last executing test programs: 7m48.284071316s ago: executing program 0 (id=15618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7m48.111408324s ago: executing program 0 (id=15622): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f0000000240)) 7m47.924328654s ago: executing program 0 (id=15626): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@multicast, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x0, 0x0, 0x11, 0x0, @empty=0xe0000000, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xf, 0x100, @val=0x80}}}}}}}, 0x0) 7m47.782319834s ago: executing program 0 (id=15628): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r0, &(0x7f0000000300)={0x8, 0x2d, 0x1, 0x3a, 0x0, 0x2c}, 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ipvlan1\x00', 0x3}, 0x18) 7m47.580500379s ago: executing program 0 (id=15633): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m46.394197253s ago: executing program 0 (id=15646): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff6500000041"], 0x15) 7m30.268084814s ago: executing program 32 (id=15646): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff6500000041"], 0x15) 6m15.309560303s ago: executing program 4 (id=17228): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x800) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 6m15.215488916s ago: executing program 4 (id=17230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 6m15.04365077s ago: executing program 4 (id=17236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x200, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 6m14.747386668s ago: executing program 4 (id=17241): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 6m13.706552385s ago: executing program 4 (id=17260): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x400) 6m13.614603023s ago: executing program 4 (id=17263): r0 = syz_io_uring_setup(0x79ba, &(0x7f0000000540)={0x0, 0x3bd1, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000400)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000008c0)='lB', 0x2}], 0x1}, 0x4004000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)=""/192, 0xc0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 5m57.428101292s ago: executing program 33 (id=17263): r0 = syz_io_uring_setup(0x79ba, &(0x7f0000000540)={0x0, 0x3bd1, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000400)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000008c0)='lB', 0x2}], 0x1}, 0x4004000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)=""/192, 0xc0}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 21.41631388s ago: executing program 2 (id=21429): socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x2, 0x0) inotify_init() socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x85b8, 0x10100, 0x1, 0x1ad}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 20.898770772s ago: executing program 2 (id=21434): socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getdents(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x0, 0x5e, 0x0, 0x1}, 0x28) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x1002, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x80, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 16.841393357s ago: executing program 3 (id=21442): syz_emit_ethernet(0x76, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local, [], "85e7d2e1a48a75fc"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b8e0102030109021b0001000000b3090400000101293000090509"], 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000180)=[0x3, 0x1ff, 0x1d0, 0x7c, 0x6, 0x5, 0x9, 0x6151, 0x45671d7f, 0x1, 0x55, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x5, 0x7, 0xffff621e, 0x6, 0x80, 0xfffffff8, 0x9, 0x1, 0x7f, 0x2, 0x81, 0x400, 0x4, 0x400, 0x8000, 0x7, 0x2, 0x8e11, 0xa, 0x6, 0x40, 0x3, 0x4, 0xffff8000, 0xfffffffa, 0xe4, 0x6914, 0x4, 0x5, 0x6, 0x8f79, 0xff, 0x4, 0x8, 0x20000000, 0x3, 0x8, 0x80f9d7d, 0x5, 0x5, 0x54b, 0xdd, 0xfffffffc, 0x0, 0x7, 0x8, 0xfffffffc, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x5, 0xa, 0x3, 0x10003, 0x703f, 0x8, 0x763d, 0x94c, 0x92, 0xce, 0xc, 0x7fff, 0x7, 0x3, 0x890e, 0xef4, 0x4, 0x8, 0xff, 0x3, 0x3, 0x9cbb, 0x5, 0x1, 0xd021, 0x3, 0x1000, 0x5, 0xff, 0x4, 0x3ff, 0x2, 0x3, 0x5, 0x81, 0x8000, 0x9, 0xd, 0x5f04, 0x6, 0x4, 0xe, 0x964, 0x5, 0xff, 0x8, 0xfffffffe, 0x4, 0xc, 0x40, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x80000000, 0x7, 0x4, 0x101, 0x7b98, 0x3, 0x7f260000, 0x9, 0xff, 0x7, 0x9, 0xc, 0x9, 0x7fffffff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x8, 0x4, 0x83e, 0x7fff, 0x7, 0x9, 0x3, 0xca5d, 0xffffffff, 0x1000, 0x1, 0x0, 0x3, 0x3, 0x79, 0x9, 0x51e6, 0x46, 0xb, 0x1, 0x10000, 0x6, 0x1e00, 0x6, 0x8, 0x1, 0x45495d9b, 0xba, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffff7, 0x1, 0x3, 0x9, 0x80000001, 0xc613, 0x2, 0x86b, 0x81, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x5, 0x5, 0x349, 0x1, 0x3, 0x9, 0x6, 0x1, 0x9, 0x5, 0x8001, 0xe, 0x5, 0x10001, 0x8000, 0xf50a, 0x6, 0x85a, 0x4, 0xc3, 0x3, 0x5, 0x8, 0x10000, 0x10000, 0xa, 0x1ff, 0xf, 0x2, 0x101, 0x5d4, 0xf7c, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x1, 0x5, 0x3, 0x8, 0x0, 0x4, 0x70, 0x4, 0x8, 0x2, 0xfa0, 0x80da, 0x5, 0x3, 0x5, 0x4e01e696, 0x3, 0xfffffffb, 0xd54, 0xb3, 0x4, 0xf7, 0xfff, 0x8, 0x1, 0x6c, 0xd9, 0x6, 0x6, 0x9, 0x2d, 0x8, 0x542dbbe9, 0x9, 0x7a8, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0x7, 0xb59, 0x7, 0xa6ab, 0x7, 0x8000, 0x20, 0x2, 0xfd, 0x8817, 0x2, 0x9, 0x5a, 0x6, 0x80000001, 0x6, 0x3, 0x3, 0x17c7286c, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x8, 0x0, 0x401, 0x40, 0x0, 0x4b4, 0x40, 0x10, 0xf, 0x7, 0x8, 0xffff, 0x9, 0x10001, 0x3, 0x2, 0x5f6c, 0x5, 0x80000001, 0x2, 0x8, 0x2, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x1, 0x7aed, 0x1, 0x0, 0x9, 0x3, 0x0, 0x3, 0x3, 0xfffffffa, 0x3ff, 0x5e9967dd, 0x4, 0x15, 0x0, 0x8, 0x3, 0xfa, 0xfffffffb, 0x2, 0x9, 0x9, 0xc25, 0x69d1, 0x4, 0x8, 0x4, 0x514c, 0x7aded2d2, 0xfffffffe, 0x400, 0x5, 0x6, 0xc48, 0xa, 0x4, 0x2, 0x0, 0x2, 0x101, 0xfffffff7, 0x1, 0x0, 0x100, 0x0, 0x8, 0x3, 0x2, 0xacf7, 0x18000, 0x5, 0x2, 0x6, 0x2, 0x2, 0x7, 0x8, 0x54, 0x81, 0xb8c, 0x10, 0x482b4b04, 0x2, 0x4, 0x7, 0x4, 0xffffa223, 0xcfb0000, 0x9, 0x8, 0x800, 0x5, 0x93, 0xe, 0x7, 0x3, 0x5, 0x4, 0xffff85f6, 0x3, 0xfffff8df, 0x8, 0x1000, 0x3f0000, 0x5, 0x3, 0x7, 0x8, 0xffffffff, 0x8001, 0xa0af, 0xf0b, 0xb, 0x167, 0x1, 0x8, 0x401, 0xb0c, 0x9, 0x3, 0xa9f1, 0x8, 0x0, 0x4, 0x800006, 0x53, 0x2, 0x4, 0x3, 0xfffffffb, 0x7fffffff, 0x6, 0x6dc9, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0xc6, 0x4, 0x1, 0x40, 0x0, 0xa69, 0xffffe8f9, 0x43, 0x10, 0x80000000, 0x1, 0x35f, 0x800000c, 0xfffffffd, 0xd, 0x9, 0x7, 0x10001, 0x3, 0x80000001, 0x2, 0x6, 0x6, 0x6, 0x8, 0x3db, 0x2, 0x8, 0x5, 0xd, 0x26860260, 0x40, 0x0, 0x8000, 0x0, 0x101, 0x1, 0xffffa448, 0x3, 0xf11, 0x6, 0xfffffff9, 0x1, 0x0, 0x5, 0x8, 0x7, 0x9, 0xffff179d, 0x6, 0x0, 0x21, 0x279, 0x3, 0x7ff, 0xe4000000, 0x2, 0xfffffff7, 0x6, 0x0, 0xa, 0x5, 0x1, 0x7, 0x4, 0x3, 0xfffffffb, 0x3, 0x7, 0x5, 0x6, 0x9, 0x2, 0x1, 0x3, 0xc000, 0x6d80000, 0x8, 0x1ff, 0x800, 0xa, 0x2, 0xffffffff, 0x3, 0xff, 0x1, 0x5, 0x2, 0x80000001, 0x4, 0x1, 0x2, 0x1, 0x85, 0xffffffff, 0x4b4, 0x90000001, 0x5, 0x67468d6c, 0x5, 0x1, 0x5, 0x9, 0x3, 0x5, 0x687, 0x3, 0x5, 0x7, 0x3, 0x3c, 0x3, 0xfe3e, 0x0, 0x5, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x0, 0x0, 0x8, 0x8, 0x3, 0xfffff3c2, 0x6, 0x3, 0x6, 0x2, 0x4, 0x3, 0x6, 0x7, 0xc8e, 0x8, 0xf, 0x3, 0x0, 0x9, 0x6, 0x0, 0x14c59023, 0x9, 0xffffff6d, 0x0, 0xf97, 0x2, 0x400, 0x7f, 0x7fff, 0x9, 0xfff, 0x9, 0x7, 0x1, 0x9, 0xb27a, 0x7, 0x7, 0x404, 0x4, 0x9, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x10000, 0xa, 0x3, 0x6, 0x10000, 0x7f, 0x5, 0x3, 0x101, 0xfffffffe, 0x2, 0x4, 0xffffffff, 0x4, 0x5, 0x2, 0x9, 0xffffffff, 0x2, 0x3, 0x1, 0x53f, 0x0, 0x0, 0x10000, 0x7, 0x80, 0x0, 0xd, 0x8, 0x0, 0x2000, 0x572800, 0x6, 0x681, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0xffffff80, 0xfffffffb, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x4, 0x3, 0xa, 0x80000000, 0x1, 0x8, 0x80000002, 0x5668, 0x401, 0x9, 0x7, 0x2, 0x9, 0x2, 0x2, 0x8, 0x925e, 0xa, 0x2, 0x9c, 0x4, 0x8000, 0xa, 0x9, 0x4, 0x8, 0x80000000, 0xfffffebf, 0x23, 0x57a, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x0, 0x9, 0xffff, 0x0, 0x8000, 0x7, 0x2, 0x7, 0x7, 0x5f4, 0xd, 0xdbdb, 0x7000, 0x0, 0x27a, 0x7fff, 0xae, 0x2, 0x8, 0xfffffffe, 0x5, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x7fff, 0x9, 0x4, 0xfffffff9, 0x7, 0x6, 0x9d5e, 0x7665eb43, 0x3, 0x200, 0x8, 0x5, 0x4, 0x0, 0x6, 0x401, 0x6, 0x1, 0x4, 0x3, 0x0, 0x7, 0x2, 0xe62, 0x9, 0x20000, 0x7, 0xd5e, 0x551d, 0x200, 0x2, 0xc66, 0xfffffff8, 0x5, 0x3, 0xa, 0x7, 0x9, 0x100, 0x6, 0x1, 0x4, 0x27023543, 0x1, 0x81, 0x9, 0x4, 0x1, 0xe, 0x8, 0x6, 0xe, 0x3ff, 0x3ff, 0xb6, 0xff, 0x2, 0x4, 0x5, 0x7, 0x1, 0x5, 0x9, 0x6, 0xcf6e, 0xa, 0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x400, 0xa92, 0x9, 0x40, 0x0, 0x6, 0x7, 0xb, 0x40, 0x0, 0xb4, 0x40, 0x5, 0x1, 0x1010000, 0x8, 0x82c, 0x8000, 0x10, 0x2, 0xd, 0xd, 0x6, 0x3, 0xa, 0x6, 0x1000, 0xb, 0x9, 0x40, 0xffff, 0x1, 0x40, 0x6, 0xd, 0x400, 0xd56c, 0x9, 0x8, 0x4, 0x6, 0xddb, 0x9, 0x2, 0x66, 0x10000, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7fff, 0xa73, 0x7, 0xfffffffe, 0x7, 0x2, 0xbf3, 0xa0a6, 0x5, 0xb, 0x9, 0xfffffb0a, 0x8, 0x8001, 0x4, 0x5, 0xb, 0x6, 0x7, 0x1, 0x3, 0x6, 0x1, 0x58, 0xf, 0x80000, 0x100, 0x0, 0xa5a3, 0xd, 0x6f6, 0x2, 0x5, 0xff, 0x80000000, 0xdfb0, 0x47ad, 0x9, 0xfffffdab, 0x5, 0x5, 0x99, 0x7, 0xffffff4d, 0xffe, 0x5f25, 0x93, 0x8, 0xe, 0x100, 0x6, 0x8001, 0x2, 0x8, 0x4, 0x5, 0x9, 0x80000001, 0x5e, 0x5, 0x6, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x7f, 0x4, 0x40, 0x4000e, 0xffffffff, 0x1ff, 0x3, 0x8, 0x6277, 0x5, 0x3, 0x8, 0x82, 0x2, 0x9, 0xa, 0x8, 0x1, 0x4, 0x7f, 0x200, 0xfffffff7, 0x7, 0x6, 0xe9df, 0xff, 0x6, 0x0, 0x3ff, 0x6, 0x7fff, 0xf4, 0x9, 0xa, 0x6, 0x6, 0x7, 0x8b14, 0x3, 0x9, 0x2000000, 0x5, 0xff, 0x7, 0x80000, 0x3, 0xfffffffc, 0x5, 0x1, 0x6, 0x2, 0xfff, 0xd3, 0x1, 0x3a5, 0x0, 0x99d1, 0x7, 0x7, 0x5, 0x4, 0x0, 0x2, 0x400, 0x0, 0x4, 0x1, 0x9bc, 0xd, 0x9, 0x200, 0x3, 0x0, 0x2, 0xf, 0x10001, 0x0, 0xfff, 0x6, 0x56b6fc16, 0x30dfc00, 0x7, 0xf, 0x380000, 0x1, 0x2, 0x9, 0x80, 0x0, 0x2, 0x8, 0x26, 0x6, 0x3, 0xd, 0x1, 0x6, 0x1b1, 0x1, 0x1, 0xfffffff9], 0x1, 0x400, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000040)=0x1f) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) 16.602945188s ago: executing program 2 (id=21445): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x4, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'bridge_slave_1\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x396}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000140), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15.878525418s ago: executing program 6 (id=21455): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x2, 0xf) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r4 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r4, 0x11}) socket$pppl2tp(0x18, 0x1, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xd00) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13.729715818s ago: executing program 6 (id=21458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x55, 0xfffffffc) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7, 0x0, r6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r8 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) 11.698522376s ago: executing program 2 (id=21464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$cachefiles(0xffffff9c, &(0x7f0000001140), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001440)={0x20002000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004005}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, 0xee00, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 11.011474563s ago: executing program 3 (id=21470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000500)=@ethtool_perm_addr={0x20, 0x74, "9a02c5bd4483af1bed126d40570318dd62f44da988f98fc37149f1caab65d6fd5f33618f19ce966bde873c3007c6cada780f77cee3905edbd5a0cd3c7fa7d5ba58530cd3b6e2b0e6bb80b41f8ca378f83c3cff8d525411b523c1d18b9476d43076a3b59a028a488813a8462032a359579ea07ba6"}}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 9.558217326s ago: executing program 3 (id=21475): socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) syz_clone3(&(0x7f0000000240)={0x101500, &(0x7f0000000180), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) wait4(0x0, 0x0, 0x40000000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005667d1040206402d14e0102030109021b000100000000090400000190f19c0009058459"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 7.740061589s ago: executing program 2 (id=21486): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setregid(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') 7.69459916s ago: executing program 6 (id=21488): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a12003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02df", 0xa7) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'ip6tnl0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000300)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 6.271909342s ago: executing program 6 (id=21496): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x10000, @loopback}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x104}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, 0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r5) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 6.148001824s ago: executing program 3 (id=21498): mprotect(&(0x7f0000191000/0x1000)=nil, 0x1000, 0x5) r0 = socket$inet(0x2, 0x3, 0x8d) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000100)={@any, 0x9}) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="0180e89affd36344ed75aaaa86dd60010700003011fffc010000000000cb0000000000000000fc00"/50], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000039abddb0624733000000000000000000d95995ae6f325803319f6f730a9884271b0cb09c3a6187c1790f9ae6f854239df5f782e7f6ea91c957bdf69a91a6b19cd143815a839d1e92cbea7959157a08b0099ba17b04f4b7e40b83f1f0edec65bd250e9cae9f9ca7e31c396b3426bde98d6492b2494b8be9c356"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x50) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000380)={0x29, @local, 0x4e23, 0x1, 'nq\x00', 0x26, 0x3, 0x41}, 0x2c) 4.305738709s ago: executing program 3 (id=21504): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00']}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000c00)={@loopback}, &(0x7f0000002c40)=0x14) 3.760358124s ago: executing program 6 (id=21511): close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r2 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x101201, 0xc9) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xc, 0x0, &(0x7f0000000180)) writev(r4, &(0x7f0000012f40), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.659395946s ago: executing program 1 (id=21512): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\x00'], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d}, 0x1, 0x0, 0x0, 0x618b37b527276fec}, 0x20004000) 3.552092992s ago: executing program 1 (id=21514): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file1\x00'}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='&\\(', &(0x7f0000000580)='./file1\x00', 0xffffffffffffffff) mkdir(0x0, 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60, 0x0, r1, {{0x6, 0x3, 0x661, 0x6, 0x6, 0x2, 0x8, 0x8}}}, 0x60) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) fstatfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 3.221869662s ago: executing program 5 (id=21516): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setregid(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r3, &(0x7f0000000d00)="ae", 0x1) 2.983180754s ago: executing program 1 (id=21517): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setreuid(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r6, 0x89e7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x40080) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) 2.824230631s ago: executing program 5 (id=21518): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x4000000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000000)) 2.690077239s ago: executing program 5 (id=21519): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x101d0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x200000}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80000004, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.611910052s ago: executing program 1 (id=21520): syz_open_procfs$pagemap(0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000280), 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000001f007b113000000000009500a50500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$unix(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1e", 0x1}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x4001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2501, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 2.611418449s ago: executing program 5 (id=21521): close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000020000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x101201, 0xc9) writev(r6, &(0x7f0000012f40), 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000002000/0x1000)=nil) 2.510424592s ago: executing program 2 (id=21522): open(0x0, 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000010001009a"], 0x0) stat(&(0x7f0000000940)='./file0\x00', 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) 2.477544036s ago: executing program 5 (id=21523): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 874.272569ms ago: executing program 1 (id=21524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x4000010, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x800}, 0x94) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xb, 0x2, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000cc0), 0xfd45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0xfeffff, 0x109, 0x0, &(0x7f0000000700)="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", 0x0, 0x81, 0x0, 0x38, 0x0, &(0x7f00000000c0)="0700086b3a2b6e3191ecb193d0b312084133e4ec353136553cb0c461548f3fdf8fc186d7533e3ec69ebbb14f8f8254d3336f1eae4aa107ec", 0x0, 0x4, 0x0, 0x3}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 872.653782ms ago: executing program 6 (id=21525): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x114) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000000000000000000000080000c133a12a91872b3730467c92a3a5050f02b82b7e452f3e6b500000000000000012010000ff030000ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167332a0000000038000000000000000a010000630a0000fa08ab919987305c8ad63785f4a4bc84cb79f70a5d7698a3f59e1f0dbbe9b9f8ed970000001000000000000000130100000900000010000000000000001001000004000000000000000000000000000000000077874cf6e18bde0f1a4f9cd71371465fa0f4f73d8d253601dad8e0a53409cf897ab7626a1fdfcc35dd98", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xffffff0a) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(0x0, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x4) 111.214482ms ago: executing program 3 (id=21526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x2, 0xf) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r7, 0x11}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xd00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000240)={0xfff, 0xdd, 0xe}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 93.566702ms ago: executing program 5 (id=21527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x7, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000180)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x14010, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)=ANY=[@ANYBLOB="02"], 0x4, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x5, 0xb, 0x10, 0x4}, 0x0, 0x0, 0x1, [{0xcf, &(0x7f0000000180)=ANY=[@ANYBLOB="cf03fdc1f1e32f299b321d80c3e327096064717d98c21e76138fdf06863e941e10b7a25b81266332af781946f18490e7e13634f324cf235841713190bfa93f7e02c7bd589cb5cfc9ed4fe7d5b295de27fe1ecd9d1fedc45f3679f736886e2b97ca7be0c906a998e674100ca92dbb987cdb8cabe116b0e6106b97633c95d867590231a9e22774e71a32064cff56ff1596865b25f73c7328a5bfa0918725a8030d5b23e09fd26caa933ce4fa4aecb783f5071ec16676bced92861fc5111fabed9d94d810a7b5a9b1a2fb9d184f28ce19"]}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d39, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffdfe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_START(r7, 0x5402) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r6, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e10540000093f2e3ac894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07", 0x35}], 0x1}, 0x4) 0s ago: executing program 1 (id=21528): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setregid(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r3, &(0x7f0000000d00)="ae", 0x1) kernel console output (not intermixed with test programs): or, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 978.108454][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 978.109172][ T4554] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 978.244289][ T1635] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.262082][ T1635] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.290819][ T1635] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.302072][ T7357] loop9: detected capacity change from 0 to 7 [ 978.324065][ T1635] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.614111][ T7357] Dev loop9: unable to read RDB block 7 [ 978.614163][ T7357] loop9: unable to read partition table [ 978.614345][ T7357] loop9: partition table beyond EOD, truncated [ 978.614417][ T7357] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 978.773379][ T7363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16017'. [ 978.779272][ T4554] Bluetooth: hci5: command tx timeout [ 979.288589][ T9132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.288613][ T9132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.419175][ T9132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.419200][ T9132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.420434][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.420507][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.516948][ T7376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.769621][ T38] audit: type=1400 audit(1002.330:3987): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=7414 comm="syz.3.16042" daddr=fe80::22 dest=20003 [ 981.000966][ T4554] Bluetooth: hci5: command tx timeout [ 981.463164][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.538621][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16088'. [ 984.208383][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 984.368750][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 984.376186][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 984.376219][ T5882] usb 4-1: config 0 has no interface number 0 [ 984.402532][ T5882] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 984.402569][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.402593][ T5882] usb 4-1: Product: syz [ 984.402611][ T5882] usb 4-1: Manufacturer: syz [ 984.402629][ T5882] usb 4-1: SerialNumber: syz [ 984.452848][ T5882] usb 4-1: config 0 descriptor?? [ 984.472901][ T5882] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 984.623941][ T7558] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.16108'. [ 984.777159][ T7560] kvm: kvm [7559]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 985.382922][ T5882] gspca_spca1528: reg_w err -71 [ 985.395328][ T5882] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 985.413815][ T5882] usb 4-1: USB disconnect, device number 11 [ 986.435019][T32051] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 986.481396][ T7608] block nbd1: Unsupported socket: should be TCP or UNIX. [ 986.596670][T32051] usb 6-1: Using ep0 maxpacket: 8 [ 986.605368][T32051] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 986.605401][T32051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.605424][T32051] usb 6-1: Product: syz [ 986.605441][T32051] usb 6-1: Manufacturer: syz [ 986.605458][T32051] usb 6-1: SerialNumber: syz [ 986.655807][T32051] usb 6-1: config 0 descriptor?? [ 986.907617][T32051] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 987.060047][ T7630] netlink: 356 bytes leftover after parsing attributes in process `syz.4.16142'. [ 987.137259][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 987.301152][ T5882] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 987.301220][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.303244][ T5882] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 987.303337][ T5882] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 987.303361][ T5882] usb 3-1: Manufacturer: syz [ 987.370130][ T5882] usb 3-1: config 0 descriptor?? [ 987.490056][ T5882] rc_core: IR keymap rc-hauppauge not found [ 987.490079][ T5882] Registered IR keymap rc-empty [ 987.495059][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 987.537032][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75 [ 987.558227][T32051] gspca_sunplus: reg_w_riv err -71 [ 987.558328][T32051] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 987.620824][T32051] usb 6-1: USB disconnect, device number 2 [ 987.659133][ T5882] usb 3-1: USB disconnect, device number 11 [ 987.944290][ T7655] netlink: 'syz.4.16155': attribute type 10 has an invalid length. [ 987.944317][ T7655] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.16155'. [ 988.088720][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16159'. [ 989.339800][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16182'. [ 990.098540][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 990.259046][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 990.268604][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0 [ 990.268636][ T5882] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 990.268655][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.308135][ T5882] usb 4-1: config 0 descriptor?? [ 990.494976][ T38] audit: type=1400 audit(1011.431:3988): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=7763 comm="syz.5.16208" daddr=fc01::a dest=20000 [ 990.785505][ T5882] hid (null): unknown global tag 0xe [ 990.786339][ T5882] hid (null): report_id 21723 is invalid [ 990.992325][ T5882] usb 4-1: USB disconnect, device number 12 [ 991.094693][ T9823] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 991.156984][ T7776] nbd1: detected capacity change from 0 to 127 [ 991.205387][ T4554] block nbd1: Receive control failed (result -32) [ 991.215447][ T5032] block nbd1: Send control failed (result -32) [ 991.215966][ T5032] block nbd1: Request send failed, requeueing [ 991.253073][ T9823] usb 5-1: Using ep0 maxpacket: 16 [ 991.255470][ T9823] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 991.255498][ T9823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.260374][ T9823] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.260407][ T9823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.260432][ T9823] usb 5-1: Product: syz [ 991.260449][ T9823] usb 5-1: Manufacturer: syz [ 991.260467][ T9823] usb 5-1: SerialNumber: syz [ 991.331993][ T104] block nbd1: Dead connection, failed to find a fallback [ 991.332023][ T104] block nbd1: shutting down sockets [ 991.332042][ T104] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.332075][ T104] Buffer I/O error on dev nbd1, logical block 0, async page read [ 991.355466][ T5032] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.355564][ T5032] Buffer I/O error on dev nbd1, logical block 1, async page read [ 991.356024][ T5032] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.356086][ T5032] Buffer I/O error on dev nbd1, logical block 2, async page read [ 991.356236][ T5032] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.356302][ T5032] Buffer I/O error on dev nbd1, logical block 3, async page read [ 991.356478][ T5032] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.356598][ T5032] Buffer I/O error on dev nbd1, logical block 0, async page read [ 991.356737][ T5032] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.356803][ T5032] Buffer I/O error on dev nbd1, logical block 1, async page read [ 991.356962][ T5032] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.357579][ T5032] Buffer I/O error on dev nbd1, logical block 2, async page read [ 991.357737][ T5032] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.357804][ T5032] Buffer I/O error on dev nbd1, logical block 3, async page read [ 991.357974][ T5032] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.358040][ T5032] Buffer I/O error on dev nbd1, logical block 0, async page read [ 991.358165][ T5032] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 991.358239][ T5032] Buffer I/O error on dev nbd1, logical block 1, async page read [ 991.366537][ T5032] ldm_validate_partition_table(): Disk read failed. [ 991.402226][ T5032] Dev nbd1: unable to read RDB block 0 [ 991.409126][ T5032] nbd1: unable to read partition table [ 991.552715][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 991.556289][ T9823] usb 5-1: 0:2 : does not exist [ 991.562492][ T9823] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 991.611253][ T9823] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 991.625806][ T9823] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 991.653684][ T5032] ldm_validate_partition_table(): Disk read failed. [ 991.654368][ T5032] Dev nbd1: unable to read RDB block 0 [ 991.655239][ T5032] nbd1: unable to read partition table [ 991.659799][ T9823] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 991.696628][ T9823] usb 5-1: USB disconnect, device number 15 [ 991.776909][ T4554] Bluetooth: hci5: command tx timeout [ 991.846553][ T5032] udevd[5032]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.254841][ T7793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 992.254983][ T7793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 992.477247][ T7793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 992.477402][ T7793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 992.611841][ T7793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 992.611937][ T7793] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 992.718573][ T7793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 992.718727][ T7793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 992.840398][ T7793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 992.969268][ T7793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 992.970028][ T7793] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 993.068641][ T7793] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 993.152149][ T7833] fuse: Bad value for 'fd' [ 993.851086][ T6477] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 994.014013][ T6477] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 994.014057][ T6477] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 994.014101][ T6477] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 994.014128][ T6477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.074463][ T7854] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 994.089251][ T6477] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 994.217384][ T38] audit: type=1326 audit(1014.911:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.219449][ T38] audit: type=1326 audit(1014.911:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.222985][ T38] audit: type=1326 audit(1014.911:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.223634][ T38] audit: type=1326 audit(1014.911:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.223684][ T38] audit: type=1326 audit(1014.911:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.224582][ T38] audit: type=1326 audit(1014.911:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.224645][ T38] audit: type=1326 audit(1014.911:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.344770][ T4554] Bluetooth: hci1: command 0x0406 tx timeout [ 994.382059][ T38] audit: type=1326 audit(1014.911:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.382258][ T38] audit: type=1326 audit(1015.061:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7864 comm="syz.2.16255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 994.539504][ T5882] usb 6-1: USB disconnect, device number 3 [ 994.688343][ T4554] Bluetooth: hci2: command 0x0406 tx timeout [ 994.770412][ T4554] Bluetooth: hci4: command 0x0406 tx timeout [ 994.854837][ T7879] netlink: 'syz.3.16261': attribute type 6 has an invalid length. [ 994.857370][ T4554] Bluetooth: hci3: command 0x0c1a tx timeout [ 994.880400][ T7879] netlink: 'syz.3.16261': attribute type 6 has an invalid length. [ 995.114483][ T4554] Bluetooth: hci5: command 0x0c1a tx timeout [ 995.208929][ T5882] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 995.247948][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.375178][ T5882] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 995.375218][ T5882] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 995.375246][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 995.406988][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 995.407023][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.407047][ T5882] usb 3-1: Product: syz [ 995.407065][ T5882] usb 3-1: Manufacturer: syz [ 995.407082][ T5882] usb 3-1: SerialNumber: syz [ 995.468306][ T7883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 995.468574][ T7883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 995.910359][ T5882] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 995.969099][ T5882] usb 3-1: USB disconnect, device number 12 [ 996.569358][ T4554] Bluetooth: hci1: command 0x0406 tx timeout [ 996.887061][ T5882] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 996.908959][ T4554] Bluetooth: hci2: command 0x0406 tx timeout [ 996.994202][ T4554] Bluetooth: hci4: command 0x0406 tx timeout [ 997.045687][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 997.045710][ T38] audit: type=1400 audit(1017.549:4007): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=7957 comm="syz.3.16303" daddr=fe80::bb dest=20000 [ 997.047433][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 997.062293][ T5882] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 997.062390][ T5882] usb 5-1: config 0 has no interface number 0 [ 997.079648][ T4554] Bluetooth: hci3: command 0x0c1a tx timeout [ 997.103242][ T5882] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 997.103276][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.103291][ T5882] usb 5-1: Product: syz [ 997.103303][ T5882] usb 5-1: Manufacturer: syz [ 997.103314][ T5882] usb 5-1: SerialNumber: syz [ 997.210351][ T5882] usb 5-1: config 0 descriptor?? [ 997.241918][ T5882] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 997.336396][ T4554] Bluetooth: hci5: command 0x0c1a tx timeout [ 997.486800][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 997.625812][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 997.913653][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 997.915819][ T9823] usb 5-1: USB disconnect, device number 16 [ 997.954421][ T9823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 997.994776][ T9823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 997.995746][ T9823] quatech2 5-1:0.51: device disconnected [ 998.269818][ T8000] program syz.3.16320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.845440][ T8031] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16336'. [ 999.146130][ T8043] input: syz0 as /devices/virtual/input/input76 [ 999.303170][ T4554] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.541655][ T8060] program syz.3.16348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.562200][ T4554] Bluetooth: hci5: command 0x0c1a tx timeout [ 999.796957][ T8070] program syz.3.16352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.944593][T32051] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1000.104873][T32051] usb 5-1: Using ep0 maxpacket: 32 [ 1000.106902][T32051] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1000.106933][T32051] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1000.106959][T32051] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1000.106985][T32051] usb 5-1: config 1 has no interface number 0 [ 1000.107041][T32051] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.107072][T32051] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1000.108317][T32051] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1000.108349][T32051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=228 [ 1000.108373][T32051] usb 5-1: SerialNumber: syz [ 1000.202305][T32051] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1000.731512][T32051] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1000.973984][ T9823] usb 5-1: USB disconnect, device number 17 [ 1000.976706][ T9823] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1001.314108][ T38] audit: type=1400 audit(1277.540:4008): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8125 comm="syz.3.16381" daddr=fe80::14 dest=20004 [ 1001.510001][ T8138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16385'. [ 1002.585882][ T38] audit: type=1400 audit(1278.728:4009): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8185 comm="syz.3.16412" daddr=fc00:: dest=20002 [ 1003.293035][ T8228] netlink: 'syz.3.16430': attribute type 9 has an invalid length. [ 1003.578363][ T8240] tmpfs: Cannot retroactively limit size [ 1003.741260][ T38] audit: type=1400 audit(1279.822:4010): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8245 comm="syz.2.16439" daddr=::1c9a:e7ff:fe9a:6f34 [ 1003.899837][ T8257] netlink: 'syz.2.16444': attribute type 1 has an invalid length. [ 1004.369546][ T8280] input: syz1 as /devices/virtual/input/input77 [ 1004.944323][ T10] Process accounting resumed [ 1006.540646][ T38] audit: type=1400 audit(1282.432:4011): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8367 comm="syz.3.16495" daddr=2001::1 dest=20004 [ 1006.777674][ T8381] ptrace attach of "./syz-executor exec"[5794] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[8381] [ 1007.266375][ T8389] macvlan1: entered promiscuous mode [ 1007.275736][ T8389] dummy0: entered promiscuous mode [ 1007.326494][ T8389] hsr1: entered promiscuous mode [ 1007.326556][ T8389] hsr1: entered allmulticast mode [ 1007.326573][ T8389] macvlan1: entered allmulticast mode [ 1007.326588][ T8389] veth1_vlan: entered allmulticast mode [ 1007.326624][ T8389] dummy0: entered allmulticast mode [ 1007.973280][ T5882] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1008.155376][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 1008.159714][ T5882] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1008.159758][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.165369][ T5882] usb 5-1: config 0 descriptor?? [ 1008.208967][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1009.056281][ T5882] gspca_sunplus: reg_w_riv err -71 [ 1009.056379][ T5882] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1009.059494][ T5882] usb 5-1: USB disconnect, device number 18 [ 1009.272440][ T8461] netlink: 'syz.3.16541': attribute type 3 has an invalid length. [ 1009.272471][ T8461] netlink: 'syz.3.16541': attribute type 3 has an invalid length. [ 1011.505891][ T8564] sch_tbf: peakrate 256 is lower than or equals to rate 4959736260787916182 ! [ 1011.825108][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16595'. [ 1012.712350][ T38] audit: type=1400 audit(1288.213:4012): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8610 comm="syz.3.16612" daddr=::ffff:127.0.0.1 dest=16385 [ 1012.712707][ T38] audit: type=1400 audit(1288.213:4013): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8610 comm="syz.3.16612" dest=20003 [ 1013.164436][ T38] audit: type=1400 audit(1288.624:4014): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8629 comm="syz.4.16621" daddr=::ffff:0.0.0.0 [ 1013.165360][ T38] audit: type=1400 audit(1288.624:4015): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8629 comm="syz.4.16621" dest=20001 [ 1013.246727][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1013.404260][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1013.406797][ T31] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1013.406827][ T31] usb 4-1: config 0 has no interface number 0 [ 1013.406877][ T31] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1013.406908][ T31] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1013.410956][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1013.410990][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.411014][ T31] usb 4-1: Product: syz [ 1013.411030][ T31] usb 4-1: Manufacturer: syz [ 1013.411048][ T31] usb 4-1: SerialNumber: syz [ 1013.438058][ T31] usb 4-1: config 0 descriptor?? [ 1013.543346][T32051] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1013.706649][T32051] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.706683][T32051] usb 5-1: config 0 has no interfaces? [ 1013.709480][T32051] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1013.709571][T32051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.709597][T32051] usb 5-1: Product: syz [ 1013.709615][T32051] usb 5-1: Manufacturer: syz [ 1013.709632][T32051] usb 5-1: SerialNumber: syz [ 1013.809169][T32051] usb 5-1: config 0 descriptor?? [ 1014.069811][ T10] usb 5-1: USB disconnect, device number 19 [ 1014.131774][ T31] appletouch 4-1:0.85: Geyser mode initialized. [ 1014.157208][ T31] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input78 [ 1014.377365][ T31] usb 4-1: USB disconnect, device number 13 [ 1014.510655][ T31] appletouch 4-1:0.85: input: appletouch disconnected [ 1015.175250][ T8697] program syz.2.16652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1015.361065][ T8705] netlink: 'syz.3.16657': attribute type 11 has an invalid length. [ 1015.414291][ T38] audit: type=1400 audit(1290.729:4016): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=8710 comm="syz.2.16659" daddr=fe80::bb dest=20003 [ 1015.602076][ T38] audit: type=1326 audit(1290.907:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.3.16664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1015.602144][ T38] audit: type=1326 audit(1290.907:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.3.16664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1015.642474][ T38] audit: type=1326 audit(1290.944:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.3.16664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1015.642647][ T38] audit: type=1326 audit(1290.944:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.3.16664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x0 [ 1016.130257][ T8743] program syz.2.16675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.633320][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1016.795457][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.795496][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.795541][ T31] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1016.795567][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.808469][ T31] usb 5-1: config 0 descriptor?? [ 1017.339499][ T31] hid_parser_main: 80 callbacks suppressed [ 1017.339525][ T31] hid-steam 0003:28DE:1142.0051: unknown main item tag 0x0 [ 1017.339560][ T31] hid-steam 0003:28DE:1142.0051: unknown main item tag 0x0 [ 1017.339590][ T31] hid-steam 0003:28DE:1142.0051: unknown main item tag 0x0 [ 1017.339619][ T31] hid-steam 0003:28DE:1142.0051: unknown main item tag 0x0 [ 1017.339648][ T31] hid-steam 0003:28DE:1142.0051: unknown main item tag 0x0 [ 1017.345746][ T31] hid-steam 0003:28DE:1142.0051: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1017.588309][ T9823] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1017.592418][ T10] usb 5-1: USB disconnect, device number 20 [ 1017.663047][ T8796] fido_id[8796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1017.747126][ T9823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.747165][ T9823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.747192][ T9823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1017.747238][ T9823] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1017.747265][ T9823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.819389][ T9823] usb 3-1: config 0 descriptor?? [ 1018.275047][ T9823] plantronics 0003:047F:FFFF.0052: unbalanced collection at end of report description [ 1018.275985][ T9823] plantronics 0003:047F:FFFF.0052: parse failed [ 1018.276104][ T9823] plantronics 0003:047F:FFFF.0052: probe with driver plantronics failed with error -22 [ 1018.476320][ T8822] serio: Serial port ttyS3 [ 1018.493414][ T10] usb 3-1: USB disconnect, device number 13 [ 1018.846339][ T8837] netlink: 'syz.4.16719': attribute type 6 has an invalid length. [ 1018.846370][ T8837] netlink: 84 bytes leftover after parsing attributes in process `syz.4.16719'. [ 1019.111275][ T8847] program syz.4.16725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.432758][ T8864] netlink: 284 bytes leftover after parsing attributes in process `syz.2.16732'. [ 1020.303339][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.490170][ T8945] program syz.3.16771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1022.747961][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1022.913862][ T31] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1022.913904][ T31] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1022.913948][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1022.913975][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.931598][ T8991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1022.977071][ T38] audit: type=1400 audit(1297.810:4021): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=9006 comm="syz.3.16801" [ 1022.980989][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1023.662667][T32051] usb 3-1: USB disconnect, device number 14 [ 1023.938068][ T38] audit: type=1400 audit(1298.708:4022): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=9039 comm="syz.4.16816" daddr=fc00::1 dest=20003 [ 1024.100200][ T9046] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16819'. [ 1024.166269][ T9048] ªªªªªª: renamed from vlan0 (while UP) [ 1024.454856][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16826'. [ 1026.458048][ T9154] vivid-008: disconnect [ 1026.468763][ T9153] vivid-008: reconnect [ 1026.931152][ T38] audit: type=1400 audit(1301.505:4023): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=9176 comm="syz.2.16883" daddr=fc00::1 dest=20002 [ 1027.193572][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16887'. [ 1027.444290][ T9202] program syz.4.16894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1027.868691][ T9823] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1027.935668][ T5882] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1028.031314][ T9823] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1028.031345][ T9823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.031368][ T9823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1028.031393][ T9823] usb 3-1: config 1 has no interface number 0 [ 1028.031430][ T9823] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1028.031477][ T9823] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1028.034629][ T9823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.034660][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.034686][ T9823] usb 3-1: Product: syz [ 1028.034703][ T9823] usb 3-1: Manufacturer: syz [ 1028.034721][ T9823] usb 3-1: SerialNumber: syz [ 1028.126949][ T5882] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1028.127034][ T5882] usb 5-1: config 0 has no interface number 0 [ 1028.144838][ T5882] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1028.144871][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.144894][ T5882] usb 5-1: Product: syz [ 1028.144930][ T5882] usb 5-1: Manufacturer: syz [ 1028.144947][ T5882] usb 5-1: SerialNumber: syz [ 1028.202427][ T5882] usb 5-1: config 0 descriptor?? [ 1028.683408][ T9823] usb 3-1: USB disconnect, device number 15 [ 1029.103472][ T5882] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1029.103508][ T5882] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1029.103832][ T5882] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1029.171157][ T5882] usb 5-1: USB disconnect, device number 21 [ 1029.701419][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16927'. [ 1029.762145][ T38] audit: type=1400 audit(1304.161:4024): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=9272 comm="syz.4.16929" daddr=fe80::17 dest=20002 [ 1030.074754][ T9280] netlink: 38 bytes leftover after parsing attributes in process `syz.4.16931'. [ 1030.146445][ T9271] team0: Port device team_slave_1 removed [ 1033.117954][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1033.278208][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1033.281338][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1033.281399][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.281426][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.281455][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1033.281482][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.281529][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1033.281555][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.641424][ T31] usb 5-1: GET_CAPABILITIES returned 0 [ 1033.641478][ T31] usbtmc 5-1:16.0: can't read capabilities [ 1033.887282][ T9823] usb 5-1: USB disconnect, device number 22 [ 1034.635566][ T9823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1034.796605][ T4554] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1034.808873][ T9823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1034.808960][ T9823] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1034.809016][ T9823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.809081][ T9823] usb 3-1: config 220 has no interface number 2 [ 1034.809527][ T9823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1034.809613][ T9823] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1034.809668][ T9823] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1034.809723][ T9823] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1034.887499][ T9823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1034.887535][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.887559][ T9823] usb 3-1: Product: syz [ 1034.887577][ T9823] usb 3-1: Manufacturer: syz [ 1034.887595][ T9823] usb 3-1: SerialNumber: syz [ 1035.248700][ T9823] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1035.248742][ T9823] uvcvideo 3-1:220.0: No valid video chain found. [ 1035.248811][ T9823] usb 3-1: selecting invalid altsetting 0 [ 1035.344847][ T9823] usb 3-1: selecting invalid altsetting 0 [ 1035.344890][ T9823] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1035.406978][ T9823] usb 3-1: USB disconnect, device number 16 [ 1036.006071][ T9478] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1036.281855][ T9823] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1036.466578][ T9823] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1036.466610][ T9823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.466667][ T9823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 1036.466715][ T9823] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1036.466742][ T9823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.486997][ T9481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1036.514235][ T9823] hub 3-1:1.0: bad descriptor, ignoring hub [ 1036.514296][ T9823] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1036.516345][ T9823] cdc_wdm 3-1:1.0: skipping garbage [ 1036.516410][ T9823] cdc_wdm 3-1:1.0: skipping garbage [ 1036.614264][ T9823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1036.614291][ T9823] cdc_wdm 3-1:1.0: Unknown control protocol [ 1036.871500][ T31] usb 3-1: USB disconnect, device number 17 [ 1036.901948][ T9481] cdc_wdm 3-1:1.0: Error autopm - -16 [ 1037.393839][ T31] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1037.567144][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1037.567176][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1037.567232][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 1037.567279][ T31] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1037.567304][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.627896][ T9481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1037.647685][ T31] hub 3-1:1.0: bad descriptor, ignoring hub [ 1037.647728][ T31] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1037.648685][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1037.648703][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1037.689359][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1037.689385][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 1038.056618][ T6477] usb 3-1: USB disconnect, device number 18 [ 1039.018781][ T6477] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1039.179162][ T6477] usb 3-1: Using ep0 maxpacket: 8 [ 1039.182248][ T6477] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.182284][ T6477] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1039.182313][ T6477] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.182340][ T6477] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.182390][ T6477] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1039.182418][ T6477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.455315][ T9615] netlink: 7 bytes leftover after parsing attributes in process `syz.4.17095'. [ 1039.492949][ T6477] usb 3-1: GET_CAPABILITIES returned 0 [ 1039.493002][ T6477] usbtmc 3-1:16.0: can't read capabilities [ 1039.735556][ T31] usb 3-1: USB disconnect, device number 19 [ 1040.133121][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1040.290896][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1040.293445][ T31] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1040.293515][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1040.293563][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1040.293592][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1040.293618][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.293663][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1040.293689][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.637985][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 1040.638037][ T31] usbtmc 4-1:16.0: can't read capabilities [ 1040.772008][ T6477] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1040.862087][ T5868] usb 4-1: USB disconnect, device number 14 [ 1040.932284][ T6477] usb 5-1: Using ep0 maxpacket: 32 [ 1040.936420][ T6477] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1040.936455][ T6477] usb 5-1: config 0 has no interface number 0 [ 1040.951062][ T6477] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1040.951184][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.951278][ T6477] usb 5-1: Product: syz [ 1040.951322][ T6477] usb 5-1: Manufacturer: syz [ 1040.951366][ T6477] usb 5-1: SerialNumber: syz [ 1041.007471][T32051] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1041.012584][ T6477] usb 5-1: config 0 descriptor?? [ 1041.052426][ T6477] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1041.180917][T32051] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.184060][T32051] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1041.184104][T32051] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1041.184129][T32051] usb 3-1: Product: syz [ 1041.184147][T32051] usb 3-1: Manufacturer: syz [ 1041.184164][T32051] usb 3-1: SerialNumber: syz [ 1041.240390][T32051] usb 3-1: config 0 descriptor?? [ 1041.250364][T32051] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 1041.271829][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1041.271915][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 1041.290622][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1041.358156][T32051] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1041.372698][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1041.376085][T32051] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1041.379766][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1041.407469][T32051] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1041.411297][T32051] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1041.432020][T32051] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1041.434307][ T6477] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB4 [ 1041.613960][T32051] usb 3-1: USB disconnect, device number 20 [ 1041.630269][ T6477] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB5 [ 1041.743926][T32051] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1041.764484][T32051] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1041.776087][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1041.795800][T32051] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1041.806397][ T6477] usb 5-1: USB disconnect, device number 23 [ 1041.847357][T32051] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1041.848407][T32051] keyspan 3-1:0.0: device disconnected [ 1041.970893][ T6477] quatech-serial ttyUSB4: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB4 [ 1041.991935][ T6477] quatech-serial ttyUSB5: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB5 [ 1041.992657][ T6477] quatech2 5-1:0.51: device disconnected [ 1042.375000][ T9705] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1042.576263][ T38] audit: type=1400 audit(1316.134:4025): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=9713 comm="syz.4.17143" daddr=::ffff:172.20.20.170 dest=20003 [ 1043.911952][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17173'. [ 1044.103746][ T6477] kernel write not supported for file bpf-prog (pid: 6477 comm: kworker/0:7) [ 1044.445483][ T38] audit: type=1326 audit(1317.884:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.445554][ T38] audit: type=1326 audit(1317.884:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.448586][ T38] audit: type=1326 audit(1317.884:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.449023][ T38] audit: type=1326 audit(1317.884:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.449201][ T38] audit: type=1326 audit(1317.884:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.472187][ T38] audit: type=1326 audit(1317.912:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.472251][ T38] audit: type=1326 audit(1317.912:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.472302][ T38] audit: type=1326 audit(1317.912:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1044.472351][ T38] audit: type=1326 audit(1317.912:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.17183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1045.034076][ T9812] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.17190'. [ 1045.066320][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.066399][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.345326][ T9885] netlink: 7 bytes leftover after parsing attributes in process `syz.4.17220'. [ 1046.345378][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17220'. [ 1046.345403][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17220'. [ 1048.690168][ T9979] veth1_to_batadv: entered allmulticast mode [ 1048.713831][ T9979] pim6reg: entered allmulticast mode [ 1051.570334][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1051.570355][ T38] audit: type=1400 audit(1324.562:4046): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10080 comm="syz.2.17318" daddr=fe80::1d dest=20004 [ 1051.887359][ T38] audit: type=1400 audit(1324.852:4047): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10093 comm="syz.2.17323" daddr=2001::2 dest=20001 [ 1052.150898][T10105] vlan2: entered allmulticast mode [ 1052.150924][T10105] geneve1: entered allmulticast mode [ 1052.328839][ T6477] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1052.510296][ T6477] usb 3-1: Using ep0 maxpacket: 8 [ 1052.512709][ T6477] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.512762][ T6477] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1052.512827][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.512862][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.512893][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.512923][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.512954][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1052.512984][ T6477] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1052.514485][ T6477] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.514528][ T6477] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1052.514572][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.514604][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.514634][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.514664][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.514695][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1052.514726][ T6477] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1052.516174][ T6477] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1052.516214][ T6477] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1052.516260][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1052.516291][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.516321][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.516352][ T6477] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.516383][ T6477] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1052.516413][ T6477] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1052.802752][ T6477] usb 3-1: string descriptor 0 read error: -22 [ 1052.802881][ T6477] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1052.802900][ T6477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.906227][ T6477] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1053.608931][ T5868] usb 3-1: USB disconnect, device number 21 [ 1053.968769][T10148] loop3: detected capacity change from 0 to 1 [ 1054.000712][T10148] Dev loop3: unable to read RDB block 1 [ 1054.000772][T10148] loop3: unable to read partition table [ 1054.001009][T10148] loop3: partition table beyond EOD, truncated [ 1054.012262][T10148] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1054.510960][ T38] audit: type=1326 audit(1327.312:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1054.511533][ T38] audit: type=1326 audit(1327.312:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1054.512271][ T38] audit: type=1326 audit(1327.312:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1054.524363][ T38] audit: type=1326 audit(1327.312:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e9f6b58e code=0x7ffc0000 [ 1054.524549][ T38] audit: type=1326 audit(1327.312:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1054.573827][ T38] audit: type=1326 audit(1327.369:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e9f6b58e code=0x7ffc0000 [ 1054.575938][ T38] audit: type=1326 audit(1327.369:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e9f6b58e code=0x7ffc0000 [ 1054.578201][ T38] audit: type=1326 audit(1327.369:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10161 comm="syz.2.17356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e9f6b58e code=0x7ffc0000 [ 1055.388738][T10192] loop8: detected capacity change from 0 to 7 [ 1055.449581][T10192] Dev loop8: unable to read RDB block 7 [ 1055.449633][T10192] loop8: unable to read partition table [ 1055.449877][T10192] loop8: partition table beyond EOD, truncated [ 1055.449915][T10192] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1056.486010][T10232] netlink: 'syz.2.17390': attribute type 7 has an invalid length. [ 1056.486034][T10232] netlink: 'syz.2.17390': attribute type 8 has an invalid length. [ 1056.486053][T10232] netlink: 'syz.2.17390': attribute type 7 has an invalid length. [ 1056.486069][T10232] netlink: 208740 bytes leftover after parsing attributes in process `syz.2.17390'. [ 1059.103413][ T38] kauditd_printk_skb: 264 callbacks suppressed [ 1059.103437][ T38] audit: type=1400 audit(1331.597:4320): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10324 comm="syz.3.17436" daddr=fe80::1b dest=16385 [ 1059.443046][ T38] audit: type=1400 audit(1331.915:4321): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10337 comm="syz.3.17443" daddr=::ffff:100.1.1.2 dest=20001 [ 1059.801721][ T5959] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1059.968596][ T5959] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1059.968628][ T5959] usb 3-1: config 1 has no interface number 0 [ 1059.968683][ T5959] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1059.968715][ T5959] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1059.968816][ T5959] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.020425][ T5959] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1060.020466][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.020489][ T5959] usb 3-1: Product: syz [ 1060.020507][ T5959] usb 3-1: Manufacturer: syz [ 1060.020525][ T5959] usb 3-1: SerialNumber: syz [ 1060.072600][T10341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1060.304489][T10341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1060.588358][ T5959] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1061.239148][ T5959] usb 3-1: USB disconnect, device number 22 [ 1061.262932][ T5959] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 1061.462402][ T5959] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1063.746935][ T6477] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1063.912301][ T6477] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1063.912337][ T6477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.912361][ T6477] usb 4-1: Product: syz [ 1063.912380][ T6477] usb 4-1: Manufacturer: syz [ 1063.912399][ T6477] usb 4-1: SerialNumber: syz [ 1063.941314][ T6477] usb 4-1: config 0 descriptor?? [ 1064.355771][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1064.392850][ T6477] usb 4-1: Firmware: major: 71, minor: 243, hardware type: UNKNOWN (153) [ 1064.516112][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1064.518801][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1064.518832][ T31] usb 3-1: config 0 has no interface number 0 [ 1064.522152][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1064.522186][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.522211][ T31] usb 3-1: Product: syz [ 1064.522228][ T31] usb 3-1: Manufacturer: syz [ 1064.522246][ T31] usb 3-1: SerialNumber: syz [ 1064.582426][ T31] usb 3-1: config 0 descriptor?? [ 1064.603324][ T6477] usb 4-1: Firmware: build [ 1064.618037][ T31] smsc95xx v2.0.0 [ 1064.822810][ T6477] usb 4-1: failed to fetch extended address, random address set [ 1064.822846][ T6477] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1064.823091][ T6477] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1064.877581][ T6477] usb 4-1: USB disconnect, device number 15 [ 1065.525087][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1065.563139][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1065.627854][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1065.666549][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1065.681367][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1065.801509][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1065.801546][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1065.803535][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1065.803879][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1065.880665][ T31] usb 3-1: USB disconnect, device number 23 [ 1066.452652][T28319] team0: Port device syz_tun removed [ 1066.728859][ T6477] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1066.911961][ T6477] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1066.911992][ T6477] usb 4-1: can't read configurations, error -71 [ 1067.626719][ T38] audit: type=1400 audit(1339.566:4322): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10592 comm="syz.2.17556" daddr=fc01:: [ 1067.627198][ T38] audit: type=1400 audit(1339.575:4323): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=10592 comm="syz.2.17556" daddr=fc02:: dest=20003 [ 1068.016378][ T1628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.067953][ T5115] Bluetooth: hci6: command tx timeout [ 1068.605330][ T1628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.099806][ T1628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.544311][ T1628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.257002][T10506] chnl_net:caif_netlink_parms(): no params data found [ 1070.292360][ T5115] Bluetooth: hci6: command tx timeout [ 1071.250176][ T1628] bridge0: port 4(batadv0) entered disabled state [ 1071.388169][ T1628] bond0: left allmulticast mode [ 1071.388194][ T1628] bond_slave_1: left allmulticast mode [ 1071.388973][ T1628] bridge0: port 3(bond0) entered disabled state [ 1071.505081][ T1628] bridge_slave_1: left allmulticast mode [ 1071.505117][ T1628] bridge_slave_1: left promiscuous mode [ 1071.535452][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.638805][ T1628] bridge_slave_0: left promiscuous mode [ 1071.639065][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.673893][T10764] Invalid argument reading file caps for ./file0 [ 1072.512472][ T5115] Bluetooth: hci6: command tx timeout [ 1074.033879][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17674'. [ 1074.033918][T10849] netlink: 'syz.3.17674': attribute type 30 has an invalid length. [ 1074.089623][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17674'. [ 1074.089662][T10854] netlink: 'syz.3.17674': attribute type 30 has an invalid length. [ 1074.758562][ T5115] Bluetooth: hci6: command tx timeout [ 1077.091098][ T1628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.132551][ T1628] bond_slave_1: left promiscuous mode [ 1077.136547][ T1628] bond0 (unregistering): Released all slaves [ 1078.663669][ T1628] bond1 (unregistering): Released all slaves [ 1078.697254][ T1628] bond2 (unregistering): Released all slaves [ 1078.750485][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.750642][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.750895][T10506] bridge_slave_0: entered allmulticast mode [ 1078.755216][T10506] bridge_slave_0: entered promiscuous mode [ 1078.910236][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.910374][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.910611][T10506] bridge_slave_1: entered allmulticast mode [ 1078.913387][T10506] bridge_slave_1: entered promiscuous mode [ 1078.969220][ T9132] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.023037][ T9132] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.088027][ T9132] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.129305][ T9132] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.156374][T10506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.194948][T10506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.195282][ T1628] tipc: Disabling bearer [ 1079.219309][ T1628] tipc: Left network mode [ 1079.371474][T10506] team0: Port device team_slave_0 added [ 1079.374461][T10506] team0: Port device team_slave_1 added [ 1079.599890][T10506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.599911][T10506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.599942][T10506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.618011][T10506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.618073][T10506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.618149][T10506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.948035][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17792'. [ 1080.020979][ T1628] IPVS: stopping backup sync thread 3843 ... [ 1080.354832][T10506] hsr_slave_0: entered promiscuous mode [ 1080.356346][T10506] hsr_slave_1: entered promiscuous mode [ 1080.357346][T10506] debugfs: 'hsr0' already exists in 'hsr' [ 1080.357375][T10506] Cannot create hsr debugfs directory [ 1083.164950][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17847'. [ 1083.164985][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17847'. [ 1083.375282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.983496][ T1628] hsr_slave_0: left promiscuous mode [ 1084.084559][ T1628] hsr_slave_1: left promiscuous mode [ 1084.086086][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.086619][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.186634][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.186672][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.239279][T11269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input79 [ 1084.679585][ T5959] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1084.697220][ T1628] veth0_macvtap: left promiscuous mode [ 1084.748306][ T1628] veth1_vlan: left promiscuous mode [ 1084.852019][ T5959] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1084.852056][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.859167][ T5959] usb 3-1: config 0 descriptor?? [ 1084.910322][ T5959] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1085.325307][ T5959] gspca_spca508: reg_read err -32 [ 1085.325626][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1085.325801][ T5959] gspca_spca508: reg_read err -32 [ 1085.326197][ T5959] gspca_spca508: reg_read err -71 [ 1085.326642][ T5959] gspca_spca508: reg_read err -71 [ 1085.327043][ T5959] gspca_spca508: reg write: error -71 [ 1085.327130][ T5959] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1085.352123][ T5959] usb 3-1: USB disconnect, device number 24 [ 1086.110878][ T5959] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1086.311477][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 1086.333501][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.333542][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.333569][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.333617][ T5959] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1086.333645][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.390566][ T5959] usb 4-1: config 0 descriptor?? [ 1086.861076][ T5959] microsoft 0003:045E:07DA.0053: unbalanced delimiter at end of report description [ 1086.872043][ T5959] microsoft 0003:045E:07DA.0053: parse failed [ 1086.872343][ T5959] microsoft 0003:045E:07DA.0053: probe with driver microsoft failed with error -22 [ 1087.084156][T32051] usb 4-1: USB disconnect, device number 18 [ 1088.882011][ T1628] team0 (unregistering): Port device macvlan0 removed [ 1092.122054][ T1628] team0 (unregistering): Port device team_slave_1 removed [ 1092.643905][ T1628] team0 (unregistering): Port device team_slave_0 removed [ 1096.429852][T10506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1096.556247][T10506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1096.717177][T10506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1096.825690][T10506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1097.324406][ T38] audit: type=1400 audit(1367.347:4324): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=11808 comm="syz.2.18124" daddr=fe80::d dest=3 [ 1097.393612][T10506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.474966][ T38] audit: type=1400 audit(1367.488:4325): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=11810 comm="syz.3.18126" daddr=fe88::4 [ 1097.475030][ T38] audit: type=1400 audit(1367.488:4326): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=11810 comm="syz.3.18126" daddr=::ffff:224.0.0.1 dest=20000 [ 1097.589804][T10506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.623568][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.623815][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.666990][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.675617][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.983194][ T38] audit: type=1400 audit(1367.965:4327): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="," object="_" requested=w pid=11827 comm="syz.3.18131" saddr=fc02:: daddr=fe80::aa dest=3618 netif=wpan0 [ 1098.453476][ T1628] IPVS: stop unused estimator thread 0... [ 1098.996008][T11862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1099.154313][T10506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.750723][ T38] audit: type=1400 audit(1369.621:4328): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="," object="_" requested=w pid=11889 comm="syz.3.18154" saddr=9e9a:ce5f:fb2e:764:3dd:2821:0:2 daddr=ff02::1 netif=wpan0 [ 1100.297431][ T5959] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1100.445677][T10506] veth0_vlan: entered promiscuous mode [ 1100.457647][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 1100.461780][ T5959] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1100.461812][ T5959] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1100.461836][ T5959] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1100.461862][ T5959] usb 4-1: config 250 has no interface number 0 [ 1100.461913][ T5959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1100.461945][ T5959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1100.461975][ T5959] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.462001][ T5959] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1100.462030][ T5959] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1100.462060][ T5959] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1100.464733][ T5959] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1100.464765][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1100.464787][ T5959] usb 4-1: Product: syz [ 1100.464803][ T5959] usb 4-1: SerialNumber: syz [ 1100.574544][T10506] veth1_vlan: entered promiscuous mode [ 1100.621345][ T5959] hub 4-1:250.228: bad descriptor, ignoring hub [ 1100.621389][ T5959] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1100.857397][ T5959] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1100.902460][T10506] veth0_macvtap: entered promiscuous mode [ 1100.981766][T10506] veth1_macvtap: entered promiscuous mode [ 1101.100862][T10506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.135810][T10506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.221115][ T2238] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.221439][ T2238] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.221687][ T2238] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.222331][ T2238] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.854757][ T5866] usb 4-1: USB disconnect, device number 19 [ 1101.936795][ T1642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.936822][ T1642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.990161][ T5866] usblp0: removed [ 1102.211623][ T1642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.211648][ T1642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.782142][T12129] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1107.945977][T12180] netlink: 'syz.2.18276': attribute type 21 has an invalid length. [ 1107.946008][T12180] IPv6: NLM_F_CREATE should be specified when creating new route [ 1109.493326][T12231] loop8: detected capacity change from 0 to 7 [ 1109.522665][T11906] Dev loop8: unable to read RDB block 7 [ 1109.522716][T11906] loop8: unable to read partition table [ 1109.522974][T11906] loop8: partition table beyond EOD, truncated [ 1109.570906][T12231] Dev loop8: unable to read RDB block 7 [ 1109.570959][T12231] loop8: unable to read partition table [ 1109.571212][T12231] loop8: partition table beyond EOD, truncated [ 1109.572972][T12231] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1110.728486][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1110.765981][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.766059][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.950454][T12285] netlink: 'syz.2.18326': attribute type 10 has an invalid length. [ 1111.063257][T12285] team0: Device dummy0 failed to register rx_handler [ 1111.789789][ T9823] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1111.928838][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1111.962149][ T9823] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.993866][ T9823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.993902][ T9823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.993924][ T9823] usb 3-1: SerialNumber: syz [ 1112.128831][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.129127][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1112.129548][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.199310][ T10] usb 4-1: config 0 descriptor?? [ 1112.433098][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1112.433993][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1112.475714][ T10] usb 4-1: USB disconnect, device number 20 [ 1112.750477][ T9823] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1112.987080][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1113.152886][ T5866] usb 3-1: USB disconnect, device number 25 [ 1113.156726][ T5866] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1113.173899][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1113.176700][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.176755][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1113.176783][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.230564][ T10] usb 4-1: config 0 descriptor?? [ 1113.249015][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1113.252593][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1113.770150][ T10] usb 4-1: USB disconnect, device number 21 [ 1113.789310][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1116.588006][T12487] vcan0: tx address claim with different name [ 1116.849727][T12499] netlink: 'syz.6.18411': attribute type 1 has an invalid length. [ 1118.017337][T12545] can0: slcan on ptm0. [ 1118.078194][T12552] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1118.223378][T12561] loop5: detected capacity change from 0 to 7 [ 1118.232278][T12561] Dev loop5: unable to read RDB block 7 [ 1118.232325][T12561] loop5: unable to read partition table [ 1118.232899][T12561] loop5: partition table beyond EOD, truncated [ 1118.233111][T12561] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1118.592613][T12543] can0 (unregistered): slcan off ptm0. [ 1119.772883][T12611] tipc: Enabling of bearer rejected, failed to enable media [ 1122.147201][T12679] tipc: Resetting bearer [ 1122.587493][T12699] 9p: Bad value for 'wfdno' [ 1123.538856][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1123.704148][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.704180][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1123.705682][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1123.705714][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1123.705739][ T10] usb 3-1: SerialNumber: syz [ 1124.033874][ T10] usb 3-1: 0:2 : does not exist [ 1124.098751][ T10] usb 3-1: USB disconnect, device number 26 [ 1124.172776][T11906] udevd[11906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.498017][ T9823] IPVS: starting estimator thread 0... [ 1124.618666][T12754] IPVS: using max 8 ests per chain, 19200 per kthread [ 1125.995968][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18532'. [ 1127.601224][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1127.772704][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1127.777126][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.777164][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.777209][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1127.777236][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.838436][ T10] usb 3-1: config 0 descriptor?? [ 1128.340323][ T10] savu 0003:1E7D:2D5A.0054: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1128.654640][ T31] usb 3-1: USB disconnect, device number 27 [ 1129.024619][ T5868] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1129.204803][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 1129.207370][ T5868] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.207430][ T5868] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1129.207461][ T5868] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.207493][ T5868] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1129.210578][ T5868] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1129.210609][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.210634][ T5868] usb 4-1: Product: syz [ 1129.210650][ T5868] usb 4-1: Manufacturer: syz [ 1129.210667][ T5868] usb 4-1: SerialNumber: syz [ 1129.352137][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1129.443768][ T5868] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input80 [ 1129.589901][ T5868] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1129.589927][ T5868] (id 0x00) [ 1129.901423][ T5868] rc_core: IR keymap rc-imon-pad not found [ 1129.901459][ T5868] Registered IR keymap rc-empty [ 1129.901567][ T5868] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1129.901589][ T5868] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1129.987011][ T5868] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1129.990587][ T5868] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input81 [ 1130.047613][ T5868] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:22> initialized [ 1130.206064][ T31] usb 4-1: USB disconnect, device number 22 [ 1131.205476][T12977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1132.358405][ T5868] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1132.551205][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1132.553590][ T5868] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 1132.553618][ T5868] usb 3-1: config 0 has no interface number 0 [ 1132.555792][ T5868] usb 3-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 1132.555821][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.555842][ T5868] usb 3-1: Product: syz [ 1132.555856][ T5868] usb 3-1: Manufacturer: syz [ 1132.555872][ T5868] usb 3-1: SerialNumber: syz [ 1132.623605][ T5868] usb 3-1: config 0 descriptor?? [ 1132.634935][ T5868] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 1132.851551][ T5868] gspca_nw80x: reg_w err -71 [ 1132.851671][ T5868] nw80x 3-1:0.136: probe with driver nw80x failed with error -71 [ 1132.881065][ T5868] usb 3-1: USB disconnect, device number 28 [ 1133.592862][T13049] netlink: 'syz.2.18646': attribute type 9 has an invalid length. [ 1133.592887][T13049] netlink: 'syz.2.18646': attribute type 11 has an invalid length. [ 1133.592905][T13049] netlink: 'syz.2.18646': attribute type 12 has an invalid length. [ 1133.592927][T13049] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.18646'. [ 1133.593065][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18646'. [ 1133.779137][T13055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.033911][T13095] ªªªªªª: renamed from vlan0 (while UP) [ 1136.300868][ T38] audit: type=1400 audit(1403.809:4329): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=13132 comm="syz.3.18687" daddr=fe80::bb dest=20003 [ 1138.178455][T13201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.801564][ T9823] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1139.970911][ T9823] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1139.970953][ T9823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.970977][ T9823] usb 4-1: config 0 has no interface number 0 [ 1139.971030][ T9823] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1139.971056][ T9823] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.975866][ T9823] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1139.975901][ T9823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.975925][ T9823] usb 4-1: Product: syz [ 1139.975950][ T9823] usb 4-1: Manufacturer: syz [ 1139.975966][ T9823] usb 4-1: SerialNumber: syz [ 1140.082755][ T9823] usb 4-1: config 0 descriptor?? [ 1140.366979][ T38] audit: type=1400 audit(1407.616:4330): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=13275 comm="syz.6.18755" daddr=fe80::d dest=3 [ 1140.559574][ T9823] usb 4-1: USB disconnect, device number 23 [ 1140.715188][ T38] audit: type=1326 audit(1407.935:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13289 comm="syz.2.18762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e9faacb9 code=0x0 [ 1142.006002][ T38] audit: type=1400 audit(1409.151:4332): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=13338 comm="syz.2.18786" daddr=::ffff:172.20.20.187 [ 1142.381120][T13319] overlayfs: statfs failed on './file0' [ 1142.828086][T13375] netlink: 'syz.3.18798': attribute type 1 has an invalid length. [ 1142.828112][T13375] netlink: 'syz.3.18798': attribute type 4 has an invalid length. [ 1142.828129][T13375] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.18798'. [ 1143.894401][T13414] netlink: 'syz.3.18822': attribute type 1 has an invalid length. [ 1144.081239][T13414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.165977][T13419] bond1: (slave geneve2): making interface the new active one [ 1144.214355][T13419] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1144.302385][T13418] batman_adv: batadv0: Adding interface: geneve2 [ 1144.302411][T13418] batman_adv: batadv0: Interface activated: geneve2 [ 1146.331496][T13489] loop8: detected capacity change from 0 to 8 [ 1146.368582][T13489] Dev loop8: unable to read RDB block 8 [ 1146.368633][T13489] loop8: unable to read partition table [ 1146.368875][T13489] loop8: partition table beyond EOD, truncated [ 1146.368910][T13489] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1146.650137][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18857'. [ 1147.560550][ T9823] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1147.707321][T13529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18872'. [ 1147.731512][ T9823] usb 3-1: Using ep0 maxpacket: 8 [ 1147.740128][ T9823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1147.740162][ T9823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1147.740190][ T9823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1147.740216][ T9823] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.740262][ T9823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.740294][ T9823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.089159][ T9823] usb 3-1: GET_CAPABILITIES returned 0 [ 1148.089215][ T9823] usbtmc 3-1:16.0: can't read capabilities [ 1148.327333][ T10] usb 3-1: USB disconnect, device number 29 [ 1150.989247][ T9823] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1151.144159][ T9823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.144209][ T9823] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1151.163876][ T9823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.163910][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.163934][ T9823] usb 3-1: Product: syz [ 1151.163952][ T9823] usb 3-1: Manufacturer: syz [ 1151.163970][ T9823] usb 3-1: SerialNumber: syz [ 1151.214837][T13640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1151.351468][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18931'. [ 1151.432066][T13640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.432520][T13640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.470695][ T9823] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1151.500154][ T9823] usb 3-1: USB disconnect, device number 30 [ 1151.514759][T11906] udevd[11906]: setting mode of /dev/bus/usb/003/030 to 020664 failed: No such file or directory [ 1151.514984][T11906] udevd[11906]: setting owner of /dev/bus/usb/003/030 to uid=0, gid=0 failed: No such file or directory [ 1152.007770][ T9823] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1152.170741][ T9823] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 1152.170776][ T9823] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.170847][ T9823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1152.170875][ T9823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1152.170907][ T9823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26222, setting to 64 [ 1152.170953][ T9823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1152.170980][ T9823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.272188][T13640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1152.493931][ T9823] usb 3-1: usb_control_msg returned -71 [ 1152.493991][ T9823] usbtmc 3-1:16.0: can't read capabilities [ 1152.669377][ T9823] usb 3-1: USB disconnect, device number 31 [ 1152.894881][T13696] Bluetooth: hci0: unsupported parameter 255 [ 1152.895051][T13696] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1154.103180][ T5866] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1154.278962][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1154.279005][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1154.279053][ T5866] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1154.279080][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.293213][ T5866] usb 4-1: config 0 descriptor?? [ 1154.294689][T13731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1154.422606][T13753] Invalid ELF header magic: != ELF [ 1154.558869][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.559426][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.588794][ T5866] usbhid 4-1:0.0: can't add hid device: -71 [ 1154.588932][ T5866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1154.627111][ T5866] usb 4-1: USB disconnect, device number 24 [ 1154.795338][T13765] Invalid ELF header magic: != ELF [ 1155.172144][ T5866] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1155.332477][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 1155.334956][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1155.334994][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1155.335042][ T5866] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1155.335069][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.340565][ T5866] usb 4-1: config 0 descriptor?? [ 1155.407171][ T5866] hub 4-1:0.0: bad descriptor, ignoring hub [ 1155.411295][ T5866] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1155.825878][ T5866] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 1155.825924][ T5866] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 1155.825956][ T5866] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 1155.825987][ T5866] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 1155.826019][ T5866] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 1155.921671][ T5866] hid-multitouch 0003:0EEF:72C4.0055: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 1156.199014][ T5866] usb 4-1: USB disconnect, device number 25 [ 1156.232608][T13802] fido_id[13802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1159.958077][T13966] overlayfs: failed to set uuid (480/file0, err=-1); falling back to uuid=null. [ 1159.958151][T13966] overlayfs: failed to verify upper root origin [ 1160.232926][ T38] audit: type=1400 audit(1426.194:4333): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=13977 comm="syz.3.19085" daddr=fe88::4 dest=1 [ 1160.645897][ T31] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1160.847775][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1160.847812][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.847836][ T31] usb 4-1: Product: syz [ 1160.847853][ T31] usb 4-1: Manufacturer: syz [ 1160.847872][ T31] usb 4-1: SerialNumber: syz [ 1160.914104][ T31] usb 4-1: config 0 descriptor?? [ 1161.169830][ T31] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1162.036849][ T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1162.040936][ T31] usb 4-1: USB disconnect, device number 26 [ 1164.384469][T14129] netlink: 'syz.2.19159': attribute type 9 has an invalid length. [ 1164.384496][T14129] netlink: 'syz.2.19159': attribute type 11 has an invalid length. [ 1164.384513][T14129] netlink: 'syz.2.19159': attribute type 12 has an invalid length. [ 1164.384535][T14129] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.19159'. [ 1164.386017][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19159'. [ 1164.900987][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1165.061881][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 1165.064297][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1165.064354][ T5866] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1165.064382][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.106842][ T5866] usb 3-1: config 0 descriptor?? [ 1165.232190][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1165.378929][ T5866] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1165.403263][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1165.406394][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1165.406429][ T10] usb 4-1: config 0 has no interface number 0 [ 1165.406485][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1165.410533][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1165.410578][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.410603][ T10] usb 4-1: Product: syz [ 1165.410621][ T10] usb 4-1: Manufacturer: syz [ 1165.410639][ T10] usb 4-1: SerialNumber: syz [ 1165.486766][ T10] usb 4-1: config 0 descriptor?? [ 1165.841795][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.842833][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.884380][ T5866] usb 3-1: USB disconnect, device number 32 [ 1166.473168][ T38] audit: type=1400 audit(1432.040:4334): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14182 comm="syz.6.19185" daddr=fc00:: dest=20002 [ 1166.474434][ T4554] Bluetooth: Unexpected continuation frame (len 12) [ 1166.662668][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1166.662738][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1166.662759][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1166.662858][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1166.729198][ T10] usb 4-1: USB disconnect, device number 27 [ 1168.408018][ T38] audit: type=1400 audit(1433.845:4335): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14263 comm="syz.6.19222" [ 1169.550735][ T38] audit: type=1400 audit(1434.911:4336): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14306 comm="syz.6.19243" daddr=fe80::14 dest=20002 [ 1169.743457][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1169.925877][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1169.930167][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.930205][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.930250][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1169.930276][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.998343][ T10] usb 3-1: config 0 descriptor?? [ 1170.278343][ T5866] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1170.451667][ T5866] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1170.451704][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.464374][ T5866] usb 4-1: config 0 descriptor?? [ 1170.498928][ T5866] cp210x 4-1:0.0: cp210x converter detected [ 1170.512477][ T10] ft260 0003:0403:6030.0056: unknown main item tag 0x0 [ 1170.512519][ T10] ft260 0003:0403:6030.0056: unknown main item tag 0x0 [ 1170.707428][ T10] ft260 0003:0403:6030.0056: chip code: 6424 8183 [ 1170.903437][ T5866] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1170.922464][ T10] ft260 0003:0403:6030.0056: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1171.150050][ T5866] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1171.367650][ T10] ft260 0003:0403:6030.0056: failed to retrieve status: -71 [ 1171.376509][ T10] ft260 0003:0403:6030.0056: failed to reset I2C controller: -71 [ 1171.419578][ T9823] usb 4-1: USB disconnect, device number 28 [ 1171.452804][ T9823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1171.519248][ T10] usb 3-1: USB disconnect, device number 33 [ 1171.636987][ T9823] cp210x 4-1:0.0: device disconnected [ 1171.909497][T14371] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1171.909531][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1171.911724][T14371] vhci_hcd vhci_hcd.0: Device attached [ 1171.943100][T14371] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 1171.943131][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1171.943187][T14371] vhci_hcd vhci_hcd.0: Device attached [ 1172.011181][T14371] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 1172.011205][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1172.011285][T14371] vhci_hcd vhci_hcd.0: Device attached [ 1172.040243][T14378] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 1172.040274][T14378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1172.067632][T14371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1172.071760][T14378] vhci_hcd vhci_hcd.0: Device attached [ 1172.096296][ T31] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1172.100263][T14371] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(14) [ 1172.100294][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1172.100560][T14371] vhci_hcd vhci_hcd.0: Device attached [ 1172.102487][T14379] vhci_hcd: connection closed [ 1172.102820][T14376] vhci_hcd: connection closed [ 1172.102929][T14374] vhci_hcd: connection closed [ 1172.105165][ T1638] vhci_hcd vhci_hcd.6: stop threads [ 1172.105194][ T1638] vhci_hcd vhci_hcd.6: release socket [ 1172.129789][T14383] vhci_hcd: connection closed [ 1172.161092][ T1638] vhci_hcd vhci_hcd.6: disconnect device [ 1172.161459][ T1638] vhci_hcd vhci_hcd.6: stop threads [ 1172.161485][ T1638] vhci_hcd vhci_hcd.6: release socket [ 1172.161725][ T1638] vhci_hcd vhci_hcd.6: disconnect device [ 1172.166467][ T31] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1172.166630][T14372] vhci_hcd: connection closed [ 1172.168131][ T1638] vhci_hcd vhci_hcd.6: stop threads [ 1172.168153][ T1638] vhci_hcd vhci_hcd.6: release socket [ 1172.168382][ T1638] vhci_hcd vhci_hcd.6: disconnect device [ 1172.180948][T14373] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1172.210111][ T1638] vhci_hcd vhci_hcd.6: stop threads [ 1172.210198][ T1638] vhci_hcd vhci_hcd.6: release socket [ 1172.210415][ T1638] vhci_hcd vhci_hcd.6: disconnect device [ 1172.210590][ T1638] vhci_hcd vhci_hcd.6: stop threads [ 1172.210647][ T1638] vhci_hcd vhci_hcd.6: release socket [ 1172.210749][ T1638] vhci_hcd vhci_hcd.6: disconnect device [ 1174.543833][ T5115] Bluetooth: hci1: command 0x1003 tx timeout [ 1174.562536][ T4554] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1176.485600][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.485686][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.538086][ T38] audit: type=1400 audit(1441.450:4337): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14555 comm="syz.2.19355" daddr=::ffff:172.20.20.187 dest=20001 [ 1176.973544][T14573] input: syz0 as /devices/virtual/input/input83 [ 1177.611873][ T31] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1178.036103][ T38] audit: type=1400 audit(1442.844:4338): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14610 comm="syz.3.19381" dest=65534 [ 1178.267031][T14621] netlink: 'syz.3.19385': attribute type 8 has an invalid length. [ 1178.267054][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19385'. [ 1178.552892][T14621] bond0: entered promiscuous mode [ 1178.552919][T14621] bond_slave_0: entered promiscuous mode [ 1178.553163][T14621] bond_slave_1: entered promiscuous mode [ 1178.556456][T14621] bond0: left promiscuous mode [ 1178.556477][T14621] bond_slave_0: left promiscuous mode [ 1178.556706][T14621] bond_slave_1: left promiscuous mode [ 1179.387283][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19406'. [ 1180.296424][T14703] ALSA: mixer_oss: invalid OSS volume 'nl0' [ 1180.296449][T14703] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1180.296465][T14703] ALSA: mixer_oss: invalid OSS volume '3' [ 1180.296481][T14703] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1180.296496][T14703] ALSA: mixer_oss: invalid OSS volume '5' [ 1180.296511][T14703] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1181.182570][ T5959] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1181.344865][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.344897][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1181.346169][ T5959] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1181.346195][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1181.346214][ T5959] usb 4-1: SerialNumber: syz [ 1181.640579][ T5959] usb 4-1: 0:2 : does not exist [ 1181.742621][ T5959] usb 4-1: USB disconnect, device number 29 [ 1181.902338][T11906] udevd[11906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.491510][ T38] audit: type=1400 audit(1451.693:4339): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14947 comm="syz.6.19539" daddr=::ffff:0.0.0.0 dest=20002 [ 1188.177046][ T38] audit: type=1400 audit(1452.338:4340): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=14970 comm="syz.2.19551" daddr=::1c9a:e7ff:fe9a:6f34 [ 1189.942928][ T5868] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1190.122197][ T5868] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1190.122235][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.122259][ T5868] usb 3-1: Product: syz [ 1190.122277][ T5868] usb 3-1: Manufacturer: syz [ 1190.122294][ T5868] usb 3-1: SerialNumber: syz [ 1190.129247][ T5868] usb 3-1: config 0 descriptor?? [ 1190.415193][ T5868] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1191.474555][T15071] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1191.502038][ T5868] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1191.540742][ T5868] usb 3-1: USB disconnect, device number 34 [ 1192.590886][T15114] ip6tnl0: entered promiscuous mode [ 1192.591643][T15113] ip6tnl0: left promiscuous mode [ 1195.817986][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1195.824427][T15238] netlink: 'syz.2.19675': attribute type 4 has an invalid length. [ 1195.885161][T15241] netlink: 'syz.2.19675': attribute type 4 has an invalid length. [ 1195.978318][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1195.980230][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.004330][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1196.004367][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.004391][ T10] usb 4-1: Product: syz [ 1196.004409][ T10] usb 4-1: Manufacturer: syz [ 1196.004427][ T10] usb 4-1: SerialNumber: syz [ 1196.044282][ T10] usb 4-1: config 0 descriptor?? [ 1196.078978][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1196.079085][ T10] usb 4-1: selecting invalid altsetting 1 [ 1196.273041][ T10] gspca_stk014: reg_r err -71 [ 1196.273139][ T10] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 1196.298238][ T10] usb 4-1: USB disconnect, device number 30 [ 1200.319473][ T38] audit: type=1400 audit(1463.694:4341): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=15394 comm="syz.2.19748" dest=20002 [ 1204.595274][ T5959] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1204.763926][ T5959] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1204.763969][ T5959] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1204.764012][ T5959] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.764039][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.789979][T15559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1204.880417][ T5959] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.972894][T15580] netlink: 64595 bytes leftover after parsing attributes in process `syz.6.19833'. [ 1205.154123][ T10] usb 3-1: USB disconnect, device number 35 [ 1205.337360][T15593] udevd[15593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.622000][T15674] syzkaller0: entered promiscuous mode [ 1207.622030][T15674] syzkaller0: entered allmulticast mode [ 1207.625061][T15674] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1211.909792][T15798] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.19933'. [ 1212.439239][T15819] trusted_key: syz.2.19944 sent an empty control message without MSG_MORE. [ 1212.748325][ T38] audit: type=1400 audit(1475.321:4342): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=15832 comm="syz.2.19949" dest=20001 [ 1213.815899][T15869] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1214.252836][T11955] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1214.731853][T11955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.734629][T11955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.734667][T11955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.734682][T11955] usb 4-1: Product: syz [ 1214.734694][T11955] usb 4-1: Manufacturer: syz [ 1214.734705][T11955] usb 4-1: SerialNumber: syz [ 1215.892492][T11955] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1215.892536][T11955] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1215.892560][T11955] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1216.322180][T11955] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1216.414715][T11955] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1216.510956][T11955] usb 4-1: USB disconnect, device number 31 [ 1216.513342][T11955] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1217.124316][ T10] IPVS: starting estimator thread 0... [ 1217.221060][T15954] IPVS: using max 8 ests per chain, 19200 per kthread [ 1217.526089][T15964] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1220.824452][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20044'. [ 1220.980945][T16043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1221.034326][T16047] vlan2: entered allmulticast mode [ 1221.034350][T16047] bond1: entered allmulticast mode [ 1224.468766][ T5868] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1224.632427][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.632462][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1224.632508][ T5868] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1224.632534][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.693511][ T5868] usb 4-1: config 0 descriptor?? [ 1225.180440][ T5868] waterforce 0003:1044:7A4D.0057: item fetching failed at offset 0/1 [ 1225.183569][ T5868] waterforce 0003:1044:7A4D.0057: hid parse failed with -22 [ 1225.183701][ T5868] waterforce 0003:1044:7A4D.0057: probe with driver waterforce failed with error -22 [ 1225.389254][ T5868] usb 4-1: USB disconnect, device number 32 [ 1226.489276][T11955] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1226.660628][T11955] usb 3-1: Using ep0 maxpacket: 8 [ 1226.663058][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.663111][T11955] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1226.663138][T11955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.668599][T11955] usb 3-1: config 0 descriptor?? [ 1226.906669][T11955] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1227.481884][ T10] usb 3-1: USB disconnect, device number 36 [ 1228.887744][T16358] input: syz1 as /devices/virtual/input/input84 [ 1230.822028][T16440] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 1231.396264][ T9823] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1231.544956][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20248'. [ 1231.561383][ T9823] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1231.561414][ T9823] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1231.561438][ T9823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.561462][ T9823] usb 3-1: config 220 has no interface number 2 [ 1231.561565][ T9823] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1231.561597][ T9823] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1231.561620][ T9823] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1231.561642][ T9823] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1231.565290][ T9823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1231.565326][ T9823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.565350][ T9823] usb 3-1: Product: syz [ 1231.565376][ T9823] usb 3-1: Manufacturer: syz [ 1231.565393][ T9823] usb 3-1: SerialNumber: syz [ 1231.942283][ T9823] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1231.942325][ T9823] uvcvideo 3-1:220.0: No valid video chain found. [ 1231.942403][ T9823] usb 3-1: selecting invalid altsetting 0 [ 1231.987001][T16482] fuse: root generation should be zero [ 1232.039341][ T9823] usb 3-1: selecting invalid altsetting 0 [ 1232.039384][ T9823] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1232.045402][ T9823] usb 3-1: USB disconnect, device number 37 [ 1232.292537][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20255'. [ 1232.377940][T16495] gretap0: entered promiscuous mode [ 1232.378423][T16495] macvtap1: entered promiscuous mode [ 1232.378656][T16495] macvtap1: entered allmulticast mode [ 1232.378672][T16495] gretap0: entered allmulticast mode [ 1232.579113][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20262'. [ 1236.484220][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20315'. [ 1236.553317][ T38] audit: type=1326 audit(1497.593:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.553486][ T38] audit: type=1326 audit(1497.593:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.553924][ T38] audit: type=1326 audit(1497.593:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.554090][ T38] audit: type=1326 audit(1497.593:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.554297][ T38] audit: type=1326 audit(1497.593:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.554463][ T38] audit: type=1326 audit(1497.593:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.557831][ T38] audit: type=1326 audit(1497.593:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.558189][ T38] audit: type=1326 audit(1497.593:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.573049][ T38] audit: type=1326 audit(1497.602:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1236.573113][ T38] audit: type=1326 audit(1497.602:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16626 comm="syz.3.20316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x7ffc0000 [ 1241.941921][T16833] evm: overlay not supported [ 1242.120228][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.120308][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.633242][T16939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1246.646656][T16950] veth0_to_team: entered promiscuous mode [ 1247.410636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1247.571011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1248.383940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1248.389320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1249.314957][T17058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1251.857941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1254.135023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1254.136665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1254.136715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1254.136756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1256.476635][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 1256.476662][ T38] audit: type=1400 audit(1516.179:4363): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=17242 comm="syz.2.20590" name="3323" dev="tmpfs" ino=16807 [ 1256.919707][T17198] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1256.919880][ T4554] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.944554][T17198] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1257.114074][T17198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1257.114308][T17198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1257.114477][T17198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1257.114606][T17198] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1257.114662][T17198] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1257.266327][T17198] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1259.198135][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 1259.300977][ T5115] Bluetooth: hci6: command 0x0c1a tx timeout [ 1259.307030][ T5115] Bluetooth: hci5: command 0x0c1a tx timeout [ 1259.307075][ T5115] Bluetooth: hci3: command 0x0c1a tx timeout [ 1259.307108][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.239407][T17386] bridge0: entered promiscuous mode [ 1261.239789][T17386] vlan0: entered promiscuous mode [ 1261.337763][T17398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.416622][T17398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.481476][T17398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.525129][ T4554] Bluetooth: hci6: command 0x0c1a tx timeout [ 1263.746315][ T4554] Bluetooth: hci6: command 0x0c1a tx timeout [ 1269.122665][T17598] netlink: 'syz.2.20752': attribute type 30 has an invalid length. [ 1270.019239][ T38] audit: type=1400 audit(1528.882:4364): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=17622 comm="syz.3.20767" daddr=fe80::aa [ 1271.941936][T17657] syz_tun: entered allmulticast mode [ 1273.763588][ T38] audit: type=1326 audit(1531.772:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17683 comm="syz.3.20790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c14faacb9 code=0x0 [ 1282.525405][T17859] netlink: 'syz.6.20866': attribute type 11 has an invalid length. [ 1283.511228][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.6.20882'. [ 1290.335023][T18063] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1291.865347][ T38] audit: type=1400 audit(1549.330:4366): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18095 comm="syz.6.20969" daddr=fe80::3a dest=20001 [ 1291.866260][ T38] audit: type=1400 audit(1549.330:4367): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18095 comm="syz.6.20969" daddr=fe80::bb dest=20007 [ 1307.281100][T18270] netlink: 'syz.3.21037': attribute type 10 has an invalid length. [ 1307.281128][T18270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21037'. [ 1307.392709][T18270] team0: Failed to send options change via netlink (err -105) [ 1307.392740][T18270] team0: Port device geneve0 added [ 1307.798908][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.798999][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.010222][ T38] audit: type=1400 audit(1564.418:4368): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18280 comm="syz.3.21041" daddr=fe80::bb dest=20480 [ 1309.540782][ T38] audit: type=1400 audit(1565.858:4369): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="," object="_" requested=w pid=18308 comm="syz.6.21052" saddr=fc00:: daddr=ff02::1 dest=16385 netif=wpan0 [ 1309.758547][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1309.921342][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1309.921381][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1309.924514][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1309.924548][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.924573][ T10] usb 3-1: Product: syz [ 1309.924590][ T10] usb 3-1: Manufacturer: syz [ 1309.924608][ T10] usb 3-1: SerialNumber: syz [ 1309.991816][ T10] usb 3-1: config 0 descriptor?? [ 1310.023548][ T10] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1310.251980][ T10] usb 3-1: USB disconnect, device number 38 [ 1311.134748][T18358] netlink: 176 bytes leftover after parsing attributes in process `syz.2.21074'. [ 1312.760504][T18374] netlink: 'syz.3.21080': attribute type 1 has an invalid length. [ 1315.801436][ T38] audit: type=1400 audit(1571.601:4370): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18417 comm="syz.6.21098" daddr=::ffff:172.20.20.170 dest=20002 [ 1326.404684][ T38] audit: type=1400 audit(1581.376:4371): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18521 comm="syz.3.21133" daddr=fe80::3a dest=20001 [ 1326.404804][ T38] audit: type=1400 audit(1581.386:4372): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=18521 comm="syz.3.21133" daddr=fe80::bb dest=20007 [ 1333.152559][ T38] audit: type=1400 audit(1587.943:4373): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="," object="_" requested=w pid=18563 comm="syz.6.21149" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 1350.951944][ T4554] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 1355.257863][ T4554] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1355.258241][ T4554] Bluetooth: hci3: Injecting HCI hardware error event [ 1355.263060][ T4554] Bluetooth: hci3: hardware error 0x00 [ 1358.633122][T18808] syz_tun: entered allmulticast mode [ 1358.655858][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21247'. [ 1358.850784][ T4554] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1358.915076][T18808] syz_tun (unregistering): left allmulticast mode [ 1374.032827][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.032902][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.170050][T19016] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 1385.676449][T19082] ptrace attach of "./syz-executor exec"[4551] was attempted by ""[19082] [ 1388.559970][ T38] audit: type=1400 audit(1639.783:4374): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=19124 comm="syz.3.21373" dest=20000 [ 1398.649745][ T38] audit: type=1326 audit(1649.212:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.649811][ T38] audit: type=1326 audit(1649.212:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.650785][ T38] audit: type=1326 audit(1649.212:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.650841][ T38] audit: type=1326 audit(1649.212:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.650895][ T38] audit: type=1326 audit(1649.212:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.661671][ T38] audit: type=1326 audit(1649.221:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1398.685326][T19228] veth0_to_team: left promiscuous mode [ 1398.686004][T19228] batadv_slave_0: left promiscuous mode [ 1398.686026][T19228] batadv_slave_0: left allmulticast mode [ 1398.691498][T19228] ip6tnl1: left allmulticast mode [ 1398.691833][T19228] ip6erspan0: left allmulticast mode [ 1398.715774][T19228] ip6tnl2: left allmulticast mode [ 1398.716751][T19228] ip6erspan1: left promiscuous mode [ 1398.782807][T19228] geneve2: left allmulticast mode [ 1398.783613][T19228] sit2: left promiscuous mode [ 1399.484046][T19228] macsec1: left promiscuous mode [ 1399.484402][T19228] macsec1: left allmulticast mode [ 1399.484421][T19228] dummy0: left allmulticast mode [ 1399.656470][ T38] audit: type=1326 audit(1650.044:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1399.656685][ T38] audit: type=1326 audit(1650.147:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19224 comm="syz.2.21413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e9faacb9 code=0x7ffc0000 [ 1405.386223][ T5866] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1405.631977][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1405.635159][ T5866] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 1405.635193][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.635217][ T5866] usb 4-1: Product: syz [ 1405.635235][ T5866] usb 4-1: Manufacturer: syz [ 1405.635253][ T5866] usb 4-1: SerialNumber: syz [ 1405.650118][ T5866] usb 4-1: config 0 descriptor?? [ 1406.224734][T19294] ubi31: attaching mtd0 [ 1406.229388][T19294] ubi31: scanning is finished [ 1408.377878][T19294] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1408.377919][T19294] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1408.377942][T19294] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1408.377962][T19294] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1408.377983][T19294] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1408.378002][T19294] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1408.378024][T19294] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3163102682 [ 1408.378048][T19294] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1408.378111][T19332] ubi31: background thread "ubi_bgt31d" started, PID 19332 [ 1410.196758][ T5866] usb 4-1: USB disconnect, device number 33 [ 1410.500169][T19348] udevd[19348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.965616][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1413.882132][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 1413.905135][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1413.905171][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.905195][ T10] usb 4-1: Product: syz [ 1413.905213][ T10] usb 4-1: Manufacturer: syz [ 1413.905231][ T10] usb 4-1: SerialNumber: syz [ 1414.084926][ T10] usb 4-1: config 0 descriptor?? [ 1414.951752][T19418] netlink: 76 bytes leftover after parsing attributes in process `syz.6.21488'. [ 1415.649789][ T9823] usb 4-1: USB disconnect, device number 34 [ 1417.359479][T19437] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 1423.422009][ T5866] ------------[ cut here ]------------ [ 1423.422027][ T5866] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1423.422049][ T5866] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:4/5866 [ 1423.422089][ T5866] Modules linked in: [ 1423.422114][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1423.422139][ T5866] Tainted: [L]=SOFTLOCKUP [ 1423.422146][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1423.422158][ T5866] Workqueue: events drm_fb_helper_damage_work [ 1423.422184][ T5866] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1423.422204][ T5866] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 93 e9 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1423.422220][ T5866] RSP: 0018:ffffc900050ff860 EFLAGS: 00010246 [ 1423.422236][ T5866] RAX: 1ffff110281e1e00 RBX: ffffffff8f322e30 RCX: 0000000000000000 [ 1423.422250][ T5866] RDX: ffffffff8b7eace0 RSI: ffffffff8b806a40 RDI: ffffffff8f322e30 [ 1423.422264][ T5866] RBP: ffffc900050ff948 R08: 0000000000000000 R09: 0000000000000000 [ 1423.422277][ T5866] R10: dffffc0000000000 R11: fffffbfff1e4f72f R12: ffffffff8b806a40 [ 1423.422291][ T5866] R13: ffff888140f0f000 R14: 1ffff92000a1ff10 R15: ffffffff8b7eace0 [ 1423.422305][ T5866] FS: 0000000000000000(0000) GS:ffff8881268fa000(0000) knlGS:0000000000000000 [ 1423.422321][ T5866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1423.422336][ T5866] CR2: 0000000000000000 CR3: 0000000032734000 CR4: 00000000003526f0 [ 1423.422352][ T5866] Call Trace: [ 1423.422360][ T5866] [ 1423.422379][ T5866] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1423.422398][ T5866] ? rt_spin_unlock+0x14f/0x200 [ 1423.422420][ T5866] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1423.422447][ T5866] ? rt_spin_unlock+0x160/0x200 [ 1423.422470][ T5866] ? drm_vblank_get+0x147/0x260 [ 1423.422490][ T5866] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1423.422521][ T5866] drm_fb_helper_damage_work+0x131/0x6f0 [ 1423.422546][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.422581][ T5866] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1423.422607][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.422630][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.422655][ T5866] process_scheduled_works+0xaec/0x17a0 [ 1423.422705][ T5866] ? __pfx_process_scheduled_works+0x10/0x10 [ 1423.422725][ T5866] ? do_raw_spin_lock+0x12b/0x2f0 [ 1423.422753][ T5866] ? assign_work+0x3d3/0x440 [ 1423.422779][ T5866] worker_thread+0x89f/0xd90 [ 1423.422824][ T5866] kthread+0x726/0x8b0 [ 1423.422854][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 1423.422876][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.422900][ T5866] ? rt_spin_unlock+0x14f/0x200 [ 1423.422925][ T5866] ? rt_spin_unlock+0x160/0x200 [ 1423.422943][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.422971][ T5866] ret_from_fork+0x51b/0xa40 [ 1423.422995][ T5866] ? __pfx_ret_from_fork+0x10/0x10 [ 1423.423016][ T5866] ? __switch_to+0xc82/0x1410 [ 1423.423038][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.423066][ T5866] ret_from_fork_asm+0x1a/0x30 [ 1423.423108][ T5866] [ 1423.423125][ T5866] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1423.423142][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1423.423167][ T5866] Tainted: [L]=SOFTLOCKUP [ 1423.423175][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1423.423187][ T5866] Workqueue: events drm_fb_helper_damage_work [ 1423.423207][ T5866] Call Trace: [ 1423.423215][ T5866] [ 1423.423223][ T5866] vpanic+0x1e0/0x670 [ 1423.423252][ T5866] panic+0xc5/0xd0 [ 1423.423277][ T5866] ? __pfx_panic+0x10/0x10 [ 1423.423311][ T5866] ? ret_from_fork_asm+0x1a/0x30 [ 1423.423345][ T5866] __warn+0x315/0x4a0 [ 1423.423369][ T5866] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1423.423390][ T5866] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1423.423410][ T5866] __report_bug+0x29a/0x540 [ 1423.423441][ T5866] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 1423.423460][ T5866] ? __pfx___report_bug+0x10/0x10 [ 1423.423502][ T5866] report_bug_entry+0x19a/0x290 [ 1423.423528][ T5866] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 1423.423545][ T5866] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 1423.423563][ T5866] handle_bug+0xca/0x200 [ 1423.423589][ T5866] exc_invalid_op+0x1a/0x50 [ 1423.423607][ T5866] asm_exc_invalid_op+0x1a/0x20 [ 1423.423626][ T5866] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 1423.423646][ T5866] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 93 e9 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1423.423663][ T5866] RSP: 0018:ffffc900050ff860 EFLAGS: 00010246 [ 1423.423681][ T5866] RAX: 1ffff110281e1e00 RBX: ffffffff8f322e30 RCX: 0000000000000000 [ 1423.423696][ T5866] RDX: ffffffff8b7eace0 RSI: ffffffff8b806a40 RDI: ffffffff8f322e30 [ 1423.423712][ T5866] RBP: ffffc900050ff948 R08: 0000000000000000 R09: 0000000000000000 [ 1423.423725][ T5866] R10: dffffc0000000000 R11: fffffbfff1e4f72f R12: ffffffff8b806a40 [ 1423.423740][ T5866] R13: ffff888140f0f000 R14: 1ffff92000a1ff10 R15: ffffffff8b7eace0 [ 1423.423775][ T5866] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1423.423794][ T5866] ? rt_spin_unlock+0x14f/0x200 [ 1423.423816][ T5866] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1423.423844][ T5866] ? rt_spin_unlock+0x160/0x200 [ 1423.423869][ T5866] ? drm_vblank_get+0x147/0x260 [ 1423.423891][ T5866] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1423.423923][ T5866] drm_fb_helper_damage_work+0x131/0x6f0 [ 1423.423946][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.423972][ T5866] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1423.423996][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.424017][ T5866] ? process_scheduled_works+0xa0f/0x17a0 [ 1423.424041][ T5866] process_scheduled_works+0xaec/0x17a0 [ 1423.424086][ T5866] ? __pfx_process_scheduled_works+0x10/0x10 [ 1423.424106][ T5866] ? do_raw_spin_lock+0x12b/0x2f0 [ 1423.424134][ T5866] ? assign_work+0x3d3/0x440 [ 1423.424160][ T5866] worker_thread+0x89f/0xd90 [ 1423.424205][ T5866] kthread+0x726/0x8b0 [ 1423.424235][ T5866] ? __pfx_worker_thread+0x10/0x10 [ 1423.424257][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.424281][ T5866] ? rt_spin_unlock+0x14f/0x200 [ 1423.424306][ T5866] ? rt_spin_unlock+0x160/0x200 [ 1423.424325][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.424355][ T5866] ret_from_fork+0x51b/0xa40 [ 1423.424379][ T5866] ? __pfx_ret_from_fork+0x10/0x10 [ 1423.424404][ T5866] ? __switch_to+0xc82/0x1410 [ 1423.424426][ T5866] ? __pfx_kthread+0x10/0x10 [ 1423.424454][ T5866] ret_from_fork_asm+0x1a/0x30 [ 1423.424497][ T5866] [ 1423.426003][ T5866] Kernel Offset: disabled