last executing test programs: 13m2.132328787s ago: executing program 0 (id=770): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r0, 0x0, 0x0, 0x0) 13m1.883161363s ago: executing program 0 (id=775): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a", 0x48, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 13m1.696998821s ago: executing program 0 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001700)=""/161, 0xa1}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001f40)=""/260, 0x104}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001a80)=""/85, 0x55}], 0x9}, 0x7f}], 0x4, 0x40012032, 0x0) 13m1.58320449s ago: executing program 0 (id=781): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000580)=@secondary) keyctl$search(0xa, r0, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r0) 13m1.550590914s ago: executing program 0 (id=783): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x41) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 13m1.312802538s ago: executing program 0 (id=786): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r2], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') 12m46.174741137s ago: executing program 32 (id=786): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r2], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') 42.629067644s ago: executing program 4 (id=6609): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000240), 0x400, 0x101400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 40.083207351s ago: executing program 4 (id=6625): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x101}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) 33.398136738s ago: executing program 4 (id=6662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) epoll_create1(0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x8001) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0}) 33.049216781s ago: executing program 4 (id=6663): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 28.570346744s ago: executing program 4 (id=6680): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x2000000007d, 0x0, 0x7fffffffffffffff, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 20.064355144s ago: executing program 2 (id=6709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) 18.508176188s ago: executing program 2 (id=6715): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) 14.161583918s ago: executing program 4 (id=6736): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) syz_usb_connect(0x6, 0x202, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x189802) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 13.698931292s ago: executing program 2 (id=6739): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x3, &(0x7f0000000080)={0x22, 0x2, 0x1}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 12.830005352s ago: executing program 3 (id=6740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x800, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 11.488129392s ago: executing program 2 (id=6741): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) 10.843274333s ago: executing program 3 (id=6742): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10.681386093s ago: executing program 5 (id=6743): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x31, r0, 0xc5373000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x25, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x20000000e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 10.576759473s ago: executing program 3 (id=6744): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x5d1239cb72f2c1cb, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 8.463192635s ago: executing program 3 (id=6745): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4048885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.992180143s ago: executing program 5 (id=6746): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180105}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 6.740970597s ago: executing program 3 (id=6747): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf25040000003c00078008000100070000000c000300fffbffffffffffff08000100f9ffffff0c0004003919ffffffffffff080001007400000008000100050000002400058014000280080002000400000008000100190000000c0002800800020001000100b1b65151b2d23e60925e6f22b380fdd4b64221c36fc2df32e364663bd55ff7044c011461dacb9c4f73632cb63c8457fb3644f867e194cdf05d3ab8fc4621d925e6d885b80f2884cfb1cce7e01e6670179be11ce7b10d1a4e0a8ee515ff6f6db1794a6e30ca19b3de97a429ad62c0d62c46d21bd54979b18129fea06a"], 0x74}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x4000, 0x49) 6.684355088s ago: executing program 2 (id=6748): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x130, 0x130, 0x0, 0x2b8, 0x2b8, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x81, 0x1}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 5.762706227s ago: executing program 5 (id=6753): socket$inet6(0xa, 0x400000000001, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.601535814s ago: executing program 1 (id=6754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0x9ced, 0x4) 4.337851207s ago: executing program 5 (id=6755): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}, '\x00\x00\x00\x00'}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 4.135046466s ago: executing program 3 (id=6756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000240001002dfd7000ffdbdf253e2d000006000300000000000600030000000000060004000000000006000320000000"], 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 4.134744148s ago: executing program 1 (id=6757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x2000000) 3.925602234s ago: executing program 1 (id=6758): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 2.716229843s ago: executing program 1 (id=6759): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.879058451s ago: executing program 5 (id=6760): socket(0x2, 0x3, 0xff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 624.718282ms ago: executing program 5 (id=6761): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x1d, 0x2, 0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) 497.701997ms ago: executing program 1 (id=6762): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 121.881655ms ago: executing program 2 (id=6763): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x5, 0x0, 0x6) io_uring_setup(0xaae, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, 0x0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x0) 0s ago: executing program 1 (id=6764): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r6, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) kernel console output (not intermixed with test programs): 0] usb 3-1: config 187 has an invalid interface number: 31 but max is 1 [ 561.873902][ T1620] usb 3-1: config 187 has an invalid interface number: 175 but max is 1 [ 561.873922][ T1620] usb 3-1: config 187 has no interface number 0 [ 561.873938][ T1620] usb 3-1: config 187 has no interface number 1 [ 561.873992][ T1620] usb 3-1: config 187 interface 31 altsetting 6 has an invalid endpoint descriptor of length 2, skipping [ 561.874015][ T1620] usb 3-1: config 187 interface 31 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 561.874036][ T1620] usb 3-1: config 187 interface 31 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.874078][ T1620] usb 3-1: config 187 interface 175 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 561.874104][ T1620] usb 3-1: config 187 interface 31 has no altsetting 0 [ 561.874135][ T1620] usb 3-1: config 187 interface 175 has no altsetting 0 [ 562.120439][ T1620] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffd3, bcdDevice=c9.2b [ 562.120469][ T1620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.120489][ T1620] usb 3-1: Product: syz [ 562.120503][ T1620] usb 3-1: Manufacturer: syz [ 562.120516][ T1620] usb 3-1: SerialNumber: syz [ 562.213594][ T5870] usb 2-1: USB disconnect, device number 33 [ 563.324092][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.368151][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.534482][ T1620] usb 3-1: USB disconnect, device number 28 [ 568.675272][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 569.779842][T13326] lo speed is unknown, defaulting to 1000 [ 569.782648][T13326] virt_wifi0 speed is unknown, defaulting to 1000 [ 576.047893][T13378] lo speed is unknown, defaulting to 1000 [ 576.048632][T13378] lo speed is unknown, defaulting to 1000 [ 576.078820][T13378] lo speed is unknown, defaulting to 1000 [ 576.096297][T13378] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 576.096355][T13378] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 576.096452][T13378] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 576.302945][T13378] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 576.655159][T13378] lo speed is unknown, defaulting to 1000 [ 576.658055][T13378] lo speed is unknown, defaulting to 1000 [ 576.660592][T13378] lo speed is unknown, defaulting to 1000 [ 576.663241][T13378] lo speed is unknown, defaulting to 1000 [ 576.665669][T13378] lo speed is unknown, defaulting to 1000 [ 576.668231][T13378] lo speed is unknown, defaulting to 1000 [ 576.670696][T13378] lo speed is unknown, defaulting to 1000 [ 579.933381][T13400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.724404][T13480] program syz.2.2907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.910974][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'. [ 590.160618][ T5871] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 590.312992][ T5871] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 590.313020][ T5871] usb 3-1: config 0 has no interface number 0 [ 590.313063][ T5871] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 590.313084][ T5871] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 590.313106][ T5871] usb 3-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid maxpacket 12336, setting to 1024 [ 590.313130][ T5871] usb 3-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 590.313154][ T5871] usb 3-1: config 0 interface 238 has no altsetting 0 [ 590.318310][ T5871] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 590.318338][ T5871] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 590.318358][ T5871] usb 3-1: Product: syz [ 590.318372][ T5871] usb 3-1: Manufacturer: syz [ 590.318387][ T5871] usb 3-1: SerialNumber: syz [ 590.648160][ T5871] usb 3-1: config 0 descriptor?? [ 590.649989][T13488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 590.828400][ T5871] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 590.959633][ T5871] usb 3-1: USB disconnect, device number 29 [ 597.190388][T13557] kvm: kvm [13556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf00001513 [ 597.190472][T13557] kvm: kvm [13556]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 597.192556][T13557] kvm: kvm [13556]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1c00001560 [ 598.986733][T13591] random: crng reseeded on system resumption [ 599.814088][T13550] kexec: Could not allocate control_code_buffer [ 602.266644][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2954'. [ 624.872090][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.872157][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.001834][ T1620] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 629.884621][ T1620] usb 3-1: config 0 interface 0 has no altsetting 0 [ 629.884663][ T1620] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 629.884687][ T1620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.916917][ T1620] usb 3-1: config 0 descriptor?? [ 631.424187][ T1620] video4linux radio48: keene_cmd_main failed (-71) [ 631.424214][ T1620] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 631.432217][ T1620] usb 3-1: USB disconnect, device number 30 [ 635.061289][ T821] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 635.546641][ T821] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 635.547448][ T821] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 635.547599][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.006973][ T821] usb 4-1: config 0 descriptor?? [ 636.042032][ T821] rndis_host 4-1:0.0: missing cdc header ether descriptor [ 637.716768][T13879] Bluetooth: MGMT ver 1.23 [ 638.872587][ T821] usb 4-1: USB disconnect, device number 14 [ 639.426854][T13921] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3046'. [ 640.598152][ T5611] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 641.986850][T13935] netlink: 'syz.3.3052': attribute type 4 has an invalid length. [ 641.986871][T13935] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3052'. [ 649.740079][T13998] netlink: 'syz.2.3071': attribute type 4 has an invalid length. [ 649.740100][T13998] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3071'. [ 650.133663][T13997] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3070'. [ 652.791314][ T5762] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 652.942272][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 652.946906][ T5762] usb 4-1: not running at top speed; connect to a high speed hub [ 652.948476][ T5762] usb 4-1: config 3 has an invalid interface number: 65 but max is 0 [ 652.948500][ T5762] usb 4-1: config 3 has an invalid interface descriptor of length 5, skipping [ 652.948517][ T5762] usb 4-1: config 3 has an invalid descriptor of length 4, skipping remainder of the config [ 652.948536][ T5762] usb 4-1: config 3 has no interface number 0 [ 652.948588][ T5762] usb 4-1: config 3 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 652.948604][ T5762] usb 4-1: config 3 interface 65 has no altsetting 0 [ 652.955523][ T5762] usb 4-1: New USB device found, idVendor=0403, idProduct=f06c, bcdDevice=d2.9c [ 652.955548][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.955567][ T5762] usb 4-1: Product: syz [ 652.955580][ T5762] usb 4-1: Manufacturer: syz [ 652.955593][ T5762] usb 4-1: SerialNumber: syz [ 653.193329][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3081'. [ 653.695929][ T5762] ftdi_sio 4-1:3.65: FTDI USB Serial Device converter detected [ 653.776173][ T5762] ftdi_sio ttyUSB0: unknown device type: 0xd29c [ 653.828259][ T5762] usb 4-1: USB disconnect, device number 15 [ 653.851848][ T5762] ftdi_sio 4-1:3.65: device disconnected [ 654.237788][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3095'. [ 657.617918][T14095] 9pnet_fd: Insufficient options for proto=fd [ 663.363882][T14145] ubi16: attaching mtd0 [ 663.390919][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3125'. [ 663.553654][T14147] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 663.554114][T14147] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 663.666450][T14145] ubi16: scanning is finished [ 663.666469][T14145] ubi16: empty MTD device detected [ 663.720533][T14154] overlay: ./file1 is not a directory [ 664.040934][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 664.077544][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 665.102579][T14165] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.3133'. [ 665.104149][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3133'. [ 669.280122][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 673.700393][T14145] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 678.085585][T14219] tmpfs: Unknown parameter 'usrquotauencer' [ 680.592611][T14248] overlayfs: empty lowerdir [ 681.703349][T14257] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 681.845537][T14253] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3156'. [ 684.419907][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 685.806652][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.806724][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.705306][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3176'. [ 690.756875][ T37] audit: type=1326 audit(1777851216.570:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.757189][ T37] audit: type=1326 audit(1777851216.570:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.765095][ T37] audit: type=1326 audit(1777851216.570:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.765605][ T37] audit: type=1326 audit(1777851216.570:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.765651][ T37] audit: type=1326 audit(1777851216.570:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.765688][ T37] audit: type=1326 audit(1777851216.570:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.768658][ T37] audit: type=1326 audit(1777851216.580:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.771291][ T37] audit: type=1326 audit(1777851216.580:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 690.771419][ T37] audit: type=1326 audit(1777851216.580:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.2.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 691.750719][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3233'. [ 692.032285][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3233'. [ 693.681736][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 700.792839][T14620] kAFS: unable to lookup cell '.,c¾ûL' [ 700.940614][T14606] lo speed is unknown, defaulting to 1000 [ 700.983451][T14606] virt_wifi0 speed is unknown, defaulting to 1000 [ 701.142683][T14606] lo speed is unknown, defaulting to 1000 [ 701.733669][T14664] netlink: 'syz.5.3329': attribute type 13 has an invalid length. [ 701.858822][T14668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3332'. [ 702.286963][T14672] @0Ù: renamed from veth1_to_hsr (while UP) [ 702.685742][T14701] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3346'. [ 703.249322][ T37] audit: type=1326 audit(1777851229.035:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14714 comm="syz.2.3351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x0 [ 704.904520][T14745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 705.653419][T14780] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 707.470636][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 709.939196][T14928] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 709.941108][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 709.941289][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 710.021119][T14928] bond1 (unregistering): Released all slaves [ 710.427232][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3468'. [ 710.751269][T14968] openvswitch: netlink: Message has 1 unknown bytes. [ 710.751302][T14968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.218296][T14992] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.3486'. [ 711.218334][T14992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.245480][ T5762] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 711.400015][ T5762] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 711.400068][ T5762] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.400098][ T5762] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 711.402808][ T5762] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.402835][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.402861][ T5762] usb 4-1: SerialNumber: syz [ 712.091997][ T5762] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 712.092290][ T5762] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 712.122733][ T5762] usb 4-1: USB disconnect, device number 16 [ 712.340307][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3502'. [ 712.398608][T15025] bond3: option ad_actor_sys_prio: invalid value (0) [ 712.398631][T15025] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 712.453931][T15025] bond3 (unregistering): Released all slaves [ 713.592791][T15073] netlink: 'syz.3.3525': attribute type 2 has an invalid length. [ 713.592810][T15073] netlink: 'syz.3.3525': attribute type 1 has an invalid length. [ 714.543936][T15099] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3534'. [ 716.156661][T15124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.927505][T15168] netlink: 'syz.3.3567': attribute type 10 has an invalid length. [ 717.927528][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3567'. [ 717.970552][ T5871] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 717.975198][T15168] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 718.159124][ T5603] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 718.165512][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 718.180776][ T5871] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 718.180810][ T5871] usb 3-1: can't read configurations, error -71 [ 718.416114][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 718.604756][T15197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.405957][T15240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.488822][ T5871] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 719.639211][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 719.648031][ T5871] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 719.648059][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.672590][ T5871] usb 3-1: config 0 descriptor?? [ 719.709829][ T5871] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 720.019118][ T5762] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 720.111806][ T5871] gspca_vc032x: reg_w err -71 [ 720.111822][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111832][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111841][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111849][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111857][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111865][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111874][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111883][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111892][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111900][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111909][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111918][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111927][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111935][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111944][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111952][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111960][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111968][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 720.111976][ T5871] gspca_vc032x: Unknown sensor... [ 720.112158][ T5871] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 720.115193][ T5871] usb 3-1: USB disconnect, device number 33 [ 720.188339][ T5762] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 720.188366][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 720.188386][ T5762] usb 6-1: Product: syz [ 720.188398][ T5762] usb 6-1: Manufacturer: syz [ 720.188411][ T5762] usb 6-1: SerialNumber: syz [ 720.304966][ T5762] usb 6-1: config 0 descriptor?? [ 721.259616][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 721.275434][ T5762] usb 6-1: USB disconnect, device number 22 [ 721.422125][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 721.427424][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 721.427451][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.427470][ T31] usb 3-1: Product: syz [ 721.427484][ T31] usb 3-1: Manufacturer: syz [ 721.427498][ T31] usb 3-1: SerialNumber: syz [ 721.798234][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 721.908305][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 722.331125][ T31] usb 3-1: USB disconnect, device number 34 [ 722.424179][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3647'. [ 723.007459][T13271] udevd[13271]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 723.534548][T15368] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 723.710638][ T5871] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 723.864877][ T5871] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 723.870295][ T5871] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 723.870322][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.870341][ T5871] usb 6-1: Product: syz [ 723.870355][ T5871] usb 6-1: Manufacturer: syz [ 723.870369][ T5871] usb 6-1: SerialNumber: syz [ 723.870807][ T31] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 723.967814][ T5871] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 724.033690][ T31] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 724.033747][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 724.033776][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 724.038261][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.038287][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 724.038306][ T31] usb 3-1: SerialNumber: syz [ 724.337263][ T31] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 724.392574][ T31] usb 3-1: USB disconnect, device number 35 [ 724.422157][ T5871] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 724.561001][ T5871] usb 6-1: USB disconnect, device number 23 [ 725.021439][ T5870] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 725.175150][ T5870] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 725.175268][ T5870] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 725.175305][ T5870] usb 4-1: config 220 interface 0 has no altsetting 0 [ 725.197368][ T5870] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 725.197395][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.197415][ T5870] usb 4-1: Product: syz [ 725.197428][ T5870] usb 4-1: Manufacturer: syz [ 725.197441][ T5870] usb 4-1: SerialNumber: syz [ 725.309999][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 725.488851][ T5870] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 725.488886][ T5870] uvcvideo 4-1:220.0: No valid video chain found. [ 725.521784][ T5870] usb 4-1: USB disconnect, device number 17 [ 725.692747][T15442] ip6tnl1: entered allmulticast mode [ 726.401845][T15465] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3713'. [ 726.580382][T15470] netlink: 'syz.5.3715': attribute type 1 has an invalid length. [ 727.971817][ T5603] Bluetooth: hci3: unexpected event for opcode 0x080c [ 728.608425][T15529] netlink: 'syz.2.3744': attribute type 21 has an invalid length. [ 730.459751][T15613] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 733.086351][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 733.404494][T15688] comedi comedi1: dmm32at: I/O port conflict (0x100,16) [ 733.497324][ T37] audit: type=1800 audit(1777851259.262:260): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3821" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 733.554830][ T5871] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 733.717216][ T5871] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 733.717245][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.717265][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 733.717313][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 733.717340][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.721872][ T5871] usb 6-1: New USB device found, idVendor=7d65, idProduct=a415, bcdDevice= 0.40 [ 733.721994][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 733.722016][ T5871] usb 6-1: Product: syz [ 733.722029][ T5871] usb 6-1: Manufacturer: syz [ 733.821066][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 733.821084][ T5871] cdc_wdm 6-1:1.0: skipping garbage [ 733.834429][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 733.844578][ T5871] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 733.844597][ T5871] cdc_wdm 6-1:1.0: Unknown control protocol [ 734.003539][T15710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3829'. [ 734.062932][ T5871] usb 6-1: USB disconnect, device number 24 [ 734.443410][T15727] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 734.815365][ T5871] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 734.965433][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 734.967865][ T5871] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 734.967891][ T5871] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 734.967911][ T5871] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 734.967929][ T5871] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 734.968034][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 734.968055][ T5871] usb 3-1: config 0 has no interface number 0 [ 734.968098][ T5871] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 734.968124][ T5871] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 734.968146][ T5871] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.968179][ T5871] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 734.968206][ T5871] usb 3-1: config 0 interface 125 has no altsetting 0 [ 734.968223][ T5871] usb 3-1: config 0 interface 125 has no altsetting 2 [ 734.971477][ T5871] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 734.971503][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.971522][ T5871] usb 3-1: Product: syz [ 734.971537][ T5871] usb 3-1: Manufacturer: syz [ 734.971550][ T5871] usb 3-1: SerialNumber: syz [ 735.130152][ T5871] usb 3-1: config 0 descriptor?? [ 735.153441][ T5871] usb 3-1: selecting invalid altsetting 2 [ 735.352849][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 735.399443][T15762] ip6tnl2: entered allmulticast mode [ 735.564131][ C0] usb 3-1: async_complete: urb error -71 [ 735.564228][ C0] usb 3-1: async_complete: urb error -71 [ 735.564315][ C0] usb 3-1: async_complete: urb error -71 [ 735.584535][ T5871] get_1284_register: usb error -71 [ 735.617997][ T5871] usb 3-1: USB disconnect, device number 36 [ 735.639023][T15774] netlink: 'syz.5.3859': attribute type 1 has an invalid length. [ 735.639041][T15774] netlink: 'syz.5.3859': attribute type 2 has an invalid length. [ 738.132127][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 738.469694][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469750][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469796][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469840][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469882][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469924][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.469969][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.470015][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.470059][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 738.723802][T15876] binder: Bad value for 'stats' [ 739.839303][T15926] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 740.567748][ T5762] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 740.727972][ T5762] usb 6-1: Using ep0 maxpacket: 32 [ 740.732566][ T5762] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 740.732596][ T5762] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.732618][ T5762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.732649][ T5762] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 740.732672][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.754739][ T5762] usb 6-1: config 0 descriptor?? [ 741.264244][ T5762] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 741.264280][ T5762] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 741.264308][ T5762] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 741.264334][ T5762] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 741.264360][ T5762] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 741.314921][ T5762] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 741.576335][ T5762] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -90 [ 741.889261][ T5762] usb 6-1: USB disconnect, device number 25 [ 744.440572][ T5762] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 744.440611][T16064] __nla_validate_parse: 51 callbacks suppressed [ 744.440625][T16064] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4000'. [ 744.590392][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 744.592987][ T5762] usb 3-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 744.593032][ T5762] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.593059][ T5762] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.593081][ T5762] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 744.593107][ T5762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 744.593141][ T5762] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 744.593163][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.617127][ T5762] usb 3-1: config 0 descriptor?? [ 744.832302][T16079] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 744.832302][T16079] program syz.5.4006 not setting count and/or reply_len properly [ 745.268937][ T5762] usb 3-1: USB disconnect, device number 37 [ 746.438284][ T37] audit: type=1326 audit(1777851272.217:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.438334][ T37] audit: type=1326 audit(1777851272.217:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.439189][ T37] audit: type=1326 audit(1777851272.217:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.439400][ T37] audit: type=1326 audit(1777851272.217:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.451662][ T37] audit: type=1326 audit(1777851272.237:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.462279][ T37] audit: type=1326 audit(1777851272.247:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.471179][ T37] audit: type=1326 audit(1777851272.257:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.472415][ T37] audit: type=1326 audit(1777851272.257:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.501043][ T37] audit: type=1326 audit(1777851272.287:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.501198][ T37] audit: type=1326 audit(1777851272.287:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16144 comm="syz.2.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 746.653504][T16151] binder: Bad value for 'stats' [ 746.820140][T16157] tipc: Started in network mode [ 746.820167][T16157] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 746.822304][T16157] tipc: Enabling of bearer rejected, failed to enable media [ 747.194424][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'. [ 747.203867][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4048'. [ 747.205704][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.205767][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.550847][ T36] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 747.703570][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 747.706253][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 747.709324][ T36] usb 4-1: config 6 has an invalid interface number: 6 but max is 0 [ 747.709348][ T36] usb 4-1: config 6 has no interface number 0 [ 747.709394][ T36] usb 4-1: config 6 interface 6 has no altsetting 0 [ 747.716579][ T36] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=15.65 [ 747.716605][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.716624][ T36] usb 4-1: Product: syz [ 747.716636][ T36] usb 4-1: Manufacturer: syz [ 747.716650][ T36] usb 4-1: SerialNumber: syz [ 747.984573][ T36] kaweth 4-1:6.6: couldn't find required endpoints [ 748.019878][ T36] usb 4-1: USB disconnect, device number 18 [ 748.239928][ T5871] kernel read not supported for file /vga_arbiter (pid: 5871 comm: kworker/0:8) [ 748.607874][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 748.607897][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 748.747278][T16236] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz1 [ 748.771861][T16239] netlink: 876 bytes leftover after parsing attributes in process `syz.3.4077'. [ 748.771892][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 750.740127][T16291] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 751.653858][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 751.819381][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 751.819412][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.819431][ T9] usb 4-1: Product: syz [ 751.819446][ T9] usb 4-1: Manufacturer: syz [ 751.819459][ T9] usb 4-1: SerialNumber: syz [ 751.855337][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 752.624701][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4138'. [ 752.646410][ T5871] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 752.999004][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4142'. [ 753.280033][ T36] usb 4-1: USB disconnect, device number 19 [ 753.925946][ T5871] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 753.961806][ T5871] ath9k_htc: Failed to initialize the device [ 753.970896][ T36] usb 4-1: ath9k_htc: USB layer deinitialized [ 754.062287][T16416] netlink: 'syz.2.4163': attribute type 3 has an invalid length. [ 754.397453][T16424] netlink: 392 bytes leftover after parsing attributes in process `syz.2.4168'. [ 754.448784][T16428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.483624][ T36] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 754.635808][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 754.654973][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 754.655019][ T36] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 754.655041][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.698957][ T36] usb 4-1: config 0 descriptor?? [ 755.146725][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146761][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146786][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146820][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146845][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146868][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146892][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146916][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146940][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.146963][ T36] zeroplus 0003:0C12:0030.0011: unknown main item tag 0x0 [ 755.248111][ T36] zeroplus 0003:0C12:0030.0011: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 755.248144][ T36] zeroplus 0003:0C12:0030.0011: no inputs found [ 755.263905][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 755.290777][T16450] Bluetooth: MGMT ver 1.23 [ 755.364226][ T5871] usb 4-1: USB disconnect, device number 20 [ 755.425073][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 755.425126][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 755.425150][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.425805][T16453] fido_id[16453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 755.472310][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 755.890221][ T5870] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 756.046564][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 756.046599][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 756.046640][ T5870] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 756.046664][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.060845][ T5870] usb 6-1: config 0 descriptor?? [ 756.061796][T16461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 756.229453][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 756.488357][ T5870] a4tech 0003:09DA:001A.0012: unexpected long global item [ 756.508432][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 756.508459][ T9] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 756.508831][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 756.508848][ T9] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 756.533764][ T5870] a4tech 0003:09DA:001A.0012: parse failed [ 756.533863][ T5870] a4tech 0003:09DA:001A.0012: probe with driver a4tech failed with error -22 [ 756.568040][ T9] usb 3-1: USB disconnect, device number 38 [ 756.704961][ T821] usb 6-1: USB disconnect, device number 26 [ 757.926423][T16548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4224'. [ 759.067326][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 759.239832][ T5870] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 759.239860][ T5870] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 759.239878][ T5870] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 759.239897][ T5870] usb 4-1: config 220 has no interface number 2 [ 759.239963][ T5870] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 759.239990][ T5870] usb 4-1: config 220 interface 0 has no altsetting 0 [ 759.240008][ T5870] usb 4-1: config 220 interface 76 has no altsetting 0 [ 759.240026][ T5870] usb 4-1: config 220 interface 1 has no altsetting 0 [ 759.254229][ T5870] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 759.254255][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.254275][ T5870] usb 4-1: Product: syz [ 759.254288][ T5870] usb 4-1: Manufacturer: syz [ 759.254303][ T5870] usb 4-1: SerialNumber: syz [ 759.409283][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4242'. [ 759.613466][ T5870] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 759.613503][ T5870] uvcvideo 4-1:220.0: No valid video chain found. [ 759.613563][ T5870] usb 4-1: selecting invalid altsetting 0 [ 759.677690][ T5870] usb 4-1: selecting invalid altsetting 0 [ 759.677728][ T5870] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 759.715779][ T5870] usb 4-1: USB disconnect, device number 21 [ 760.567810][ T5870] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 760.586126][ T821] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 760.716158][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 760.719880][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.719911][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.719947][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 760.719970][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.737724][ T5870] usb 3-1: config 0 descriptor?? [ 760.779178][ T821] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 760.779208][ T821] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.779231][ T821] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.779258][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 760.779299][ T821] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 760.779321][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.846887][ T821] usb 6-1: config 0 descriptor?? [ 761.179402][ T5870] mcp2221 0003:04D8:00DD.0013: unexpected long global item [ 761.181216][ T5870] mcp2221 0003:04D8:00DD.0013: can't parse reports [ 761.181320][ T5870] mcp2221 0003:04D8:00DD.0013: probe with driver mcp2221 failed with error -22 [ 761.289811][ T821] holtek 0003:1241:5015.0014: unbalanced collection at end of report description [ 761.292130][ T821] holtek 0003:1241:5015.0014: parse failed [ 761.292220][ T821] holtek 0003:1241:5015.0014: probe with driver holtek failed with error -22 [ 761.383149][ T5870] usb 3-1: USB disconnect, device number 39 [ 761.484731][ T5871] usb 6-1: USB disconnect, device number 27 [ 762.593015][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'. [ 763.222546][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4318'. [ 763.222894][T16741] bridge_slave_0: default FDB implementation only supports local addresses [ 763.350725][T16747] nbd: socks must be embedded in a SOCK_ITEM attr [ 763.427323][T16751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4321'. [ 763.427343][T16751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4321'. [ 763.534353][T16757] netlink: 'syz.5.4324': attribute type 1 has an invalid length. [ 763.537705][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4322'. [ 763.838879][ T5762] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 763.988649][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 763.993778][ T5762] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 137, using maximum allowed: 30 [ 763.993869][ T5762] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 763.993898][ T5762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 763.993931][ T5762] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 763.993954][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.068034][ T5762] usb 6-1: config 0 descriptor?? [ 764.502814][ T5762] hid_parser_main: 28 callbacks suppressed [ 764.502838][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.502868][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.502895][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.502920][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.502953][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.502978][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.503003][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.503029][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.503054][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.503079][ T5762] dragonrise 0003:0079:0011.0015: unknown main item tag 0x0 [ 764.624326][ T5762] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.20 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 764.696076][ T5762] usb 6-1: USB disconnect, device number 28 [ 764.817375][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4345'. [ 764.976466][T16806] fido_id[16806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 766.710833][T16874] Invalid ELF header len 1 [ 767.256151][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 768.707347][T16930] overlayfs: overlapping lowerdir path [ 769.982031][T16977] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.504236][T16999] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4435'. [ 771.379788][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4446'. [ 771.568084][T17039] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 771.568084][T17039] program syz.3.4451 not setting count and/or reply_len properly [ 772.805311][T17084] bridge_slave_0: left allmulticast mode [ 772.821651][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.956378][T17084] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 774.130235][T17139] kAFS: No cell specified [ 775.161956][ T5871] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 775.174343][T17172] "syz.2.4516" (17172) uses obsolete ecb(arc4) skcipher [ 775.319239][ T5871] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.330380][ T5871] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 775.330407][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.330426][ T5871] usb 6-1: Product: syz [ 775.330440][ T5871] usb 6-1: Manufacturer: syz [ 775.330454][ T5871] usb 6-1: SerialNumber: syz [ 775.379660][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4518'. [ 775.597845][ T5871] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.597915][ T5871] usb 6-1: MIDIStreaming interface descriptor not found [ 775.916219][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4525'. [ 776.018695][T17192] ipvlan2: entered allmulticast mode [ 776.018715][T17192] syz_tun: entered allmulticast mode [ 776.321890][ T5871] usb 6-1: USB disconnect, device number 29 [ 776.472954][T17209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4535'. [ 777.350183][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 777.536274][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.786136][ T5871] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 777.944108][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 777.955539][ T5871] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 777.955583][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.955602][ T5871] usb 6-1: Product: syz [ 777.955615][ T5871] usb 6-1: Manufacturer: syz [ 777.955629][ T5871] usb 6-1: SerialNumber: syz [ 777.970221][ T5871] usb 6-1: config 0 descriptor?? [ 778.001053][ T5871] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 778.001593][ T5871] dvb-usb: bulk message failed: -22 (4/0) [ 778.001612][ T5871] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.001782][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 778.001796][ T5871] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.160252][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.165436][ T5871] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 778.165489][ T5871] usb 6-1: media controller created [ 778.257606][T17210] dvb-usb: bulk message failed: -22 (7/0) [ 778.257628][T17210] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 778.257719][T17210] ttusb2: i2c transfer failed. [ 778.286585][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.353302][ T36] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 778.422091][ T5871] usb 6-1: selecting invalid altsetting 3 [ 778.422133][ T5871] ttusb2: set interface to alts=3 failed [ 778.513377][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 778.515236][ T36] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 778.515260][ T36] usb 3-1: config 0 has no interface number 0 [ 778.519018][ T36] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 778.519045][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.519065][ T36] usb 3-1: Product: syz [ 778.519078][ T36] usb 3-1: Manufacturer: syz [ 778.519092][ T36] usb 3-1: SerialNumber: syz [ 778.527144][ T5871] DVB: Unable to find symbol tda10086_attach() [ 778.527222][ T5871] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 778.530816][ T5871] dvb-usb: bulk message failed: -22 (4/0) [ 778.530861][ T5871] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.531181][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 778.531211][ T5871] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.531293][ T5871] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 778.617371][ T5871] usb 6-1: USB disconnect, device number 30 [ 778.642106][ T36] usb 3-1: config 0 descriptor?? [ 778.660483][ T36] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 778.660587][ T36] dvb-usb: bulk message failed: -22 (4/0) [ 778.660603][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.660721][ T36] dvb-usb: bulk message failed: -22 (5/0) [ 778.660735][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.708323][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.709119][ T36] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 778.709168][ T36] usb 3-1: media controller created [ 778.750500][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.786135][ T36] ttusb2: set interface to alts=3 failed [ 778.869881][ T5871] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 778.896699][ T36] DVB: Unable to find symbol tda10086_attach() [ 778.896713][ T36] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 778.897593][ T36] dvb-usb: bulk message failed: -22 (4/0) [ 778.897611][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.897727][ T36] dvb-usb: bulk message failed: -22 (5/0) [ 778.897741][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 778.897802][ T36] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 778.979200][ T36] usb 3-1: USB disconnect, device number 40 [ 779.250374][ T36] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 779.453221][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4579'. [ 780.103050][T17339] netlink: 'syz.2.4591': attribute type 8 has an invalid length. [ 780.103071][T17339] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4591'. [ 780.103100][T17339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4591'. [ 780.249817][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4595'. [ 781.549687][T17392] input: syz1 as /devices/virtual/input/input24 [ 782.024810][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4630'. [ 782.080216][T17415] bond0: (slave bond_slave_1): Releasing backup interface [ 782.237245][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4632'. [ 782.318679][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 783.075610][T17461] program syz.2.4648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.503840][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4653'. [ 783.775062][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 784.764368][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'. [ 785.048052][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 785.552598][T17568] IPv6: Can't replace route, no match found [ 786.096395][ T821] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 786.258808][ T821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 786.263768][ T821] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 65, changing to 7 [ 786.291380][ T821] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 786.291418][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.291438][ T821] usb 6-1: Product: syz [ 786.291451][ T821] usb 6-1: Manufacturer: syz [ 786.291465][ T821] usb 6-1: SerialNumber: syz [ 786.587215][ T821] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 787.186425][ T821] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 787.292960][ T821] usb 6-1: USB disconnect, device number 31 [ 787.405574][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4722'. [ 787.525515][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.382316][ T5603] Bluetooth: hci5: adv larger than maximum supported [ 788.382344][ T5603] Bluetooth: hci5: Malformed LE Event: 0x0d [ 788.985701][T17695] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 788.988192][T17695] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 789.087088][T17703] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4748'. [ 789.297677][ T36] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 789.447705][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 789.453872][ T36] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 789.453900][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.453920][ T36] usb 3-1: Product: syz [ 789.453934][ T36] usb 3-1: Manufacturer: syz [ 789.453948][ T36] usb 3-1: SerialNumber: syz [ 789.506930][ T36] usb 3-1: config 0 descriptor?? [ 789.523722][ T36] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 790.337351][ T36] gspca_ov534_9: reg_w failed -71 [ 790.619275][ T36] gspca_ov534_9: Unknown sensor 0000 [ 790.619377][ T36] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 790.648376][ T36] usb 3-1: USB disconnect, device number 41 [ 791.007628][T17779] binder: Binderfs stats mode cannot be changed during a remount [ 791.608624][ T36] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 791.759785][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 791.762355][ T36] usb 6-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 791.762385][ T36] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 791.762412][ T36] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 791.762445][ T36] usb 6-1: config 0 interface 0 has no altsetting 0 [ 791.762476][ T36] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 791.762496][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.838097][ T36] usb 6-1: config 0 descriptor?? [ 792.287487][ T36] hid (null): unknown global tag 0xe [ 792.287507][ T36] hid (null): unknown global tag 0xe [ 792.287583][ T36] hid (null): unknown global tag 0x63 [ 792.287591][ T36] hid (null): unknown global tag 0xe [ 792.287598][ T36] hid (null): global environment stack underflow [ 792.287632][ T36] hid (null): unknown global tag 0xc [ 792.329900][ T36] hid (null): unknown global tag 0xe4 [ 792.330327][ T36] hid (null): unknown global tag 0x52 [ 792.330337][ T36] hid (null): unknown global tag 0xe [ 792.330378][ T36] hid (null): invalid report_size 222345300 [ 792.533021][ T5601] usb 6-1: USB disconnect, device number 32 [ 793.026578][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 793.194971][T17848] program syz.5.4817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.416493][T17854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.170477][T17874] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4830'. [ 794.532368][ T37] audit: type=1326 audit(1777851320.297:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17889 comm="syz.2.4837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x0 [ 794.939977][ T36] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 795.090097][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 795.093648][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.093681][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.093704][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.093746][ T36] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.093781][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.161817][ T36] usb 6-1: config 0 descriptor?? [ 795.601297][ T36] hid_parser_main: 31 callbacks suppressed [ 795.601320][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601348][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601374][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601401][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601427][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601452][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601478][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601509][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601535][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.601561][ T36] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 795.604875][ T36] HID 045e:07da: Invalid code 65791 type 1 [ 795.723056][ T36] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input25 [ 795.768917][ T36] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 796.020827][ T5870] usb 6-1: USB disconnect, device number 33 [ 796.089951][T17938] fido_id[17938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 796.780673][ T36] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 796.954723][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 796.975598][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.975628][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.975664][ T36] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 796.975686][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.057936][ T36] usb 4-1: config 0 descriptor?? [ 797.074958][ T36] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 797.708292][ T36] ft260 0003:0403:6030.0018: failed to retrieve chip version [ 797.708699][ T36] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71 [ 797.757435][T17968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.792238][ T36] usb 4-1: USB disconnect, device number 22 [ 799.648482][T18036] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4904'. [ 800.638858][T18070] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 801.386248][T18098] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4934'. [ 801.555190][T18104] program syz.2.4936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.769504][T18108] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4937'. [ 803.954942][ T5870] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 803.991461][T18169] misc userio: Can't change port type on an already running userio instance [ 804.104442][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 804.106671][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.106724][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.106752][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 804.106773][ T5870] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 804.106794][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.108340][ T5870] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 804.108369][ T5870] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 804.108388][ T5870] usb 6-1: Manufacturer: syz [ 804.120036][ T5870] usb 6-1: config 0 descriptor?? [ 804.283661][ T36] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 804.413646][ T5870] rc_core: IR keymap rc-hauppauge not found [ 804.413664][ T5870] Registered IR keymap rc-empty [ 804.413818][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.443695][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.445334][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.445365][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.445402][ T36] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 804.445425][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.453089][ T36] usb 4-1: config 0 descriptor?? [ 804.468816][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 804.503956][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 804.549504][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.573540][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.594038][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.620272][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.634700][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.659275][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.676920][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.693918][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.723883][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.743850][ T5870] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 804.863049][ T5870] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 804.863073][ T5870] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 804.897460][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897495][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897544][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897572][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897598][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897624][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.897650][ T36] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 804.980102][ T36] playstation 0003:054C:0BA0.0019: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 804.981617][ T5870] usb 6-1: USB disconnect, device number 34 [ 805.089054][ T36] playstation 0003:054C:0BA0.0019: Invalid reportID received, expected 18 got 203 [ 805.089079][ T36] playstation 0003:054C:0BA0.0019: Failed to retrieve DualShock4 pairing info: -22 [ 805.089131][ T36] playstation 0003:054C:0BA0.0019: Failed to get MAC address from DualShock4 [ 805.089146][ T36] playstation 0003:054C:0BA0.0019: Failed to create dualshock4. [ 805.130895][ T36] playstation 0003:054C:0BA0.0019: probe with driver playstation failed with error -22 [ 805.365491][ T36] usb 4-1: USB disconnect, device number 23 [ 807.027855][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 807.176586][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 807.340560][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.340594][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 807.340634][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 807.340657][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.783645][ T9] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 807.783681][ T9] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 807.783708][ T9] logitech 0003:046D:C29C.001A: unknown main item tag 0x0 [ 807.819141][ T9] logitech 0003:046D:C29C.001A: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 808.152729][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5030'. [ 808.196582][ T9] logitech 0003:046D:C29C.001A: no inputs found [ 808.225401][ T9] usb 4-1: USB disconnect, device number 24 [ 808.667409][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.667477][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.155929][ T36] hid-generic 0006:0004:0009.001B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 810.430702][T18358] fido_id[18358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 810.465602][T18366] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5057'. [ 811.509779][T18406] serio: Serial port ptm0 [ 814.137566][ T5870] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 814.315763][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.315791][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.315816][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 814.315843][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.371404][ T5870] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 814.371435][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.371454][ T5870] usb 6-1: Product: syz [ 814.371468][ T5870] usb 6-1: Manufacturer: syz [ 814.371481][ T5870] usb 6-1: SerialNumber: syz [ 814.414563][ T5870] usb 6-1: config 0 descriptor?? [ 814.415770][T18454] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 814.450384][ T5870] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 814.815989][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 814.815995][ T36] usb 6-1: USB disconnect, device number 35 [ 814.914810][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'. [ 815.947675][T18525] loop5: detected capacity change from 0 to 6 [ 815.955321][T18525] loop5: [POWERTEC] [ 816.868624][ T5601] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 817.028329][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5145'. [ 817.040119][ T5601] usb 4-1: Using ep0 maxpacket: 16 [ 817.042395][ T5601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.042426][ T5601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.042463][ T5601] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 817.042487][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.088720][ T5601] usb 4-1: config 0 descriptor?? [ 817.499481][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 817.562323][ T5601] mcp2221 0003:04D8:00DD.001C: item fetching failed at offset 0/5 [ 817.563065][ T5601] mcp2221 0003:04D8:00DD.001C: can't parse reports [ 817.563167][ T5601] mcp2221 0003:04D8:00DD.001C: probe with driver mcp2221 failed with error -22 [ 817.689480][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 817.691514][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.691537][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.694638][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.694666][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.694686][ T9] usb 6-1: Product: syz [ 817.694701][ T9] usb 6-1: Manufacturer: syz [ 817.694715][ T9] usb 6-1: SerialNumber: syz [ 817.759747][ T5762] usb 4-1: USB disconnect, device number 25 [ 817.808330][ T9] usb 6-1: 0:2 : does not exist [ 817.993286][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 818.119068][ T5693] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 818.126376][ T9] usb 6-1: USB disconnect, device number 36 [ 818.245558][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.269355][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 818.271903][ T5693] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.271930][ T5693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.271954][ T5693] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.271978][ T5693] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.272019][ T5693] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 818.272042][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.497098][ T5693] usb 3-1: GET_CAPABILITIES returned 0 [ 818.497133][ T5693] usbtmc 3-1:16.0: can't read capabilities [ 818.694280][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5164'. [ 818.720117][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 818.754261][ T9] usb 3-1: USB disconnect, device number 42 [ 819.740371][ T5762] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 820.688304][ T5762] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.688332][ T5762] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 820.688352][ T5762] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 820.688401][ T5762] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 820.688427][ T5762] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 820.692262][ T5762] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 820.692291][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 820.692311][ T5762] usb 6-1: Product: syz [ 820.692325][ T5762] usb 6-1: Manufacturer: syz [ 820.723971][ T5762] cdc_wdm 6-1:1.0: skipping garbage [ 820.723988][ T5762] cdc_wdm 6-1:1.0: skipping garbage [ 820.763805][ T5762] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 820.763825][ T5762] cdc_wdm 6-1:1.0: Unknown control protocol [ 821.733550][ T5601] usb 6-1: USB disconnect, device number 37 [ 822.369245][T18710] binder: 18707:18710 ioctl c0306201 200000000600 returned -14 [ 823.267688][T18753] loop5: detected capacity change from 0 to 7 [ 823.291878][T18753] Dev loop5: unable to read RDB block 7 [ 823.291916][T18753] loop5: AHDI p1 p2 p3 [ 823.291943][T18753] loop5: partition table partially beyond EOD, truncated [ 823.292165][T18753] loop5: p1 start 1601398130 is beyond EOD, truncated [ 823.292184][T18753] loop5: p2 start 1702059890 is beyond EOD, truncated [ 823.910043][T18769] bridge0: port 3(vlan2) entered blocking state [ 823.911342][T18769] bridge0: port 3(vlan2) entered disabled state [ 823.911556][T18769] vlan2: entered allmulticast mode [ 823.911575][T18769] dummy0: entered allmulticast mode [ 823.935908][T18769] vlan2: entered promiscuous mode [ 823.935927][T18769] dummy0: entered promiscuous mode [ 824.137941][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5244'. [ 824.807662][T18807] Invalid argument reading file caps for ./file0 [ 825.334491][ T36] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 825.482509][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 825.487426][ T36] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 825.487478][ T36] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 825.487505][ T36] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 825.487528][ T36] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 825.487553][ T36] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 825.487578][ T36] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.487615][ T36] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.487638][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.820042][ T36] usb 3-1: usb_control_msg returned -32 [ 825.820099][ T36] usbtmc 3-1:16.0: can't read capabilities [ 827.170525][T18904] support for the xor transformation has been removed. [ 827.663441][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 827.818047][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.818097][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 827.818127][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.830981][ T9] usb 6-1: config 0 descriptor?? [ 828.050562][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 828.050673][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 828.105031][ T9] usb 6-1: USB disconnect, device number 38 [ 828.209047][ T5693] usb 3-1: USB disconnect, device number 43 [ 828.294533][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5324'. [ 828.594348][T18966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.594945][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 828.743242][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 828.745095][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.745141][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 828.745164][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.797773][ T9] usb 6-1: config 0 descriptor?? [ 828.826651][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 828.899565][ T9] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 829.202981][T18996] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5345'. [ 829.219016][ T36] usb 6-1: USB disconnect, device number 39 [ 829.260299][ T36] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 829.998326][T19031] fuse: fd is not a fuse device [ 830.948589][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5360'. [ 831.590948][T19078] Invalid ELF header magic: != ELF [ 832.444769][T19099] input: syz0 as /devices/virtual/input/input29 [ 832.444802][T19099] input: failed to attach handler leds to device input29, error: -6 [ 833.139851][T19131] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5409'. [ 834.264996][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5433'. [ 834.265023][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5433'. [ 834.682915][T19198] netlink: 'syz.3.5441': attribute type 1 has an invalid length. [ 834.682936][T19198] netlink: 'syz.3.5441': attribute type 4 has an invalid length. [ 834.682950][T19198] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5441'. [ 835.171684][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5450'. [ 835.787500][ T36] kernel read not supported for file /vcs (pid: 36 comm: kworker/1:1) [ 836.398402][T19263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5469'. [ 836.812733][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5476'. [ 836.866187][ T5870] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 837.016763][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 837.020838][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.020870][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.020907][ T5870] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 837.020931][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.075499][ T5870] usb 3-1: config 0 descriptor?? [ 837.524568][ T5870] hid_parser_main: 47 callbacks suppressed [ 837.524591][ T5870] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 837.524620][ T5870] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 837.524646][ T5870] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 837.524673][ T5870] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 837.524699][ T5870] corsair 0003:1B1C:1B02.001D: unknown main item tag 0x0 [ 837.606281][ T5870] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 837.717016][ T5870] corsair 0003:1B1C:1B02.001D: Read invalid backlight brightness: 54. [ 837.955817][T19308] ip6erspan1: entered allmulticast mode [ 837.968189][ T5693] usb 3-1: USB disconnect, device number 44 [ 839.650546][T19378] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5523'. [ 840.817715][ T5693] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 840.979231][ T5693] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 840.979268][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 840.979301][ T5693] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 840.979322][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.009623][ T5693] usb 3-1: config 0 descriptor?? [ 841.562832][ T5693] hid (null): invalid report_size 26545 [ 841.583939][T19443] bond3: entered allmulticast mode [ 841.612423][ T5693] elecom 0003:056E:00E6.001E: unknown main item tag 0x6 [ 841.612457][ T5693] elecom 0003:056E:00E6.001E: invalid report_size 26545 [ 841.612473][ T5693] elecom 0003:056E:00E6.001E: item 0 2 1 7 parsing failed [ 841.621999][ T5693] elecom 0003:056E:00E6.001E: probe with driver elecom failed with error -22 [ 841.798737][ T5693] usb 3-1: USB disconnect, device number 45 [ 842.288287][T19395] Bluetooth: hci4: command 0x2016 tx timeout [ 843.158333][T19503] netlink: 'syz.4.5566': attribute type 1 has an invalid length. [ 843.398109][T19492] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.401831][T19492] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.370630][T19395] Bluetooth: hci4: command 0x2016 tx timeout [ 846.085407][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5617'. [ 846.401673][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 846.439828][ T5603] Bluetooth: hci4: command 0x2016 tx timeout [ 846.553041][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.553067][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.558787][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 846.558814][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.558834][ T9] usb 3-1: Product: syz [ 846.558848][ T9] usb 3-1: Manufacturer: syz [ 846.558862][ T9] usb 3-1: SerialNumber: syz [ 846.560252][ T5870] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 846.722915][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.722948][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.723363][ T5870] usb 4-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 846.723394][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.802699][ T5870] usb 4-1: config 0 descriptor?? [ 846.905743][ T9] usb 3-1: cannot find UAC_HEADER [ 847.295181][ T5870] hid-generic 0003:0925:8066.001F: unbalanced collection at end of report description [ 847.296100][ T5870] hid-generic 0003:0925:8066.001F: probe with driver hid-generic failed with error -22 [ 847.399468][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 847.433849][ T9] usb 3-1: USB disconnect, device number 46 [ 847.463152][ T5870] usb 4-1: USB disconnect, device number 26 [ 847.557052][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.980440][ T5693] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 848.131258][ T5693] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 848.163333][ T5693] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 848.163362][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.196344][ T5693] usb 3-1: config 0 descriptor?? [ 848.479007][ T5693] usb 3-1: USB disconnect, device number 47 [ 848.808433][T19671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5652'. [ 849.068927][T19681] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0xd20) [ 849.180859][ T5693] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 849.330923][ T5693] usb 6-1: Using ep0 maxpacket: 32 [ 849.334194][ T5693] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.334221][ T5693] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 849.334246][ T5693] usb 6-1: config 0 interface 0 has no altsetting 0 [ 849.341786][ T5693] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 849.341814][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.341834][ T5693] usb 6-1: Product: syz [ 849.341847][ T5693] usb 6-1: Manufacturer: syz [ 849.341861][ T5693] usb 6-1: SerialNumber: syz [ 849.422434][ T5693] usb 6-1: config 0 descriptor?? [ 849.442986][ T5601] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 849.598858][ T5601] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 849.598889][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.598908][ T5601] usb 3-1: Product: syz [ 849.598922][ T5601] usb 3-1: Manufacturer: syz [ 849.598936][ T5601] usb 3-1: SerialNumber: syz [ 849.625344][ T5601] usb 3-1: config 0 descriptor?? [ 849.867923][ T5693] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 850.488399][ T9] usb 6-1: USB disconnect, device number 40 [ 850.672777][ T5601] usb 3-1: unexpected transceiver, part 0xe5 version 0x42 [ 850.884942][ T5601] usb 3-1: Firmware version (0.0) predates our first public release. [ 850.884967][ T5601] usb 3-1: Please update to version 0.2 or newer [ 850.885428][ T5601] usb 3-1: atusb_probe: initialization failed, error = -19 [ 850.913859][ T5601] usb 3-1: USB disconnect, device number 48 [ 854.242851][ T5693] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 854.392962][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 854.395548][ T5693] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.395573][ T5693] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.398322][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 854.398348][ T5693] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 854.398368][ T5693] usb 3-1: Product: syz [ 854.398382][ T5693] usb 3-1: Manufacturer: syz [ 854.490576][ T5693] hub 3-1:4.0: USB hub found [ 854.698129][ T5693] hub 3-1:4.0: 2 ports detected [ 855.057278][T19886] fuse: fd is not a fuse device [ 855.058809][T19886] overlayfs: failed to resolve './cgroup': -2 [ 855.106158][ T5693] hub 3-1:4.0: set hub depth failed [ 855.125139][ T5693] usb 3-1: USB disconnect, device number 49 [ 855.272037][ T37] audit: type=1326 audit(1777851381.004:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.273559][ T37] audit: type=1326 audit(1777851381.004:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.275613][ T37] audit: type=1326 audit(1777851381.014:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.275890][ T37] audit: type=1326 audit(1777851381.014:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.276170][ T37] audit: type=1326 audit(1777851381.014:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.276434][ T37] audit: type=1326 audit(1777851381.014:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.276758][ T37] audit: type=1326 audit(1777851381.014:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.277213][ T37] audit: type=1326 audit(1777851381.014:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.277658][ T37] audit: type=1326 audit(1777851381.014:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 855.277700][ T37] audit: type=1326 audit(1777851381.014:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19891 comm="syz.4.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 856.393551][ T5693] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 856.544414][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 856.547904][ T5693] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 856.547933][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.594797][ T5693] usb 4-1: config 0 descriptor?? [ 856.614287][ T5693] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 858.054255][ T5693] gspca_sonixj: i2c_w8 err -71 [ 858.074317][ T5693] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 858.082522][ T5693] usb 4-1: USB disconnect, device number 27 [ 858.115084][T19982] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 858.517354][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5794'. [ 858.517375][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5794'. [ 858.517399][T20006] netlink: 'syz.5.5794': attribute type 14 has an invalid length. [ 858.517412][T20006] netlink: 'syz.5.5794': attribute type 13 has an invalid length. [ 862.253871][T20131] serio: Serial port pts0 [ 862.517945][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 862.656746][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 862.657538][ T37] audit: type=1326 audit(1777851388.401:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.657591][ T37] audit: type=1326 audit(1777851388.401:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.660093][ T37] audit: type=1326 audit(1777851388.401:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.660237][ T37] audit: type=1326 audit(1777851388.401:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.661892][ T37] audit: type=1326 audit(1777851388.401:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.662033][ T37] audit: type=1326 audit(1777851388.401:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.662287][ T37] audit: type=1326 audit(1777851388.401:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.663839][ T37] audit: type=1326 audit(1777851388.401:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.665428][ T37] audit: type=1326 audit(1777851388.401:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 862.677155][ T37] audit: type=1326 audit(1777851388.401:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20146 comm="syz.2.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18c10cdd9 code=0x7ffc0000 [ 863.949013][ T821] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 864.181946][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.181974][ T821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 864.182025][ T821] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 864.182048][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.202656][ T821] usb 4-1: config 0 descriptor?? [ 864.252735][ T821] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 864.252790][ T821] dvb-usb: bulk message failed: -22 (3/0) [ 864.348964][ T821] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 864.352532][ T821] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 864.352964][ T821] usb 4-1: media controller created [ 864.366502][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.451385][ T821] dvb-usb: bulk message failed: -22 (6/0) [ 864.451530][ T821] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 864.472362][T20184] dvb-usb: bulk message failed: -22 (3/0) [ 864.502044][ T821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 864.530254][ T821] dvb-usb: schedule remote query interval to 150 msecs. [ 864.530274][ T821] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 864.569741][ T821] usb 4-1: USB disconnect, device number 28 [ 865.150531][ T821] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 865.326184][T20229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 865.927703][T20248] team0: Port device syz_tun added [ 866.044804][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5894'. [ 866.592286][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5914'. [ 867.016211][T19613] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 867.180321][T19613] usb 3-1: Using ep0 maxpacket: 8 [ 867.182241][T19613] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 867.182271][T19613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 867.182302][T19613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.182326][T19613] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.182365][T19613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 867.182387][T19613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.358850][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5923'. [ 867.501353][T19613] usb 3-1: GET_CAPABILITIES returned 0 [ 867.501398][T19613] usbtmc 3-1:16.0: can't read capabilities [ 867.726786][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.726942][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727023][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727102][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727173][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727256][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727331][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727408][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727482][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727562][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727634][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727709][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727784][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727861][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.727938][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 867.728074][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 867.738377][ T821] usb 3-1: USB disconnect, device number 50 [ 868.331332][T20306] block nbd1: server does not support multiple connections per device. [ 868.467394][T20306] block nbd1: shutting down sockets [ 868.760292][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 868.760320][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 868.803163][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 868.803187][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 868.867494][T20334] binder: 20333:20334 ioctl 40046205 0 returned -22 [ 868.941991][T20334] binder: 20333:20334 ioctl c0306201 200000001a80 returned -14 [ 870.064265][T20393] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5959'. [ 870.072755][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5962'. [ 870.604812][T20412] fuse: fd is not a fuse device [ 870.709576][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.709645][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.995678][ T821] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 874.164714][ T821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 874.169141][ T821] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.169169][ T821] usb 6-1: config 1 interface 0 has no altsetting 0 [ 874.203347][ T821] usb 6-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40 [ 874.204579][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.204602][ T821] usb 6-1: Product: syz [ 874.204617][ T821] usb 6-1: Manufacturer: syz [ 874.204631][ T821] usb 6-1: SerialNumber: syz [ 874.775673][ T821] usbhid 6-1:1.0: can't add hid device: -71 [ 874.775787][ T821] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 874.791562][ T821] usb 6-1: USB disconnect, device number 41 [ 876.359671][T20655] netlink: 'syz.2.6060': attribute type 1 has an invalid length. [ 876.515051][T20655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 876.635098][T20657] bond1: (slave veth0_to_bond): making interface the new active one [ 876.692062][T20657] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 877.050716][T20658] bond1: entered promiscuous mode [ 877.050740][T20658] veth0_to_bond: entered promiscuous mode [ 877.050971][T20658] bond1: entered allmulticast mode [ 877.050985][T20658] veth0_to_bond: entered allmulticast mode [ 877.245905][T20679] sctp: [Deprecated]: syz.5.6068 (pid 20679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.245905][T20679] Use struct sctp_sack_info instead [ 877.257937][T20679] sctp: [Deprecated]: syz.5.6068 (pid 20679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.257937][T20679] Use struct sctp_sack_info instead [ 877.518007][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6072'. [ 878.070852][ T5693] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 878.271608][ T5693] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 878.271638][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 878.271661][ T5693] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 878.281620][ T5693] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 878.281647][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.281666][ T5693] usb 3-1: Product: syz [ 878.281679][ T5693] usb 3-1: Manufacturer: syz [ 878.281692][ T5693] usb 3-1: SerialNumber: syz [ 878.307823][ T5693] usb 3-1: config 0 descriptor?? [ 878.310500][T20703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 878.311983][T20703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 878.327510][ T5693] usb 3-1: ucan: probing device on interface #0 [ 878.655970][T19956] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 878.772932][ T5693] usb 3-1: ucan: device reported invalid tx-fifo size [ 878.772953][ T5693] usb 3-1: ucan: probe failed; try to update the device firmware [ 878.828826][T19956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 878.842923][T19956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.842947][T19956] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 878.842995][T19956] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 878.843034][T19956] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 878.843075][T19956] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 878.843101][T19956] usb 4-1: config 1 interface 1 has no altsetting 0 [ 878.852900][T19956] usb 4-1: string descriptor 0 read error: -22 [ 878.853031][T19956] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 878.853066][T19956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.044910][ T5693] usb 3-1: USB disconnect, device number 51 [ 880.263123][T19613] usb 4-1: USB disconnect, device number 29 [ 880.856071][ T821] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 881.027013][ T821] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 881.027047][ T821] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.027074][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 881.027106][ T821] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 881.027129][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.051105][ T821] usb 6-1: config 0 descriptor?? [ 881.052136][T20781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 881.501882][ T821] usbhid 6-1:0.0: can't add hid device: -71 [ 881.501995][ T821] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 881.532772][ T821] usb 6-1: USB disconnect, device number 42 [ 882.393413][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6137'. [ 883.422933][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6154'. [ 883.422958][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6154'. [ 883.612224][T20891] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 884.151519][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6169'. [ 884.151543][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6169'. [ 885.299560][T20946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6185'. [ 885.438087][T20952] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6187'. [ 885.438268][T20952] erspan0: entered promiscuous mode [ 885.438289][T20952] erspan0: entered allmulticast mode [ 886.863415][T21009] netlink: 'syz.5.6208': attribute type 4 has an invalid length. [ 886.929622][T21013] netlink: 'syz.5.6208': attribute type 4 has an invalid length. [ 887.689051][T21032] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 888.821213][T21044] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 888.822633][T21044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 888.874931][T21044] vhci_hcd vhci_hcd.0: Device attached [ 889.245440][T21046] vhci_hcd: connection closed [ 889.965630][T13914] vhci_hcd vhci_hcd.3: stop threads [ 889.966885][T13914] vhci_hcd vhci_hcd.3: release socket [ 889.993820][T13914] vhci_hcd vhci_hcd.3: disconnect device [ 890.441133][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6230'. [ 892.874432][ T9] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 893.066860][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 893.066887][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 893.066907][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.066925][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 893.066945][ T9] usb 3-1: config 1 has no interface number 0 [ 893.066988][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 893.067010][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.159326][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 893.239798][T21167] kvm: pic: non byte write [ 893.240405][T21167] kvm: pic: non byte write [ 893.240886][T21167] kvm: pic: non byte write [ 893.241350][T21167] kvm: pic: non byte write [ 893.241740][T21167] kvm: pic: non byte write [ 893.444205][ T9] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 893.444582][ T9] snd_usb_pod 3-1:1.1: invalid control EP [ 893.444597][ T9] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 893.444900][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 893.445466][ T9] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 893.730931][T19956] usb 3-1: USB disconnect, device number 52 [ 894.611402][T19613] libceph: connect (1)[c::]:6789 error -101 [ 894.666960][T19613] libceph: mon0 (1)[c::]:6789 connect error [ 894.708804][T19613] libceph: connect (1)[c::]:6789 error -101 [ 894.709011][T19613] libceph: mon0 (1)[c::]:6789 connect error [ 894.751658][T21183] ceph: No mds server is up or the cluster is laggy [ 894.781913][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6292'. [ 895.018313][T19613] libceph: connect (1)[c::]:6789 error -101 [ 895.018503][T19613] libceph: mon0 (1)[c::]:6789 connect error [ 895.303573][ T821] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 895.464353][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 895.466799][ T821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 895.466829][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 895.469690][ T821] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 895.469716][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.469735][ T821] usb 6-1: Product: syz [ 895.469749][ T821] usb 6-1: Manufacturer: syz [ 895.469763][ T821] usb 6-1: SerialNumber: syz [ 895.484644][ T821] usb 6-1: config 0 descriptor?? [ 895.495462][ T821] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 895.495491][ T821] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 896.660905][ T821] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 896.661593][ T821] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 897.064142][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 897.238228][ T9] usb 3-1: config 0 has no interfaces? [ 897.238263][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 897.238287][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.279869][ T9] usb 3-1: config 0 descriptor?? [ 897.545148][ T821] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 897.550792][ T821] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 897.596437][ T821] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 897.596883][ T821] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 897.598345][ T821] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 897.600700][ T821] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 897.619202][ T821] usb 6-1: USB disconnect, device number 43 [ 897.874427][ T821] usb 3-1: USB disconnect, device number 53 [ 899.736204][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6337'. [ 899.736228][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6337'. [ 899.997790][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 899.997807][ T37] audit: type=1326 audit(1777851423.393:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21330 comm="syz.2.6341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb18c106b57 code=0x0 [ 903.279868][T21376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 904.692616][ T37] audit: type=1326 audit(1777851427.749:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21412 comm="syz.5.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ea56cdd9 code=0x7fc00000 [ 904.693913][ T37] audit: type=1326 audit(1777851427.749:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21412 comm="syz.5.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f55ea56cdd9 code=0x7fc00000 [ 905.272126][ T5870] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 905.434203][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 905.436903][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.437066][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.437095][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 905.437117][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 905.437140][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.456320][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.456351][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.456371][ T5870] usb 3-1: Manufacturer: syz [ 906.486280][ T5870] usb 3-1: config 0 descriptor?? [ 906.858534][ T5870] rc_core: IR keymap rc-hauppauge not found [ 906.858555][ T5870] Registered IR keymap rc-empty [ 906.858713][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 906.880869][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 906.900364][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 906.922683][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 907.093040][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.116099][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.144697][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.177861][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.209862][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.232964][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.264824][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.285431][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.308089][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.328876][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 907.403196][ T5870] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 907.403218][ T5870] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 907.447777][ T5870] usb 3-1: USB disconnect, device number 54 [ 909.985111][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6411'. [ 910.180448][T21509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6406'. [ 910.246704][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a5f7c00: rx timeout, send abort [ 910.559255][T21505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.785922][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028b17400: rx timeout, send abort [ 910.788323][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a5f7c00: abort rx timeout. Force session deactivation [ 911.087013][ T5870] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 911.270299][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 911.273389][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.273570][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 911.278862][ T5870] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 911.278889][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.278908][ T5870] usb 6-1: Product: syz [ 911.278921][ T5870] usb 6-1: Manufacturer: syz [ 911.279666][ T5870] usb 6-1: SerialNumber: syz [ 911.327481][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028b17400: abort rx timeout. Force session deactivation [ 911.400882][ T5870] usb 6-1: 0:2 : does not exist [ 911.604739][ T5870] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 911.718592][ T5870] usb 6-1: USB disconnect, device number 44 [ 912.034420][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.173156][ T37] audit: type=1326 audit(1777851434.658:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7fc00000 [ 912.320349][ T37] audit: type=1326 audit(1777851434.787:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb07170cdd9 code=0x7fc00000 [ 912.486117][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6430'. [ 912.648273][ T37] audit: type=1326 audit(1777851435.064:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.4.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7fc00000 [ 912.705713][ T36] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 912.898417][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 912.911983][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.912034][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.912060][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 912.912082][ T36] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 912.912102][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.913172][ T36] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 912.913212][ T36] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 912.913231][ T36] usb 6-1: Manufacturer: syz [ 912.927067][ T36] usb 6-1: config 0 descriptor?? [ 914.479566][ T36] rc_core: IR keymap rc-hauppauge not found [ 914.479585][ T36] Registered IR keymap rc-empty [ 914.479730][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.497907][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.527534][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 914.552496][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 914.577595][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.595727][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.617075][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.638659][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.660378][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.682028][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.705955][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.725399][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.747764][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.769800][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.993502][ T36] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 914.993528][ T36] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 915.011948][ T36] usb 6-1: USB disconnect, device number 45 [ 916.020103][T21601] overlayfs: failed to clone upperpath [ 920.433599][ T36] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 920.596611][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 920.601084][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.601102][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.601123][ T36] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 920.601135][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.611570][ T36] usb 6-1: config 0 descriptor?? [ 920.665432][ T36] hub 6-1:0.0: USB hub found [ 920.935507][ T36] hub 6-1:0.0: 1 port detected [ 921.644540][ T36] hub 6-1:0.0: activate --> -90 [ 922.149969][ T36] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 922.169811][ T5601] usb 6-1: USB disconnect, device number 46 [ 922.170197][T20520] usb 6-1: Failed to suspend device, error -19 [ 922.388813][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 922.390015][T21712] /dev/nullb0: Can't open blockdev [ 925.389132][T21763] binder: 21762:21763 ioctl c0306201 2000000007c0 returned -14 [ 925.591100][T21770] input: syz1 as /devices/virtual/input/input34 [ 925.823760][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6511'. [ 928.089813][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6528'. [ 935.077132][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6555'. [ 935.126842][ T37] audit: type=1326 audit(1777851455.846:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.126891][ T37] audit: type=1326 audit(1777851455.846:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.126931][ T37] audit: type=1326 audit(1777851455.846:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.128587][ T37] audit: type=1326 audit(1777851455.846:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.128633][ T37] audit: type=1326 audit(1777851455.846:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0716cd60e code=0x7ffc0000 [ 935.128672][ T37] audit: type=1326 audit(1777851455.846:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0716cd60e code=0x7ffc0000 [ 935.130314][ T37] audit: type=1326 audit(1777851455.846:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.130359][ T37] audit: type=1326 audit(1777851455.846:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.130398][ T37] audit: type=1326 audit(1777851455.846:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 935.130436][ T37] audit: type=1326 audit(1777851455.846:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21900 comm="syz.4.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07170cdd9 code=0x7ffc0000 [ 936.710777][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.710845][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.315633][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6574'. [ 940.487379][T22000] hugetlbfs: syz.2.6593 (22000): Using mlock ulimits for SHM_HUGETLB is obsolete [ 941.455222][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6592'. [ 947.462075][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 947.626466][T22074] binder: 22070:22074 ioctl c018620b 0 returned -14 [ 948.175379][T22084] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 954.465910][T22159] batadv_slave_1: entered promiscuous mode [ 954.964612][T22168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 955.471621][T22159] batadv_slave_1: left promiscuous mode [ 966.676966][T22285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 968.212998][T19613] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 968.387160][T19613] usb 4-1: device descriptor read/64, error -71 [ 969.523595][T19613] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 969.664405][T19613] usb 4-1: device descriptor read/64, error -71 [ 969.794878][T19613] usb usb4-port1: attempt power cycle [ 970.206130][T19613] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 970.236436][T19613] usb 4-1: device descriptor read/8, error -71 [ 970.487576][T19613] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 970.515008][T19613] usb 4-1: device descriptor read/8, error -71 [ 970.628817][T19613] usb usb4-port1: unable to enumerate USB device [ 981.443433][T22479] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6747'. [ 988.201258][T22531] ------------[ cut here ]------------ [ 988.201272][T22531] debug_locks && !(!get_current()->pi_blocked_on) [ 988.201288][T22531] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#1: syz.2.6763/22531 [ 988.201337][T22531] Modules linked in: [ 988.201358][T22531] CPU: 1 UID: 0 PID: 22531 Comm: syz.2.6763 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 988.201388][T22531] Tainted: [L]=SOFTLOCKUP [ 988.201396][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.201412][T22531] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 988.201440][T22531] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 9a 02 15 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 7e 02 15 f6 [ 988.201459][T22531] RSP: 0018:ffffc900056cf5a0 EFLAGS: 00010282 [ 988.201477][T22531] RAX: 1ffff1100661c167 RBX: 1ffff92000ad9eb8 RCX: 0000000000000046 [ 988.201492][T22531] RDX: 0000000000000000 RSI: ffffffff8d860a50 RDI: ffffffff8ba74b60 [ 988.201507][T22531] RBP: ffffc900056cf660 R08: ffffffff8220e7d4 R09: ffff88801a029758 [ 988.201523][T22531] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: ffff8880330e0b38 [ 988.201539][T22531] R13: dffffc0000000000 R14: ffff88801a029700 R15: ffffc900056cf5e0 [ 988.201555][T22531] FS: 00007fb18a35e6c0(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 988.201574][T22531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 988.201588][T22531] CR2: 00007fee04be64f0 CR3: 00000000773e2000 CR4: 00000000003526f0 [ 988.201606][T22531] Call Trace: [ 988.201614][T22531] [ 988.201627][T22531] ? __pfx_rt_spin_lock+0x10/0x10 [ 988.201654][T22531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 988.201684][T22531] ? lockdep_hardirqs_on+0x7a/0x110 [ 988.201716][T22531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 988.201765][T22531] ? fill_pool+0x156/0x580 [ 988.201795][T22531] get_from_partial_node+0x54/0x480 [ 988.201846][T22531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 988.201882][T22531] ? fill_pool+0x156/0x580 [ 988.201910][T22531] ___slab_alloc+0xb2/0x670 [ 988.201951][T22531] kmem_cache_alloc_noprof+0xea/0x680 [ 988.201974][T22531] ? fill_pool+0x156/0x580 [ 988.202008][T22531] fill_pool+0x156/0x580 [ 988.202044][T22531] ? __pfx_fill_pool+0x10/0x10 [ 988.202082][T22531] ? debug_objects_fill_pool+0x6f/0xd0 [ 988.202116][T22531] ? debug_objects_fill_pool+0x6f/0xd0 [ 988.202148][T22531] debug_objects_fill_pool+0x97/0xd0 [ 988.202177][T22531] debug_object_assert_init+0x34/0x340 [ 988.202246][T22531] hrtimer_start_range_ns+0x3f/0xef0 [ 988.202277][T22531] ? preempt_schedule_thunk+0x16/0x30 [ 988.202310][T22531] ? preempt_schedule_common+0x82/0xd0 [ 988.202350][T22531] futex_lock_pi+0x8df/0xb10 [ 988.202371][T22531] ? rcu_is_watching+0x15/0xb0 [ 988.202411][T22531] ? __pfx_futex_lock_pi+0x10/0x10 [ 988.202438][T22531] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 988.202460][T22531] ? __lock_acquire+0x6b5/0x2cf0 [ 988.202510][T22531] ? __pfx_futex_wake_mark+0x10/0x10 [ 988.202586][T22531] do_futex+0x292/0x420 [ 988.202622][T22531] ? __pfx_do_futex+0x10/0x10 [ 988.202648][T22531] ? __se_sys_futex+0xf2/0x450 [ 988.202677][T22531] ? __sanitizer_cov_trace_switch+0x9b/0x140 [ 988.202707][T22531] __se_sys_futex+0x3a8/0x450 [ 988.202745][T22531] ? __pfx___se_sys_futex+0x10/0x10 [ 988.202776][T22531] ? __task_pid_nr_ns+0x28/0x470 [ 988.202808][T22531] ? __x64_sys_futex+0x21/0xf0 [ 988.202838][T22531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.202861][T22531] do_syscall_64+0x15f/0xf80 [ 988.202879][T22531] ? trace_irq_disable+0x3b/0x140 [ 988.202903][T22531] ? clear_bhb_loop+0x40/0x90 [ 988.202928][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.202948][T22531] RIP: 0033:0x7fb18c10cdd9 [ 988.202973][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.203003][T22531] RSP: 002b:00007fb18a35e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 988.203024][T22531] RAX: ffffffffffffffda RBX: 00007fb18c385fa0 RCX: 00007fb18c10cdd9 [ 988.203039][T22531] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 988.203052][T22531] RBP: 00007fb18c1a2d69 R08: 0000000000000000 R09: 0000000000000001 [ 988.203066][T22531] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 988.203080][T22531] R13: 00007fb18c386038 R14: 00007fb18c385fa0 R15: 00007fff82a22878 [ 988.203120][T22531] [ 988.203130][T22531] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 988.203147][T22531] CPU: 1 UID: 0 PID: 22531 Comm: syz.2.6763 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 988.203175][T22531] Tainted: [L]=SOFTLOCKUP [ 988.203182][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.203195][T22531] Call Trace: [ 988.203203][T22531] [ 988.203211][T22531] vpanic+0x56c/0xa60 [ 988.203239][T22531] ? __pfx__printk+0x10/0x10 [ 988.203268][T22531] ? __pfx_vpanic+0x10/0x10 [ 988.203290][T22531] ? is_bpf_text_address+0x292/0x2b0 [ 988.203319][T22531] ? is_bpf_text_address+0x26/0x2b0 [ 988.203355][T22531] panic+0xc5/0xd0 [ 988.203379][T22531] ? __pfx_panic+0x10/0x10 [ 988.203423][T22531] __warn+0x315/0x4c0 [ 988.203447][T22531] ? rt_spin_lock+0x31c/0x400 [ 988.203474][T22531] ? rt_spin_lock+0x31c/0x400 [ 988.203500][T22531] __report_bug+0x29a/0x540 [ 988.203542][T22531] ? rt_spin_lock+0x31c/0x400 [ 988.203568][T22531] ? __pfx___report_bug+0x10/0x10 [ 988.203597][T22531] ? lockdep_hardirqs_on+0x7a/0x110 [ 988.203626][T22531] ? irqentry_exit+0x218/0x730 [ 988.203643][T22531] ? rcu_is_watching+0x15/0xb0 [ 988.203678][T22531] ? rt_spin_lock+0x31e/0x400 [ 988.203708][T22531] ? rt_spin_lock+0x31c/0x400 [ 988.203733][T22531] report_bug+0x16a/0x220 [ 988.203764][T22531] ? rt_spin_lock+0x31c/0x400 [ 988.203787][T22531] ? rt_spin_lock+0x31e/0x400 [ 988.203811][T22531] handle_bug+0x9c/0x200 [ 988.203834][T22531] exc_invalid_op+0x1a/0x50 [ 988.203857][T22531] asm_exc_invalid_op+0x1a/0x20 [ 988.203876][T22531] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 988.203902][T22531] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 9a 02 15 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 7e 02 15 f6 [ 988.203920][T22531] RSP: 0018:ffffc900056cf5a0 EFLAGS: 00010282 [ 988.203938][T22531] RAX: 1ffff1100661c167 RBX: 1ffff92000ad9eb8 RCX: 0000000000000046 [ 988.203953][T22531] RDX: 0000000000000000 RSI: ffffffff8d860a50 RDI: ffffffff8ba74b60 [ 988.203968][T22531] RBP: ffffc900056cf660 R08: ffffffff8220e7d4 R09: ffff88801a029758 [ 988.203983][T22531] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: ffff8880330e0b38 [ 988.203999][T22531] R13: dffffc0000000000 R14: ffff88801a029700 R15: ffffc900056cf5e0 [ 988.204022][T22531] ? get_from_partial_node+0x54/0x480 [ 988.204073][T22531] ? __pfx_rt_spin_lock+0x10/0x10 [ 988.204099][T22531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 988.204136][T22531] ? lockdep_hardirqs_on+0x7a/0x110 [ 988.204165][T22531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 988.204200][T22531] ? fill_pool+0x156/0x580 [ 988.204229][T22531] get_from_partial_node+0x54/0x480 [ 988.204267][T22531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 988.204304][T22531] ? fill_pool+0x156/0x580 [ 988.204333][T22531] ___slab_alloc+0xb2/0x670 [ 988.204378][T22531] kmem_cache_alloc_noprof+0xea/0x680 [ 988.204400][T22531] ? fill_pool+0x156/0x580 [ 988.204434][T22531] fill_pool+0x156/0x580 [ 988.204471][T22531] ? __pfx_fill_pool+0x10/0x10 [ 988.204508][T22531] ? debug_objects_fill_pool+0x6f/0xd0 [ 988.204536][T22531] ? debug_objects_fill_pool+0x6f/0xd0 [ 988.204567][T22531] debug_objects_fill_pool+0x97/0xd0 [ 988.204596][T22531] debug_object_assert_init+0x34/0x340 [ 988.204633][T22531] hrtimer_start_range_ns+0x3f/0xef0 [ 988.204663][T22531] ? preempt_schedule_thunk+0x16/0x30 [ 988.204694][T22531] ? preempt_schedule_common+0x82/0xd0 [ 988.204732][T22531] futex_lock_pi+0x8df/0xb10 [ 988.204752][T22531] ? rcu_is_watching+0x15/0xb0 [ 988.204792][T22531] ? __pfx_futex_lock_pi+0x10/0x10 [ 988.204819][T22531] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 988.204841][T22531] ? __lock_acquire+0x6b5/0x2cf0 [ 988.204890][T22531] ? __pfx_futex_wake_mark+0x10/0x10 [ 988.204938][T22531] do_futex+0x292/0x420 [ 988.204974][T22531] ? __pfx_do_futex+0x10/0x10 [ 988.205000][T22531] ? __se_sys_futex+0xf2/0x450 [ 988.205030][T22531] ? __sanitizer_cov_trace_switch+0x9b/0x140 [ 988.205060][T22531] __se_sys_futex+0x3a8/0x450 [ 988.205096][T22531] ? __pfx___se_sys_futex+0x10/0x10 [ 988.205135][T22531] ? __task_pid_nr_ns+0x28/0x470 [ 988.205168][T22531] ? __x64_sys_futex+0x21/0xf0 [ 988.205197][T22531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.205218][T22531] do_syscall_64+0x15f/0xf80 [ 988.205236][T22531] ? trace_irq_disable+0x3b/0x140 [ 988.205260][T22531] ? clear_bhb_loop+0x40/0x90 [ 988.205285][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.205306][T22531] RIP: 0033:0x7fb18c10cdd9 [ 988.205323][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.205341][T22531] RSP: 002b:00007fb18a35e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 988.205360][T22531] RAX: ffffffffffffffda RBX: 00007fb18c385fa0 RCX: 00007fb18c10cdd9 [ 988.205376][T22531] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 988.205390][T22531] RBP: 00007fb18c1a2d69 R08: 0000000000000000 R09: 0000000000000001 [ 988.205404][T22531] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 988.205418][T22531] R13: 00007fb18c386038 R14: 00007fb18c385fa0 R15: 00007fff82a22878 [ 988.205453][T22531] [ 988.205958][T22531] Kernel Offset: disabled