894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.675380][T24894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.966758][T19949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.974643][T19949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.017281][T25529] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1221.073878][ T5887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.094211][ T5887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.129101][T25532] lo speed is unknown, defaulting to 1000 [ 1221.135977][T25532] lo speed is unknown, defaulting to 1000 [ 1222.097232][T25595] netlink: 'syz.7.18204': attribute type 10 has an invalid length. [ 1222.133893][T25595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.151612][T25597] netlink: 'syz.7.18204': attribute type 10 has an invalid length. [ 1222.176503][T25595] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1222.192396][T25597] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18204'. [ 1222.253375][T25597] batadv0: entered promiscuous mode [ 1222.280363][T25597] batadv0: entered allmulticast mode [ 1222.296543][T25597] bond0: (slave batadv0): Releasing backup interface [ 1222.343637][T25597] bridge0: port 3(batadv0) entered blocking state [ 1222.358482][T25597] bridge0: port 3(batadv0) entered disabled state [ 1222.541209][ T1313] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1222.552341][ T1313] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1222.612787][ T5926] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1222.782762][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1222.795642][ T5926] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1222.822161][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.836800][ T5926] usb 5-1: Product: syz [ 1222.844577][ T5926] usb 5-1: Manufacturer: syz [ 1222.855421][ T5926] usb 5-1: SerialNumber: syz [ 1222.870188][ T5926] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1222.878831][ T5926] r8152-cfgselector 5-1: config 0 descriptor?? [ 1222.990708][T25639] netlink: 'syz.5.18220': attribute type 6 has an invalid length. [ 1223.081367][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1223.081389][ T30] audit: type=1400 audit(2000001207.893:6114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=25643 comm="syz.3.18223" daddr=fc01::1 dest=16 [ 1223.152749][ T5926] r8152-cfgselector 5-1: Needed 2 retries to read version [ 1223.376106][ T5926] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 1223.649058][T25673] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18234'. [ 1223.686108][ T30] audit: type=1326 audit(2000001208.464:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25675 comm="syz.7.18236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7e038d169 code=0x0 [ 1224.532782][T25709] program syz.8.18248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.829129][T25718] syz.8.18252 (25718): drop_caches: 2 [ 1224.857855][T25725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18255'. [ 1225.983049][ T52] kernel write not supported for file /amidi2 (pid: 52 comm: kworker/1:1) [ 1226.232048][T25782] lo speed is unknown, defaulting to 1000 [ 1226.279531][T25782] lo speed is unknown, defaulting to 1000 [ 1227.334551][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18300'. [ 1227.383776][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18300'. [ 1227.605681][T25869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.615217][T25933] netlink: 280 bytes leftover after parsing attributes in process `syz.5.18328'. [ 1229.017254][ T30] audit: type=1800 audit(2000001213.450:6116): pid=25913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.18320" name="cgroup.controllers" dev="tmpfs" ino=1624 res=0 errno=0 [ 1229.125733][T25953] netlink: 'syz.3.18338': attribute type 6 has an invalid length. [ 1229.932866][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18355'. [ 1230.175344][T26007] pimreg: entered allmulticast mode [ 1230.183840][T26007] pimreg: left allmulticast mode [ 1230.270976][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18361'. [ 1230.634765][T26033] program syz.8.18368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.419161][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18385'. [ 1232.068124][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18396'. [ 1232.341195][ T5917] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1232.381280][T26117] sock: sock_set_timeout: `syz.3.18400' (pid 26117) tries to set negative timeout [ 1232.512164][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1232.531516][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.553903][ T5960] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1232.561722][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.572540][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1232.618003][ T5917] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1232.627076][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.652121][ T5917] usb 6-1: config 0 descriptor?? [ 1232.728125][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.740017][ T5960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.749957][ T5960] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1232.759261][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.770061][ T5960] usb 9-1: config 0 descriptor?? [ 1232.880143][T26132] ptrace attach of "./syz-executor exec"[5820] was attempted by "\x22%"[26132] [ 1232.997445][T26110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.030587][T26110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.064247][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18407'. [ 1233.075265][ T5960] usbhid 9-1:0.0: can't add hid device: -71 [ 1233.084871][ T5960] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1233.106198][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x2 [ 1233.122445][ T5960] usb 9-1: USB disconnect, device number 2 [ 1233.135649][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.154494][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.162934][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.175172][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.182975][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.191274][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.199303][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.208903][ T5917] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1233.239726][ T5917] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0071/input/input160 [ 1233.256165][ T5917] microsoft 0003:045E:07DA.0071: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1233.277504][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18410'. [ 1233.320083][T26163] syz.4.18409 (26163): drop_caches: 2 [ 1233.365113][ T5960] usb 6-1: USB disconnect, device number 29 [ 1233.916714][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18420'. [ 1233.926083][T26214] netlink: 'syz.7.18420': attribute type 2 has an invalid length. [ 1233.934115][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18420'. [ 1234.103779][T26221] syz.7.18424 (26221): drop_caches: 2 [ 1234.962248][T26274] netlink: 'syz.5.18444': attribute type 16 has an invalid length. [ 1236.524718][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1236.539837][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1236.564554][T26323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1236.564662][T26325] netlink: 188 bytes leftover after parsing attributes in process `syz.8.18465'. [ 1236.604684][T26325] netlink: 'syz.8.18465': attribute type 1 has an invalid length. [ 1236.669731][ T52] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1236.789972][ T30] audit: type=1400 audit(2000001220.718:6117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26331 comm="syz.8.18468" daddr=::ffff:0.0.0.0 dest=20003 [ 1236.854443][ T52] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1236.883154][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.894378][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18469'. [ 1236.927628][ T52] usb 6-1: config 0 descriptor?? [ 1236.946649][ T52] cp210x 6-1:0.0: cp210x converter detected [ 1237.387010][ T52] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1237.401804][ T30] audit: type=1400 audit(2000001221.288:6118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26369 comm="syz.4.18481" daddr=fc01::1 dest=51873 [ 1237.422561][ T52] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1237.623463][T10186] usb 6-1: USB disconnect, device number 30 [ 1237.643635][T10186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1237.669847][T10186] cp210x 6-1:0.0: device disconnected [ 1237.855051][T26412] macsec1: entered promiscuous mode [ 1237.881157][T26412] vlan0: entered promiscuous mode [ 1237.886404][T26412] macsec1: entered allmulticast mode [ 1237.907247][T26412] vlan0: entered allmulticast mode [ 1238.397875][T26439] netlink: 'syz.7.18502': attribute type 1 has an invalid length. [ 1238.429988][T26439] netlink: 134708 bytes leftover after parsing attributes in process `syz.7.18502'. [ 1240.872302][ T9273] Bluetooth: hci5: command tx timeout [ 1241.046869][ T30] audit: type=1400 audit(2000001224.703:6119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=26551 comm="syz.8.18548" daddr=fc01:: dest=20002 [ 1241.492151][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18555'. [ 1241.545634][T26579] netlink: 'syz.8.18557': attribute type 1 has an invalid length. [ 1242.204553][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18573'. [ 1242.470797][T26629] kvm: kvm [26627]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 1242.784300][T26650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18588'. [ 1242.993244][T26662] netlink: 92 bytes leftover after parsing attributes in process `syz.7.18593'. [ 1243.426676][T26685] netlink: 11 bytes leftover after parsing attributes in process `syz.4.18603'. [ 1243.457506][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18603'. [ 1245.325060][T26785] netlink: 312 bytes leftover after parsing attributes in process `syz.8.18644'. [ 1245.404081][T10186] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1245.411815][ T5917] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1245.585803][T10186] usb 4-1: Using ep0 maxpacket: 16 [ 1245.595070][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.607817][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.618126][T10186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.628478][ T5917] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1245.638089][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.646454][T10186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.657584][T10186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1245.671343][ T5917] usb 6-1: config 0 descriptor?? [ 1245.676513][T10186] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1245.686732][T10186] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1245.703094][T10186] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1245.712366][T10186] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1245.720605][T10186] usb 4-1: Manufacturer: syz [ 1245.727805][T10186] usb 4-1: config 0 descriptor?? [ 1245.820897][ T52] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1245.981217][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 1245.991175][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.007987][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.020464][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1246.024467][T10186] rc_core: IR keymap rc-hauppauge not found [ 1246.036718][ T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1246.050451][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.056517][T10186] Registered IR keymap rc-empty [ 1246.068990][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.088444][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.090802][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1246.104975][ T52] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1246.113074][ T52] usb 5-1: Manufacturer: syz [ 1246.126351][ T52] usb 5-1: config 0 descriptor?? [ 1246.126562][T10186] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1246.145140][T10186] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input161 [ 1246.161073][ T5917] petalynx 0003:18B1:0037.0072: item fetching failed at offset 3/5 [ 1246.170376][ T5917] petalynx 0003:18B1:0037.0072: parse failed [ 1246.181936][ T5917] petalynx 0003:18B1:0037.0072: probe with driver petalynx failed with error -22 [ 1246.192266][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.232355][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.259569][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.291333][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.312729][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.347055][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.366145][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.375404][ T5926] usb 6-1: USB disconnect, device number 31 [ 1246.387831][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.445240][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.451646][ T52] rc_core: IR keymap rc-hauppauge not found [ 1246.469259][ T52] Registered IR keymap rc-empty [ 1246.483880][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.485313][T10186] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1246.516200][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.523589][T10186] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1246.534244][T10186] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1246.548394][ T52] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1246.551561][T10186] usb 4-1: USB disconnect, device number 84 [ 1246.581664][ T52] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input162 [ 1246.617302][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.655470][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.676247][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.697572][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.719508][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.740437][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.761715][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.783157][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.804506][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.828165][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1246.848500][ T52] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1246.876803][ T52] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1246.888895][ T52] usb 5-1: USB disconnect, device number 84 [ 1247.818715][T26918] xt_recent: Unsupported userspace flags (000000de) [ 1248.108737][ T52] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1248.279924][ T52] usb 4-1: device descriptor read/64, error -71 [ 1248.298112][ T30] audit: type=1400 audit(2000001231.484:6120): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=26946 comm="syz.7.18684" dest=20002 [ 1248.536332][ T52] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1248.571584][T26958] sch_fq: defrate 13850 ignored. [ 1248.678826][ T52] usb 4-1: device descriptor read/64, error -71 [ 1248.784230][T26966] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18692'. [ 1248.814679][ T52] usb usb4-port1: attempt power cycle [ 1249.193477][ T52] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1249.253292][ T52] usb 4-1: device descriptor read/8, error -71 [ 1249.551914][ T52] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1249.597574][ T52] usb 4-1: device descriptor read/8, error -71 [ 1249.725390][ T52] usb usb4-port1: unable to enumerate USB device [ 1249.836303][ T30] audit: type=1400 audit(2000001232.925:6121): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27009 comm="syz.7.18706" daddr=fc01::1 [ 1249.883509][ T5917] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1250.065085][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 1250.077481][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.099834][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1250.120914][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.130750][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.143732][ T5917] usb 5-1: Product: syz [ 1250.148002][ T5917] usb 5-1: Manufacturer: syz [ 1250.152753][ T5917] usb 5-1: SerialNumber: syz [ 1250.601890][ T5917] usb 5-1: cannot find UAC_HEADER [ 1250.630927][ T5917] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1250.655998][ T5917] usb 5-1: USB disconnect, device number 85 [ 1252.079395][T27094] QAT: Device 198 not found [ 1252.148380][T27101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18739'. [ 1252.428088][ T30] audit: type=1400 audit(2000001235.338:6122): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=27108 comm="syz.3.18742" dest=20002 [ 1252.861480][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18751'. [ 1254.066001][T27185] netlink: 'syz.8.18766': attribute type 1 has an invalid length. [ 1254.285045][T27198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18773'. [ 1254.313393][T27201] input: syz0 as /devices/virtual/input/input163 [ 1254.512465][ T5926] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1254.672843][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 1254.683163][ T5926] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1254.691581][ T5926] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1254.703568][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1254.712617][ T5926] usb 6-1: config 1 has no interface number 0 [ 1254.722531][ T5926] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1254.733560][ T5926] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1254.750915][ T5926] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1254.760011][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.775624][ T5926] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1254.993253][T27193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.002104][T27193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.013772][ T5926] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1255.516414][ T5917] usb 6-1: USB disconnect, device number 32 [ 1255.539402][ T5917] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1255.797559][T27250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18786'. [ 1256.340569][ T30] audit: type=1326 audit(2000001239.005:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27267 comm="syz.4.18793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1256.417505][ T30] audit: type=1326 audit(2000001239.005:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27267 comm="syz.4.18793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1256.458841][T27271] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1256.479467][ T30] audit: type=1326 audit(2000001239.005:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27267 comm="syz.4.18793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1256.554329][ T30] audit: type=1326 audit(2000001239.005:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27267 comm="syz.4.18793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1256.583884][T27277] netlink: 840 bytes leftover after parsing attributes in process `syz.4.18797'. [ 1256.624996][ T30] audit: type=1326 audit(2000001239.005:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27267 comm="syz.4.18793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb31b8d169 code=0x7ffc0000 [ 1256.662930][T27279] loop9: detected capacity change from 0 to 8 [ 1256.686585][T27279] Dev loop9: unable to read RDB block 8 [ 1256.692264][T27279] loop9: unable to read partition table [ 1256.718904][T27279] loop9: partition table beyond EOD, truncated [ 1256.736162][T27279] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 1257.512239][T27316] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 1257.521098][T27316] ALSA: mixer_oss: invalid OSS volume '' [ 1257.527455][T27316] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 1257.535000][T27316] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 1257.564159][T27316] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 1258.043042][ T30] audit: type=1400 audit(2000001240.604:6128): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27335 comm="syz.8.18820" daddr=fc01::1 dest=51873 [ 1259.014452][ T30] audit: type=1400 audit(2000001241.512:6129): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27368 comm="syz.7.18832" daddr=fc01::1 dest=51873 [ 1259.752508][T27401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.955863][T27412] netlink: 'syz.4.18852': attribute type 1 has an invalid length. [ 1260.745131][T10127] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1260.938115][T10127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.989908][T10127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.007426][T10127] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1261.037457][T10127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.055073][ T9273] Bluetooth: hci5: command tx timeout [ 1261.088226][T10127] usb 4-1: config 0 descriptor?? [ 1261.298004][T27446] can0: slcan on ttyS3. [ 1261.427503][ T30] audit: type=1400 audit(2000001243.766:6130): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27456 comm="syz.5.18870" daddr=fc01:: dest=20002 [ 1261.463969][T27454] can0 (unregistered): slcan off ttyS3. [ 1261.503141][T27454] Falling back ldisc for ttyS3. [ 1261.563395][T10127] petalynx 0003:18B1:0037.0073: item fetching failed at offset 3/5 [ 1261.586903][T10127] petalynx 0003:18B1:0037.0073: parse failed [ 1261.599036][T10127] petalynx 0003:18B1:0037.0073: probe with driver petalynx failed with error -22 [ 1261.796039][T10127] usb 4-1: USB disconnect, device number 89 [ 1261.963286][ T30] audit: type=1326 audit(2000001244.262:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.007725][ T30] audit: type=1326 audit(2000001244.290:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.048662][ T30] audit: type=1326 audit(2000001244.290:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.075700][ T30] audit: type=1326 audit(2000001244.290:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.102767][ T5917] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1262.132152][ T30] audit: type=1326 audit(2000001244.290:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.153935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.184245][ T30] audit: type=1326 audit(2000001244.299:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.220288][ T30] audit: type=1326 audit(2000001244.299:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.246259][ T30] audit: type=1326 audit(2000001244.299:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.284429][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1262.289575][ T30] audit: type=1326 audit(2000001244.309:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.291496][ T5917] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.317417][ T30] audit: type=1326 audit(2000001244.309:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27500 comm="syz.8.18882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8e78d169 code=0x7ffc0000 [ 1262.369961][ T5917] usb 6-1: config 0 has no interface number 0 [ 1262.402094][ T5917] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.419500][ T5917] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.429604][ T5917] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1262.439833][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.472355][ T5917] usb 6-1: config 0 descriptor?? [ 1262.972182][ T5960] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 1262.985277][ T5960] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1262.985426][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18899'. [ 1263.011729][T10127] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1263.157134][ T5917] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0074/input/input164 [ 1263.196591][T10127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.214615][T10127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.230926][T10127] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1263.252562][ T5917] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0074/input/input165 [ 1263.265282][T10127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.294372][T10127] usb 9-1: config 0 descriptor?? [ 1263.313631][ T5917] uclogic 0003:28BD:0071.0074: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 1263.444196][ T5917] usb 6-1: USB disconnect, device number 33 [ 1263.763946][T10127] hid-led 0003:1D34:0004.0076: unknown main item tag 0x0 [ 1263.826106][T27605] input: syz1 as /devices/virtual/input/input166 [ 1263.980716][T10127] hid-led 0003:1D34:0004.0076: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.8-1/input0 [ 1264.013167][T10127] hid-led 0003:1D34:0004.0076: Dream Cheeky Webmail Notifier initialized [ 1264.193952][ T5874] usb 9-1: USB disconnect, device number 3 [ 1264.283672][T10127] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1264.453720][T27649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18918'. [ 1264.476181][T10127] usb 4-1: Using ep0 maxpacket: 8 [ 1264.497075][T10127] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1264.528371][T10127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.543318][T10127] usb 4-1: Product: syz [ 1264.547595][T10127] usb 4-1: Manufacturer: syz [ 1264.580789][T10127] usb 4-1: SerialNumber: syz [ 1264.587958][T10127] usb 4-1: config 0 descriptor?? [ 1264.612166][T10127] gspca_main: se401-2.14.0 probing 047d:5003 [ 1264.946374][ T5926] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1265.118445][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1265.132284][ T5926] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1265.149489][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.159738][ T5926] usb 5-1: config 0 descriptor?? [ 1265.195097][T27686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.203208][T10127] usb 4-1: reset high-speed USB device number 90 using dummy_hcd [ 1265.283288][T27691] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1265.289871][T27691] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1265.310490][T27691] vhci_hcd vhci_hcd.0: Device attached [ 1265.344424][T27692] vhci_hcd: cannot find the pending unlink 8 [ 1265.353203][T27692] vhci_hcd: connection closed [ 1265.357904][ T13] vhci_hcd: stop threads [ 1265.371645][ T13] vhci_hcd: release socket [ 1265.376231][ T13] vhci_hcd: disconnect device [ 1265.400665][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1265.418743][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1265.431461][ T5926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1265.438817][ T5926] usb 5-1: media controller created [ 1265.458786][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1265.807276][T10127] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1265.823017][T10127] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1265.832964][T10127] usb 4-1: USB disconnect, device number 90 [ 1266.047874][ T5926] az6027: usb out operation failed. (-71) [ 1266.077129][ T5926] stb0899_attach: Driver disabled by Kconfig [ 1266.101802][ T5926] az6027: no front-end attached [ 1266.101802][ T5926] [ 1266.123889][ T5926] az6027: usb out operation failed. (-71) [ 1266.129666][ T5926] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1266.153018][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input167 [ 1266.171077][ T5926] dvb-usb: schedule remote query interval to 400 msecs. [ 1266.180688][ T5926] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1266.205595][ T5926] usb 5-1: USB disconnect, device number 86 [ 1266.283863][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1266.336492][ T5874] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 1266.350645][ T5874] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1266.543121][T27758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.18941'. [ 1267.448122][T10127] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1267.628743][T10127] usb 5-1: Using ep0 maxpacket: 16 [ 1267.635982][T10127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.661825][T10127] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.694375][T10127] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.734782][T10127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1267.751184][T10127] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1267.782018][T10127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.794219][T27801] input: syz1 as /devices/virtual/input/input168 [ 1267.812508][T10127] usb 5-1: config 0 descriptor?? [ 1268.088109][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1268.088129][ T30] audit: type=1400 audit(2000001249.996:6144): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27813 comm="syz.8.18961" daddr=::ffff:10.1.1.0 dest=65532 [ 1268.279467][T10127] kye 0003:0458:0153.0078: unexpected long global item [ 1268.294192][T10127] kye 0003:0458:0153.0078: parse failed [ 1268.314908][T10127] kye 0003:0458:0153.0078: probe with driver kye failed with error -22 [ 1268.502795][ T5917] usb 5-1: USB disconnect, device number 87 [ 1268.698978][T10127] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1268.891240][T10127] usb 4-1: Using ep0 maxpacket: 32 [ 1268.898368][T10127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1268.916826][T10127] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1268.930479][T10127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.949685][T10127] usb 4-1: Product: syz [ 1268.953890][T10127] usb 4-1: Manufacturer: syz [ 1268.966050][T10127] usb 4-1: SerialNumber: syz [ 1268.989236][T10127] usb 4-1: config 0 descriptor?? [ 1269.004082][T10127] hub 4-1:0.0: bad descriptor, ignoring hub [ 1269.021370][T10127] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1269.040106][T10127] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input169 [ 1269.058432][T10127] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1269.145166][T10127] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1269.232652][T10127] usb 4-1: USB disconnect, device number 91 [ 1269.249040][ T30] audit: type=1400 audit(2000001251.072:6145): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=27875 comm="syz.8.18979" daddr=fc00::1 [ 1269.528884][T27894] syz_tun: entered allmulticast mode [ 1269.540617][T27893] syz_tun: left allmulticast mode [ 1269.984673][T27917] netlink: 'syz.8.18994': attribute type 1 has an invalid length. [ 1270.571974][T27959] netlink: 64 bytes leftover after parsing attributes in process `syz.8.19011'. [ 1270.722963][T27961] veth1_macvtap: left promiscuous mode [ 1271.103509][T27985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19022'. [ 1271.526917][T28007] vlan4: entered allmulticast mode [ 1271.532681][T28007] dummy0: entered allmulticast mode [ 1271.540643][T28007] dummy0: left allmulticast mode [ 1271.735087][ T5926] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1271.906052][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1271.924955][ T5926] usb 4-1: config 0 has no interfaces? [ 1271.935827][ T5926] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1271.965538][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.983301][ T5926] usb 4-1: Product: syz [ 1271.989173][ T5926] usb 4-1: Manufacturer: syz [ 1271.994067][ T5926] usb 4-1: SerialNumber: syz [ 1272.001148][ T5926] usb 4-1: config 0 descriptor?? [ 1272.009627][ T5874] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1272.166711][ T30] audit: type=1400 audit(2000001253.812:6146): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=28032 comm="syz.7.19037" daddr=::ffff:172.30.0.8 [ 1272.205453][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 1272.212546][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1272.227941][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1272.254223][ T5926] usb 4-1: USB disconnect, device number 92 [ 1272.274909][ T5874] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1272.306677][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.333959][ T5874] usb 5-1: Product: syz [ 1272.348573][ T5874] usb 5-1: Manufacturer: syz [ 1272.359759][ T5874] usb 5-1: SerialNumber: syz [ 1272.383736][ T5874] usb 5-1: config 0 descriptor?? [ 1272.402447][ T5874] usb 5-1: no audio or video endpoints found [ 1272.657885][ T5926] usb 5-1: USB disconnect, device number 88 [ 1273.431501][ T30] audit: type=1326 audit(2000001254.991:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28098 comm="syz.5.19058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1273.504907][ T30] audit: type=1326 audit(2000001254.991:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28098 comm="syz.5.19058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1273.583087][ T30] audit: type=1326 audit(2000001254.991:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28098 comm="syz.5.19058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1273.661609][ T30] audit: type=1326 audit(2000001254.991:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28098 comm="syz.5.19058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1273.755543][ T30] audit: type=1326 audit(2000001254.991:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28098 comm="syz.5.19058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b998d169 code=0x7ffc0000 [ 1274.189282][T28141] program syz.4.19073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1274.413870][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19077'. [ 1274.460337][ T30] audit: type=1326 audit(2000001255.954:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.510065][T28154] ALSA: mixer_oss: invalid OSS volume 'DIGTAL1' [ 1274.520320][ T30] audit: type=1326 audit(2000001255.982:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.570206][ T30] audit: type=1326 audit(2000001255.982:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.632345][ T30] audit: type=1326 audit(2000001255.982:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.702765][T28162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19082'. [ 1274.734468][ T30] audit: type=1326 audit(2000001255.982:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.791317][ T30] audit: type=1326 audit(2000001255.982:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28151 comm="syz.3.19079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ad98d169 code=0x7ffc0000 [ 1274.956062][T28169] team0: entered promiscuous mode [ 1274.977844][T28168] team0: left promiscuous mode [ 1276.165027][T28216] tipc: Started in network mode [ 1276.170127][T28216] tipc: Node identity ac14140f, cluster identity 4711 [ 1276.199102][T28216] tipc: New replicast peer: 255.255.255.255 [ 1276.231646][T28216] tipc: Enabled bearer , priority 0 [ 1277.137362][T10127] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1277.230011][T10186] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1277.294450][ T5960] tipc: Node number set to 2886997007 [ 1277.332191][T10127] usb 9-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1277.347443][T10127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.355516][T10127] usb 9-1: Product: syz [ 1277.379624][T10127] usb 9-1: Manufacturer: syz [ 1277.384454][T10127] usb 9-1: SerialNumber: syz [ 1277.397340][T10127] usb 9-1: config 0 descriptor?? [ 1277.411860][T10186] usb 5-1: Using ep0 maxpacket: 8 [ 1277.422916][T10127] usb 9-1: interface 1 not found [ 1277.440209][T10186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.475895][T10186] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1277.484996][T10186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.512670][T10186] usb 5-1: config 0 descriptor?? [ 1277.644055][ T5926] usb 9-1: USB disconnect, device number 4 [ 1277.750535][T10186] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1277.966934][T10186] usb 5-1: USB disconnect, device number 89 [ 1278.720578][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19146'. [ 1278.744457][T28403] bridge_slave_0: default FDB implementation only supports local addresses [ 1279.531828][T28448] netlink: 96 bytes leftover after parsing attributes in process `syz.4.19162'. [ 1279.838515][T10127] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1279.904459][T28469] C: renamed from team_slave_0 [ 1279.910820][T28469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19171'. [ 1279.921387][T28469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1280.048911][T10127] usb 9-1: Using ep0 maxpacket: 32 [ 1280.062734][T10127] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1280.078724][T10127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.089918][T10127] usb 9-1: config 0 descriptor?? [ 1280.316701][T10127] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1280.348761][T10127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1280.374133][T10127] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1280.394289][T10127] usb 9-1: media controller created [ 1280.441049][T10127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.753204][T28482] netlink: 'syz.3.19176': attribute type 1 has an invalid length. [ 1280.980030][T10127] az6027: usb out operation failed. (-71) [ 1280.986475][T10127] stb0899_attach: Driver disabled by Kconfig [ 1281.021361][T10127] az6027: no front-end attached [ 1281.021361][T10127] [ 1281.037013][T10127] az6027: usb out operation failed. (-71) [ 1281.042816][T10127] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1281.078579][T10127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input170 [ 1281.096096][T10127] dvb-usb: schedule remote query interval to 400 msecs. [ 1281.104887][T10127] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1281.133795][T10127] usb 9-1: USB disconnect, device number 5 [ 1281.172503][T28524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19187'. [ 1281.250887][T10127] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1282.547683][T28585] loop6: detected capacity change from 0 to 524287999 [ 1282.548302][ C1] blk_print_req_error: 6 callbacks suppressed [ 1282.548338][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.548372][ C1] buffer_io_error: 6 callbacks suppressed [ 1282.548384][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.548602][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.548636][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.548870][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.548902][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.549194][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.549227][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.549427][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.549468][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.549669][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.549698][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.549903][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.549933][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.550120][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.550149][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.550217][T28585] ldm_validate_partition_table(): Disk read failed. [ 1282.550380][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.550409][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.550607][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1282.550638][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1282.551037][T28585] Dev loop6: unable to read RDB block 0 [ 1282.551886][T28585] loop6: unable to read partition table [ 1282.552054][T28585] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1283.275041][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1283.275059][ T30] audit: type=1326 audit(2000001264.205:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28607 comm="syz.7.19215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e038d169 code=0x0 [ 1283.374037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.849706][T28635] program syz.5.19229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1284.692255][T10127] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1284.884334][T10127] usb 5-1: Using ep0 maxpacket: 8 [ 1284.918723][T10127] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1284.931500][T10127] usb 5-1: config 179 has no interface number 0 [ 1284.950505][T10127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1284.991727][T10127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1285.035812][T10127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1285.078036][T10127] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1285.093631][T10127] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1285.131774][T10127] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1285.168774][T10127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.190627][T28660] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1285.433154][T10127] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input171 [ 1285.810841][ T52] usb 5-1: USB disconnect, device number 90 [ 1285.810939][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1285.825234][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1285.833670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.851441][ T52] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1286.322691][T28757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.081211][T28789] tipc: New replicast peer: 255.255.255.255 [ 1287.091794][T28789] tipc: Enabled bearer , priority 0 [ 1287.218112][ T30] audit: type=1400 audit(2000001267.871:6167): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=28797 comm="syz.8.19285" daddr=::ffff:172.20.20.187 dest=20003 [ 1287.541866][T28813] hugetlbfs: syz.5.19290 (28813): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1287.685303][T10127] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1287.879972][T10127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1287.899082][T10127] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1287.931183][T10127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.963576][T10127] usb 5-1: config 0 descriptor?? [ 1287.983147][T28807] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1288.167234][ T5960] tipc: Node number set to 4278255617 [ 1288.232091][T28843] loop6: detected capacity change from 0 to 524287999 [ 1288.241992][ C1] blk_print_req_error: 6 callbacks suppressed [ 1288.242014][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.257480][ C1] buffer_io_error: 6 callbacks suppressed [ 1288.257497][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.301287][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.310527][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.311429][T28848] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1288.325490][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.335944][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.345414][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.354616][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.362857][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.372149][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.380368][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.389525][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.391554][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 1288.398712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.413663][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.425577][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.430681][T10127] wacom 0003:056A:0000.0079: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1288.434759][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.452613][T28843] ldm_validate_partition_table(): Disk read failed. [ 1288.480650][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.489914][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.500191][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1288.509426][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1288.520949][T28843] Dev loop6: unable to read RDB block 0 [ 1288.527460][T28843] loop6: unable to read partition table [ 1288.537788][T28843] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1288.545500][T28854] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1288.567299][T10127] wacom 0003:056A:0000.0079: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 1288.595270][T10127] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0079/input/input172 [ 1288.671420][T28864] netlink: 'syz.7.19303': attribute type 3 has an invalid length. [ 1288.715585][T10127] usb 5-1: USB disconnect, device number 91 [ 1290.434511][T28962] block nbd7: shutting down sockets [ 1290.475713][T26457] Bluetooth: hci3: command 0x1003 tx timeout [ 1290.475836][ T9273] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1291.304172][T28986] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1292.232314][T29064] ALSA: mixer_oss: invalid index 9551615 [ 1292.405272][T29070] random: crng reseeded on system resumption [ 1292.780088][T29087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19380'. [ 1293.119913][ T30] audit: type=1400 audit(2000001273.409:6168): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=29101 comm="syz.4.19389" daddr=::ffff:172.30.1.5 dest=1 [ 1293.289370][T29113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19392'. [ 1293.309718][T29113] netem: invalid attributes len -6 [ 1293.314902][T29113] netem: change failed [ 1293.514715][T29130] loop2: detected capacity change from 0 to 1 [ 1293.533104][T29130] Dev loop2: unable to read RDB block 1 [ 1293.546125][T29130] loop2: unable to read partition table [ 1293.551912][T29130] loop2: partition table beyond EOD, truncated [ 1293.572930][T29130] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1293.597394][ T52] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1293.726358][T29143] IPv6: addrconf: prefix option has invalid lifetime [ 1293.738176][T29139] block nbd5: shutting down sockets [ 1293.770978][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 1293.783604][ T52] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.815106][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1293.833557][ T52] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1293.854969][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.881026][ T52] usb 4-1: config 0 descriptor?? [ 1294.348652][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.368220][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.398399][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.429278][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.448031][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.468558][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.491662][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.510713][ T52] wacom 0003:056A:0094.007A: unknown main item tag 0x0 [ 1294.520542][T29181] block nbd8: shutting down sockets [ 1294.542308][ T52] wacom 0003:056A:0094.007A: Using device in hidraw-only mode [ 1294.572751][ T52] wacom 0003:056A:0094.007A: hidraw0: USB HID v3.ff Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 1294.613097][ T52] usb 4-1: USB disconnect, device number 93 [ 1294.708671][T29204] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1294.722863][T29204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.094052][ T52] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1295.141414][ T5887] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.254262][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 1295.267010][ T52] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1295.276128][ T52] usb 6-1: config 179 has no interface number 0 [ 1295.277454][ T5887] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.282492][ T52] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1295.308551][ T52] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1295.339504][ T52] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1295.377220][ T52] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1295.391977][T29233] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19435'. [ 1295.412118][ T52] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1295.420439][T29234] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1295.440815][ T52] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1295.443257][T29234] team0: Port device batadv1 added [ 1295.450564][T29233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19435'. [ 1295.475669][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.502506][T29212] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1295.566274][ T5887] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.722848][ T5887] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 1295.830483][T29245] ALSA: mixer_oss: invalid index 9551615 [ 1295.858110][ T52] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input175 [ 1295.886663][ T5887] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.145976][ T5960] usb 6-1: USB disconnect, device number 34 [ 1296.146013][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1296.160446][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1296.168798][ T5960] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1296.192248][T26457] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1296.209215][T26457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1296.227814][T26457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1296.235837][T26457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1296.247604][T26457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1296.259462][T26457] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1296.374592][T29261] lo speed is unknown, defaulting to 1000 [ 1296.377239][ T30] audit: type=1400 audit(2000001276.449:6169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=29275 comm="syz.8.19443" daddr=::ffff:172.30.1.9 dest=1 [ 1296.382367][T29261] lo speed is unknown, defaulting to 1000 [ 1296.434846][ T5887] bridge0: port 3(batadv0) entered disabled state [ 1296.464468][ T5887] bridge_slave_1: left allmulticast mode [ 1296.470749][ T5887] bridge_slave_1: left promiscuous mode [ 1296.482972][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.505308][ T5887] bridge_slave_0: left allmulticast mode [ 1296.510993][ T5887] bridge_slave_0: left promiscuous mode [ 1296.526612][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.150084][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.181452][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.195874][ T5887] bond0 (unregistering): Released all slaves [ 1297.218086][T29318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19448'. [ 1297.322074][ T5887] tipc: Disabling bearer [ 1297.356101][ T5887] tipc: Left network mode [ 1297.490212][T29342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1297.708257][ T30] audit: type=1400 audit(2000001277.702:6170): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=29357 comm="syz.3.19456" daddr=::ffff:172.30.1.4 dest=1 [ 1297.809355][ T5876] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1297.829315][T29261] chnl_net:caif_netlink_parms(): no params data found [ 1297.982032][ T5876] usb 9-1: config 4 has an invalid interface number: 44 but max is 0 [ 1297.990404][ T5876] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.011633][ T5876] usb 9-1: config 4 has no interface number 0 [ 1298.023144][ T5876] usb 9-1: config 4 interface 44 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1298.043898][ T5876] usb 9-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.059651][ T5876] usb 9-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1298.069089][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.077437][ T5876] usb 9-1: Product: syz [ 1298.081755][ T5876] usb 9-1: Manufacturer: syz [ 1298.086376][ T5876] usb 9-1: SerialNumber: syz [ 1298.182504][ T52] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1298.337569][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.354747][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.375966][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 1298.382632][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.408304][ T52] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1298.429628][T26457] Bluetooth: hci3: command tx timeout [ 1298.438781][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.446356][ T52] usb 4-1: config 179 has no interface number 0 [ 1298.454008][ T52] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1298.471240][T29505] ================================================================== [ 1298.479321][T29505] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1298.487940][T29505] Write of size 2880 at addr ffffc9000443e000 by task vivid-000-vid-c/29505 [ 1298.496637][T29505] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1298.498979][T29505] CPU: 1 UID: 0 PID: 29505 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller #0 [ 1298.499003][T29505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1298.499016][T29505] Call Trace: [ 1298.499025][T29505] [ 1298.499034][T29505] dump_stack_lvl+0x241/0x360 [ 1298.499059][T29505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.499078][T29505] ? __pfx__printk+0x10/0x10 [ 1298.499106][T29505] ? _printk+0xd5/0x120 [ 1298.499157][T29505] print_report+0x16e/0x5b0 [ 1298.499189][T29505] ? __virt_addr_valid+0xbd/0x530 [ 1298.499223][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1298.499247][T29505] kasan_report+0x143/0x180 [ 1298.499278][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1298.499305][T29505] kasan_check_range+0x282/0x290 [ 1298.499335][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1298.499359][T29505] __asan_memcpy+0x40/0x70 [ 1298.499384][T29505] tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1298.499450][T29505] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 1298.499475][T29505] ? mark_lock+0x9a/0x360 [ 1298.499527][T29505] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1298.499561][T29505] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.499586][T29505] ? lockdep_hardirqs_on+0x99/0x150 [ 1298.499617][T29505] vivid_thread_vid_cap+0x8aa/0xf30 [ 1298.499652][T29505] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1298.499676][T29505] kthread+0x7a9/0x920 [ 1298.499703][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499731][T29505] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1298.499755][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499781][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499810][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499836][T29505] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.499858][T29505] ? lockdep_hardirqs_on+0x99/0x150 [ 1298.499884][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499918][T29505] ret_from_fork+0x4b/0x80 [ 1298.499942][T29505] ? __pfx_kthread+0x10/0x10 [ 1298.499970][T29505] ret_from_fork_asm+0x1a/0x30 [ 1298.499999][T29505] [ 1298.500006][T29505] [ 1298.689807][T29505] The buggy address belongs to the virtual mapping at [ 1298.689807][T29505] [ffffc90004411000, ffffc9000443f000) created by: [ 1298.689807][T29505] vb2_vmalloc_alloc+0xf2/0x340 [ 1298.707721][T29505] [ 1298.710050][T29505] Memory state around the buggy address: [ 1298.715688][T29505] ffffc9000443df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1298.723747][T29505] ffffc9000443df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1298.731820][T29505] >ffffc9000443e000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.739892][T29505] ^ [ 1298.743968][T29505] ffffc9000443e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.752044][T29505] ffffc9000443e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1298.760107][T29505] ================================================================== [ 1298.768898][ T52] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1298.780261][ T52] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1298.791498][ T52] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1298.802993][ T52] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1298.816406][ T52] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1298.825564][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.889269][ T5876] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1298.975608][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1298.995277][ T5887] hsr0: left allmulticast mode [ 1299.000835][ T5876] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1299.017309][ T5876] usb 9-1: media controller created [ 1299.025104][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1299.028757][ T5887] veth1_macvtap: left promiscuous mode [ 1299.076365][ T5887] veth0_macvtap: left promiscuous mode [ 1299.099942][ T5887] veth1_vlan: left promiscuous mode [ 1299.229070][ T5887] veth0_vlan: left promiscuous mode [ 1299.306181][ T5876] DVB: Unable to find symbol dib7000p_attach() [ 1299.312460][ T5876] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1299.348853][T29505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1299.356086][T29505] CPU: 1 UID: 0 PID: 29505 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller #0 [ 1299.365578][T29505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1299.375656][T29505] Call Trace: [ 1299.378930][T29505] [ 1299.381856][T29505] dump_stack_lvl+0x241/0x360 [ 1299.386588][T29505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.391796][T29505] ? __pfx__printk+0x10/0x10 [ 1299.396395][T29505] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1299.402384][T29505] ? vscnprintf+0x5d/0x90 [ 1299.406722][T29505] panic+0x349/0x880 [ 1299.410633][T29505] ? check_panic_on_warn+0x21/0xb0 [ 1299.415760][T29505] ? __pfx_panic+0x10/0x10 [ 1299.420201][T29505] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1299.426180][T29505] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1299.432513][T29505] check_panic_on_warn+0x86/0xb0 [ 1299.437479][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1299.443121][T29505] end_report+0x77/0x160 [ 1299.447379][T29505] kasan_report+0x154/0x180 [ 1299.451895][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1299.457546][T29505] kasan_check_range+0x282/0x290 [ 1299.462497][T29505] ? tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1299.468134][T29505] __asan_memcpy+0x40/0x70 [ 1299.472645][T29505] tpg_fill_plane_buffer+0x1a12/0x5ca0 [ 1299.478127][T29505] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 1299.483846][T29505] ? mark_lock+0x9a/0x360 [ 1299.488198][T29505] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1299.494367][T29505] ? _raw_spin_unlock_irq+0x23/0x50 [ 1299.499576][T29505] ? lockdep_hardirqs_on+0x99/0x150 [ 1299.504793][T29505] vivid_thread_vid_cap+0x8aa/0xf30 [ 1299.510002][T29505] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1299.515810][T29505] kthread+0x7a9/0x920 [ 1299.519888][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.524505][T29505] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1299.530229][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.534826][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.539431][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.544026][T29505] ? _raw_spin_unlock_irq+0x23/0x50 [ 1299.549225][T29505] ? lockdep_hardirqs_on+0x99/0x150 [ 1299.554430][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.559028][T29505] ret_from_fork+0x4b/0x80 [ 1299.563452][T29505] ? __pfx_kthread+0x10/0x10 [ 1299.568064][T29505] ret_from_fork_asm+0x1a/0x30 [ 1299.572839][T29505] [ 1299.576212][T29505] Kernel Offset: disabled [ 1299.580568][T29505] Rebooting in 86400 seconds..