last executing test programs: 10m4.013801661s ago: executing program 1 (id=294): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x250, 0x358, 0x358, 0x250, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x9, 0x8000, 0x9, 0x6, 0xf, 0xe8b2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000380)=0x0) setpriority(0x2, r4, 0x3) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x650c00, 0x10) mkdirat(r5, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r6, 0x80000001, 0x4) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) 9m59.605927807s ago: executing program 1 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd700004000000060000000c00018008000300030000000c000180000000000300000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, 0x0, 0x4048800) r5 = socket$kcm(0x2, 0x3, 0x2) close(0x3) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r8 = socket$inet6(0xa, 0x5, 0x5b) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, 0x0) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) 9m57.122126858s ago: executing program 1 (id=319): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x0, 0xfffffffffffffe60}, 0x28) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x101302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000600)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000000340)={&(0x7f0000000100), 0x0, &(0x7f0000000280)}, &(0x7f0000000480)=0x18) fcntl$dupfd(r2, 0x0, r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000006}, 0x0, 0x0) close_range(r0, r2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000002ac0), 0x0, 0x101400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 9m51.574485596s ago: executing program 1 (id=314): syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x40000) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x20, 0x8, 0xc1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006", @ANYBLOB], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '\xe4\x8a#y\xc6K\xcb\x1es\x87L\xcd2\n\x922\\\x05\xe6\xaa\x1a.\x7f5\xe36~\xbeO\xa6\xfcj\xba\x9e\'\x05{\xac\xb9\xf6z\xcd\xa7\xc2\xda)\xf4?\xe9\x93CAlv5\xbd\xf5\x14\x10\xeayY\xef\xe9Z\xbf,\xa3\xd9\x91\xa7^\x01-\xae\xd1\xdaF\xf2H\xf8\x99\x01i\xb6h\xf0X\x8b\xc2:\x00\xfc\xec\x00*>\x96tF\x0ec\xb1n\a\xc6J\b\xc3\xa4\vS\ryat\x94\x1a\xe3\xad,\x81\xf6\xe5o\x9d\t)-@e\xb2\xfd\xf3\xc1\xfc\xc0\xf5\xd8\xc7W\x16\x8d\x13Z\xd3\xe4\xe8\xdd\xd7\xe1\x8c\xef\xc7\xa5H\"\x93~0#\xf5\xeePu\xf2<', 0x3a, './file0'}, 0xcf) r7 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) 9m48.128084227s ago: executing program 1 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) clock_gettime(0x3, &(0x7f0000000040)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) read$FUSE(r2, &(0x7f0000006040)={0x2020}, 0x2020) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003000018006000400000000000600010002000000060002"], 0x44}}, 0x0) 9m45.692646088s ago: executing program 1 (id=325): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x7, 0x6, 0x7, 0x10001}, {0x0, 0x1, 0xf3, 0x101}]}) socket$inet6(0xa, 0x80001, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}, &(0x7f0000000040)=0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) unshare(0x6020480) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) fsopen(&(0x7f0000000300)='hpfs\x00', 0x1) getdents(r2, &(0x7f0000000500)=""/198, 0xc6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 9m29.460626241s ago: executing program 32 (id=325): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x7, 0x6, 0x7, 0x10001}, {0x0, 0x1, 0xf3, 0x101}]}) socket$inet6(0xa, 0x80001, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}, &(0x7f0000000040)=0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) unshare(0x6020480) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) fsopen(&(0x7f0000000300)='hpfs\x00', 0x1) getdents(r2, &(0x7f0000000500)=""/198, 0xc6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 8.000915824s ago: executing program 5 (id=1993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbmon(&(0x7f00000002c0), 0x400, 0x441) syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) close_range(r0, 0xffffffffffffffff, 0x0) 7.699309004s ago: executing program 5 (id=1998): syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) socket$kcm(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLINK(r6, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008, r2}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.535860229s ago: executing program 2 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001c009d7a7438633cccacdf250200ef00", @ANYRES32=r2, @ANYBLOB="0800100a140001"], 0x3c}}, 0x24024090) 4.268227335s ago: executing program 2 (id=2027): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.805638056s ago: executing program 0 (id=2028): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 3.705536678s ago: executing program 5 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20) 3.627087742s ago: executing program 4 (id=2030): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.494309476s ago: executing program 2 (id=2031): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000040)) 3.335526037s ago: executing program 5 (id=2033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.335186478s ago: executing program 4 (id=2034): clock_gettime(0x2, &(0x7f0000000000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40081}, 0x2000c804) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f00000000c0)={0x8, 0x19}, 0x20) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0x54, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) sendmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x10}, 0x4) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 3.334875139s ago: executing program 2 (id=2035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x7}, @fastopen={0x22, 0x6, "0b115cd4"}, @generic={0xfe, 0x5, "bd9613"}]}}}}}}}}, 0x0) 3.151492342s ago: executing program 5 (id=2037): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 3.115868774s ago: executing program 2 (id=2038): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 3.017544322s ago: executing program 2 (id=2039): syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) socket$kcm(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLINK(r6, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x1008, r2}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.25410937s ago: executing program 4 (id=2040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x24004800) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2.092194171s ago: executing program 4 (id=2042): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000404c05680200002000000109022400010000100209040003050300020009210000030122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x2, "7a98a52e"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) 1.677789999s ago: executing program 3 (id=2046): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) unshare(0x8000400) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) 1.672225817s ago: executing program 0 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.388042666s ago: executing program 0 (id=2048): ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x2, 0x1000000000000}) r0 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000000)={0xffff, 0x6}, 0x1) 1.375021965s ago: executing program 3 (id=2049): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r0, 0x1380}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x400000000000181, 0x20004050) 1.315025027s ago: executing program 5 (id=2050): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/215) 1.302412519s ago: executing program 0 (id=2051): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) 1.197081675s ago: executing program 0 (id=2052): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a0000050006"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013000c800ca348800800000000000000080003806400"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.118811398s ago: executing program 0 (id=2053): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)='P') 415.976705ms ago: executing program 3 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 261.027573ms ago: executing program 3 (id=2055): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 176.608721ms ago: executing program 4 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x800) 127.209587ms ago: executing program 3 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 108.849035ms ago: executing program 4 (id=2058): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=2059): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) kernel console output (not intermixed with test programs): It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.451126][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 743.464248][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.474504][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 743.488007][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.498159][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 743.512112][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.525184][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 743.536793][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.548120][T11789] batman_adv: batadv0: Interface activated: ipvlan7 [ 744.238941][ T6208] net_ratelimit: 8 callbacks suppressed [ 744.238958][ T6208] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 744.258947][ T6208] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 744.425025][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.820727][T11134] Bluetooth: hci0: command 0x1003 tx timeout [ 745.850189][ T5616] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 746.872652][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.451958][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.622047][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.015425][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.282476][ T6208] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.296835][ T6208] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.377038][T11831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.687056][T11838] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 749.125495][ T5730] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 749.131278][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.288503][ T5730] usb 5-1: Using ep0 maxpacket: 32 [ 749.312281][ T5730] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.354641][ T5730] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.426590][ T5730] usb 5-1: config 0 interface 0 has no altsetting 0 [ 749.448564][ T5730] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 749.482510][ T30] audit: type=1400 audit(1778837180.810:1895): avc: denied { map } for pid=11845 comm="syz.3.1541" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 749.513062][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.550290][ T5730] usb 5-1: config 0 descriptor?? [ 749.668380][ T7836] Bluetooth: hci0: Frame reassembly failed (-84) [ 749.727115][ T12] net_ratelimit: 2 callbacks suppressed [ 749.727134][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.747130][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 750.229082][ T5730] hid (null): unknown global tag 0xd [ 750.252588][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.305234][ T991] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 750.809982][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.066738][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 751.081073][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 751.545590][ T991] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 751.619477][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.624944][T11846] wg1 speed is unknown, defaulting to 1000 [ 751.684890][ T5730] lg-g15 0003:046D:0A07.0003: unknown global tag 0xd [ 751.708648][ T991] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 751.792210][ T5730] lg-g15 0003:046D:0A07.0003: item 0 4 1 13 parsing failed [ 751.834370][ T991] usb 3-1: Product: syz [ 751.891328][ T991] usb 3-1: SerialNumber: syz [ 751.902010][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 751.916331][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 751.940748][ T5730] lg-g15 0003:046D:0A07.0003: probe with driver lg-g15 failed with error -22 [ 752.157597][ T5616] Bluetooth: hci0: command 0x1003 tx timeout [ 752.157763][ T5730] usb 5-1: USB disconnect, device number 19 [ 752.165521][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 752.300109][ T5714] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 752.313579][ T991] usb 3-1: config 0 descriptor?? [ 752.463173][ T30] audit: type=1400 audit(1778837183.598:1896): avc: denied { setopt } for pid=11857 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.487954][ T30] audit: type=1400 audit(1778837183.598:1897): avc: denied { write } for pid=11857 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.492661][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 752.551722][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.567185][ T5714] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 752.586709][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.615032][ T5714] usb 1-1: Product: syz [ 752.651147][ T5714] usb 1-1: Manufacturer: syz [ 752.676298][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 752.679052][ T991] usb 3-1: USB disconnect, device number 32 [ 752.697295][ T5714] usb 1-1: SerialNumber: syz [ 752.713736][ T5714] usb 1-1: config 0 descriptor?? [ 752.767617][ T5714] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 752.979689][ T5714] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 752.996148][ T5714] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 753.102667][ T5730] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 753.264876][T11872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.708058][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 753.733669][ T5730] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 753.744732][ T5730] usb 4-1: can't read configurations, error -71 [ 753.800749][ T5729] usb 1-1: USB disconnect, device number 35 [ 753.906843][T11874] ipvlan5: entered allmulticast mode [ 753.917783][T11874] batman_adv: batadv0: Adding interface: ipvlan5 [ 753.924172][T11874] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1288) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1320 would solve the problem. [ 753.970789][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.990212][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.010071][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 754.036367][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.051493][T11874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 754.072626][T11874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.097875][T11874] batman_adv: batadv0: Interface activated: ipvlan5 [ 754.117609][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1555'. [ 754.379414][ T30] audit: type=1400 audit(1778837185.386:1898): avc: denied { read write } for pid=11889 comm="syz.3.1559" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 754.423055][T11892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.463276][ T30] audit: type=1400 audit(1778837185.386:1899): avc: denied { open } for pid=11889 comm="syz.3.1559" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 755.513663][ T5730] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 755.531138][ T13] net_ratelimit: 11 callbacks suppressed [ 755.531157][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.551116][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 756.050997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.905778][ T5616] Bluetooth: hci0: command 0x1003 tx timeout [ 757.101362][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 757.149924][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 757.164288][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 757.255694][T11914] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 757.767216][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.927775][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.938392][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.038134][ T5730] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 758.047670][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 758.055894][ T5730] usb 4-1: Product: syz [ 758.060093][ T5730] usb 4-1: SerialNumber: syz [ 758.067257][ T5730] usb 4-1: config 0 descriptor?? [ 758.335561][ T5730] usb 4-1: can't set config #0, error -71 [ 758.341664][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.356077][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.384417][ T5730] usb 4-1: USB disconnect, device number 36 [ 758.524640][T11921] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1568'. [ 758.565716][T11921] netlink: 'syz.4.1568': attribute type 2 has an invalid length. [ 759.259653][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'. [ 759.307750][ T30] audit: type=1400 audit(1778837189.999:1900): avc: denied { bind } for pid=11935 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.387715][T11938] bond_slave_0: Caught tx_queue_len zero misconfig [ 760.561576][T11978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.831736][T11994] netlink: 'syz.2.1597': attribute type 49 has an invalid length. [ 760.901639][T11996] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 761.100311][ T24] net_ratelimit: 10 callbacks suppressed [ 761.100329][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.128892][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 761.143290][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 761.180864][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.814780][ T5730] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 762.242632][ T30] audit: type=1400 audit(1778837192.657:1901): avc: denied { bind } for pid=12008 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.295414][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.583759][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.618153][ T5616] Bluetooth: hci0: command 0x1003 tx timeout [ 763.627202][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 763.670604][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1605'. [ 763.750081][ T5730] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 763.759546][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 763.778687][ T5730] usb 1-1: Product: syz [ 763.782899][ T5730] usb 1-1: SerialNumber: syz [ 763.829128][ T5730] usb 1-1: config 0 descriptor?? [ 764.105793][ T5730] usb 1-1: USB disconnect, device number 36 [ 764.146941][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 764.161698][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.176122][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.272160][T12032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.286737][T12033] tipc: Enabling of bearer rejected, failed to enable media [ 764.439718][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.500049][T12046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1619'. [ 764.872910][T12058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.899898][ T30] audit: type=1400 audit(1778837195.240:1902): avc: denied { bind } for pid=12057 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 765.101932][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 765.277342][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.390845][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 765.603272][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.252323][ T24] usb 3-1: config 0 descriptor?? [ 766.315974][ T5729] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 766.473487][ T143] net_ratelimit: 8 callbacks suppressed [ 766.473507][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 766.493466][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 767.024701][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.761063][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 767.777506][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 767.797099][ T5616] Bluetooth: hci0: command 0x1003 tx timeout [ 767.873078][ T5729] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 767.893200][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 767.912976][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 767.929282][ T5729] usb 1-1: Product: syz [ 767.962873][ T5729] usb 1-1: SerialNumber: syz [ 768.044259][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.052810][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.064305][ T24] ath6kl: Unsupported hardware version: 0x0 [ 768.186440][ T5729] usb 1-1: config 0 descriptor?? [ 768.254388][ T5804] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 768.340169][ T24] ath6kl: Failed to init ath6kl core: -22 [ 768.346192][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 768.381632][ T24] usb 3-1: USB disconnect, device number 33 [ 768.428476][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.535001][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 768.554160][ T5729] usb 1-1: USB disconnect, device number 37 [ 768.579239][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 768.593573][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.616449][ T5804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.627167][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 768.654756][ T5804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 768.665514][ T5804] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 768.674762][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.734781][ T5804] usb 6-1: config 0 descriptor?? [ 768.740938][T12072] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 768.789237][ T5833] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 768.853064][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 768.867422][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 768.968583][ T5833] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 768.994713][ T5833] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 769.027815][ T5833] usb 5-1: Product: syz [ 769.041044][ T5833] usb 5-1: Manufacturer: syz [ 769.046812][ T5833] usb 5-1: SerialNumber: syz [ 769.052377][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 769.064999][ T5833] usb 5-1: config 0 descriptor?? [ 769.254715][ T5730] usb 6-1: USB disconnect, device number 19 [ 769.261753][T11134] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 769.281836][ T806] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 769.350281][ T5833] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 769.483839][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 769.492832][ T806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 769.506099][ T806] usb 4-1: config 4 interface 0 has no altsetting 0 [ 769.519203][ T806] usb 4-1: string descriptor 0 read error: -22 [ 769.531272][ T806] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 769.546920][ T806] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 769.563435][ T5833] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 769.588851][ T5833] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 769.593109][ T806] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 769.607267][ T5833] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 769.642379][ T806] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 769.679261][ T806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 769.703832][ T806] usb 4-1: media controller created [ 769.847795][ T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.889844][ T5833] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 769.990046][T12102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.409568][ T5833] usb 5-1: USB disconnect, device number 20 [ 770.498950][ T30] audit: type=1400 audit(1778837200.471:1903): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 770.597797][ T806] usb 4-1: USB disconnect, device number 37 [ 770.957876][ T5833] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 771.129631][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 771.147026][ T5833] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 771.172128][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.214099][ T5833] usb 5-1: config 0 descriptor?? [ 771.265910][ T5833] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 771.471742][T12122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1650'. [ 771.495116][ T5833] gspca_vc032x: reg_r err -32 [ 771.503592][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 771.511069][T12122] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1650'. [ 771.512571][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 771.534871][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 771.540178][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 771.545462][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 771.552825][T12122] netlink: 'syz.3.1650': attribute type 5 has an invalid length. [ 771.645510][T12124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.776553][T12122] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1650'. [ 772.018018][ T5729] net_ratelimit: 13 callbacks suppressed [ 772.018037][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.033613][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.041065][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.046437][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.055366][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.084041][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.099056][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.111814][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.125843][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.136243][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.147081][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.152676][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.158993][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.171661][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 772.181129][ T5833] gspca_vc032x: Unknown sensor... [ 772.393741][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 772.408111][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 772.461269][ T5833] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 772.843725][T12141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.208429][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.244521][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 773.259083][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 773.773251][ T5833] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 774.146393][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 774.160740][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 774.239290][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 774.244561][ T5729] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 774.455987][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.528171][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.543817][ T5804] usb 5-1: USB disconnect, device number 21 [ 774.722748][ T5833] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 774.776669][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.890150][ T5833] usb 1-1: config 0 has no interface number 0 [ 774.992494][ T5833] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.034701][ T5729] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 775.219728][ T5833] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.232982][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 775.358941][ T5729] usb 4-1: Product: syz [ 775.419876][ T5729] usb 4-1: SerialNumber: syz [ 775.442228][ T5833] usb 1-1: config 0 interface 196 has no altsetting 0 [ 775.646411][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 775.717902][ T5833] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 775.746253][ T5729] usb 4-1: config 0 descriptor?? [ 775.882787][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.987469][ T5833] usb 1-1: Product: syz [ 775.997517][ T5833] usb 1-1: Manufacturer: syz [ 776.002280][ T5833] usb 1-1: SerialNumber: syz [ 776.007343][ T806] kernel write not supported for file /snd/seq (pid: 806 comm: kworker/0:2) [ 776.062291][ T5833] usb 1-1: config 0 descriptor?? [ 776.102692][ T5729] usb 4-1: USB disconnect, device number 38 [ 776.294800][ T5833] ipheth 1-1:0.196: Unable to find endpoints [ 776.311341][ T5833] usb 1-1: USB disconnect, device number 38 [ 777.059648][ T5833] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 777.060930][ T806] hid_parser_main: 28 callbacks suppressed [ 777.060949][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 777.084776][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 777.092726][ T5730] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 777.102920][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 777.111492][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 777.129384][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 777.137762][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 777.149981][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 777.158863][ T806] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 777.185560][ T806] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 777.263308][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 777.273762][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 777.280814][ T5730] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 777.284097][ T5833] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 777.311365][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.329013][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 777.335748][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.360773][T12197] fido_id[12197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 777.402516][ T5833] usb 5-1: config 0 descriptor?? [ 777.425525][ T5833] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 777.445278][ T1120] net_ratelimit: 8 callbacks suppressed [ 777.445289][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 777.465214][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 777.481721][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 777.546788][ T5730] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 777.556078][ T30] audit: type=1400 audit(1778837207.059:1904): avc: denied { setopt } for pid=12200 comm="syz.0.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 777.586239][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.595386][ T5730] usb 3-1: Product: syz [ 777.599773][ T5730] usb 3-1: Manufacturer: syz [ 777.604402][ T5730] usb 3-1: SerialNumber: syz [ 777.765449][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.794662][ T5730] usb 3-1: config 0 descriptor?? [ 777.867428][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.878038][T12184] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 778.031206][ T5833] gspca_vc032x: reg_r err -32 [ 778.039462][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.120745][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 778.135073][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 778.587983][ T991] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 778.986423][ T5730] appledisplay: Apple Cinema Display connected [ 779.080016][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 779.488826][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.678359][ T991] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 779.725792][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 779.740291][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 779.758079][ T806] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 779.904696][ T5629] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 779.944160][ T991] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 780.074851][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.080265][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.085644][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.090967][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.096331][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.101657][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.107025][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.112349][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.115768][ T991] usb 4-1: Product: syz [ 780.117715][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.117729][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.117738][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.117748][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.117758][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.143276][ T991] usb 4-1: SerialNumber: syz [ 780.148572][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.148587][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.148595][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.148602][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 780.148611][ T5833] gspca_vc032x: Unknown sensor... [ 780.148675][ T5833] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 780.211014][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 780.228905][ T991] usb 4-1: config 0 descriptor?? [ 780.237147][ T5730] usb 3-1: USB disconnect, device number 34 [ 780.243077][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 780.314126][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 780.331940][ T5833] usb 5-1: USB disconnect, device number 22 [ 780.372802][ T5730] appledisplay: Apple Cinema Display disconnected [ 780.399140][ T806] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 780.422998][ T806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.446535][ T806] usb 6-1: config 0 descriptor?? [ 780.472886][ T806] cp210x 6-1:0.0: cp210x converter detected [ 780.535956][ T991] usb 4-1: USB disconnect, device number 39 [ 780.646064][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'. [ 780.658048][T12223] netlink: 456 bytes leftover after parsing attributes in process `syz.4.1685'. [ 780.846417][T12227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.957654][ T806] usb 6-1: cp210x converter now attached to ttyUSB0 [ 781.135466][ T5729] usb 6-1: USB disconnect, device number 20 [ 781.167091][ T5729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 781.208512][ T5729] cp210x 6-1:0.0: device disconnected [ 781.622103][T12252] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1697'. [ 781.644982][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 781.654805][T12252] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1697'. [ 781.664187][T12252] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 781.697028][T12252] netlink: 'syz.4.1697': attribute type 3 has an invalid length. [ 781.727240][T12252] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1697'. [ 781.828435][ T30] audit: type=1400 audit(1778837211.083:1905): avc: denied { write } for pid=12258 comm="syz.0.1700" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 782.631130][ T806] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 782.808857][ T5729] net_ratelimit: 11 callbacks suppressed [ 782.808876][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.085374][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 783.099759][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 784.511774][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.540121][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.563450][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 784.577930][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 784.705403][ T806] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 784.715416][ T806] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 784.724222][ T806] usb 5-1: Product: syz [ 784.728533][ T806] usb 5-1: SerialNumber: syz [ 784.756200][ T806] usb 5-1: config 0 descriptor?? [ 784.818242][ T991] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 784.925938][T12289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.023604][ T991] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 785.193686][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 785.208162][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 785.246787][ T991] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.274402][ T991] usb 6-1: config 2 interface 0 has no altsetting 0 [ 785.291622][ T991] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 785.302090][ T5715] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 785.315845][ T806] usb 5-1: USB disconnect, device number 23 [ 785.324835][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.480510][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 785.509985][ T5715] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 785.527497][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.543980][ T5715] usb 4-1: Product: syz [ 785.564124][ T5715] usb 4-1: Manufacturer: syz [ 785.576332][ T5715] usb 4-1: SerialNumber: syz [ 785.613437][ T5715] usb 4-1: config 0 descriptor?? [ 785.724062][ T5715] gspca_main: se401-2.14.0 probing 047d:5003 [ 785.729717][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.938568][ T991] elo 0003:04E7:0009.0005: item fetching failed at offset 2/5 [ 785.951949][ T991] elo 0003:04E7:0009.0005: parse failed [ 785.957668][ T991] elo 0003:04E7:0009.0005: probe with driver elo failed with error -22 [ 786.076758][ T991] usb 6-1: USB disconnect, device number 21 [ 786.164600][ T5715] gspca_se401: Wrong descriptor type [ 786.222508][ T30] audit: type=1400 audit(1778837215.191:1906): avc: denied { mount } for pid=12308 comm="syz.4.1720" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 786.265568][ T30] audit: type=1400 audit(1778837215.219:1907): avc: denied { remount } for pid=12308 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 787.460084][ T991] usb 4-1: USB disconnect, device number 40 [ 787.745931][ T5715] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 788.541963][ T806] net_ratelimit: 11 callbacks suppressed [ 788.541982][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.621922][ T5629] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 788.627994][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 788.642787][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 789.050228][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.061930][ T5715] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 789.071285][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 789.079369][ T5715] usb 5-1: Product: syz [ 789.089096][ T5715] usb 5-1: SerialNumber: syz [ 789.132448][ T5715] usb 5-1: config 0 descriptor?? [ 789.251837][T12339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.261861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.371600][ T30] audit: type=1400 audit(1778837218.120:1908): avc: denied { ioctl } for pid=12342 comm="syz.5.1732" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 789.423507][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 789.435364][ T5715] usb 5-1: USB disconnect, device number 24 [ 789.438170][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.169184][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.200495][ T7836] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 790.314357][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 790.381635][ T30] audit: type=1400 audit(1778837219.084:1909): avc: denied { connect } for pid=12356 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 791.319926][ T30] audit: type=1400 audit(1778837219.917:1910): avc: denied { ioctl } for pid=12376 comm="syz.5.1745" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 791.457064][ T5715] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 791.582009][ T991] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 793.425821][ T991] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 793.471317][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 793.524456][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 793.556713][ T991] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 793.577816][ T991] usb 3-1: Product: syz [ 793.586130][ T991] usb 3-1: SerialNumber: syz [ 793.595187][ T991] usb 3-1: config 0 descriptor?? [ 793.667833][ T5715] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 793.689502][ T5715] usb 1-1: can't read configurations, error -71 [ 793.984805][ T991] usb 3-1: USB disconnect, device number 35 [ 794.728051][ T5714] net_ratelimit: 13 callbacks suppressed [ 794.728069][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.752137][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 794.766559][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 794.767645][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.170929][ T806] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 795.187906][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1753'. [ 795.375848][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 795.390230][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.412196][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 795.421474][ T806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 795.431782][ T806] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 795.450281][ T806] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.466364][ T806] usb 4-1: config 1 interface 0 has no altsetting 0 [ 795.478786][ T806] usb 4-1: string descriptor 0 read error: -22 [ 795.486255][ T806] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 795.496957][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.512237][T12398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 795.599952][ T24] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 795.611115][ T5833] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 795.762206][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.772546][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 795.784233][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 795.795327][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 795.809519][ T5833] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 795.820796][ T5833] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 795.834003][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 795.840725][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 795.850069][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.856362][ T5714] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 795.861071][ T5833] usb 3-1: config 0 descriptor?? [ 795.870819][ T24] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 795.880066][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 795.888200][ T24] usb 5-1: Product: syz [ 795.888531][ T806] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 795.893148][ T24] usb 5-1: Manufacturer: syz [ 795.900177][T12410] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 795.904668][ T24] usb 5-1: SerialNumber: syz [ 795.916516][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.927903][ T24] usb 5-1: config 0 descriptor?? [ 795.963271][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 795.978334][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 796.029462][ T5714] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.040771][ T5714] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.054471][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 796.061396][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 796.070623][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.079966][ T806] usb 6-1: too many endpoints for config 0 interface 0 altsetting 248: 255, using maximum allowed: 30 [ 796.092748][ T5714] usb 1-1: config 0 descriptor?? [ 796.097927][ T806] usb 6-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 796.111455][ T806] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.119954][ T806] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 796.130114][ T806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.141841][ T806] usb 6-1: config 0 descriptor?? [ 796.164390][ T24] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 796.185282][ T24] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 796.376779][ T24] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 796.384497][ T24] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 796.396903][ T24] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 796.428337][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.435463][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.442478][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.449937][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.457351][ T5833] lg-g15 0003:046D:0A07.0006: reserved main item tag 0xd [ 796.464437][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.471546][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.478824][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.485824][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.493024][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.500118][ T5833] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x0 [ 796.522100][ T5833] lg-g15 0003:046D:0A07.0006: hidraw0: USB HID v0.07 Device [HID 046d:0a07] on usb-dummy_hcd.2-1/input0 [ 796.533757][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 796.563723][ T5714] logitech-djreceiver 0003:046D:C52F.0007: ignoring exceeding usage max [ 796.582472][ T5714] logitech-djreceiver 0003:046D:C52F.0007: hidraw1: USB HID v0.05 Device [HID 046d:c52f] on usb-dummy_hcd.0-1/input0 [ 796.595912][ T24] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 796.614961][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.621622][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.628253][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.634991][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.641870][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.648764][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.655769][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.662938][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.670206][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.676821][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.683492][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.690106][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.696763][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.703399][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.710022][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.716791][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.723438][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.730049][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.736743][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.743421][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.750031][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.756761][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.763410][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.770059][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.773842][ T806] cherry 0003:046A:0027.0008: hidraw2: USB HID v0.0a Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 796.776712][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.776911][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.801316][ T24] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 796.809783][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.816301][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.822865][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.829982][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.836807][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.843470][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.849985][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.856587][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.863159][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.869658][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.876271][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.882259][ T806] usb 6-1: USB disconnect, device number 22 [ 796.882844][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.895551][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.902181][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.908905][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.915536][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.922161][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.928815][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.935451][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.942109][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.948741][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.955378][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.962051][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.968718][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.975358][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.981989][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.988609][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 796.995254][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.010123][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.016794][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.023464][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.030108][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.036787][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.043444][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.050086][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.056749][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.063394][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.070031][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.076647][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.083795][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.090828][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.097482][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.104136][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.110787][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.117425][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.124045][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.130690][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.137331][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.143987][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.150626][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.155939][ T5714] usb 3-1: USB disconnect, device number 36 [ 797.157240][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.169613][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.176348][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.182971][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.189591][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.196250][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.202877][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.209499][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.216151][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.222777][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.229435][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.236074][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.242705][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.249354][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.255961][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.262617][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.269273][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.275909][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.282545][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.289183][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.295804][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.299904][ T5715] usb 1-1: USB disconnect, device number 41 [ 797.302462][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.314994][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.321657][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.321735][T12424] fido_id[12424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 797.328257][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.352485][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.359212][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.365846][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.372470][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.379116][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.385765][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.392376][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.399006][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.405615][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.412224][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.418889][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.425504][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.432157][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.440803][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.447443][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.454065][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.460695][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.467321][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.473955][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.480565][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.487204][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.493838][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.500453][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.507065][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.513710][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.520337][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.526998][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.533613][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.540238][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.546861][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.553474][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.560107][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.566744][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.573356][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.579976][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.586561][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.593218][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.599849][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.606456][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.613085][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.619708][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.626310][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.632946][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.639546][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.646157][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.652872][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.659506][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.666129][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.672749][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.679423][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.686054][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.692674][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.699308][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.705941][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.712558][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.719178][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.725820][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.732475][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.739109][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.745729][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.752370][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.759004][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.765647][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.772280][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.778891][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.785530][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.792180][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.798806][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.805454][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.812108][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.818726][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.825378][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.831995][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.838635][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.845275][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.851897][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.858596][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.865221][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.871885][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.878518][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.887039][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.893683][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.900346][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.907012][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.913691][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.920344][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.927000][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.933653][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.940558][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.947274][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.953900][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.960532][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.967153][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.973772][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 797.982525][ T24] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 798.000222][ T24] usb 5-1: USB disconnect, device number 25 [ 798.103795][ T5729] usb 4-1: USB disconnect, device number 41 [ 798.881234][ T806] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 799.769087][ T30] audit: type=1400 audit(1778837227.609:1911): avc: denied { connect } for pid=12440 comm="syz.2.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 800.227740][ T5729] net_ratelimit: 15 callbacks suppressed [ 800.227757][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.419368][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 800.427258][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 800.441987][ T7838] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.643844][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 800.798130][ T806] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 800.919875][ T806] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 801.193802][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.195490][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 801.216382][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 801.387908][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.486252][ T5729] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 802.120803][T12459] overlay: Unknown parameter '/' [ 802.572302][ T806] usb 1-1: Product: syz [ 802.642124][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.742766][ T5729] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 802.791815][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 802.806149][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.964365][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 802.996390][ T5629] Bluetooth: hci6: command 0x1003 tx timeout [ 803.123103][ T5729] usb 6-1: Product: syz [ 803.188618][ T5729] usb 6-1: SerialNumber: syz [ 803.318862][ T806] usb 1-1: SerialNumber: syz [ 803.349342][T11134] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 803.494012][ T806] usb 1-1: config 0 descriptor?? [ 803.494019][ T5729] usb 6-1: config 0 descriptor?? [ 803.642740][ T806] usb 1-1: can't set config #0, error -71 [ 803.684421][ T806] usb 1-1: USB disconnect, device number 42 [ 803.766994][ T5729] usb 6-1: USB disconnect, device number 23 [ 804.916409][ T5729] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 805.046474][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 805.122835][ T5729] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 805.197924][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 805.368799][ T5729] usb 5-1: Product: syz [ 805.373592][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 805.469260][ T5729] usb 5-1: SerialNumber: syz [ 805.621565][ T24] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.731211][ T5729] usb 5-1: config 0 descriptor?? [ 805.937759][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 806.108162][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 806.322604][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.401620][ T5833] net_ratelimit: 11 callbacks suppressed [ 806.401638][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.487066][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 806.499697][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 806.503457][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.203326][ T24] usb 4-1: config 0 descriptor?? [ 807.265492][ T5729] usb 5-1: USB disconnect, device number 26 [ 807.389834][ T30] audit: type=1400 audit(1778837235.002:1912): avc: denied { map } for pid=12513 comm="syz.2.1798" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 807.392666][T12514] binder_alloc: binder_alloc_mmap_handler: 12513 200000ffc000-200000fff000 already mapped failed -16 [ 807.516220][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.676800][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 807.691205][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.726691][ T24] logitech-djreceiver 0003:046D:C52F.0009: ignoring exceeding usage max [ 807.728673][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.753793][ T24] hid_parser_main: 541 callbacks suppressed [ 807.753939][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 807.889733][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 807.935712][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 807.946851][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 807.983166][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.049720][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.150370][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.231954][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.281098][ T5804] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 808.300948][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.362022][ T24] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 808.371070][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 808.385402][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.443984][ T806] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 808.872120][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.952118][ T24] logitech-djreceiver 0003:046D:C52F.0009: hidraw0: USB HID v0.05 Device [HID 046d:c52f] on usb-dummy_hcd.3-1/input0 [ 809.036426][ T24] usb 4-1: USB disconnect, device number 42 [ 809.085309][T12524] fido_id[12524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 809.139757][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 809.161055][ T5804] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 809.164529][ T806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 809.170247][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 809.214375][ T806] usb 3-1: config 8 has an invalid interface number: 161 but max is 0 [ 809.234070][ T806] usb 3-1: config 8 has no interface number 0 [ 809.256730][ T806] usb 3-1: config 8 interface 161 has no altsetting 0 [ 809.282966][ T806] usb 3-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=6d.02 [ 809.284878][ T5804] usb 1-1: Product: syz [ 809.307561][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.336432][ T806] usb 3-1: Product: syz [ 809.337573][ T5804] usb 1-1: SerialNumber: syz [ 809.358397][ T806] usb 3-1: Manufacturer: syz [ 809.359772][ T5804] usb 1-1: config 0 descriptor?? [ 809.375308][ T806] usb 3-1: SerialNumber: syz [ 809.734348][ T806] rtsx_usb 3-1:8.161: probe with driver rtsx_usb failed with error -22 [ 809.755248][ T806] usb 3-1: USB disconnect, device number 37 [ 809.994106][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 809.994210][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 810.060342][ T5804] usb 1-1: USB disconnect, device number 43 [ 810.089294][ T991] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 810.276369][ T991] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 810.296260][ T991] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 810.308196][ T991] usb 6-1: config 220 has no interface number 2 [ 810.315160][ T991] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 810.343304][ T991] usb 6-1: config 220 interface 0 has no altsetting 0 [ 810.379823][ T991] usb 6-1: config 220 interface 76 has no altsetting 0 [ 810.424798][ T991] usb 6-1: config 220 interface 1 has no altsetting 0 [ 810.469749][ T991] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 810.491705][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.505401][ T991] usb 6-1: Product: syz [ 810.510526][ T991] usb 6-1: Manufacturer: syz [ 810.515708][ T991] usb 6-1: SerialNumber: syz [ 811.159593][ T5804] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 812.120260][ T159] net_ratelimit: 15 callbacks suppressed [ 812.120277][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 812.140505][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.663581][T12561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.671906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.799453][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 812.813921][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.969310][ T5804] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 813.078722][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 813.088008][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.110187][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 813.119246][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 813.230145][ T5804] usb 3-1: Product: syz [ 813.273221][ T5804] usb 3-1: SerialNumber: syz [ 813.390850][ T991] usb 6-1: can't set config #220, error -71 [ 813.416358][ T5804] usb 3-1: config 0 descriptor?? [ 813.427599][ T991] usb 6-1: USB disconnect, device number 24 [ 813.526329][T12577] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 813.670876][ T5804] usb 3-1: USB disconnect, device number 38 [ 813.680905][ T5729] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 813.749453][ T64] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.763870][ T64] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.960844][ T5729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 814.008843][ T5729] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 814.042863][ T5729] usb 1-1: can't read configurations, error -71 [ 814.183233][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.781389][ T991] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 814.789056][ T806] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 814.813518][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 814.963045][ T806] usb 6-1: Using ep0 maxpacket: 8 [ 814.968171][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 814.975792][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 814.977489][ T806] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 814.988701][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.996528][ T991] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 815.006144][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 815.013900][ T806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.028858][ T991] usb 3-1: config 0 has no interface number 0 [ 815.032544][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 815.034977][ T991] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 815.055363][ T806] usb 6-1: Product: syz [ 815.058453][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.059791][ T806] usb 6-1: Manufacturer: syz [ 815.072766][ T806] usb 6-1: SerialNumber: syz [ 815.074251][ T24] usb 4-1: config 0 descriptor?? [ 815.077405][ T991] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 815.095017][ T806] usb 6-1: config 0 descriptor?? [ 815.103839][ T806] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 815.118067][ T991] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 815.138177][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.150312][ T991] usb 3-1: Product: syz [ 815.154514][ T991] usb 3-1: Manufacturer: syz [ 815.159485][ T991] usb 3-1: SerialNumber: syz [ 815.167795][ T991] usb 3-1: config 0 descriptor?? [ 815.392175][ T991] radio-si470x 3-1:0.35: this is not a si470x device. [ 815.434084][ T991] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 815.553205][T12610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.557661][ T24] uclogic 0003:28BD:0078.000A: interface is invalid, ignoring [ 815.570075][T12610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.579710][T12610] batman_adv: batadv0: Removing interface: ipvlan2 [ 815.586958][T12610] batman_adv: batadv0: Removing interface: ipvlan3 [ 815.649454][ T991] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 815.678407][ T991] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 815.707371][ T991] usb 3-1: USB disconnect, device number 39 [ 815.730907][ T991] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 815.808167][ T806] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 815.837086][ T806] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 815.873909][ T806] usb 6-1: USB disconnect, device number 25 [ 815.891568][ T5715] usb 4-1: USB disconnect, device number 43 [ 815.923076][ T30] audit: type=1400 audit(1778837242.984:1913): avc: denied { create } for pid=12614 comm="syz.0.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 815.964240][ T30] audit: type=1400 audit(1778837242.984:1914): avc: denied { setopt } for pid=12614 comm="syz.0.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 816.078406][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1838'. [ 816.087620][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'. [ 816.179741][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 816.247229][T12625] autofs: Bad value for 'fd' [ 816.622494][T12633] netlink: 'syz.2.1844': attribute type 4 has an invalid length. [ 816.683483][T12633] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1844'. [ 816.769646][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 816.790698][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 816.850512][T12645] block nbd2: not configured, cannot reconfigure [ 817.359240][T12661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.652676][ T5729] net_ratelimit: 15 callbacks suppressed [ 817.652694][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.666448][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.694133][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 817.708449][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.081233][T12672] ipvlan6: entered allmulticast mode [ 818.100822][T12672] batman_adv: batadv0: Adding interface: ipvlan6 [ 818.114648][T12672] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1288) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1320 would solve the problem. [ 818.154805][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.172861][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.230774][T12683] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1862'. [ 818.243201][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 818.260696][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.272100][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 818.314372][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.326375][T12672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 818.338169][T12672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.349477][T12672] batman_adv: batadv0: Interface activated: ipvlan6 [ 818.350607][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.371567][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.799655][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.916762][ T5729] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 818.927762][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.942391][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.056551][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.131579][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 819.138465][ T5729] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 819.165779][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.180394][ T5729] usb 5-1: config 0 descriptor?? [ 819.190764][ T5729] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 819.404332][ T5729] gspca_vc032x: reg_r err -32 [ 819.414762][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.421037][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.430537][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.439106][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.447896][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.456099][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.463293][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.468717][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.474916][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.480336][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.485884][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.491323][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.496886][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.502302][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.514378][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.525403][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.614542][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.639750][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 819.666326][ T991] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 819.860934][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 819.909979][ T991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.064276][ T5729] gspca_vc032x: Unknown sensor... [ 820.073026][ T5729] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 820.085246][ T991] usb 4-1: config 0 has no interface number 0 [ 820.108048][T12714] tipc: Started in network mode [ 820.112983][T12714] tipc: Node identity , cluster identity 4711 [ 820.125642][T12714] tipc: Failed to set node id, please configure manually [ 820.135906][ T991] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 820.156235][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.156575][T12714] tipc: Enabling of bearer rejected, failed to enable media [ 820.165222][ T991] usb 4-1: Product: syz [ 820.178399][ T991] usb 4-1: Manufacturer: syz [ 820.183088][ T991] usb 4-1: SerialNumber: syz [ 820.195305][ T991] usb 4-1: config 0 descriptor?? [ 820.205994][ T991] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 820.218379][ T991] usb 4-1: selecting invalid altsetting 1 [ 820.224487][ T991] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 820.237502][ T991] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 820.250041][ T991] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 820.260256][ T991] usb 4-1: media controller created [ 820.276963][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.176647][T12736] xt_hashlimit: size too large, truncated to 1048576 [ 821.389711][T12740] netlink: 'syz.2.1882': attribute type 14 has an invalid length. [ 821.401056][T12740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1882'. [ 821.461044][ T991] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 821.487138][ T991] zl10353_read_register: readreg error (reg=127, ret==-110) [ 821.499647][ T991] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 821.605577][ T991] usb 4-1: USB disconnect, device number 44 [ 821.815441][ T5729] usb 5-1: USB disconnect, device number 27 [ 821.858307][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 822.411354][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 822.424026][ T5714] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 822.440152][ T5714] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 822.457787][ T5714] usb 3-1: config 0 has no interface number 0 [ 822.471914][ T5714] usb 3-1: config 0 interface 181 altsetting 36 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.495412][ T5714] usb 3-1: config 0 interface 181 altsetting 36 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.516473][ T5714] usb 3-1: config 0 interface 181 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.588293][ T5714] usb 3-1: config 0 interface 181 has no altsetting 0 [ 822.735375][ T5714] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 822.812965][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.872441][ T5714] usb 3-1: config 0 descriptor?? [ 823.319738][ T159] net_ratelimit: 16 callbacks suppressed [ 823.319755][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 823.340168][ T159] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.370414][ T5714] hid_parser_main: 23 callbacks suppressed [ 823.370435][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.382559][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 823.411816][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.441244][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.462167][T12788] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 823.494792][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.519464][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.519546][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.540784][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.565514][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 823.570944][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.580053][ T24] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 823.595453][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.605160][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.614521][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.623689][ T5714] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 823.658733][ T24] usb 4-1: config 0 descriptor?? [ 823.939523][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 824.075018][ T24] gspca_vc032x: reg_r err -32 [ 824.154756][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.214329][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.243897][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.271445][ T5833] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 824.348487][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.429218][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 824.443612][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 824.504693][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.601429][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.687762][ T5833] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 824.742840][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.797274][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 824.848901][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.927900][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 824.933402][ T5833] usb 1-1: Product: syz [ 824.994632][ T5833] usb 1-1: SerialNumber: syz [ 825.022600][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 825.323832][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 825.791591][ T5833] usb 1-1: config 0 descriptor?? [ 825.902746][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 825.980541][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 826.380836][ T6134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.397282][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.565812][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.629761][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.685410][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.924905][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.089653][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.231190][ T5714] uclogic 0003:5543:0522.000B: hidraw0: USB HID vea.f1 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input181 [ 827.249505][ T5714] usb 3-1: USB disconnect, device number 40 [ 827.253714][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.307482][T12797] hpfs: Bad magic ... probably not HPFS [ 827.313115][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.339672][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.361564][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.382747][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.409198][ T24] gspca_vc032x: Unknown sensor... [ 827.423804][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 827.438070][ T24] usb 4-1: USB disconnect, device number 45 [ 827.488690][ T30] audit: type=1400 audit(1778837253.671:1915): avc: denied { map } for pid=12808 comm="syz.2.1909" path="socket:[42661]" dev="sockfs" ino=42661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 827.540610][ T5833] usb 1-1: USB disconnect, device number 46 [ 827.580440][ T30] audit: type=1400 audit(1778837253.671:1916): avc: denied { read } for pid=12808 comm="syz.2.1909" path="socket:[42661]" dev="sockfs" ino=42661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 827.622737][T12810] fido_id[12810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 827.637816][ T30] audit: type=1400 audit(1778837253.840:1917): avc: denied { setopt } for pid=12808 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 827.800292][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 828.047814][ T5715] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 828.068594][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.081774][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.097887][ T24] usb 4-1: config 1 has no interface number 0 [ 828.113385][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.140783][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 828.150883][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 828.161349][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.169419][ T24] usb 4-1: Product: syz [ 828.174395][ T24] usb 4-1: Manufacturer: syz [ 828.179071][ T24] usb 4-1: SerialNumber: syz [ 828.200188][ T24] cdc_ncm 4-1:1.1: skipping garbage [ 828.217482][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 828.230179][ T24] usb 4-1: selecting invalid altsetting 1 [ 828.241157][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.256617][ T5715] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 828.267840][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.300611][ T5715] usb 5-1: config 0 descriptor?? [ 828.775224][ T5715] hid_parser_main: 28 callbacks suppressed [ 828.775240][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.802004][ T29] net_ratelimit: 7 callbacks suppressed [ 828.802028][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.819733][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.842364][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.853051][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.862577][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.870450][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.878010][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.885228][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.894492][ T30] audit: type=1400 audit(1778837255.122:1918): avc: denied { write } for pid=12840 comm="syz.2.1923" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 828.894522][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 828.934557][ T806] kernel read not supported for file /mdstat (pid: 806 comm: kworker/0:2) [ 828.943730][ T5714] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5714 comm: kworker/0:4) [ 828.958040][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 828.972614][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 828.989413][ T24] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 829.000335][ T5715] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 829.037998][ T24] usb 4-1: selecting invalid altsetting 1 [ 829.038023][ T5715] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 829.047267][ T5833] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 829.084422][ T24] cdc_ncm 4-1:1.1: bind() failure [ 829.153071][ T24] usb 4-1: USB disconnect, device number 46 [ 829.250448][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 829.357314][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.485469][ T5715] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 829.528459][ T6209] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.542945][ T6209] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.626350][ T5833] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 829.642705][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.667080][ T5715] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 829.689788][ T5833] usb 6-1: config 0 descriptor?? [ 829.690008][ T5715] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -71 [ 829.718165][ T5833] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 829.727618][ T5715] usb 5-1: USB disconnect, device number 28 [ 829.913562][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.928270][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.931286][ T5833] gspca_vc032x: reg_r err -32 [ 829.953693][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.959389][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.964862][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 829.985912][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.018587][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.033209][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.060004][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.112397][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.141022][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.160963][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.185197][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.191544][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 830.203185][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.205886][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 830.243892][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.253459][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.294432][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.309412][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.330915][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.337528][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.363205][ T5833] gspca_vc032x: Unknown sensor... [ 830.415074][ T5715] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 830.456996][ T5833] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 830.511299][ T29] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 830.600391][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 830.681467][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 830.752078][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.897441][ T29] usb 3-1: config 0 descriptor?? [ 831.248790][ T5833] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 831.272467][ T5715] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 831.306577][ T29] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 832.412169][ T5833] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 832.481052][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 832.560990][ T5833] usb 5-1: Product: syz [ 832.601261][ T5833] usb 5-1: SerialNumber: syz [ 832.819447][ T5629] Bluetooth: hci0: command 0x1003 tx timeout [ 832.828726][T11134] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 832.918271][ T5833] usb 5-1: config 0 descriptor?? [ 833.020048][ T30] audit: type=1400 audit(1778837258.790:1919): avc: denied { wake_alarm } for pid=12869 comm="syz.0.1931" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 833.188249][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.203429][ T5715] usb 4-1: config 0 descriptor?? [ 833.211695][ T5715] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 833.295777][ T24] usb 6-1: USB disconnect, device number 26 [ 833.308398][ T29] usb 3-1: USB disconnect, device number 41 [ 833.488291][ T5715] gspca_vc032x: reg_r err -71 [ 833.493063][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.498437][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.514053][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.519346][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.540249][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.755819][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.761484][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.767033][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.772628][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.777939][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.779077][ T5833] usb 5-1: USB disconnect, device number 29 [ 833.788565][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.795106][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.800471][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.809098][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.824775][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.840140][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.869277][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.895748][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 833.921926][ T5715] gspca_vc032x: Unknown sensor... [ 833.956476][ T5715] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 833.995212][ T5715] usb 4-1: USB disconnect, device number 47 [ 834.327522][T12894] usb usb7: usbfs: process 12894 (syz.0.1941) did not claim interface 47 before use [ 834.623543][ T24] net_ratelimit: 19 callbacks suppressed [ 834.623563][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.646825][ T82] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 834.661269][ T82] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.817370][T12903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.277286][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.291684][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.729028][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.982573][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 835.997210][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 836.572816][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 836.587515][ T143] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 836.607207][T12932] tipc: Started in network mode [ 836.622345][T12932] tipc: Node identity ac14140f, cluster identity 4711 [ 836.680887][T12932] tipc: New replicast peer: 255.255.255.255 [ 836.717868][T12932] tipc: Enabled bearer , priority 9 [ 836.816296][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 836.830502][T12934] tipc: Disabling bearer [ 837.092190][T12952] netem: change failed [ 838.402162][T12984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.805929][ T5714] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 839.017382][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 839.248245][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.416986][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.638820][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.722664][ T991] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 839.829361][ T5714] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 840.074299][ T991] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 840.086901][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.186594][ T991] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 840.337065][ T806] net_ratelimit: 16 callbacks suppressed [ 840.337082][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.373322][ T991] usb 4-1: Product: syz [ 840.457942][ T991] usb 4-1: SerialNumber: syz [ 840.537845][ T6134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 840.552162][ T6134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 840.572483][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.658338][ T5714] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 840.691602][ T991] usb 4-1: config 0 descriptor?? [ 840.840510][ T5714] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 840.969831][ T5714] usb 6-1: Manufacturer: syz [ 841.600721][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 841.615050][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.681395][ T5714] usb 6-1: config 0 descriptor?? [ 841.710519][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.745458][ T5714] usb 6-1: can't set config #0, error -71 [ 841.771772][ T991] usb 4-1: USB disconnect, device number 48 [ 841.817250][ T5714] usb 6-1: USB disconnect, device number 27 [ 841.926348][ T30] audit: type=1400 audit(1778837267.324:1920): avc: denied { mount } for pid=13000 comm="syz.5.1984" name="/" dev="pstore" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 841.983999][ T30] audit: type=1400 audit(1778837267.371:1921): avc: denied { unmount } for pid=7415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 842.202804][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 842.217201][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 842.416914][T13018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.828340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.212781][ T30] audit: type=1400 audit(1778837268.522:1922): avc: denied { append } for pid=13025 comm="syz.5.1993" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 843.676578][ T5714] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 843.834844][T13043] input: syz0 as /devices/virtual/input/input13 [ 843.879520][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 843.897185][ T5714] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 843.911713][ T5750] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 843.921645][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.939822][ T5714] usb 6-1: config 0 descriptor?? [ 843.995518][ T30] audit: type=1400 audit(1778837269.252:1923): avc: denied { append } for pid=13044 comm="syz.4.2003" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 843.997001][ T5714] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 844.083015][ T30] audit: type=1400 audit(1778837269.280:1924): avc: denied { map } for pid=13044 comm="syz.4.2003" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 844.112921][ T30] audit: type=1400 audit(1778837269.280:1925): avc: denied { execute } for pid=13044 comm="syz.4.2003" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 844.142063][ T30] audit: type=1400 audit(1778837269.392:1926): avc: denied { map } for pid=13048 comm="syz.3.2005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 844.165338][ T5750] usb 3-1: Using ep0 maxpacket: 8 [ 844.172322][ T30] audit: type=1400 audit(1778837269.392:1927): avc: denied { execute } for pid=13048 comm="syz.3.2005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 844.201974][ T5714] gspca_vc032x: reg_r err -32 [ 844.209207][ T5750] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 844.217544][ T5750] usb 3-1: config 0 has no interface number 0 [ 844.225682][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.235045][ T5750] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 844.247654][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.257070][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.266571][ T5750] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 844.280158][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.286313][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.292189][ T5750] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 844.305802][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.312264][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.317802][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.333086][ T5750] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 844.345310][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.351131][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.356530][ T5750] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.369789][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.375467][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.380951][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.388998][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.394275][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 844.394623][ T5750] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 844.413380][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.417154][T11134] block nbd0: Receive control failed (result -32) [ 844.419183][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.443265][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.462929][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.492328][ T5750] usb 3-1: Product: syz [ 844.502655][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 844.522824][ T5750] usb 3-1: Manufacturer: syz [ 844.537770][ T5714] gspca_vc032x: Unknown sensor... [ 844.544959][ T5750] usb 3-1: SerialNumber: syz [ 844.549661][ T5714] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 844.567779][ T5750] usb 3-1: config 0 descriptor?? [ 844.584762][ T991] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 844.829790][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.853159][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.878298][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.898921][ T991] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 844.968951][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.484596][ T991] usb 1-1: config 0 descriptor?? [ 845.500467][ T5750] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 845.528759][ T5750] usb 3-1: USB disconnect, device number 42 [ 845.731605][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 845.805863][T13074] macvtap1: entered promiscuous mode [ 845.806501][ T30] audit: type=1400 audit(1778837270.946:1928): avc: denied { read } for pid=13075 comm="syz.4.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 845.811402][T13074] macvtap1: entered allmulticast mode [ 845.972332][ T991] hid_parser_main: 222 callbacks suppressed [ 845.972354][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 845.994460][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.002071][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.021209][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.031182][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.049097][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.062706][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.075548][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.091565][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.106665][ T991] hid-rmi 0003:0461:4E72.000D: unknown main item tag 0x0 [ 846.139162][ T991] hid-rmi 0003:0461:4E72.000D: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 846.163973][ T30] audit: type=1400 audit(1778837271.283:1929): avc: denied { unmount } for pid=13081 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 846.196182][ T991] usb 1-1: USB disconnect, device number 47 [ 846.202424][ T7604] net_ratelimit: 15 callbacks suppressed [ 846.202437][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 846.222579][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 846.376529][T13085] fido_id[13085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 846.585360][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.595039][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'. [ 846.709392][ T7604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.717908][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.728507][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.834598][T13098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.862451][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.916781][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 846.931202][ T7604] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 847.295595][ T29] usb 6-1: USB disconnect, device number 28 [ 847.483218][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 847.483236][ T30] audit: type=1400 audit(1778837272.518:1931): avc: denied { write } for pid=13107 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 847.612761][ T5833] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 847.725862][ T30] audit: type=1400 audit(1778837272.743:1932): avc: denied { connect } for pid=13112 comm="syz.3.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 847.784589][ T5833] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 847.810776][ T5833] usb 1-1: config 0 has no interface number 0 [ 847.836443][ T5833] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 847.844313][ T1120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 847.876851][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.905680][ T5833] usb 1-1: Product: syz [ 847.920737][ T5833] usb 1-1: Manufacturer: syz [ 847.935324][ T5833] usb 1-1: SerialNumber: syz [ 847.967120][ T5833] usb 1-1: config 0 descriptor?? [ 848.212498][ T5833] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 848.220195][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 848.243778][ T5833] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 848.252231][ T5833] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 848.260615][ T5833] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 848.284430][ T5833] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 848.335759][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 848.390908][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.406749][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.419377][ T29] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 848.429397][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.456130][ T29] usb 6-1: config 0 descriptor?? [ 848.506526][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 848.513472][ T24] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 848.523232][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.547987][ T24] usb 3-1: config 0 descriptor?? [ 848.571971][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 848.716369][ T806] usb 1-1: USB disconnect, device number 48 [ 848.735151][ T806] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 848.745360][ T806] keyspan 1-1:0.133: device disconnected [ 848.785945][ T24] gspca_vc032x: reg_r err -32 [ 848.800095][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.816020][T13134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.816617][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.825017][T13134] IPv6: NLM_F_CREATE should be set when creating new route [ 848.829497][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.841344][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.846662][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.864673][T13134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.881484][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.900110][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.916117][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.922196][ T29] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 848.950397][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.960567][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.967501][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.973092][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.002365][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.018032][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.050551][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.065540][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.072153][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.078521][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 849.084083][ T24] gspca_vc032x: Unknown sensor... [ 849.089210][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 849.120904][ T29] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 849.133277][ T29] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 849.146471][ T29] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 849.174680][ T29] usb 6-1: USB disconnect, device number 29 [ 849.298078][ T806] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 849.314950][ T30] audit: type=1400 audit(1778837274.231:1933): avc: denied { read } for pid=13146 comm="syz.3.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 849.482774][ T806] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 849.495691][ T806] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.506722][ T806] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 849.521440][ T806] usb 5-1: config 0 interface 0 has no altsetting 0 [ 849.529136][ T806] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 849.542934][ T806] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 849.551238][ T806] usb 5-1: Manufacturer: syz [ 849.560648][ T806] usb 5-1: config 0 descriptor?? [ 849.799402][T13164] netlink: 'syz.0.2051': attribute type 2 has an invalid length. [ 849.867429][T13166] netlink: 'syz.0.2052': attribute type 12 has an invalid length. [ 849.875830][T13166] netlink: 'syz.0.2052': attribute type 2 has an invalid length. [ 849.883569][T13166] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2052'. [ 850.017411][ T806] sony 0003:054C:0268.000F: hiddev0,hidraw0: USB HID v80.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 850.028493][ T5750] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 850.036205][ T806] sony 0003:054C:0268.000F: failed to claim input [ 850.205642][ T5750] usb 6-1: Using ep0 maxpacket: 16 [ 850.210877][ T991] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 850.220600][ T5750] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 850.225087][ T29] usb 5-1: USB disconnect, device number 30 [ 850.228811][ T5750] usb 6-1: config 0 has no interface number 0 [ 850.240881][ T5750] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 850.252399][ T5750] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 850.272789][ T5750] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 850.303809][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 850.311890][ T5750] usb 6-1: Product: syz [ 850.316170][ T5750] usb 6-1: SerialNumber: syz [ 850.322481][ T5750] usb 6-1: config 0 descriptor?? [ 850.330721][ T5750] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 850.339799][ T5750] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15 [ 850.397993][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 850.409527][ T991] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.431797][ T991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 850.438466][ T991] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 850.448339][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.458618][ T991] usb 1-1: config 0 descriptor?? [ 850.573688][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.590407][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.617413][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.626468][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.633732][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.640882][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.648132][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.657928][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.665110][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.672252][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.679374][ T5750] usb 6-1: USB disconnect, device number 30 [ 850.685310][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 850.685326][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 850.718075][ T5750] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 850.823221][ T30] audit: type=1400 audit(1778837275.644:1934): avc: denied { watch } for pid=13173 comm="syz.3.2055" path="/401/control" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 850.961722][ T991] mcp2221 0003:04D8:00DD.0010: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 851.032757][T13180] xt_hashlimit: size too large, truncated to 1048576 [ 851.056087][T13182] loop9: detected capacity change from 0 to 524287936 [ 851.099019][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.145204][ C0] ================================================================== [ 851.153289][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x101c/0x1090 [ 851.160907][ C0] Read of size 1 at addr ffff8880353a3fff by task udevd/5883 [ 851.168271][ C0] [ 851.170582][ C0] CPU: 0 UID: 0 PID: 5883 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 851.170603][ C0] Tainted: [L]=SOFTLOCKUP [ 851.170608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.170620][ C0] Call Trace: [ 851.170625][ C0] [ 851.170631][ C0] dump_stack_lvl+0x100/0x190 [ 851.170651][ C0] print_report+0x13d/0x4b0 [ 851.170671][ C0] ? __virt_addr_valid+0x239/0x430 [ 851.170687][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 851.170700][ C0] kasan_report+0xdf/0x1d0 [ 851.170715][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 851.170729][ C0] mcp2221_raw_event+0x101c/0x1090 [ 851.170742][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 851.170761][ C0] __hid_input_report.constprop.0+0x319/0x470 [ 851.170778][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 851.170790][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 851.170808][ C0] hid_irq_in+0x55d/0x710 [ 851.170821][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 851.170836][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 851.170850][ C0] dummy_timer+0xda1/0x36c0 [ 851.170870][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 851.170891][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 851.170905][ C0] ? mark_held_locks+0x40/0x70 [ 851.170921][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 851.170937][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 851.170951][ C0] __hrtimer_run_queues+0x470/0xa00 [ 851.170975][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 851.170996][ C0] handle_softirqs+0x1ea/0xa00 [ 851.171017][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 851.171036][ C0] ? _raw_spin_unlock+0x28/0x50 [ 851.171052][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 851.171065][ C0] __irq_exit_rcu+0x162/0x210 [ 851.171085][ C0] irq_exit_rcu+0x9/0x30 [ 851.171103][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 851.171126][ C0] [ 851.171131][ C0] [ 851.171136][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 851.171152][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xe/0x40 [ 851.171172][ C0] Code: fa ff ff 8b 44 24 04 eb aa 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 22 20 4d 05 85 c0 74 20 <8b> 05 c0 52 4d 05 85 c0 74 16 65 48 8b 05 e8 5d 80 08 8b 80 8c 0b [ 851.171185][ C0] RSP: 0018:ffffc900042c7810 EFLAGS: 00000202 [ 851.171199][ C0] RAX: 0000000000000002 RBX: 000000000000000d RCX: ffff88801c6a9880 [ 851.171208][ C0] RDX: ffff88802039a500 RSI: ffffffff8b8311a5 RDI: ffff88802039a500 [ 851.171217][ C0] RBP: 0000000000000001 R08: 0000000000000004 R09: 000000000000000d [ 851.171225][ C0] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000000 [ 851.171232][ C0] R13: 000000000000000f R14: dffffc0000000000 R15: ffff88801c6a9870 [ 851.171244][ C0] ? mt_validate+0xf55/0x31e0 [ 851.171266][ C0] mt_validate+0xf7c/0x31e0 [ 851.171292][ C0] ? __pfx_mt_validate+0x10/0x10 [ 851.171339][ C0] validate_mm+0xa8/0x4e0 [ 851.171369][ C0] ? __pfx_validate_mm+0x10/0x10 [ 851.171417][ C0] mmap_region+0x38d/0x620 [ 851.171443][ C0] ? __pfx_mmap_region+0x10/0x10 [ 851.171463][ C0] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 851.171479][ C0] ? selinux_mmap_addr+0x2b/0x110 [ 851.171496][ C0] ? bpf_lsm_mmap_addr+0x9/0x30 [ 851.171508][ C0] ? security_mmap_addr+0x71/0x1e0 [ 851.171526][ C0] ? __get_unmapped_area+0x255/0x3e0 [ 851.171543][ C0] do_mmap+0xc63/0x12f0 [ 851.171559][ C0] ? __pfx_do_mmap+0x10/0x10 [ 851.171574][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 851.171596][ C0] vm_mmap_pgoff+0x29e/0x470 [ 851.171613][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 851.171636][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 851.171651][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 851.171666][ C0] ? up_write+0x28c/0x4f0 [ 851.171686][ C0] __x64_sys_mmap+0x125/0x190 [ 851.171705][ C0] do_syscall_64+0x10b/0xf80 [ 851.171722][ C0] ? clear_bhb_loop+0x40/0x90 [ 851.171737][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.171751][ C0] RIP: 0033:0x7f12fe31d822 [ 851.171768][ C0] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 851.171781][ C0] RSP: 002b:00007fffa5afc1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 851.171794][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12fe31d822 [ 851.171804][ C0] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 851.171813][ C0] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 851.171822][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 851.171830][ C0] R13: 0000003e7fff7e00 R14: 00005649e037a3f0 R15: 0000000000001000 [ 851.171845][ C0] [ 851.171850][ C0] [ 851.626160][ C0] The buggy address belongs to the physical page: [ 851.632541][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x353a3 [ 851.641278][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 851.648368][ C0] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 851.656931][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 851.665481][ C0] page dumped because: kasan: bad access detected [ 851.671867][ C0] page_owner tracks the page as freed [ 851.677201][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 12688, tgid 12688 (syz.4.1865), ts 819946247190, free_ts 829831325647 [ 851.693147][ C0] post_alloc_hook+0x153/0x170 [ 851.697899][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 851.703427][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 851.709304][ C0] alloc_pages_bulk_noprof+0x657/0x1390 [ 851.714829][ C0] __kasan_populate_vmalloc+0xf0/0x210 [ 851.720279][ C0] alloc_vmap_area+0x95d/0x2b70 [ 851.725102][ C0] __get_vm_area_node+0x1ca/0x330 [ 851.730100][ C0] __vmalloc_node_range_noprof+0x228/0x1630 [ 851.735970][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 851.741056][ C0] copy_process+0x7fb/0x7ed0 [ 851.745620][ C0] kernel_clone+0x12e/0x9c0 [ 851.750093][ C0] __do_sys_clone3+0x214/0x290 [ 851.754832][ C0] do_syscall_64+0x10b/0xf80 [ 851.759420][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.765283][ C0] page last free pid 806 tgid 806 stack trace: [ 851.771403][ C0] __free_frozen_pages+0x747/0x1040 [ 851.776577][ C0] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 851.782274][ C0] __apply_to_page_range+0xb1d/0x1520 [ 851.787622][ C0] __kasan_release_vmalloc+0xd7/0xe0 [ 851.792885][ C0] purge_vmap_node+0x210/0xb40 [ 851.797624][ C0] __purge_vmap_area_lazy+0x91b/0xc00 [ 851.802968][ C0] drain_vmap_area_work+0x27/0x40 [ 851.807966][ C0] process_one_work+0xa0e/0x1980 [ 851.812877][ C0] worker_thread+0x5ef/0xe50 [ 851.817442][ C0] kthread+0x370/0x450 [ 851.821485][ C0] ret_from_fork+0x72b/0xd50 [ 851.826052][ C0] ret_from_fork_asm+0x1a/0x30 [ 851.830800][ C0] [ 851.833094][ C0] Memory state around the buggy address: [ 851.838692][ C0] ffff8880353a3e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 851.848027][ C0] ffff8880353a3f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 851.856057][ C0] >ffff8880353a3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 851.864091][ C0] ^ [ 851.872033][ C0] ffff8880353a4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 851.880066][ C0] ffff8880353a4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 851.888107][ C0] ================================================================== [ 851.896149][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 851.903320][ C0] CPU: 0 UID: 0 PID: 5883 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 851.913727][ C0] Tainted: [L]=SOFTLOCKUP [ 851.918019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.928047][ C0] Call Trace: [ 851.931305][ C0] [ 851.934126][ C0] dump_stack_lvl+0x100/0x190 [ 851.938783][ C0] vpanic+0x552/0x970 [ 851.942739][ C0] ? __pfx_vpanic+0x10/0x10 [ 851.947217][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 851.952216][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 851.957475][ C0] panic+0xd1/0xe0 [ 851.961176][ C0] ? __pfx_panic+0x10/0x10 [ 851.965568][ C0] ? end_report.part.0+0x23/0x90 [ 851.970484][ C0] ? rcu_is_watching+0x12/0xc0 [ 851.975228][ C0] ? end_report.part.0+0x23/0x90 [ 851.980144][ C0] check_panic_on_warn.cold+0x19/0x34 [ 851.985489][ C0] end_report.part.0+0x3a/0x90 [ 851.990243][ C0] kasan_report.cold+0xe/0x18 [ 851.994917][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 852.000177][ C0] mcp2221_raw_event+0x101c/0x1090 [ 852.005260][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.011043][ C0] __hid_input_report.constprop.0+0x319/0x470 [ 852.017098][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 852.022527][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 852.028054][ C0] hid_irq_in+0x55d/0x710 [ 852.032358][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 852.037705][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 852.042877][ C0] dummy_timer+0xda1/0x36c0 [ 852.047361][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.053146][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 852.058063][ C0] ? mark_held_locks+0x40/0x70 [ 852.062807][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 852.068589][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 852.073499][ C0] __hrtimer_run_queues+0x470/0xa00 [ 852.078681][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 852.083774][ C0] handle_softirqs+0x1ea/0xa00 [ 852.088518][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 852.093781][ C0] ? _raw_spin_unlock+0x28/0x50 [ 852.098609][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 852.104224][ C0] __irq_exit_rcu+0x162/0x210 [ 852.108890][ C0] irq_exit_rcu+0x9/0x30 [ 852.113110][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 852.118720][ C0] [ 852.121622][ C0] [ 852.124528][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.130491][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xe/0x40 [ 852.136623][ C0] Code: fa ff ff 8b 44 24 04 eb aa 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 22 20 4d 05 85 c0 74 20 <8b> 05 c0 52 4d 05 85 c0 74 16 65 48 8b 05 e8 5d 80 08 8b 80 8c 0b [ 852.156203][ C0] RSP: 0018:ffffc900042c7810 EFLAGS: 00000202 [ 852.162246][ C0] RAX: 0000000000000002 RBX: 000000000000000d RCX: ffff88801c6a9880 [ 852.170188][ C0] RDX: ffff88802039a500 RSI: ffffffff8b8311a5 RDI: ffff88802039a500 [ 852.178147][ C0] RBP: 0000000000000001 R08: 0000000000000004 R09: 000000000000000d [ 852.186090][ C0] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000000 [ 852.194053][ C0] R13: 000000000000000f R14: dffffc0000000000 R15: ffff88801c6a9870 [ 852.202012][ C0] ? mt_validate+0xf55/0x31e0 [ 852.206677][ C0] mt_validate+0xf7c/0x31e0 [ 852.211167][ C0] ? __pfx_mt_validate+0x10/0x10 [ 852.216087][ C0] validate_mm+0xa8/0x4e0 [ 852.220398][ C0] ? __pfx_validate_mm+0x10/0x10 [ 852.225332][ C0] mmap_region+0x38d/0x620 [ 852.229736][ C0] ? __pfx_mmap_region+0x10/0x10 [ 852.234657][ C0] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 852.240617][ C0] ? selinux_mmap_addr+0x2b/0x110 [ 852.245616][ C0] ? bpf_lsm_mmap_addr+0x9/0x30 [ 852.250442][ C0] ? security_mmap_addr+0x71/0x1e0 [ 852.255534][ C0] ? __get_unmapped_area+0x255/0x3e0 [ 852.260795][ C0] do_mmap+0xc63/0x12f0 [ 852.264926][ C0] ? __pfx_do_mmap+0x10/0x10 [ 852.269489][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 852.275125][ C0] vm_mmap_pgoff+0x29e/0x470 [ 852.279692][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 852.284797][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 852.289469][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 852.294728][ C0] ? up_write+0x28c/0x4f0 [ 852.299039][ C0] __x64_sys_mmap+0x125/0x190 [ 852.303695][ C0] do_syscall_64+0x10b/0xf80 [ 852.308262][ C0] ? clear_bhb_loop+0x40/0x90 [ 852.312918][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.318799][ C0] RIP: 0033:0x7f12fe31d822 [ 852.323186][ C0] Code: 00 00 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 5b 5d c3 0f 1f 00 48 8b 05 a1 35 0d 00 64 [ 852.342770][ C0] RSP: 002b:00007fffa5afc1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 852.351175][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12fe31d822 [ 852.359119][ C0] RDX: 0000000000000003 RSI: 0000000000000200 RDI: 0000000000000000 [ 852.367065][ C0] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 852.375025][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 852.382966][ C0] R13: 0000003e7fff7e00 R14: 00005649e037a3f0 R15: 0000000000001000 [ 852.390915][ C0] [ 852.394235][ C0] Kernel Offset: disabled [ 852.398539][ C0] Rebooting in 86400 seconds..