last executing test programs: 4m43.29358501s ago: executing program 1 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}]}, 0x70}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r4, r4, 0x0, 0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, 0x0) io_setup(0x0, 0xfffffffffffffffd) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000400)) accept$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x4, @multicast1}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="89d03005b8a8aff2844b4c6d4305fcde2bd62e51d9f8329b0d71cd620f8ee0c1dfe8983bffd2923edca46b573fdae0b277dd1a2795229a91ef0066421da026d5dfc8237bce164cc0eda509a65fee9edf0679a4465f06c4824c12573553f44e1b34df1bc20f2d8bebaa21454bbda041861f3fce8ab991d4b68d90f9e3fecbecd5de93d786022213b7e23b5d1a715fbc65fa6b2bbdcc18923c121d8c4c7416da205dae75f018ab545dc7129f9e18a2f9be9bae5c797d643c93b23a429b60d24e91e7218803ef884a25c9f4274c9d9f03c384745c064f81", 0xd6}], 0x1, &(0x7f0000000040)}, 0x41) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) 4m41.718720446s ago: executing program 1 (id=588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4m38.467548721s ago: executing program 1 (id=590): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000180)={0x0, 0x0, 0x3, "fc84c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x6, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x10, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x8}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x6, 0x4, "e3bd"}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x9, "2bcd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3c, 0x8}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x280, 0xf, 0x9, "a7b72ed57ec4"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd, 0x8, "a9b844", "27b7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0xc0, {0x7, 0x25, 0x1, 0x3, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x24, 0x2, 0x3, 0xfe, "88f5d7b5027ee6"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0xe, 0xc, "5e78cf", "5906d4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x2, 0x81, "", "15a93c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xf, 0x86, {0x7, 0x25, 0x1, 0x2, 0x33, 0x8}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x32, 0xc, 0x80, 0x40, 0x7f}, 0x40, &(0x7f0000000140)={0x5, 0xf, 0x40, 0x3, [@generic={0x1d, 0x10, 0x2, "d1c87a69024e8f8c1aa88f27a5b8d485daca8a2e61132fa3f902"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "dc6c73eec8e2df65a23e4bcee33e5f86"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x40, 0x1, 0x5}]}, 0x1, [{0x47, &(0x7f00000001c0)=@string={0x47, 0x3, "033cd2d22b619b918f2fe5423a0290899c50b6ecd45c954898b1e12de6b3a59b17465ac2b82bb265c9b86f64f629a648a846e4dbbfe77ba72f0c27b16b2058709ed1dfe133"}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x0, 0x22, 0x65, {0x65, 0xd, "23401344e71af0a6db98f6fb8112635cd37e6a81ec9b281a8385a8e011d280dd947e8e830953f4b68b6c39dcc240a903b46ab5eb67af72c8a03277baa9aff4fc07c60028c5e6ba8db4c042fb8df12c92321615334ea04e0d2a3e32334588fc4bda3c2d"}}, &(0x7f0000000380)={0x0, 0x3, 0x36, @string={0x36, 0x3, "ea0821b5e29b781e6df4685eff6541cf327ce9b8da0dac7bba7d5cb3a19ee97faa108ef923761bf326089cc5cd5381439e3f0127"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000400)={0x20, 0x5, 0x1d, "f965e8408395283f8352b49f22ff8c7be1d5cc15454ad34a361961ba3c"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "899c94"}, &(0x7f0000000500)={0x20, 0x82, 0x2, "8529"}, &(0x7f0000000540)={0x20, 0x83, 0x1, "92"}, &(0x7f0000000580)={0x20, 0x84, 0x4, "d3e53629"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "d52ac5"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m25.876882359s ago: executing program 1 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x2d}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000600000045000000000000006dc0a63b9b70c8021fc8ba9e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x247440, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat, @ptr={0x70742a85, 0x0, 0x0}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000000080)=0xae81, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m8.353215861s ago: executing program 1 (id=596): fanotify_init(0x0, 0x80000) (async) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000050c0002400000000000000000080005407beaa8e30900010073797a30"], 0xf8}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fc4c2608fd0b24019f3a010203010902240001000000000904000002c55bef000905041e00000000000905020200000000003f647be0fc987ec670c6029a8b75bdaaac8bb072022ca8a5cc41bcca17fae9ffbaa8cdc44ea63c276722681de411a8e2b4dc67f38036501a337a58a729b54ebf83316758792d30e1c2c1"], 0x0) (async) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) 4m5.770645736s ago: executing program 1 (id=598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xd, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x6}, {0x7, 0x5}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000001280)=""/202, 0x77, 0xca, 0x0, 0x8ec1, 0x10000, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x21, 0x0, 0x4, 0xff, 0x20008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5, {0x5, 0x0, "0f6364"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x9e, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x0, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '!;'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x81, 0x16}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x401, 0x9, 0x58, 0x5, 0x8c}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x82}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4, 0x81e}, @mbim={0xc, 0x24, 0x1b, 0x28, 0xfffa, 0x4, 0x9, 0xc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb6, 0x31, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xd, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xff, 0xfd}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xfd, 0x7f, 0x1, 0x10, 0x81}, 0x61, &(0x7f00000004c0)={0x5, 0xf, 0x61, 0x1, [@generic={0x5c, 0x10, 0xb, "7abcc5a9b588c440368708b74218037dd79241a152078e7af07f7d42409158f514cf3d07c0cabb11cde2d0caf0f5b837bd246574296a5515e96e7f6fa4332c75ac45cbc07a9102c9e6ebee948c85114b64f766e038eec13622"}]}, 0x9, [{0x43, &(0x7f00000005c0)=@string={0x43, 0x3, "4e5e3d5739ff433396674cbd5fa308a9fda6b51e1a33dae9c620e9d6e358bf75e94b3d9e23c88685ecf3b821f48c7f6235420efe24998bd31721620d9bc31776fa"}}, {0xda, &(0x7f0000000780)=@string={0xda, 0x3, "ffe722299036af3166813fcf5da71420c0ec8eda1bc7803922f7e58873aa767eabbcc15f1e2b11d5a7cdcf532d83cc22eea70011732ed6eb05d5037b3322e656551ba63c8aa6a03deb4fd0d6ae36ae38419d9340a7922a9c4e29903768aaa57d213e9d3d050a67e72219ba0187266c449c5c96c05f727772e1c7b407710e5963698cc479a51e4a29d90b59c8c495cbdc4828a63f858827cce9acf22f0d0ff922fb9665ac4f1fa1a3ea95909203d43e8db0f1e505ff2ab4ec884de71dac0a4f843d50dc797bc4e16a8016de32fc0546a5f1448a57013ebe01"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "e96115b7dd655a3176d9d4836e84084a51aefb6bd9a0c7"}}, {0x6a, &(0x7f0000000940)=@string={0x6a, 0x3, "1e97027cd251d1c493c6e5c239dac2715e6c8f2a509934ddbdaa9f369b8e444fd671a1a69ba2b8cfb6b372711b894900b01c628cf8ffe639dfadaea1485bf00dec39c8a13ea99c5771c8d604ccd7625944cc1e0ce55e1f7310c5b79a294dbdcaac3c23aadfbbd65f"}}, {0xe9, &(0x7f0000000b00)=@string={0xe9, 0x3, "408c8f2853dfbf4421cc940c5aca06fe29d61954bfe576c80b855f80e7ce40845576ae984887484511572c1ba69381b303b550547fa78f04ab3d557d73f4cc151d5f8aeffb56b052aee63674509618da7f63bf2e0cbf9ae84238b5253c87336b2ea05165f53e4bf1d645de5769fa4223ab116ed347cc424d66bcff9b24e30e89f11c796733275b3c53dc3f77ff255dd5fe65a24e80c83a4583db5377e257c834541c963af916fee3b5c01207e7dd1f7349dd2820aeb6a58e6e832f9b2a7b0a433f448beb05f48bd4818469d8b88c96ca309173953e4f402b137decd9f101a13a21ab91331beb5d"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "bdb97f63991c42d1b888d5741d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x0, 0x21, 0xc9, {0xc9, 0x2c, "ba465958f2e1ba2fdd9d60b894b6c146d16c03d38cff8a2ddfd1a13f7efc0f9d911a3ead97f39aa1d3d1904c233b7fb87e3af43965475479043644d8f81498b3f91532e3a8c2734ea2b57d9bbe8475b4241b2e05d9326912a88a760dfc84244cb0f836e34b86772d4a57d2b9898e96a1c9476a8ef7a623bf56ea3668e152a2964350823b3a4244499a3b3491398eccc8489f8a280f2525f45c97d3f8da30d9e87c30046fbb8ee1cd1efebde39a20b51ee6c8410a66f603c2578b7cc17958b392c839bf1041b0cb"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f80)={0x40, 0xb, 0x7c, "00c4b628e6465b49f692ac60b8f38d1368f786503d4ca4993dd4d2ed26c61f3557566ae61b0c5fe60de909bc061680a12e450e0b63089b85c2861dbcb136aed83bc3fc802ba47b79e0fab9c09e393badd8bf8d789ec97b364ad1a7ced6ead359e5f59e24587e0685b6a7100d8e242ccb410fbba459e0e3d8384f8be1"}, &(0x7f0000000e80)={0x0, 0xa, 0x1}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x1, 0x7, 0xa, 0x4, 0x1400, 0x1000, 0x4, 0x3, 0x401, 0x8}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x5, "f5a85f7647"}, 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x3cca, 0x4) sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)=@can={{}, 0x0, 0x0, 0x0, 0x0, "8109c90975ff8261"}, 0x10}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0xb00}, 0x4}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) 3m59.720337163s ago: executing program 32 (id=598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xd, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x6}, {0x7, 0x5}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000001280)=""/202, 0x77, 0xca, 0x0, 0x8ec1, 0x10000, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x21, 0x0, 0x4, 0xff, 0x20008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x5, {0x5, 0x0, "0f6364"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x9e, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x1, 0x0, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '!;'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x81, 0x16}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x401, 0x9, 0x58, 0x5, 0x8c}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x82}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4, 0x81e}, @mbim={0xc, 0x24, 0x1b, 0x28, 0xfffa, 0x4, 0x9, 0xc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb6, 0x31, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xd, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xff, 0xfd}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xfd, 0x7f, 0x1, 0x10, 0x81}, 0x61, &(0x7f00000004c0)={0x5, 0xf, 0x61, 0x1, [@generic={0x5c, 0x10, 0xb, "7abcc5a9b588c440368708b74218037dd79241a152078e7af07f7d42409158f514cf3d07c0cabb11cde2d0caf0f5b837bd246574296a5515e96e7f6fa4332c75ac45cbc07a9102c9e6ebee948c85114b64f766e038eec13622"}]}, 0x9, [{0x43, &(0x7f00000005c0)=@string={0x43, 0x3, "4e5e3d5739ff433396674cbd5fa308a9fda6b51e1a33dae9c620e9d6e358bf75e94b3d9e23c88685ecf3b821f48c7f6235420efe24998bd31721620d9bc31776fa"}}, {0xda, &(0x7f0000000780)=@string={0xda, 0x3, "ffe722299036af3166813fcf5da71420c0ec8eda1bc7803922f7e58873aa767eabbcc15f1e2b11d5a7cdcf532d83cc22eea70011732ed6eb05d5037b3322e656551ba63c8aa6a03deb4fd0d6ae36ae38419d9340a7922a9c4e29903768aaa57d213e9d3d050a67e72219ba0187266c449c5c96c05f727772e1c7b407710e5963698cc479a51e4a29d90b59c8c495cbdc4828a63f858827cce9acf22f0d0ff922fb9665ac4f1fa1a3ea95909203d43e8db0f1e505ff2ab4ec884de71dac0a4f843d50dc797bc4e16a8016de32fc0546a5f1448a57013ebe01"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "e96115b7dd655a3176d9d4836e84084a51aefb6bd9a0c7"}}, {0x6a, &(0x7f0000000940)=@string={0x6a, 0x3, "1e97027cd251d1c493c6e5c239dac2715e6c8f2a509934ddbdaa9f369b8e444fd671a1a69ba2b8cfb6b372711b894900b01c628cf8ffe639dfadaea1485bf00dec39c8a13ea99c5771c8d604ccd7625944cc1e0ce55e1f7310c5b79a294dbdcaac3c23aadfbbd65f"}}, {0xe9, &(0x7f0000000b00)=@string={0xe9, 0x3, "408c8f2853dfbf4421cc940c5aca06fe29d61954bfe576c80b855f80e7ce40845576ae984887484511572c1ba69381b303b550547fa78f04ab3d557d73f4cc151d5f8aeffb56b052aee63674509618da7f63bf2e0cbf9ae84238b5253c87336b2ea05165f53e4bf1d645de5769fa4223ab116ed347cc424d66bcff9b24e30e89f11c796733275b3c53dc3f77ff255dd5fe65a24e80c83a4583db5377e257c834541c963af916fee3b5c01207e7dd1f7349dd2820aeb6a58e6e832f9b2a7b0a433f448beb05f48bd4818469d8b88c96ca309173953e4f402b137decd9f101a13a21ab91331beb5d"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "bdb97f63991c42d1b888d5741d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000e40)={0x14, &(0x7f0000000d00)={0x0, 0x21, 0xc9, {0xc9, 0x2c, "ba465958f2e1ba2fdd9d60b894b6c146d16c03d38cff8a2ddfd1a13f7efc0f9d911a3ead97f39aa1d3d1904c233b7fb87e3af43965475479043644d8f81498b3f91532e3a8c2734ea2b57d9bbe8475b4241b2e05d9326912a88a760dfc84244cb0f836e34b86772d4a57d2b9898e96a1c9476a8ef7a623bf56ea3668e152a2964350823b3a4244499a3b3491398eccc8489f8a280f2525f45c97d3f8da30d9e87c30046fbb8ee1cd1efebde39a20b51ee6c8410a66f603c2578b7cc17958b392c839bf1041b0cb"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f80)={0x40, 0xb, 0x7c, "00c4b628e6465b49f692ac60b8f38d1368f786503d4ca4993dd4d2ed26c61f3557566ae61b0c5fe60de909bc061680a12e450e0b63089b85c2861dbcb136aed83bc3fc802ba47b79e0fab9c09e393badd8bf8d789ec97b364ad1a7ced6ead359e5f59e24587e0685b6a7100d8e242ccb410fbba459e0e3d8384f8be1"}, &(0x7f0000000e80)={0x0, 0xa, 0x1}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x1, 0x7, 0xa, 0x4, 0x1400, 0x1000, 0x4, 0x3, 0x401, 0x8}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x5, "f5a85f7647"}, 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x3cca, 0x4) sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f0000000440)=@can={{}, 0x0, 0x0, 0x0, 0x0, "8109c90975ff8261"}, 0x10}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0xb00}, 0x4}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22c65) 52.291907031s ago: executing program 0 (id=621): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0x300, 0xe, r6}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000206b1d010140000102030109025f0003010940020904000000010100000a2401041b000902010209040100000102000009040101010102000009050109200004060907250101010001090402000001020000090402010801020000090582090004"], 0x0) 45.416512592s ago: executing program 0 (id=622): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1cd802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0xc0}, 0x20) sendfile(r2, r2, 0x0, 0x20000000003f) 27.497783206s ago: executing program 2 (id=599): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8000}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) (async) close(r4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) (async) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89ff, &(0x7f0000001040)={'sit0\x00', 0x0}) 27.337850101s ago: executing program 0 (id=623): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x200080c0) r0 = io_uring_setup(0x67bb, &(0x7f0000000280)) unshare(0x68040200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='sit0\x00'}) 22.992610198s ago: executing program 2 (id=624): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120140203215b9171c74010203010902240001000000000904e00002ff47d000090506100000040f44090508100002100400473f00a896b7ac4a057b63287a79c26aa57edaa8"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120140203215b9171c74010203010902240001000000000904e00002ff47d000090506100000040f44090508100002100400473f00a896b7ac4a057b63287a79c26aa57edaa8"], 0x0) (async) 14.277595072s ago: executing program 0 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 13.420839768s ago: executing program 2 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000840)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000780)={{r1}, 0x2, &(0x7f00000001c0)=[0x0, 0x5f3a], 0x8, 0x3, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@delqdisc={0x47c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0x3, 0x5}, {0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x172}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_tbf={{0x8}, {0x440, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x670}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4589acd4858ef5d8}, @TCA_TBF_BURST={0x8, 0x6, 0x2573}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RTAB={0x404, 0x2, [0x80, 0x88, 0x0, 0x7, 0x660e, 0x7fff, 0x1, 0xc, 0x3, 0x2, 0xf, 0x0, 0x8000, 0xb, 0x7, 0xd9, 0x8, 0x6, 0x8, 0x2, 0x5, 0xf, 0x0, 0x7c, 0x1, 0x7, 0x0, 0x7ff, 0xe8, 0x40000, 0x1, 0xc, 0x2, 0x80, 0xd17, 0x8, 0x37, 0x3ff, 0x7, 0x9, 0x3, 0x9, 0xd, 0x0, 0xde, 0x9, 0x5, 0x7, 0x6, 0x100000, 0x2, 0x3, 0x8001, 0x2, 0x9, 0x6, 0x2, 0x8, 0x0, 0x7, 0x6, 0x5, 0x6, 0x9, 0x8, 0x9, 0x4, 0x0, 0x101, 0xb5b, 0x140, 0x4, 0xfffffff4, 0x8, 0x1, 0x1, 0x4, 0xfffffffb, 0x6, 0x0, 0x2ae3d08c, 0x8, 0x8, 0x9f6, 0xfffffff7, 0x2, 0x2, 0x52, 0x6, 0xfffffff7, 0x7, 0x8298, 0xf72, 0x870, 0x10001, 0x7, 0x65, 0x8001, 0x8, 0x3, 0x100, 0x6, 0x89bd, 0x2, 0x4, 0x3, 0x1800000, 0x10, 0x0, 0xf0c, 0x3, 0xff, 0x6, 0x2, 0x2, 0x9, 0x9, 0x3, 0xf, 0x618, 0x4, 0x1, 0xb, 0x0, 0x5, 0x5, 0x8, 0x10000, 0x5, 0x0, 0x1b, 0x212a, 0x0, 0x401, 0x0, 0x80, 0xd94, 0x2, 0x54f1, 0x1, 0x2, 0x7, 0x6, 0x1, 0x4, 0x1ff, 0x2, 0xe, 0x5, 0x3, 0x5, 0x8, 0xabe4, 0x5, 0x657, 0x2, 0x3, 0x6, 0xda4, 0x400000, 0x3, 0x1, 0x25, 0x3954, 0x3, 0x1, 0xb, 0x0, 0x0, 0x3, 0x6, 0x1, 0x1, 0x4520, 0xfa82, 0xb450, 0xffffffff, 0x0, 0x5, 0x80000001, 0xd, 0xfffffffa, 0x1, 0x100, 0x636, 0x3ff, 0x0, 0x3, 0xff, 0x1, 0x4, 0x9, 0x5, 0x8, 0xec5d, 0x0, 0x2, 0x5, 0xe6, 0x6, 0x6, 0x80000000, 0xb, 0x0, 0x6, 0x6, 0x9, 0x5, 0x5, 0x5, 0x9, 0x2, 0xfffffffa, 0x4, 0x1, 0xfffffffa, 0x3, 0xa32, 0x9, 0x1ff, 0x3, 0xfff, 0x5, 0x6, 0x2, 0x4, 0x5, 0x7ff, 0x4, 0xd2de, 0x23b, 0x40, 0x3, 0x8, 0x9, 0x10000, 0x40000000, 0x3, 0x7fffffff, 0x0, 0xb, 0xa, 0x2, 0x2, 0x2, 0x3, 0xe7, 0x1ff, 0x7, 0x4, 0x0, 0x9, 0x9, 0x6, 0x8, 0x7f]}, @TCA_TBF_PBURST={0x8, 0x7, 0x14d1}, @TCA_TBF_RATE64={0xc, 0x4, 0xcea0407ae5efd297}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020305030000000000000000000016b9080001000157a292deef9f8de86e8a15a7ff2c2d063b47220b936ff5a5d38147d7c4517e32f0f41e824ab9179b314ce51833eac60de2f2fde5fd2334587e8a417aaaf106e152d7751e49a2356f47c7254d0860446ca8653d944a58b2a844012961abaea8f2b5b678f28e5e4f4e078812b9e2c23205fa4818486ccaee2fb5fe2ba117d0555629867d27aec10ce27306aec1fc74027d897fc880a6eb46e4ebb15fb06e5880159f719f626148039903ca0b47bb54cd452f9c044d"], 0x1c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4.11123331s ago: executing program 0 (id=627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000024d000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) accept$alg(r0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/4095, 0xfff) 1.853005046s ago: executing program 2 (id=628): times(&(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x3, 0xbd, &(0x7f0000000180)={{0x12, 0x1, 0x11, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0xfbf}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xf83, 0x3, 0x8}, [@mdlm_detail={0x2a, 0x24, 0x13, 0x4b, "de8ceff418c2fc1ac19641be6188ecbff90ada7a4489a0027ec0020e1d76f6e85ed3bd669615"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x7, 0x40, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x2, 0xd, 0x8, 0x7}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x2, 0x34, 0x30, 0x66, 0x0, 0x7, 0x6, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x9e, 0x1, 0xa}, @timestamp={0x44, 0x4, 0xc6, 0x0, 0x1}]}}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x7ff, 0x0, 0x9}}}}}}, 0x0) 0s ago: executing program 0 (id=629): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000080)=0x800) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x3a00) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001a90200000060d506000c000100000000000200000008000500", @ANYRES32=r6], 0x94}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:1281' (ED25519) to the list of known hosts. syzkaller login: [ 381.504055][ T3150] cgroup: Unknown subsys name 'net' [ 382.016840][ T3150] cgroup: Unknown subsys name 'cpuset' [ 382.083057][ T3150] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 439.438500][ T3150] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 507.631416][ T3161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.766140][ T3161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.531123][ T3162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.630265][ T3162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.862586][ T3161] hsr_slave_0: entered promiscuous mode [ 521.896660][ T3161] hsr_slave_1: entered promiscuous mode [ 522.417299][ T3162] hsr_slave_0: entered promiscuous mode [ 522.441513][ T3162] hsr_slave_1: entered promiscuous mode [ 522.475086][ T3162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.477329][ T3162] Cannot create hsr debugfs directory [ 528.830120][ T3161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 528.996549][ T3161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.101844][ T3161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.241887][ T3161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.488094][ T3162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 530.583825][ T3162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 530.718132][ T3162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 530.815767][ T3162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.277309][ T3161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.565217][ T3162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.566512][ T3161] veth0_vlan: entered promiscuous mode [ 585.097083][ T3161] veth1_vlan: entered promiscuous mode [ 586.868270][ T3161] veth0_macvtap: entered promiscuous mode [ 587.338365][ T3161] veth1_macvtap: entered promiscuous mode [ 588.707354][ T3162] veth0_vlan: entered promiscuous mode [ 589.540401][ T3162] veth1_vlan: entered promiscuous mode [ 589.793362][ T3161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.797242][ T3161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.806999][ T3161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.822286][ T3161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.894385][ T3162] veth0_macvtap: entered promiscuous mode [ 593.165268][ T3162] veth1_macvtap: entered promiscuous mode [ 594.037836][ T3161] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 594.712835][ T3162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.715151][ T3162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.716342][ T3162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.717426][ T3162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.312234][ T3850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 604.683742][ T3850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.702911][ T3850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.706365][ T3850] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 604.724594][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.976181][ T3850] usb 2-1: config 0 descriptor?? [ 607.223485][ T3850] pantherlord 0003:0F30:0111.0001: item fetching failed at offset 6/7 [ 607.256675][ T3850] pantherlord 0003:0F30:0111.0001: parse failed [ 607.273076][ T3850] pantherlord 0003:0F30:0111.0001: probe with driver pantherlord failed with error -22 [ 607.613116][ T3850] usb 2-1: USB disconnect, device number 2 [ 621.271948][ T36] audit: type=1326 audit(619.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3886 comm="syz.0.9" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 621.275977][ T36] audit: type=1326 audit(619.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3886 comm="syz.0.9" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 621.281422][ T36] audit: type=1326 audit(619.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3886 comm="syz.0.9" exe="/syz-executor" sig=0 arch=c00000f3 syscall=27 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 621.285140][ T36] audit: type=1326 audit(619.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3886 comm="syz.0.9" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.511961][ T36] audit: type=1326 audit(631.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.579740][ T36] audit: type=1326 audit(631.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.710690][ T36] audit: type=1326 audit(631.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.736542][ T36] audit: type=1326 audit(631.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.752094][ T36] audit: type=1326 audit(631.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.830345][ T36] audit: type=1326 audit(631.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.852663][ T36] audit: type=1326 audit(631.470:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.884906][ T36] audit: type=1326 audit(631.470:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.915573][ T36] audit: type=1326 audit(631.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 632.977062][ T36] audit: type=1326 audit(631.600:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3907 comm="syz.0.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 638.552477][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 638.553155][ T36] audit: type=1326 audit(637.170:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 638.667428][ T36] audit: type=1326 audit(637.280:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=220 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 639.859727][ T36] audit: type=1326 audit(638.480:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 640.050541][ T36] audit: type=1326 audit(638.670:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 640.206743][ T36] audit: type=1326 audit(638.810:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=240 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 640.405352][ T36] audit: type=1326 audit(639.030:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 640.530376][ T36] audit: type=1326 audit(639.060:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3918 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 641.742668][ T36] audit: type=1326 audit(640.330:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3921 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=115 compat=0 ip=0xfa1ea code=0x7ffc0000 [ 643.347885][ T36] audit: type=1326 audit(641.940:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3921 comm="syz.1.19" exe="/syz-executor" sig=0 arch=c00000f3 syscall=93 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 645.098471][ T3925] usb usb1: usbfs: process 3925 (syz.1.21) did not claim interface 0 before use [ 658.283018][ T3943] input: syz0 as /devices/virtual/input/input0 [ 663.554045][ T3849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 663.892593][ T3849] usb 2-1: Using ep0 maxpacket: 16 [ 664.122186][ T3849] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 664.125407][ T3849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.127652][ T3849] usb 2-1: Product: syz [ 664.133745][ T3849] usb 2-1: Manufacturer: syz [ 664.135642][ T3849] usb 2-1: SerialNumber: syz [ 664.351512][ T3849] r8152-cfgselector 2-1: Unknown version 0x0000 [ 664.353987][ T3849] r8152-cfgselector 2-1: config 0 descriptor?? [ 665.877929][ T3849] r8152-cfgselector 2-1: Unknown version 0x0000 [ 665.885370][ T3849] r8152-cfgselector 2-1: bad CDC descriptors [ 666.372501][ T3849] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 684.806014][ T36] audit: type=1107 audit(683.420:109): pid=3982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 704.261264][ T36] audit: type=1326 audit(702.880:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.283298][ T36] audit: type=1326 audit(702.880:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.501120][ T36] audit: type=1326 audit(703.120:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.541906][ T36] audit: type=1326 audit(703.140:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.587134][ T36] audit: type=1326 audit(703.210:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.632116][ T36] audit: type=1326 audit(703.250:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.678353][ T36] audit: type=1326 audit(703.280:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.696368][ T36] audit: type=1326 audit(703.320:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=272 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 704.742994][ T36] audit: type=1326 audit(703.320:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3991 comm="syz.1.41" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 720.731118][ T4006] syzkaller0: entered promiscuous mode [ 720.736474][ T4006] syzkaller0: entered allmulticast mode [ 733.945344][ T4015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'. [ 741.817221][ T4025] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 766.776928][ T4047] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 768.885842][ T36] audit: type=1326 audit(767.400:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 768.898098][ T36] audit: type=1326 audit(767.410:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 768.926522][ T36] audit: type=1326 audit(767.510:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 768.982280][ T36] audit: type=1326 audit(767.520:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 768.986435][ T36] audit: type=1326 audit(767.530:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 769.034653][ T36] audit: type=1326 audit(767.540:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 769.038359][ T36] audit: type=1326 audit(767.540:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 769.066171][ T36] audit: type=1326 audit(767.550:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 769.081337][ T36] audit: type=1326 audit(767.570:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=270 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 769.084677][ T36] audit: type=1326 audit(767.570:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4051 comm="syz.1.65" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 770.642768][ T901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 770.963079][ T901] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 770.966156][ T901] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 770.973287][ T901] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 770.975681][ T901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.216664][ T4054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 772.176255][ T901] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 772.216531][ T901] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input1 [ 772.723524][ T901] usb 2-1: USB disconnect, device number 4 [ 772.730503][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 779.991906][ T3152] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 780.231809][ T3152] usb 1-1: Using ep0 maxpacket: 16 [ 780.310955][ T3152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.313639][ T3152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.317075][ T3152] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 780.366612][ T3152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.576129][ T3152] usb 1-1: config 0 descriptor?? [ 781.982504][ T3152] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 781.984202][ T3152] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 781.985563][ T3152] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 781.987779][ T3152] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 781.992762][ T3152] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 782.083477][ T3152] logitech 0003:046D:CA04.0002: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 782.085802][ T3152] logitech 0003:046D:CA04.0002: no inputs found [ 782.617362][ T3152] usb 1-1: USB disconnect, device number 2 [ 782.875400][ T901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 783.172684][ T901] usb 2-1: Using ep0 maxpacket: 16 [ 783.262968][ T901] usb 2-1: config 3 has an invalid interface number: 191 but max is 0 [ 783.265570][ T901] usb 2-1: config 3 has no interface number 0 [ 783.267733][ T901] usb 2-1: config 3 interface 191 has no altsetting 0 [ 783.407166][ T901] usb 2-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=5c.79 [ 783.413564][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.415514][ T901] usb 2-1: Product: syz [ 783.416984][ T901] usb 2-1: Manufacturer: syz [ 783.422889][ T901] usb 2-1: SerialNumber: syz [ 784.442506][ T901] usb 2-1: USB disconnect, device number 5 [ 791.524113][ T4116] netlink: 460 bytes leftover after parsing attributes in process `syz.0.72'. [ 794.853944][ T4119] syzkaller0: entered promiscuous mode [ 794.863248][ T4119] syzkaller0: entered allmulticast mode [ 814.032026][ T3152] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 814.401619][ T3152] usb 2-1: Using ep0 maxpacket: 16 [ 814.524613][ T3152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.626434][ T3152] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 814.630994][ T3152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.632747][ T3152] usb 2-1: Product: syz [ 814.636569][ T3152] usb 2-1: Manufacturer: syz [ 814.638196][ T3152] usb 2-1: SerialNumber: syz [ 814.744775][ T3152] usb 2-1: config 0 descriptor?? [ 829.281761][ T3849] usb 2-1: USB disconnect, device number 6 [ 841.470142][ T4180] netlink: 'syz.1.88': attribute type 29 has an invalid length. [ 841.615552][ T4180] netlink: 'syz.1.88': attribute type 29 has an invalid length. [ 841.636517][ T4180] netlink: 'syz.1.88': attribute type 29 has an invalid length. [ 841.671445][ T4180] netlink: 'syz.1.88': attribute type 29 has an invalid length. [ 843.617713][ T4183] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 843.730001][ T4183] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 861.012274][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 861.126155][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 861.165038][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 861.245118][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 861.277354][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 861.315736][ T4218] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 865.412717][ T4226] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 865.484610][ T4226] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 865.531426][ T4226] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 865.552424][ T4226] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 868.124281][ T4231] netlink: 55 bytes leftover after parsing attributes in process `syz.0.113'. [ 873.748420][ T4243] raw_sendmsg: syz.0.118 forgot to set AF_INET. Fix it! [ 879.302780][ T4256] netlink: 'syz.0.123': attribute type 39 has an invalid length. [ 902.615453][ T4294] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 904.394542][ T4296] netlink: 'syz.0.139': attribute type 29 has an invalid length. [ 904.524866][ T4296] netlink: 'syz.0.139': attribute type 29 has an invalid length. [ 914.194063][ T4316] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.148'. [ 915.040794][ T4318] sctp: [Deprecated]: syz.0.149 (pid 4318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 915.040794][ T4318] Use struct sctp_sack_info instead [ 929.604060][ T4343] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.161'. [ 959.102632][ T4383] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.179'. [ 965.396484][ T4395] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 1003.655438][ T4458] netlink: 'syz.0.205': attribute type 29 has an invalid length. [ 1037.632029][ T4512] capability: warning: `syz.0.224' uses 32-bit capabilities (legacy support in use) [ 1037.661648][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1037.662180][ T36] audit: type=1326 audit(1036.260:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1037.722530][ T36] audit: type=1326 audit(1036.340:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1037.876382][ T36] audit: type=1326 audit(1036.500:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0xd9a4e code=0x7ffc0000 [ 1037.926915][ T36] audit: type=1326 audit(1036.550:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=268 compat=0 ip=0xdbe5c code=0x7ffc0000 [ 1037.985448][ T36] audit: type=1326 audit(1036.550:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1038.041450][ T36] audit: type=1326 audit(1036.660:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=268 compat=0 ip=0xdbe5c code=0x7ffc0000 [ 1038.043717][ T36] audit: type=1326 audit(1036.660:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=57 compat=0 ip=0xd9cd2 code=0x7ffc0000 [ 1038.070054][ T36] audit: type=1326 audit(1036.680:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1038.119432][ T36] audit: type=1326 audit(1036.740:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1038.175804][ T36] audit: type=1326 audit(1036.800:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4511 comm="syz.1.225" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1042.321597][ T4524] can0: slcan on ttynull. [ 1043.178061][ T4524] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1045.214881][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 1045.790028][ T4532] input: syz1 as /devices/virtual/input/input2 [ 1046.236016][ T3849] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1046.445156][ T3849] usb 1-1: Using ep0 maxpacket: 32 [ 1046.759307][ T3849] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 1046.761149][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.762801][ T3849] usb 1-1: Product: syz [ 1046.764259][ T3849] usb 1-1: Manufacturer: syz [ 1046.765983][ T3849] usb 1-1: SerialNumber: syz [ 1046.842285][ T3849] usb 1-1: config 0 descriptor?? [ 1046.931186][ T3849] cdc_mbim 1-1:0.0: CDC Union missing and no IAD found [ 1046.933396][ T3849] cdc_mbim 1-1:0.0: bind() failure [ 1047.007562][ T3849] option 1-1:0.0: GSM modem (1-port) converter detected [ 1047.386058][ T3849] usb 1-1: USB disconnect, device number 3 [ 1047.504096][ T3849] option 1-1:0.0: device disconnected [ 1051.863878][ T4523] can0 (unregistered): slcan off ttynull. [ 1067.315895][ T4584] FAULT_INJECTION: forcing a failure. [ 1067.315895][ T4584] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1067.371982][ T4584] CPU: 1 UID: 0 PID: 4584 Comm: syz.0.231 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1067.374296][ T4584] Hardware name: riscv-virtio,qemu (DT) [ 1067.375939][ T4584] Call Trace: [ 1067.377261][ T4584] [] dump_backtrace+0x2e/0x3c [ 1067.380446][ T4584] [] show_stack+0x34/0x40 [ 1067.381921][ T4584] [] dump_stack_lvl+0x122/0x196 [ 1067.383626][ T4584] [] dump_stack+0x1c/0x24 [ 1067.385200][ T4584] [] should_fail_ex+0x3f8/0x4e0 [ 1067.386964][ T4584] [] should_fail+0xe/0x16 [ 1067.388642][ T4584] [] should_fail_usercopy+0x1e/0x26 [ 1067.390320][ T4584] [] _copy_to_user+0x3a/0xc6 [ 1067.391959][ T4584] [] simple_read_from_buffer+0xd0/0x154 [ 1067.393548][ T4584] [] proc_fail_nth_read+0x194/0x27c [ 1067.395059][ T4584] [] vfs_read+0x1b0/0x86c [ 1067.396571][ T4584] [] ksys_read+0x128/0x266 [ 1067.398127][ T4584] [] __riscv_sys_read+0x6e/0x94 [ 1067.399749][ T4584] [] syscall_handler+0x94/0x118 [ 1067.401369][ T4584] [] do_trap_ecall_u+0x1aa/0x216 [ 1067.403070][ T4584] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1072.202176][ T3849] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1072.709650][ T3849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.712822][ T3849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.715662][ T3849] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1072.717912][ T3849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.844328][ T3849] usb 2-1: config 0 descriptor?? [ 1073.511038][ T3849] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1075.023829][ T3849] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 1075.025598][ T3849] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 1075.062684][ T3849] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 1075.318199][ T3849] usb 2-1: USB disconnect, device number 7 [ 1075.911153][ T2995] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1076.130461][ T2995] usb 1-1: Using ep0 maxpacket: 16 [ 1076.217542][ T2995] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 1076.230800][ T2995] usb 1-1: config 0 has no interface number 1 [ 1076.364964][ T2995] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1076.366784][ T2995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.368134][ T2995] usb 1-1: Product: syz [ 1076.391357][ T2995] usb 1-1: Manufacturer: syz [ 1076.392807][ T2995] usb 1-1: SerialNumber: syz [ 1076.465760][ T2995] usb 1-1: config 0 descriptor?? [ 1076.770683][ T2995] usb 1-1: Could not set interface, error -71 [ 1076.874777][ T2995] usb 1-1: USB disconnect, device number 4 [ 1077.930960][ T2995] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1078.344316][ T2995] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1078.347534][ T2995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1078.376441][ T2995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1078.390100][ T2995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1078.561449][ T2995] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1078.564141][ T2995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.566065][ T2995] usb 2-1: Product: syz [ 1078.567618][ T2995] usb 2-1: Manufacturer: syz [ 1078.590477][ T2995] usb 2-1: SerialNumber: syz [ 1078.994866][ T2995] usb 2-1: config 0 descriptor?? [ 1081.736298][ T2995] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1081.747313][ T2995] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 1081.844368][ T2995] usb 2-1: USB disconnect, device number 8 [ 1093.932671][ T4654] loop0: detected capacity change from 0 to 16384 [ 1094.063777][ T4654] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1094.134980][ T4654] netlink: 112 bytes leftover after parsing attributes in process `syz.0.237'. [ 1094.771070][ T901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1095.217696][ T901] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 1095.220767][ T901] usb 2-1: config 0 has no interface number 0 [ 1095.366761][ T901] usb 2-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=a6.60 [ 1095.382121][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.383728][ T901] usb 2-1: Product: syz [ 1095.384708][ T901] usb 2-1: Manufacturer: syz [ 1095.385761][ T901] usb 2-1: SerialNumber: syz [ 1095.614347][ T901] usb 2-1: config 0 descriptor?? [ 1101.172386][ T4666] rdma_op ff6000002ccef9f0 conn xmit_rdma 0000000000000000 [ 1104.135526][ T4657] netlink: 168 bytes leftover after parsing attributes in process `syz.1.238'. [ 1104.254417][ T901] mxuport 2-1:0.131: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1104.257217][ T901] mxuport 2-1:0.131: probe with driver mxuport failed with error -5 [ 1104.330212][ T901] usb 2-1: USB disconnect, device number 9 [ 1107.194363][ T4677] Zero length message leads to an empty skb [ 1109.173597][ T4679] vxcan1 speed is unknown, defaulting to 1000 [ 1109.197558][ T4679] vxcan1 speed is unknown, defaulting to 1000 [ 1109.218310][ T4679] vxcan1 speed is unknown, defaulting to 1000 [ 1114.883147][ T3152] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1115.083847][ T3152] usb 2-1: device descriptor read/64, error -71 [ 1115.451348][ T3152] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1115.692529][ T3152] usb 2-1: device descriptor read/64, error -71 [ 1115.735663][ T4579] vxcan1 speed is unknown, defaulting to 1000 [ 1115.748326][ T4679] infiniband syz2: set active [ 1115.755363][ T4679] infiniband syz2: added vxcan1 [ 1115.811770][ T3152] usb usb2-port1: attempt power cycle [ 1115.908105][ T4679] syz2: rxe_create_cq: returned err = -12 [ 1115.942231][ T4679] infiniband syz2: Couldn't create ib_mad CQ [ 1115.953988][ T4679] infiniband syz2: Couldn't open port 1 [ 1116.334110][ T3152] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1116.386103][ T3152] usb 2-1: device descriptor read/8, error -71 [ 1116.887228][ T4679] RDS/IB: syz2: added [ 1116.927256][ T4679] smc: adding ib device syz2 with port count 1 [ 1116.941664][ T3152] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1116.947651][ T4679] smc: ib device syz2 port 1 has pnetid [ 1117.008097][ T3152] usb 2-1: device descriptor read/8, error -71 [ 1117.060348][ T4679] vxcan1 speed is unknown, defaulting to 1000 [ 1117.073753][ T2995] vxcan1 speed is unknown, defaulting to 1000 [ 1117.127192][ T3152] usb usb2-port1: unable to enumerate USB device [ 1119.391513][ T4679] vxcan1 speed is unknown, defaulting to 1000 [ 1139.853733][ T4722] fuse: Bad value for 'group_id' [ 1139.855402][ T4722] fuse: Bad value for 'group_id' [ 1165.116631][ T901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1165.591638][ T901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1165.594109][ T901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1165.596440][ T901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1165.599939][ T901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1165.696073][ T901] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1165.717319][ T901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.737441][ T901] usb 1-1: Product: syz [ 1165.762521][ T901] usb 1-1: Manufacturer: syz [ 1165.764283][ T901] usb 1-1: SerialNumber: syz [ 1165.943034][ T901] usb 1-1: config 0 descriptor?? [ 1167.863332][ T3848] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1168.281313][ T3848] usb 2-1: Using ep0 maxpacket: 16 [ 1168.642753][ T3848] usb 2-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 1168.646059][ T3848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.670577][ T3848] usb 2-1: Product: syz [ 1168.672542][ T3848] usb 2-1: Manufacturer: syz [ 1168.674162][ T3848] usb 2-1: SerialNumber: syz [ 1168.932295][ T3848] usb 2-1: config 0 descriptor?? [ 1169.891842][ T3848] kaweth 2-1:0.0: Firmware present in device. [ 1170.060264][ T901] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1170.282159][ T3848] kaweth 2-1:0.0: Statistics collection: 0 [ 1170.285216][ T3848] kaweth 2-1:0.0: Multicast filter limit: 0 [ 1170.287387][ T3848] kaweth 2-1:0.0: MTU: 0 [ 1170.320468][ T3848] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1170.605317][ T901] usb 1-1: USB disconnect, device number 5 [ 1182.368341][ T3848] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1182.556880][ T3848] usb 2-1: USB disconnect, device number 14 [ 1190.085404][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 1190.553048][ T3848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1191.258479][ T3848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.290394][ T3848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.293073][ T3848] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1191.297091][ T3848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.672371][ T3848] usb 1-1: config 0 descriptor?? [ 1193.605214][ T3848] usbhid 1-1:0.0: can't add hid device: -71 [ 1193.617555][ T3848] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1193.698202][ T3848] usb 1-1: USB disconnect, device number 6 [ 1197.482507][ T4816] capability: warning: `syz.1.264' uses deprecated v2 capabilities in a way that may be insecure [ 1202.805935][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 1206.601398][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 1208.101163][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1208.101447][ T36] audit: type=1326 audit(1206.720:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.1.269" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1216.037752][ T4844] syz.0.271: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1216.073605][ T4844] CPU: 1 UID: 0 PID: 4844 Comm: syz.0.271 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1216.076164][ T4844] Hardware name: riscv-virtio,qemu (DT) [ 1216.077307][ T4844] Call Trace: [ 1216.078294][ T4844] [] dump_backtrace+0x2e/0x3c [ 1216.080287][ T4844] [] show_stack+0x34/0x40 [ 1216.081811][ T4844] [] dump_stack_lvl+0x122/0x196 [ 1216.083674][ T4844] [] dump_stack+0x1c/0x24 [ 1216.085715][ T4844] [] warn_alloc+0x170/0x292 [ 1216.087470][ T4844] [] __vmalloc_node_range_noprof+0x11b4/0x1450 [ 1216.089945][ T4844] [] vzalloc_noprof+0xf8/0x126 [ 1216.091711][ T4844] [] packet_set_ring+0xbba/0x19ee [ 1216.093352][ T4844] [] packet_setsockopt+0x177c/0x34ae [ 1216.095120][ T4844] [] do_sock_setsockopt+0x20a/0x402 [ 1216.096926][ T4844] [] __sys_setsockopt+0xf0/0x1aa [ 1216.098740][ T4844] [] __riscv_sys_setsockopt+0xa6/0x114 [ 1216.100416][ T4844] [] syscall_handler+0x94/0x118 [ 1216.102021][ T4844] [] do_trap_ecall_u+0x1aa/0x216 [ 1216.104113][ T4844] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1216.122634][ T4844] Mem-Info: [ 1216.125420][ T4844] active_anon:1785 inactive_anon:0 isolated_anon:0 [ 1216.125420][ T4844] active_file:772 inactive_file:34287 isolated_file:0 [ 1216.125420][ T4844] unevictable:768 dirty:14 writeback:0 [ 1216.125420][ T4844] slab_reclaimable:2245 slab_unreclaimable:26850 [ 1216.125420][ T4844] mapped:9492 shmem:812 pagetables:359 [ 1216.125420][ T4844] sec_pagetables:0 bounce:0 [ 1216.125420][ T4844] kernel_misc_reclaimable:0 [ 1216.125420][ T4844] free:230702 free_pcp:846 free_cma:52608 [ 1216.143594][ T4844] Node 0 active_anon:7140kB inactive_anon:0kB active_file:3088kB inactive_file:137148kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:37968kB dirty:56kB writeback:0kB shmem:3248kB writeback_tmp:0kB kernel_stack:5872kB pagetables:1436kB sec_pagetables:0kB all_unreclaimable? no [ 1216.148480][ T4844] Node 0 DMA32 free:922808kB boost:0kB min:4788kB low:6220kB high:7652kB reserved_highatomic:0KB active_anon:7140kB inactive_anon:0kB active_file:3088kB inactive_file:137148kB unevictable:3072kB writepending:56kB present:2097152kB managed:1436404kB mlocked:0kB bounce:0kB free_pcp:3384kB local_pcp:900kB free_cma:210432kB [ 1216.181941][ T4844] lowmem_reserve[]: 0 0 0 [ 1216.185956][ T4844] Node 0 DMA32: 2*4kB (UE) 2*8kB (ME) 2*16kB (UM) 6*32kB (UE) 3*64kB (UME) 8*128kB (ME) 7*256kB (ME) 8*512kB (UMEC) 6*1024kB (UMEC) 4*2048kB (ME) 220*4096kB (UMC) = 922808kB [ 1216.287478][ T4844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1216.292222][ T4844] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1216.303303][ T4844] 35872 total pagecache pages [ 1216.305067][ T4844] 0 pages in swap cache [ 1216.311762][ T4844] Free swap = 124996kB [ 1216.313673][ T4844] Total swap = 124996kB [ 1216.315330][ T4844] 524288 pages RAM [ 1216.316717][ T4844] 0 pages HighMem/MovableOnly [ 1216.318157][ T4844] 165187 pages reserved [ 1216.327079][ T4844] 52736 pages cma reserved [ 1226.270381][ T4857] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1231.002734][ T3152] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1231.376627][ T3152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.404817][ T3152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.407531][ T3152] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.427990][ T3152] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1231.452771][ T3152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.477158][ T4870] netlink: 172 bytes leftover after parsing attributes in process `syz.1.277'. [ 1231.586090][ T3152] usb 1-1: config 0 descriptor?? [ 1232.892191][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.932409][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.002850][ T3152] usbhid 1-1:0.0: can't add hid device: -71 [ 1233.011479][ T3152] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1233.149346][ T3152] usb 1-1: USB disconnect, device number 7 [ 1234.043166][ T3152] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1234.341645][ T3152] usb 1-1: Using ep0 maxpacket: 8 [ 1234.554626][ T3152] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.556944][ T3152] usb 1-1: config 0 has no interface number 0 [ 1234.590819][ T3152] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.606296][ T3152] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.613127][ T3152] usb 1-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.616010][ T3152] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1234.618054][ T3152] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1234.664435][ T3152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.874450][ T3152] usb 1-1: config 0 descriptor?? [ 1235.286533][ T3152] hso 1-1:0.1: Failed to find BULK IN ep [ 1235.961507][ T3152] usb 1-1: USB disconnect, device number 8 [ 1236.712132][ T3152] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1237.122804][ T3152] usb 2-1: Using ep0 maxpacket: 8 [ 1237.168247][ T3152] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1237.172246][ T3152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.316845][ T3152] usb 2-1: config 0 descriptor?? [ 1243.145315][ T4898] cgroup: Bad value for 'name' [ 1245.073253][ T3152] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1245.076162][ T3152] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1245.134601][ T3152] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1245.358290][ T3152] usb 2-1: USB disconnect, device number 15 [ 1261.831115][ T901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1265.731073][ T901] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1265.734255][ T901] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1265.736992][ T901] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1265.741963][ T901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.902088][ T4936] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1266.126071][ T901] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1279.125708][ T4972] input: syz1 as /devices/virtual/input/input4 [ 1284.253661][ T4984] nftables ruleset with unbound set [ 1290.505580][ T4990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1293.444117][ T3768] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1294.792355][ T3768] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.795155][ T3768] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.376292][ T3768] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1295.395792][ T3768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1295.442534][ T3768] usb 2-1: SerialNumber: syz [ 1296.121444][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.176325][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.878400][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1296.914921][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1296.965588][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1296.973904][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1297.245664][ T3768] usb 2-1: 0:2 : does not exist [ 1297.253071][ T3768] usb 2-1: unit 5 not found! [ 1297.461035][ T3768] usb 2-1: USB disconnect, device number 16 [ 1307.962404][ T3768] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1308.435705][ T3768] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1308.460585][ T3768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.465360][ T3768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.482509][ T3768] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1308.485687][ T3768] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1308.487840][ T3768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.693317][ T3768] usb 2-1: config 0 descriptor?? [ 1314.338269][ T3768] usbhid 2-1:0.0: can't add hid device: -32 [ 1314.342345][ T3768] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1315.255305][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.326064][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.170089][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.190971][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.706418][ T3848] usb 2-1: USB disconnect, device number 17 [ 1328.448426][ T5065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.298'. [ 1354.147490][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 1358.365992][ T5104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.395754][ T5104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.911257][ T4766] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1365.284346][ T4766] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1365.301014][ T4766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.303959][ T4766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.306222][ T4766] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1365.452982][ T4766] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1365.455632][ T4766] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1365.457881][ T4766] usb 2-1: Manufacturer: syz [ 1365.657837][ T4766] usb 2-1: config 0 descriptor?? [ 1367.577120][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1371.544605][ T4766] usbhid 2-1:0.0: can't add hid device: -32 [ 1371.601043][ T4766] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1378.883495][ T5127] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1382.108125][ T3152] usb 2-1: USB disconnect, device number 18 [ 1389.478397][ T5142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'. [ 1397.170607][ T3848] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1397.587071][ T3848] usb 2-1: Using ep0 maxpacket: 16 [ 1398.594661][ T3848] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1398.597856][ T3848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.600511][ T3848] usb 2-1: Product: syz [ 1398.601637][ T3848] usb 2-1: Manufacturer: syz [ 1398.603303][ T3848] usb 2-1: SerialNumber: syz [ 1398.632092][ T5160] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 1398.664955][ T3848] usb 2-1: config 0 descriptor?? [ 1398.853327][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.853803][ T3848] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1398.884180][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.673000][ T3848] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1408.611847][ T5168] syzkaller1: entered promiscuous mode [ 1408.613418][ T5168] syzkaller1: entered allmulticast mode [ 1409.068484][ T5168] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 1409.077801][ T5168] syz_tun: entered promiscuous mode [ 1414.875460][ T3848] usb 2-1: USB disconnect, device number 19 [ 1415.644809][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.720602][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.932835][ T5195] netlink: 52 bytes leftover after parsing attributes in process `syz.1.327'. [ 1432.880104][ T5202] netlink: 'syz.1.330': attribute type 21 has an invalid length. [ 1432.883740][ T5202] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 1446.061449][ T3848] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1446.390605][ T3848] usb 2-1: Using ep0 maxpacket: 32 [ 1446.506378][ T3848] usb 2-1: config 0 has an invalid interface number: 218 but max is 0 [ 1446.510103][ T3848] usb 2-1: config 0 has no interface number 0 [ 1446.671697][ T3848] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 1446.675617][ T3848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.677664][ T3848] usb 2-1: Product: syz [ 1446.710254][ T3848] usb 2-1: Manufacturer: syz [ 1446.712328][ T3848] usb 2-1: SerialNumber: syz [ 1446.917733][ T3848] usb 2-1: config 0 descriptor?? [ 1447.313898][ T4561] usb 2-1: USB disconnect, device number 20 [ 1455.482228][ T3848] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1456.422627][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 1456.576247][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.578137][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.590936][ T3848] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1456.594807][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.694477][ T3848] usb 2-1: config 0 descriptor?? [ 1457.877121][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.014378][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.305998][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.671235][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.437438][ T3848] usbhid 2-1:0.0: can't add hid device: -71 [ 1459.453292][ T3848] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1459.571745][ T3848] usb 2-1: USB disconnect, device number 21 [ 1475.485070][ T4561] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1475.973505][ T4561] usb 2-1: Using ep0 maxpacket: 8 [ 1476.074504][ T4561] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1476.077008][ T4561] usb 2-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 1476.082740][ T4561] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 1476.084956][ T4561] usb 2-1: config 0 has no interface number 0 [ 1476.087319][ T4561] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1476.091482][ T4561] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1476.096054][ T4561] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1476.303266][ T4561] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1476.325150][ T4561] usb 2-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 1476.327805][ T4561] usb 2-1: Product: syz [ 1476.334291][ T4561] usb 2-1: Manufacturer: syz [ 1476.467654][ T4561] usb 2-1: config 0 descriptor?? [ 1476.537051][ T5266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1488.717677][ T5287] netlink: 'syz.0.343': attribute type 12 has an invalid length. [ 1488.726772][ T5287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.343'. [ 1490.962773][ T4579] usb 2-1: USB disconnect, device number 22 [ 1493.564833][ T5300] block nbd0: shutting down sockets [ 1500.454018][ T5301] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1517.163990][ T36] audit: type=1326 audit(1515.740:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.0.349" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1528.414869][ T5346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 1564.696014][ T3848] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1565.120420][ T3848] usb 2-1: config index 0 descriptor too short (expected 25439, got 441) [ 1565.122239][ T3848] usb 2-1: config 0 has too many interfaces: 109, using maximum allowed: 32 [ 1565.124029][ T3848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.125966][ T3848] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 109 [ 1565.128342][ T3848] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1565.141044][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.195507][ T3848] usb 2-1: config 0 descriptor?? [ 1565.953479][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.985027][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.135665][ T4579] usb 2-1: USB disconnect, device number 23 [ 1569.081959][ T5416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.135842][ T5416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.968389][ T5425] fuseblk: Bad value for 'group_id' [ 1573.977474][ T5425] fuseblk: Bad value for 'group_id' [ 1577.811941][ T4579] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1578.103259][ T4579] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1578.105918][ T4579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1578.108050][ T4579] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1578.247433][ T4579] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1578.257458][ T4579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.261587][ T4579] usb 2-1: Product: syz [ 1578.263253][ T4579] usb 2-1: Manufacturer: syz [ 1578.264754][ T4579] usb 2-1: SerialNumber: syz [ 1578.364914][ T4579] usb 2-1: config 0 descriptor?? [ 1578.637572][ T4579] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1579.510474][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.554937][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.751611][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.785269][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.532439][ T4579] usb 2-1: USB disconnect, device number 24 [ 1585.774425][ T901] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1585.972781][ T901] usb 2-1: Using ep0 maxpacket: 16 [ 1586.073255][ T901] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 1586.075599][ T901] usb 2-1: config 0 has no interface number 0 [ 1586.077443][ T901] usb 2-1: config 0 interface 180 has no altsetting 0 [ 1586.191987][ T901] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 1586.194453][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.196384][ T901] usb 2-1: Product: syz [ 1586.197837][ T901] usb 2-1: Manufacturer: syz [ 1586.206860][ T901] usb 2-1: SerialNumber: syz [ 1586.336531][ T901] usb 2-1: config 0 descriptor?? [ 1589.393216][ T901] viperboard 2-1:0.180: version 0.00 found at bus 002 address 025 [ 1591.107268][ T901] usb 2-1: USB disconnect, device number 25 [ 1601.155704][ T5512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.374'. [ 1601.337493][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 1608.930234][ T5518] mmap: syz.0.376 (5518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1622.863292][ T5532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.868136][ T5532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.370327][ T3848] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1637.923010][ T3848] usb 2-1: Using ep0 maxpacket: 16 [ 1638.172506][ T3848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1638.174337][ T3848] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1638.177376][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.316626][ T3848] usb 2-1: config 0 descriptor?? [ 1638.575290][ T3848] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1638.952227][ T5556] trusted_key: syz.0.386 sent an empty control message without MSG_MORE. [ 1639.086477][ T5556] ======================================================= [ 1639.086477][ T5556] WARNING: The mand mount option has been deprecated and [ 1639.086477][ T5556] and is ignored by this kernel. Remove the mand [ 1639.086477][ T5556] option from the mount to silence this warning. [ 1639.086477][ T5556] ======================================================= [ 1639.103072][ T5556] hugetlbfs: Unknown parameter 'nr_vnodes' [ 1642.910478][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.931707][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.028206][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.067661][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.984334][ T4579] usb 2-1: USB disconnect, device number 26 [ 1654.177745][ T36] audit: type=1400 audit(1652.800:152): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5581 comm="syz.1.389" [ 1656.537079][ T5585] binder_alloc: binder_alloc_mmap_handler: 5583 20ffc000-20fff000 already mapped failed -16 [ 1661.630958][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.674581][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.512430][ T5592] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1673.212973][ T901] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1673.375568][ T5611] ip6t_rpfilter: unknown options [ 1673.704099][ T901] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1674.258271][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.336507][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.160841][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.192659][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.645745][ T3768] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1705.932387][ T3768] usb 2-1: Using ep0 maxpacket: 16 [ 1706.031432][ T3768] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1706.034110][ T3768] usb 2-1: config 0 has no interface number 0 [ 1706.036355][ T3768] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 1706.056973][ T3768] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 1706.373655][ T3768] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1706.376201][ T3768] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1706.378471][ T3768] usb 2-1: Product: syz [ 1706.385542][ T3768] usb 2-1: Manufacturer: syz [ 1706.387501][ T3768] usb 2-1: SerialNumber: syz [ 1706.534460][ T3768] usb 2-1: config 0 descriptor?? [ 1706.613450][ T5650] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1706.756453][ T3768] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 1706.777865][ T3768] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 1706.904737][ T3768] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 1707.072680][ T3768] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1707.097669][ T3768] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 1707.131680][ T3768] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1707.166216][ T3768] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 1707.213753][ T3768] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1707.301998][ T3768] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 1707.351099][ T3768] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1717.865423][ T4561] usb 2-1: USB disconnect, device number 27 [ 1718.501683][ T4561] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1718.908206][ T4561] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1719.508389][ T4561] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1720.034552][ T4561] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1720.244901][ T4561] keyspan 2-1:0.107: device disconnected [ 1727.725520][ T5708] tmpfs: Unknown parameter 'mp' [ 1753.013018][ T5743] fuse: Unknown parameter '‚' [ 1755.564578][ T5748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.766999][ T5748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.462748][ T3848] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1760.743461][ T3848] usb 2-1: Using ep0 maxpacket: 16 [ 1760.884585][ T3848] usb 2-1: config 0 has no interfaces? [ 1760.891395][ T3848] usb 2-1: New USB device found, idVendor=0bda, idProduct=c82a, bcdDevice=ae.0c [ 1760.893693][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.014867][ T3848] usb 2-1: config 0 descriptor?? [ 1761.624052][ T5762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.987682][ T5762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.615745][ T3848] usb 2-1: string descriptor 0 read error: -71 [ 1765.706062][ T3848] usb 2-1: USB disconnect, device number 28 [ 1774.396744][ T5784] input: syz0 as /devices/virtual/input/input7 [ 1798.024119][ T5822] tc_dump_action: action bad kind [ 1832.476097][ T36] audit: type=1800 audit(2087.086:153): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.433" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1842.872717][ T901] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1843.316002][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.353560][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.711585][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.770954][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.612944][ T901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1846.693864][ T901] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1846.696532][ T901] usb 2-1: can't read configurations, error -71 [ 1853.356629][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.472515][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.883879][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.937961][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.141662][ T4561] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1854.359662][ T4561] usb 2-1: Using ep0 maxpacket: 16 [ 1854.465796][ T4561] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1854.481492][ T4561] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1854.717223][ T4561] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.721385][ T4561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.729343][ T4561] usb 2-1: Product: syz [ 1854.731863][ T4561] usb 2-1: Manufacturer: syz [ 1854.734226][ T4561] usb 2-1: SerialNumber: syz [ 1855.299813][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.362113][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.621997][ T4561] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1855.711862][ T4561] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1856.422022][ T4561] usb 2-1: USB disconnect, device number 31 [ 1870.461114][ T36] audit: type=1326 audit(2125.056:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.1.443" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1872.552405][ T36] audit: type=1326 audit(2127.166:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.0.442" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1880.094890][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.167305][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.200736][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.220158][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.834270][ T3768] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1890.440153][ T3768] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1890.441542][ T3768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.557527][ T3768] usb 2-1: config 0 descriptor?? [ 1890.660238][ T3768] cp210x 2-1:0.0: cp210x converter detected [ 1891.473608][ T3768] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1892.074898][ T3768] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 1892.076698][ T3768] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 1892.104029][ T3768] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1892.498259][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.540666][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.763240][ T901] usb 2-1: USB disconnect, device number 32 [ 1892.934440][ T901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1892.974054][ T901] cp210x 2-1:0.0: device disconnected [ 1900.181570][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.247621][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.791833][ T36] audit: type=1326 audit(2158.406:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1903.813973][ T36] audit: type=1326 audit(2158.436:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1903.978271][ T36] audit: type=1326 audit(2158.506:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1903.984405][ T36] audit: type=1326 audit(2158.596:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.037641][ T36] audit: type=1326 audit(2158.656:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.072118][ T36] audit: type=1326 audit(2158.656:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.076065][ T36] audit: type=1326 audit(2158.656:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.084469][ T36] audit: type=1326 audit(2158.686:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.103375][ T36] audit: type=1326 audit(2158.706:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1904.232390][ T36] audit: type=1326 audit(2158.846:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.452" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1908.972975][ T6027] netlink: 'syz.0.454': attribute type 7 has an invalid length. [ 1908.975623][ T6027] netlink: 'syz.0.454': attribute type 5 has an invalid length. [ 1908.977743][ T6027] netlink: 17 bytes leftover after parsing attributes in process `syz.0.454'. [ 1910.605888][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 1913.075141][ T6035] block nbd0: shutting down sockets [ 1930.177498][ T6073] ubi0: attaching mtd0 [ 1931.411827][ T6073] ubi0: scanning is finished [ 1931.414302][ T6073] ubi0: empty MTD device detected [ 1933.540406][ T6073] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1933.542689][ T6073] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1933.544644][ T6073] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1933.576053][ T6073] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1933.578182][ T6073] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1933.594336][ T6073] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1933.596231][ T6073] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 441137541 [ 1933.598163][ T6073] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1933.650519][ T6076] ubi0: background thread "ubi_bgt0d" started, PID 6076 [ 1937.490124][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.500946][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.924318][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 1947.631893][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.668021][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.871373][ T3779] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1948.203852][ T3779] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1948.303716][ T3779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1948.306346][ T3779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1948.310196][ T3779] usb 2-1: SerialNumber: syz [ 1948.800758][ T3779] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1949.017792][ T3779] usb 2-1: USB disconnect, device number 33 [ 1951.157087][ T6122] sock: sock_set_timeout: `syz.0.472' (pid 6122) tries to set negative timeout [ 1953.493506][ T6125] tap0: tun_chr_ioctl cmd 1074025677 [ 1953.496335][ T6125] tap0: linktype set to 0 [ 1966.373976][ T6145] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1967.080623][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.111995][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.416044][ T4561] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1996.477318][ T901] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1996.762044][ T901] usb 2-1: Using ep0 maxpacket: 8 [ 1996.945328][ T901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1996.947321][ T901] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1997.026155][ T901] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1997.027762][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.033497][ T901] usb 2-1: Product: syz [ 1997.034739][ T901] usb 2-1: Manufacturer: syz [ 1997.035691][ T901] usb 2-1: SerialNumber: syz [ 1997.106440][ T901] usb 2-1: config 0 descriptor?? [ 1997.291932][ T901] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 2002.933231][ T6194] netdevsim netdevsim0 €: renamed from netdevsim0 (while UP) [ 2003.773200][ T6194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2011.302959][ T901] usb 2-1: USB disconnect, device number 35 [ 2019.405734][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.435799][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.607238][ T6217] ipt_REJECT: ECHOREPLY no longer supported. [ 2019.755237][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.871085][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.921757][ T901] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2021.272497][ T901] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2021.275148][ T901] usb 2-1: config 0 has no interface number 0 [ 2021.277426][ T901] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2021.466104][ T901] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2021.474395][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.476554][ T901] usb 2-1: Product: syz [ 2021.478259][ T901] usb 2-1: Manufacturer: syz [ 2021.482844][ T901] usb 2-1: SerialNumber: syz [ 2021.717741][ T901] usb 2-1: config 0 descriptor?? [ 2022.153623][ T901] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2023.344503][ T4561] usb 2-1: USB disconnect, device number 36 [ 2023.595848][ T4561] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2032.793231][ T6246] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.496'. [ 2034.903107][ T901] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2035.375308][ T901] usb 2-1: Using ep0 maxpacket: 16 [ 2035.482327][ T901] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 2035.485613][ T901] usb 2-1: config 0 has no interface number 0 [ 2035.487812][ T901] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2035.611136][ T901] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2035.613710][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.615816][ T901] usb 2-1: Product: syz [ 2035.621775][ T901] usb 2-1: Manufacturer: syz [ 2035.623780][ T901] usb 2-1: SerialNumber: syz [ 2035.774202][ T901] usb 2-1: config 0 descriptor?? [ 2038.265038][ T901] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input8 [ 2043.102893][ C0] vkms_vblank_simulate: vblank timer overrun [ 2043.183243][ C0] vkms_vblank_simulate: vblank timer overrun [ 2049.880290][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.905796][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.342593][ T6264] usb 2-1: USB disconnect, device number 37 [ 2072.080668][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 2072.091845][ T36] audit: type=1326 audit(2326.696:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.509" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2083.906054][ T5890] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2085.844428][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.851155][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.855848][ T5890] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2085.881749][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.183075][ T5890] usb 2-1: config 0 descriptor?? [ 2088.042240][ T6327] input: syz1 as /devices/virtual/input/input9 [ 2092.265376][ T5890] usbhid 2-1:0.0: can't add hid device: -32 [ 2092.287795][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 2099.146211][ T5890] usb 2-1: USB disconnect, device number 38 [ 2099.981763][ T6347] sit0: entered promiscuous mode [ 2100.364241][ T6347] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 2100.376453][ T6347] netlink: 1 bytes leftover after parsing attributes in process `syz.0.516'. [ 2103.686609][ T6357] block nbd1: shutting down sockets [ 2120.038057][ T36] audit: type=1326 audit(2374.656:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.523" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2132.875745][ T6394] block nbd1: shutting down sockets [ 2135.377218][ T6407] binder: BINDER_SET_CONTEXT_MGR already set [ 2135.433462][ T6407] binder: 6396:6407 ioctl 4018620d 20000100 returned -16 [ 2135.673525][ T6401] xt_CT: No such helper "pptp" [ 2139.685099][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.735094][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.575603][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.620910][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.407703][ T36] audit: type=1400 audit(2416.996:198): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=6439 comm="syz.1.537" [ 2166.460716][ T6264] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2166.840261][ T6264] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=9d.33 [ 2166.845358][ T6264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.846862][ T6264] usb 2-1: Product: syz [ 2166.847870][ T6264] usb 2-1: Manufacturer: syz [ 2166.853862][ T6264] usb 2-1: SerialNumber: syz [ 2166.924730][ T6264] usb 2-1: config 0 descriptor?? [ 2167.050494][ T6264] usb 2-1: invalid MIDI EP [ 2167.052490][ T6264] usb 2-1: snd-bcd2000: error during probing [ 2167.093324][ T6264] snd-bcd2000 2-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 2167.823877][ T3779] usb 2-1: USB disconnect, device number 40 [ 2178.962572][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'. [ 2185.344246][ T6484] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2186.872901][ T6264] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2187.110892][ T6264] usb 2-1: Using ep0 maxpacket: 32 [ 2187.263856][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.266273][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.280462][ T6264] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2187.282908][ T6264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.413476][ T6264] usb 2-1: config 0 descriptor?? [ 2188.909545][ T6264] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 2189.081382][ T6264] ft260 0003:0403:6030.0005: chip code: 5e81 abf2 [ 2189.363209][ T6264] ft260 0003:0403:6030.0005: failed to retrieve system status [ 2189.376842][ T6264] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -5 [ 2190.410284][ T6496] can0: slcan on ttyS3. [ 2191.501185][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.554857][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.194516][ T6492] can0 (unregistered): slcan off ttyS3. [ 2202.372954][ T3779] usb 2-1: USB disconnect, device number 41 [ 2206.693127][ T4561] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2206.961856][ T4561] usb 2-1: Using ep0 maxpacket: 32 [ 2207.066855][ T4561] usb 2-1: config 0 has no interfaces? [ 2207.842156][ T4561] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2207.846572][ T4561] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2207.860513][ T4561] usb 2-1: Product: syz [ 2207.862628][ T4561] usb 2-1: Manufacturer: syz [ 2207.864261][ T4561] usb 2-1: SerialNumber: syz [ 2208.201790][ T4561] usb 2-1: config 0 descriptor?? [ 2209.745921][ T6264] usb 2-1: USB disconnect, device number 42 [ 2229.685622][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.744207][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.002611][ T6422] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2233.336350][ T6422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.347992][ T6422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2233.356900][ T6422] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 2233.361561][ T6422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.452306][ T6422] usb 2-1: config 0 descriptor?? [ 2234.505815][ T6422] logitech-djreceiver 0003:046D:C534.0006: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input0 [ 2235.835603][ T6422] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 2237.200436][ T3779] usb 2-1: USB disconnect, device number 43 [ 2242.091815][ T6598] binder_alloc: 6597: pid 6597 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2245.326550][ T6599] TCP: out of memory -- consider tuning tcp_mem [ 2249.183597][ T6264] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2249.512988][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 2250.771711][ T6264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2250.774804][ T6264] usb 2-1: can't read configurations, error -61 [ 2251.014950][ T6264] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2251.924669][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 2253.983167][ T6264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2253.985704][ T6264] usb 2-1: can't read configurations, error -61 [ 2254.054972][ T6264] usb usb2-port1: attempt power cycle [ 2254.548284][ T6264] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2254.791244][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 2254.988313][ T6264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2254.990747][ T6264] usb 2-1: can't read configurations, error -61 [ 2255.860152][ T6264] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2255.991291][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 2256.700497][ T6264] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2256.703038][ T6264] usb 2-1: can't read configurations, error -61 [ 2256.760890][ T6264] usb usb2-port1: unable to enumerate USB device [ 2257.172523][ T36] audit: type=1326 audit(2511.736:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.205693][ T36] audit: type=1326 audit(2511.806:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.260526][ T36] audit: type=1326 audit(2511.876:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.294910][ T36] audit: type=1326 audit(2511.886:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.400700][ T36] audit: type=1326 audit(2511.946:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.431121][ T36] audit: type=1326 audit(2512.046:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.446182][ T36] audit: type=1326 audit(2512.066:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.475090][ T36] audit: type=1326 audit(2512.086:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=217 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.490810][ T36] audit: type=1326 audit(2512.086:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2257.520704][ T36] audit: type=1326 audit(2512.126:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.561" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2264.702630][ T6264] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2265.676016][ T6264] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2265.690588][ T6264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.692789][ T6264] usb 2-1: Product: syz [ 2265.694510][ T6264] usb 2-1: Manufacturer: syz [ 2265.696215][ T6264] usb 2-1: SerialNumber: syz [ 2265.854237][ T6264] usb 2-1: config 0 descriptor?? [ 2266.395781][ T6264] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2267.632548][ T6264] usb 2-1: USB disconnect, device number 48 [ 2281.470045][ T901] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2281.792892][ T901] usb 2-1: Using ep0 maxpacket: 8 [ 2281.870912][ T901] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 2281.873391][ T901] usb 2-1: config 0 has no interface number 0 [ 2281.875330][ T901] usb 2-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 2281.877690][ T901] usb 2-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2281.925335][ T901] usb 2-1: config 0 interface 32 has no altsetting 0 [ 2281.927972][ T901] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 2281.940547][ T901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.074274][ T901] usb 2-1: config 0 descriptor?? [ 2283.545075][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.620873][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.232655][ T901] usb 2-1: string descriptor 0 read error: -32 [ 2287.405366][ T901] ftdi_sio 2-1:0.32: FTDI USB Serial Device converter detected [ 2287.512981][ T901] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 2297.232288][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.255230][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2298.830396][ T6686] syzkaller1: entered promiscuous mode [ 2298.832873][ T6686] syzkaller1: entered allmulticast mode [ 2298.935242][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2298.947999][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2298.964410][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2298.976436][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.873790][ T901] usb 2-1: USB disconnect, device number 49 [ 2303.193543][ T901] ftdi_sio 2-1:0.32: device disconnected [ 2305.031261][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 2308.234085][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 2316.043622][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 2316.122932][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 2320.402984][ T901] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2320.631549][ T901] usb 2-1: Using ep0 maxpacket: 32 [ 2320.701914][ T901] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2320.704762][ T901] usb 2-1: config 255 has an invalid interface descriptor of length 8, skipping [ 2320.722509][ T901] usb 2-1: config 255 descriptor has 1 excess byte, ignoring [ 2320.724139][ T901] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2320.853660][ T901] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2320.872039][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.874148][ T901] usb 2-1: Product: syz [ 2320.875445][ T901] usb 2-1: Manufacturer: syz [ 2320.876620][ T901] usb 2-1: SerialNumber: syz [ 2321.980949][ T901] usb 2-1: USB disconnect, device number 50 [ 2356.154006][ T6782] veth1_macvtap: left promiscuous mode [ 2356.166202][ T6782] macsec0: entered allmulticast mode [ 2356.682412][ T6783] veth1_macvtap: entered promiscuous mode [ 2356.684828][ T6783] veth1_macvtap: entered allmulticast mode [ 2356.732886][ T6783] macsec0: left allmulticast mode [ 2356.734961][ T6783] veth1_macvtap: left allmulticast mode [ 2362.744099][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.827658][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.781140][ T3768] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2374.211091][ T3768] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2374.213621][ T3768] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2374.215651][ T3768] usb 2-1: config 1 has no interface number 0 [ 2374.245541][ T3768] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2374.250847][ T3768] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2374.254191][ T3768] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2374.412739][ T3768] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2374.415054][ T3768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.416756][ T3768] usb 2-1: Product: syz [ 2374.418194][ T3768] usb 2-1: Manufacturer: syz [ 2374.440674][ T3768] usb 2-1: SerialNumber: syz [ 2375.648421][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 2376.959414][ T3768] cdc_ncm 2-1:1.1: bind() failure [ 2377.407602][ T3768] usb 2-1: USB disconnect, device number 51 [ 2381.746654][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2381.802140][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.231164][ T3779] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2388.486358][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.488384][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.514584][ T3779] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2388.515866][ T3779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.686828][ T3779] usb 2-1: config 0 descriptor?? [ 2395.162331][ T3779] usbhid 2-1:0.0: can't add hid device: -32 [ 2395.167107][ T3779] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 2401.387657][ T4561] usb 2-1: USB disconnect, device number 52 [ 2405.616780][ T3223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.104896][ T3223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.016263][ T3223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.453664][ T3223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.004828][ T3223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.223275][ T3223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.403501][ T3223] bond0 (unregistering): Released all slaves [ 2430.682238][ T6880] netlink: 'syz.0.602': attribute type 21 has an invalid length. [ 2430.972924][ T6880] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 2434.342257][ T3223] hsr_slave_0: left promiscuous mode [ 2434.393967][ T3223] hsr_slave_1: left promiscuous mode [ 2434.928284][ T3223] veth1_macvtap: left promiscuous mode [ 2435.483947][ T3223] veth0_macvtap: left promiscuous mode [ 2435.497882][ T3223] veth1_vlan: left promiscuous mode [ 2435.502868][ T3223] veth0_vlan: left promiscuous mode [ 2436.536879][ T6892] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.603'. [ 2459.615307][ T6904] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 2459.640918][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 2459.752399][ T6876] vxcan1 speed is unknown, defaulting to 1000 [ 2460.213342][ T6904] pim6reg: entered allmulticast mode [ 2460.883291][ T6904] batadv_slave_0: entered allmulticast mode [ 2460.907717][ T6904] batadv_slave_0: left allmulticast mode [ 2460.935751][ T6904] pim6reg: left allmulticast mode [ 2472.300991][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2472.373583][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2491.178451][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2491.428147][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2499.518431][ T7116] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.609'. [ 2501.076733][ T7122] fuse: Bad value for 'fd' [ 2506.111616][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.151257][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.580346][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.594974][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2507.294065][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.362533][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2511.003783][ T6876] hsr_slave_0: entered promiscuous mode [ 2511.134143][ T6876] hsr_slave_1: entered promiscuous mode [ 2511.182074][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2511.184456][ T6876] Cannot create hsr debugfs directory [ 2518.925491][ T7233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.611'. [ 2521.614243][ T6876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2522.012793][ T6876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2522.240922][ T6876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2522.482329][ T6876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2538.734502][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2543.387073][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 2543.406045][ T7290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2543.727320][ T7290] binder: Bad value for 'stats' [ 2564.950978][ T7310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2569.051347][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.083760][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.431213][ T7321] input: syz1 as /devices/virtual/input/input10 [ 2570.996564][ T7321] netlink: 'syz.0.617': attribute type 11 has an invalid length. [ 2585.276668][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.311370][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.728624][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 2609.768268][ T6876] veth0_vlan: entered promiscuous mode [ 2610.907086][ T6876] veth1_vlan: entered promiscuous mode [ 2613.846993][ T6876] veth0_macvtap: entered promiscuous mode [ 2615.345987][ T6876] veth1_macvtap: entered promiscuous mode [ 2618.472530][ T6876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.474546][ T6876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.476758][ T6876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.481953][ T6876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2625.095824][ T7379] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.599'. [ 2625.307366][ T7381] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.599'. [ 2625.557375][ T7379] input: syz0 as /devices/virtual/input/input11 [ 2627.244193][ T7382] vxcan1 speed is unknown, defaulting to 1000 [ 2629.740556][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2629.811208][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2630.033359][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2630.171960][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.351821][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.363904][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2652.355768][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 2652.387350][ T7435] ================================================================== [ 2652.389791][ T7435] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca [ 2652.395574][ T7435] Read of size 1 at addr ffffffff897cc9c0 by task syz.0.629/7435 [ 2652.398265][ T7435] [ 2652.400302][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.629 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2652.402662][ T7435] Hardware name: riscv-virtio,qemu (DT) [ 2652.404182][ T7435] Call Trace: [ 2652.405725][ T7435] [] dump_backtrace+0x2e/0x3c [ 2652.407704][ T7435] [] show_stack+0x34/0x40 [ 2652.409534][ T7435] [] dump_stack_lvl+0x122/0x196 [ 2652.411294][ T7435] [] print_report+0x290/0x5a0 [ 2652.412787][ T7435] [] kasan_report+0xec/0x118 [ 2652.414448][ T7435] [] __asan_report_load1_noabort+0x12/0x1a [ 2652.416054][ T7435] [] memcmp+0xc0/0xca [ 2652.418145][ T7435] [] __hw_addr_add_ex+0xee/0x676 [ 2652.420105][ T7435] [] dev_mc_add+0xac/0x108 [ 2652.421494][ T7435] [] mrp_init_applicant+0xe8/0x56e [ 2652.423080][ T7435] [] vlan_mvrp_init_applicant+0x26/0x30 [ 2652.425239][ T7435] [] register_vlan_dev+0x1b4/0x922 [ 2652.426916][ T7435] [] vlan_newlink+0x3d2/0x5fc [ 2652.428570][ T7435] [] __rtnl_newlink+0xfe2/0x1738 [ 2652.430076][ T7435] [] rtnl_newlink+0x6c/0xa2 [ 2652.431538][ T7435] [] rtnetlink_rcv_msg+0x428/0xdbe [ 2652.433241][ T7435] [] netlink_rcv_skb+0x216/0x3dc [ 2652.434927][ T7435] [] rtnetlink_rcv+0x26/0x30 [ 2652.436529][ T7435] [] netlink_unicast+0x4f0/0x82c [ 2652.438109][ T7435] [] netlink_sendmsg+0x864/0xdc6 [ 2652.439814][ T7435] [] __sock_sendmsg+0xcc/0x160 [ 2652.441505][ T7435] [] ____sys_sendmsg+0x5ce/0x79e [ 2652.443234][ T7435] [] ___sys_sendmsg+0x144/0x1e6 [ 2652.445559][ T7435] [] __sys_sendmsg+0x130/0x1f0 [ 2652.447697][ T7435] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2652.449772][ T7435] [] syscall_handler+0x94/0x118 [ 2652.451527][ T7435] [] do_trap_ecall_u+0x1aa/0x216 [ 2652.453151][ T7435] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2652.455348][ T7435] [ 2652.456228][ T7435] The buggy address belongs to the variable: [ 2652.457381][ T7435] vlan_mrp_app+0x60/0x3e80 [ 2652.458911][ T7435] [ 2652.459823][ T7435] The buggy address belongs to the physical page: [ 2652.461668][ T7435] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x899cc [ 2652.463875][ T7435] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 2652.467377][ T7435] raw: 0ffe000000002000 ff1c000000267308 ff1c000000267308 0000000000000000 [ 2652.468792][ T7435] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 2652.470159][ T7435] page dumped because: kasan: bad access detected [ 2652.472179][ T7435] page_owner info is not present (never set?) [ 2652.473413][ T7435] [ 2652.474209][ T7435] Memory state around the buggy address: [ 2652.476570][ T7435] ffffffff897cc880: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 2652.477872][ T7435] ffffffff897cc900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2652.480184][ T7435] >ffffffff897cc980: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 2652.481547][ T7435] ^ [ 2652.482992][ T7435] ffffffff897cca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2652.484230][ T7435] ffffffff897cca80: f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 2652.485619][ T7435] ================================================================== [ 2652.490863][ T7435] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2652.493042][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.629 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2652.494557][ T7435] Hardware name: riscv-virtio,qemu (DT) [ 2652.495728][ T7435] Call Trace: [ 2652.496634][ T7435] [] dump_backtrace+0x2e/0x3c [ 2652.498156][ T7435] [] show_stack+0x34/0x40 [ 2652.499744][ T7435] [] dump_stack_lvl+0x108/0x196 [ 2652.501438][ T7435] [] dump_stack+0x1c/0x24 [ 2652.503264][ T7435] [] panic+0x388/0x86c [ 2652.504540][ T7435] [] check_panic_on_warn+0xc0/0xe4 [ 2652.506059][ T7435] [] end_report.part.0+0x4a/0xaa [ 2652.507737][ T7435] [] kasan_report+0x102/0x118 [ 2652.509795][ T7435] [] __asan_report_load1_noabort+0x12/0x1a [ 2652.511431][ T7435] [] memcmp+0xc0/0xca [ 2652.513030][ T7435] [] __hw_addr_add_ex+0xee/0x676 [ 2652.514376][ T7435] [] dev_mc_add+0xac/0x108 [ 2652.516023][ T7435] [] mrp_init_applicant+0xe8/0x56e [ 2652.517467][ T7435] [] vlan_mvrp_init_applicant+0x26/0x30 [ 2652.519687][ T7435] [] register_vlan_dev+0x1b4/0x922 [ 2652.521195][ T7435] [] vlan_newlink+0x3d2/0x5fc [ 2652.522587][ T7435] [] __rtnl_newlink+0xfe2/0x1738 [ 2652.523857][ T7435] [] rtnl_newlink+0x6c/0xa2 [ 2652.525102][ T7435] [] rtnetlink_rcv_msg+0x428/0xdbe [ 2652.526502][ T7435] [] netlink_rcv_skb+0x216/0x3dc [ 2652.528061][ T7435] [] rtnetlink_rcv+0x26/0x30 [ 2652.529473][ T7435] [] netlink_unicast+0x4f0/0x82c [ 2652.530908][ T7435] [] netlink_sendmsg+0x864/0xdc6 [ 2652.532205][ T7435] [] __sock_sendmsg+0xcc/0x160 [ 2652.533554][ T7435] [] ____sys_sendmsg+0x5ce/0x79e [ 2652.534970][ T7435] [] ___sys_sendmsg+0x144/0x1e6 [ 2652.537087][ T7435] [] __sys_sendmsg+0x130/0x1f0 [ 2652.538478][ T7435] [] __riscv_sys_sendmsg+0x70/0xa2 [ 2652.540019][ T7435] [] syscall_handler+0x94/0x118 [ 2652.541400][ T7435] [] do_trap_ecall_u+0x1aa/0x216 [ 2652.542920][ T7435] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2652.544963][ T7435] SMP: stopping secondary CPUs [ 2652.548726][ T7435] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:23:50 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81b7d220 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff80a530c0 sepc ffffffff84d6c310 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a05bc000000aee04 x0/zero 0000000000000000 x1/ra ffffffff81b7d1f6 x2/sp ff20000002646660 x3/gp ffffffff899c0180 x4/tp ff6000001a9cb480 x5/t0 20666f2064616552 x6/t1 fffffffef21a98f0 x7/t2 7320666f20646165 x8/s0 ff200000026466a0 x9/s1 ffffffff90d4c780 x10/a0 ffffffff90d4c7c8 x11/a1 000000000000001f x12/a2 0000000000040000 x13/a3 ffffffff81b7d1f6 x14/a4 1ffffffff21a98f9 x15/a5 ff2000000006d000 x16/a6 0000000000000003 x17/a7 ffffffff90d4c783 x18/s2 000000000000005b x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 ffffffff90b6fb36 x24/s8 dfffffff00000000 x25/s9 fffffffef21a98fb x26/s10 0000000000000010 x27/s11 0000000000000010 x28/t3 ff6000001a9cb488 x29/t4 fffffffef21a98f0 x30/t5 fffffffef21a98f1 x31/t6 ffffffff90b6faf7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8042fcce mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff8001fb0e sepc ffffffff8042fd12 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a04f8000000a8b11 x0/zero 0000000000000000 x1/ra ffffffff80249cd0 x2/sp ff20000002657760 x3/gp ffffffff899c0180 x4/tp ff600000132acec0 x5/t0 ff600000132ad9e0 x6/t1 fffffffef11a3b18 x7/t2 00000000000004f9 x8/s0 ff20000002657af0 x9/s1 0000000000000000 x10/a0 0000000000000001 x11/a1 0000000000000000 x12/a2 0000000000000000 x13/a3 ffffffff814a98a0 x14/a4 0000000000000000 x15/a5 ff600000132adec0 x16/a6 0000000000000003 x17/a7 ffffffff88d1d8c3 x18/s2 ff20000002657960 x19/s3 ffffffffffffffff x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffff8000a754 x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff86002870 x26/s10 0000000000007fff x27/s11 ff20000002657af0 x28/t3 1fec000002655b3b x29/t4 fffffffef11a3b18 x30/t5 fffffffef11a3b19 x31/t6 1fec000002655b4a f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000