last executing test programs: 14.321387778s ago: executing program 2 (id=13210): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0208000001000000000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 14.044603332s ago: executing program 2 (id=13212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x0, 0x520100) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000003ef00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000100)) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "fffbff693dcd"}}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xf, &(0x7f0000000180), 0xc) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r3, @ANYRES16=r0, @ANYRES64=r3, @ANYRESDEC, @ANYRESDEC], 0x1c}, 0x1, 0xba01, 0x0, 0x44014005}, 0x2c008000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0xa, 0x79, 0x5, 0x2}) 13.737909953s ago: executing program 2 (id=13213): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0xffffffff, 0x2, 0x8000}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000001040)="a8b069b51240a8484312773166ddb84b99c4d36e18fc600749ff1f855432b8", 0x1f) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="12e578f3dd48b91e2a00b7a9bb8ca4fed3dc13fbca012a165ac96527fa5b1598acd3b2a69ff75becb881761a0019c52740c920fcfbb00ae1a1c640aa1671f966833d08bb22f3b688e0c387f3e51fe2103a2cc2263fe26e44797717622ecc4d1d8e47c9d212128bf6a01182101370fbcde64f983f8a622dd95ae1a7dd249749f0637c5bbf", @ANYRES64=r1, @ANYBLOB="0103000000000000000024000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) 12.96429619s ago: executing program 2 (id=13217): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b43a409aa81", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 12.025877546s ago: executing program 2 (id=13221): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)={0x20, r4, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013", @ANYRES32, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 10.95585708s ago: executing program 2 (id=13229): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000001440)=[{&(0x7f0000001740)="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", 0x1169}, {&(0x7f00000002c0)="1e8a017509a401228f89a538c9f8919ca1359312625141549afdd50e79791b35af042f2c3074d26ef362a148db373975a37c867fc3099180391d0ea3e5b74c165d2c5e22f60bb9a9452b49eab32fc663a23f05f2", 0x54}, {&(0x7f00000014c0)="0904b3d8c745654cccb88b8e7fb5f02d3d2e5f0a591a5e36be75c1cbfaf582bea2fcd9cba1e0a532729f0388c7730377e31372433407f5c2d58f54ab479b9234d9fb21a1620961df92d87a8d252b0c04916b2b21fecfc4b66b85e9855430fe64c6a323947df15d0a7d8eef0339f8e4e8ffa7d9a4b1b096edd9eb929fdad73c0e4a6959ab08dd805d9fdb0abe4746d32499aef3dfac57bbc640e40413480178703d64e615b9ed6b4a914c4970f844f72d9a088f3991891af3c963a5d00c1c00"/204, 0xcc}, {&(0x7f00000003c0)="b4f66f1c6c93c836084ec4fbad3584bbaddc034215784920b314d2832fc9287f2d9d1b48ac9c8c4131588ce52746d8b47df92ccd30c02fead407961ca081836eda25d0469a1864ca25ee10bbdce27a970faf98e04f7a775eaa388d6569647bd70196a87bccfa79e606b8e5a99be8dd6b6a1a775e74e0e1cc84590e729b89dc5eb17a37896b6ab3d8be5f38ab84ae03146ea61c44256760ecb355a728ff97f3563d665ec7b8b1690c879c4cd69ce9971ddd14d19756b7d950b8375a11cd3086c4cb66fa32259e991f60f1022b67b48362df4502c9ca3c22cb9306a4d7f08f85e21bdf0d749e437eb2a9a7eb1be48f8dee598f9d00"/268, 0x55}, {&(0x7f00000013c0)="71f246394a4486ddd9e2b8a2f602aa658fda9df66253821c2a81768167cef2e9353a49a61e2090f533ca93e1b069a90dad411055fd6e8314e6efbebd6af03145a4b469b1709010117872262079735aa22ddd60edec38e2a7629d740956cc51791533cedd8ed08eab311d65a0", 0x6c}], 0x5) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8010, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="0800deff4496"}, 0x14) ioctl$KDENABIO(r0, 0x4b36) connect(0xffffffffffffffff, &(0x7f00000015c0)=@llc={0x1a, 0x108, 0x6, 0x81, 0xff, 0x6}, 0x80) rt_sigprocmask(0x1, &(0x7f0000000200)={[0x7]}, &(0x7f0000000000), 0xfffffe75) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001700)={0x3, &(0x7f0000001680)=[{}, {0x34, 0x0, 0x0, 0xff}, {0x6}]}) socket(0xa, 0x0, 0x3a) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r4, &(0x7f0000002040)=""/81, 0x51, 0x7ffb) gettid() 7.503046498s ago: executing program 0 (id=13238): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = syz_open_dev$video(&(0x7f00000003c0), 0x0, 0x520100) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000003ef00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000100)) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "fffbff693dcd"}}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xf, &(0x7f0000000180), 0xc) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r3, @ANYRES16=r0, @ANYRES64=r3, @ANYRESDEC, @ANYRESDEC], 0x1c}, 0x1, 0xba01, 0x0, 0x44014005}, 0x2c008000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0xa, 0x79, 0x5, 0x2}) 7.231339665s ago: executing program 0 (id=13241): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x71}}}}}]}}]}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) r3 = openat$vimc2(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tkill(r4, 0x11) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100), 0x8}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x2, {0xfff, 0x2, 0x1, 0x7}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) ioctl$VT_DISALLOCATE(r1, 0x560d) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x14, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x9, {[@global=@item_012={0x1, 0x1, 0x0, 'G'}, @local=@item_4={0x3, 0x2, 0x0, "6b790eb6"}, @global=@item_012={0x1, 0x1, 0x0, "ac"}]}}, 0x0}, 0x0) 6.682288882s ago: executing program 4 (id=13243): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000001c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="185a00000d0000000000000000000000950000000000000018", @ANYRES64=0x0, @ANYBLOB="1fac5a2da8fd175dcc1a5b052a74abc395d83cf41d4977a52e41af06b3a27e632e86e050267d1f3e647a9202a8df2fcfeb9c1765ff282ea6f0fed77a69e998b9abf9d9cad59c134d062f667d4dcee0030b63306dd00cc8b88bd63528a9f8dc4457f94cf78ab4078e98f99864185f3d4e1cb181c21015e28ba0d1221034a9", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x204000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x64}}, 0x0) r6 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000380)='rw\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563c, &(0x7f0000000400)={0x0, 0x2, @raw_data=[0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000]}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 6.16839838s ago: executing program 4 (id=13245): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02080000010000000000000100000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 5.947098399s ago: executing program 4 (id=13246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8000, 0xffffffff, 0x2, 0x8000}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="12e578f3dd48b91e2a00b7a9bb8ca4fed3dc13fbca012a165ac96527fa5b1598acd3b2a69ff75becb881761a0019c52740c920fcfbb00ae1a1c640aa1671f966833d08bb22f3b688e0c387f3e51fe2103a2cc2263fe26e44797717622ecc4d1d8e47c9d212128bf6a01182101370fbcde64f983f8a622dd95ae1a7dd249749f0637c5bbf", @ANYRES64=r1, @ANYBLOB="0103000000000000000024000000"], 0x14}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="0f1500015c5d05c23cf0093a00000000c0c0200000"]}) 5.259508949s ago: executing program 0 (id=13247): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c9009f009b000100107f040007000400040061004000020005010106105948b0e1ec720204000200000016000000070000000102090007022000070208000501000610ff027f00000000000100000003000000061009010200ff0f000001000000050000000501010610fb0206000800000007000000000400000d0108008100b158860602000a01020009000f0c04000200ff0f0d7f0800040080002800020010050400ff007f00"], 0xa4) socket$alg(0x26, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x10000000, 0x0, 0x0, 0x7fffffff, 0x806, 0x42c4, 0x1008}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) r2 = syz_open_dev$video4linux(&(0x7f0000000300), 0x17, 0x4ca700) close_range(r2, r2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket(0x2c, 0xa, 0x7) eventfd2(0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0xa, 0x300) 5.123757334s ago: executing program 4 (id=13248): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100010000002c00018014000300fc00000000000000000000000000000014000400fe8800000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400000000000000000000000000000000013c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb14000400ff020000000000000000000000000001dca434bda38c8debb471848e24273996e2a4ec02935b7ea8d361fbb01c76227bdd4d47049e886493583398d423b4633090904a7c31f64bd68c751592360c55f877cc16795ada1d90a2816d118cbaffbc3d5097910ce7fb88c17c609fb87d670d69ba84e3a6f843d978c8ccc6a54321c6b2c4707692b2da6564c48918495276ee184885c5f3357168b4d3aa97c14baf27e537446655354950883a471d94c4bb4abbdad3ab13731e400d5853cec460859b666f6f4cb427c3e16cfb3ba88c49021a768a6579482607f9625e8d071d2fe846948630b76f012c11d929163c0d49e212b59274cca6fabc8aa1591b8a440b22de9e1b232222b3a8b6618a0e92ef8f1e0fc29d1f251c81e79952a8ec10006335623bfb5f9370a87d881033f364d685255ac14b6c9cddd342406f82d2c21774ec27357856eed7ec90429e77531af246960266c754b0b50bfe228b289474041ca12f715db62b25970a5c8dc9bb90d4c359e1855e0de8d8d9"], 0xc8}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x417, 0x0, &(0x7f0000000140)="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"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x400ad00, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0xe36b}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.115889402s ago: executing program 0 (id=13249): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9c"}]}], {0x14}}, 0x74}}, 0x0) r5 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x5, 0x6, 0x8, 0x8, 0x1}}}}, 0x17) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0xffe}}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r6, 0x6}, 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 4.349345594s ago: executing program 0 (id=13250): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x0, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) io_uring_setup(0x3319, &(0x7f0000007940)={0x0, 0x0, 0x944, 0x8000, 0x2bc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001afc0)=ANY=[@ANYBLOB="c4020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0xcfb45b99770bb43a) fcntl$setown(r4, 0x4, 0x0) 3.223975057s ago: executing program 3 (id=13253): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)={0x20, r4, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013", @ANYRES32, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 2.987230742s ago: executing program 4 (id=13254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r2], 0x20}}, 0x0) 2.275202687s ago: executing program 3 (id=13255): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02080000010000000000000100000000010014"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2.012490326s ago: executing program 3 (id=13256): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000004280), 0x1, 0x0) fchown(r0, 0x0, 0xee01) 1.827913971s ago: executing program 3 (id=13258): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x234140, 0x160) dup(r1) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, r2, 0x0) futex(&(0x7f0000000080), 0x100, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.608014132s ago: executing program 3 (id=13261): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000002680)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e31297ce4e5585bc3d3ac00acbeec51d8164359204a918b4d1de4514705d55e2105084aece8a83f28fb3e46eb4f24b966af622fcf31c4cb601f5a2b82d42a2172ad0b1939c585891940b81aa9c5c6cdb0676b998025ea4ac0fc18aa24fd5d562b1dd4f23e3ac63f0233fb4465c5e5a96599ecc0fd8dd7e7d48a8b96db03630613905fd610ceec2eb9b6962645bd959cb08493806bb6d0ccb067a048c7ec34cc3ab4aec1b8e4253de22949b0c9a9d1dec77d903d6018eafd0e81dc7090ea108057e631003da3104c2eb839bc8428be6a497a051b03b80c02d8f8efc20330853a81ba6e36c41fcbc63e2345075a99164f8108452c298a49da500c16ecd20fca9577814e657a767c5f310d0c8a71b134a995e40c7924ec6ffe956ab10ff39e3a07b28af2a668df944869bffd39494fa0150a7a46491659c0afb122c91a50d08bd50e014bc4c1f7c9ff3fd2d1d813cd0cdd381510380c967aed0133055370c29cbf1b3e5d10ed2ae103de7dfa77e76ff55f41f1e1804e4f06bd013ce28511e3469817b0154e58378345928071d63e474e4d8ac2d50c5f7626fc769b2e1c3b2534fec20a8440fd333e2220de76c21ddf83c0e6156f12dbef610a98a0500aaafc0278ceb32591a8c27d7f05cbb1718da94a95df19f72b8072ae01be8d19a3e34ae4cb059cecc5fd95cb1d9116ba62bf1b8926a919a9d88491e8516a5070cd5b74fc46d26e36c5742aaca351dc5c98f97f06e9d7cbc9c318b00a0e73829acaba560cbf0c67c4e60321eeac2e56d355ca483868e76a7e0397a5009a8c83825be2fbbb4fd48e1a0682fab5997ca24046008d5d48740b614bba2c4f48ccc6777ee90ab07b0e6181f52d64f24ec0ad43b2125d2464d55e977d6b7eb62e11c2cf418dccbe16644a3cce78f68e3fa83f73cdd4369cbd3789efe4802d02f364ecac04aa6868b0fa95ec1ed1d50f403d2ea5c7e201e2e5563d940466d77e0f1e3988abcf6b25aeeebb079d4da21e633e83e4b5c090957812ab84232f70ba420981628c74f0bf5e363ef017fa6c9157b844b36f6188e7955f992d587cde528b85315f825ee3d7c3db57db62bca9dfca8ab4014a672d43c3c462aba6de5f17ab252e5ced731a0f5ed018cbf766290c28b6ad4f1ef378c056291172c8ae0f24b7a50e28e6964f72ca1345a13223637b4ebdc19aecf4f93b4c4819ba4380ccd51595938f2255cb22d4d9b270ebb2367b8045d950e9201da4466f1adaa6d19d6387b971ad37505c64e6ffd7f4f04cffb72fde1f0c08912de1c890ba83532839963f527149d4ae501baabe834eb1dc4a2c42c646c4cfc1b735a0c60acdf8a54cc200733282169a8ec10e23b34e713f47eb5c8d18b1700bb4ca77a0c04b55ec546f1f90211906a90738bd3827e9ec5aa2b64cc28b67a0d3b33e4a210b3b4f9e115907f2e660ee849677a99fd3ea2a8bbaf07369fc036d51d2b4bdd94a6ab7421db4686aeabebc3679960286ea0444694bde2d76e69fda96bdbfde78d7345c7a143abab5d0412269d833c5e315d7705e691cc5ce6f70d7f22f762bd3cd2e25d40bc4e5af3e9ee651e1400daa8edf2e6e3d7026f1e22c88a15cb4fa909375999bcc34ef12d0a40b3f3cdcb0be3400edd8c04991ee8cd7778f88b54c517deb9c955d8a43a3606aeef44c6db656bab1164dddc312d1a2b74a520b988fb62fcf08de1b82e9093db5adca8222340257fffb5da79b82adb6f49473cef3a65cbb20a9ffe5760d1f4c6a3f3cc9db3eb1dd9eb44c6a84074f13feed4d45b47037280c7a096da61b397e8002093c6428d00d2a0d249d518636a8ae42f0778bddd723e8410209ca1ebce297d2d88781a378d0e7b8695080f2ec5f907f5cdbf1a8ae0b0d23b5239dd7bed96304cb561be61d68ff3ec90b6bf30f693fa2bb416d935f107e445eb0f492071df1cfcbc9e34173bf3feadfa3d64f99b078f603a5a504704625bd8d85e8a5454edfaf92b0ab95036c8aebc297f4fb8c51ff97740f82f5c220fcaeed0d77ee9007636dc70252d891f2a00ef010ac48153e5d5fd83f88b5c0010e41d312f368a660c50d1574d07242270b814f59abc8c25a26e5cb6ed8915eed0ed188c13f45045afe44e0d8a5e37e51bb7da9b715541c2b54fb5d2e827be94530b6fdd299d67898e89d3d68e0730375d9e8b425b06c61fe3e41b93eed3a239df5df59e6add4c8b8cf48c1b175bf9125a51798ed5647377e52a38792ff2263c426c40cc8602113f5664986858939d097f767d67b706053268a36c7f9903cf148a88d4012136ed96057c43922fafd67393afa0f4f245e9e1a8b53a27087bc8bde767208841c412a487cbf7fa9a83bee749a8f095bb35f8bd519766d428f246c47b8f50ffd52aacbdd84696fb7c5761b99a15b0809c3465e10ef658d3d2e26a5b018740ab4f64b76a414bf41184d3334af3f7c7f5349e55ad2e96669da6f6105b7c0a74d8448bea966656612982f86c55fcad791c2532dc1dbd27ddda624f75159ee40cb33fab8b4770a4947cad4d936aa5b7e94c0e57b793fe33aa8d5e896a2c28eb804471eb9aa17abf8c3eb72ef8223995376e5795b9bcd5d3307b557d27ab1cfa50d0eea759391ad9f6d62d1b1000278633e90cfbf3502e2a39f3b05b051ed1200d57c96a9eed32883733c22604a1b45dd2aa1a85a0777b3484bc500d2215f8a3d03c96de14125ed53db3413f08d7396dfd2897708a0cac7c98b61525646fb984fb2a7237238fee9e4cc7938ac8d5b7672007be062040b703fbadd4b249689edf00c0cabda644fd0ab2f608e91e5d59af827d0f48ffbffaa2854f62cbd895a6ccd0267f88f343a727c27156f72cd80a3834f327fd500a8fde965a59de1a7c1fea7d519b0e33535499970307eb6ea0158de51677c1ff711d6e288d070a4ea34fc3e9188398bdc4e4cf8bf79482acdae43ce11a01fd113c0fd67679c8cc1cc81051214a62a8da68a123e1bbda8d624262f795c1252f690e89d0abdefdecb0630b97635d87748581da0101c8fbe09362bc5d62685e8f8a81d24e1c25066460e4fea9fc3d8767112c6b084f9c17491f7d667132a5a00a55f93c974f6da6687b4b437a3a842aa9b0e07144e5f04ab32fe3e637ecb23078698b325b1de6ca629e535e8b69423dab9d25bcfb962b5dab26dc183ed4f305b39f4ef93832bb72d1a705c57937c34222ed878af19c20d220b2213e96618b5b784644da0dfceb639cbba8685a38091dd4ba285026d912b2ba97b592d06a1a8600f04149ac6c69e5714670275639357b2f2b40bc1180ac613a54429a17b81eb7d845ec5b4a6d31eea4de29e4591425a6ec94789370fff872352118768a6e477c3fc5978f7ffd430a50a201276faad56db177dab31e4d592c9156551bf4e472b43f0783b5848f5f51650dbc4e3da1d454f93004415f8dd454ff87997a351853d24123e6ff9c84a4193ef53c77b742204cf94370d3336d7c88b768a3d2766346801efade0baa37964c4fd10003f48fb51ccf669c146a8edf0ccf0353b0313684c7dd23185940b8e6387fc01e80e87a6bd219c5fd2437eb74fa7aa8e172c2a2cf33cc2e990323a8b14636906ca639c0d4c37f0735e227d48f752b72720f8961f60f3e14722b4cd3adc5fb233595929035d82d45ee4cfca3745303cea020aad4487e7bee26e34260e2783ad0fb0e6a3d38a6aa1ced141dbbc3291a7de961184c3c22f7f6235629cb59d68db14103f4db0956af921a312782052e79f0b88e0d8621966c229449dbac54637a34a519050d670b7203eb53407c24e2fe3ff2f82f57a3d266363fdab8d955a070c897eb9c807afcaca9c50ae0575e327c8158330c786750b608cd407e116b68391a743b36d3eabb05a0d4df0c723376dfb28e5d665cee44a75038ea309094446db302fcac6ebeebd8098f21a9dccf3058fc2790b28e1b752713029473a491dd76c6eb5bac47cc78e3aca0dde814f265751977a492ebf14c2c0b3a90000d9ff2137ed0fe79cc9fa2ac64d06dc1773058ebd83b746a8696e8777b3f267eb71545fb099419576d166b6b0279187f6233032b5c0e9170f699b1edeef6fa10081e5fe4c3e64499226a10dd1f474a2f3c7d136e4243116e0f620a46f1dcc69d90677675ea180fc7420150c2acdfa5c9880e8fb8bdcfbcd223c440515e5f35c0726ac8c027244b0d54fe8f66dec9b0dab14b8ac2893f2159e3fdb9c2443944072462afd57da8c7dde2e619c790bbec8dd73dfcbf8e366820a88829c28856596f6cc498849b00cbff3bb1e775ab92977804e494cb062d3815ff40ff0fbf092ba54ef50e269474ded2d2da15b998e63502f02d48461a9862bef3c7eb72c2b84a157e604236761d6b334708c0b3c91fa51ee0196ef6662e0134fd937cc5c5be1126a8b0b0190a5824eed558afae75a07612f3b290eddc7b57bb26a1e29a04059cc131a86a949702475244b918b822d11dcfa07d49d257d270a59032a8244f4b931ddd017836a4d8d6a2a3e78f4f343dd96a12e46b45150ac2e310c07c3fe88f2106ac01485fb3cb39fa0aca6e5c3e727cf1839b8546aa893d984977f5858a35f37b3488d83c048c33fd6339ac4cdc7560c60d53dc9f8e0bb54dff79523b5bd99699e23bb83165a83c7688b4fa2daedb96d6934ec3d876943023a20d181eb4864b71cda5555d63f2c9b88ffceda8d4c9ea83038072907ec881573a23901d87d965476e596663ba56cf36a9afcc8b47a1c5bc48f540f4c5d483c8228caf11ebb34f35b3248622f863da6ff3e96c8655e667edf5d908ad409b0bb20a4b80c2b109141ba4d02957d937289e889f858f3ae2eeb0b3961e840b3c95334391e623f3b2d22b6e9390c7a2", 0xe47}, {0x0}], 0x2, 0xf1, 0x4) 1.518864535s ago: executing program 1 (id=13262): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000020000008d"]) 1.502203498s ago: executing program 3 (id=13263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 627.978629ms ago: executing program 1 (id=13264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 538.119777ms ago: executing program 1 (id=13265): getrlimit(0x18, 0x0) 391.928248ms ago: executing program 1 (id=13266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19b5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 273.636057ms ago: executing program 0 (id=13267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r4, 0x0, 0x0) 165.51387ms ago: executing program 1 (id=13268): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 164.639865ms ago: executing program 4 (id=13269): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0xf4240}) 0s ago: executing program 1 (id=13270): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 04.760005][ T9551] cdc_wdm 3-1:1.0: skipping garbage [ 2804.780440][ T9551] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2804.783484][T16065] veth1_macvtap: entered promiscuous mode [ 2804.859147][ T9551] usb 3-1: USB disconnect, device number 69 [ 2805.095615][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.148442][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.207567][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.232300][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.258498][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.277334][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.307342][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.335489][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.366977][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.387326][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.408054][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2805.427378][ T9551] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 2805.437318][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.469417][T16065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2805.525030][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.570823][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.600566][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.618225][ T9551] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2805.637360][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.653098][ T9551] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2805.687519][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.698414][ T9551] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2805.727307][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.747360][ T9551] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2805.762788][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.777668][ T9551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.812235][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.826053][ T9551] hub 3-1:1.0: bad descriptor, ignoring hub [ 2805.845568][ T9551] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2805.853600][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.875656][ T9551] cdc_wdm 3-1:1.0: skipping garbage [ 2805.887343][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2805.900012][ T9551] cdc_wdm 3-1:1.0: skipping garbage [ 2805.905267][ T9551] cdc_wdm 3-1:1.0: skipping garbage [ 2805.928106][T16065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2805.941560][ T9551] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2805.967343][T16065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2806.047086][T16065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2806.128957][T16065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.181116][T16065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.227509][T16065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.236284][T16065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2806.263445][T10123] usb 3-1: USB disconnect, device number 70 [ 2806.717044][ T2792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.764409][ T2792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.867495][ T2792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2806.907530][ T2792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2808.367696][ T5091] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2808.597561][ T5091] usb 4-1: device descriptor read/64, error -71 [ 2808.909378][ T25] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2808.911024][ T5091] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2809.125953][ T5091] usb 4-1: device descriptor read/64, error -71 [ 2809.128914][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 2809.171348][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2809.201945][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2809.237634][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2809.257638][ T5091] usb usb4-port1: attempt power cycle [ 2809.296075][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2809.326710][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2809.339857][T16368] __nla_validate_parse: 9 callbacks suppressed [ 2809.339881][T16368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12961'. [ 2809.380468][ T25] hub 2-1:1.0: bad descriptor, ignoring hub [ 2809.386710][ T25] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2809.411043][ T29] audit: type=1326 audit(1720504365.245:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16355 comm="syz.0.12958" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2809.449539][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 2809.470565][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 2809.495184][ T25] cdc_wdm 2-1:1.0: skipping garbage [ 2809.507611][ T25] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2809.702010][ T29] audit: type=1326 audit(1720504365.545:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.4.12959" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2809.737453][ T5091] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2809.737785][ T6629] usb 2-1: USB disconnect, device number 100 [ 2809.799695][ T5091] usb 4-1: device descriptor read/8, error -71 [ 2810.099462][ T5091] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2810.107486][ T6629] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 2810.158026][ T5091] usb 4-1: device descriptor read/8, error -71 [ 2810.287649][ T5091] usb usb4-port1: unable to enumerate USB device [ 2810.311674][ T6629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.344307][ T6629] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2810.388544][ T6629] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2810.423084][ T6629] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2810.442646][ T6629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.477061][ T6629] hub 2-1:1.0: bad descriptor, ignoring hub [ 2810.497054][ T6629] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2810.516902][ T29] audit: type=1326 audit(1720504366.355:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16376 comm="syz.2.12963" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2810.540057][ T6629] cdc_wdm 2-1:1.0: skipping garbage [ 2810.545312][ T6629] cdc_wdm 2-1:1.0: skipping garbage [ 2810.559913][ T6629] cdc_wdm 2-1:1.0: skipping garbage [ 2810.582112][ T6629] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2810.857852][ T25] usb 2-1: USB disconnect, device number 101 [ 2812.987545][T19490] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2813.039938][ T29] audit: type=1326 audit(1720504368.885:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.2.12974" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2813.167639][T19490] usb 4-1: device descriptor read/64, error -71 [ 2813.258138][ T6629] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2813.457944][T19490] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2813.466101][ T29] audit: type=1326 audit(1720504369.305:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16413 comm="syz.1.12975" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 2813.512379][ T6629] usb 1-1: Using ep0 maxpacket: 8 [ 2813.552162][ T6629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2813.571745][ T6629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2813.596382][ T6629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has an invalid bInterval 100, changing to 10 [ 2813.626235][ T6629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 24936, setting to 1024 [ 2813.658592][ T6629] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2813.683340][T19490] usb 4-1: device descriptor read/64, error -71 [ 2813.719388][ T6629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.766993][ T6629] hub 1-1:1.0: bad descriptor, ignoring hub [ 2813.797444][ T6629] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2813.808501][T19490] usb usb4-port1: attempt power cycle [ 2813.828102][ T6629] cdc_wdm 1-1:1.0: skipping garbage [ 2813.833378][ T6629] cdc_wdm 1-1:1.0: skipping garbage [ 2813.865015][ T6629] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2814.147977][ T6629] usb 1-1: USB disconnect, device number 117 [ 2814.237822][T19490] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2814.293346][T19490] usb 4-1: device descriptor read/8, error -71 [ 2814.534486][ T6629] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 2814.577466][T19490] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2814.628766][T19490] usb 4-1: device descriptor read/8, error -71 [ 2814.773612][ T6629] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2814.794664][T19490] usb usb4-port1: unable to enumerate USB device [ 2814.829988][ T6629] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2814.883087][ T6629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 26984, setting to 64 [ 2814.934529][ T6629] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2814.970875][ T6629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.068406][T16419] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2815.106746][ T6629] hub 1-1:1.0: bad descriptor, ignoring hub [ 2815.124610][ T6629] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2815.153697][ T6629] cdc_wdm 1-1:1.0: skipping garbage [ 2815.172911][ T6629] cdc_wdm 1-1:1.0: skipping garbage [ 2815.183126][ T6629] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2815.470035][T29902] usb 1-1: USB disconnect, device number 118 [ 2815.531329][ T29] audit: type=1326 audit(1720504371.375:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.12984" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2815.638196][T16450] dccp_close: ABORT with 32 bytes unread [ 2815.898712][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12987'. [ 2816.110320][T16461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.182098][T16461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.226125][T16461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.290106][T16461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.408712][T16461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.537688][T19490] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2816.598435][ T29] audit: type=1326 audit(1720504372.435:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.12989" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2816.755792][T19490] usb 1-1: Using ep0 maxpacket: 16 [ 2816.765597][T19490] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2816.793333][T19490] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2816.807479][T19490] usb 1-1: Product: syz [ 2816.811708][T19490] usb 1-1: Manufacturer: syz [ 2816.832405][T19490] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2816.847348][T19490] r8152-cfgselector 1-1: config 0 descriptor?? [ 2817.146213][T19490] r8152-cfgselector 1-1: Needed 1 retries to read version [ 2817.177614][T19490] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2817.185599][T19490] r8152-cfgselector 1-1: bad CDC descriptors [ 2817.915192][T19490] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2818.107367][T19490] usb 5-1: Using ep0 maxpacket: 32 [ 2818.121159][T19490] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2818.147437][T19490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.180990][T19490] usb 5-1: Product: syz [ 2818.186180][T19490] usb 5-1: Manufacturer: syz [ 2818.227472][T19490] usb 5-1: SerialNumber: syz [ 2818.238721][T19490] usb 5-1: config 0 descriptor?? [ 2818.437339][ T5091] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2818.449689][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2818.487552][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2818.537366][T19490] usb 5-1: USB disconnect, device number 105 [ 2818.628454][T29902] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2818.636227][ T5091] usb 3-1: Using ep0 maxpacket: 16 [ 2818.651357][ T5091] usb 3-1: config 0 has no interfaces? [ 2818.659923][ T5091] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 2818.672663][ T5091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.695589][ T5091] usb 3-1: Product: syz [ 2818.704436][ T5091] usb 3-1: Manufacturer: syz [ 2818.712593][ T5091] usb 3-1: SerialNumber: syz [ 2818.734170][ T5091] usb 3-1: config 0 descriptor?? [ 2818.818027][T29902] usb 2-1: Using ep0 maxpacket: 32 [ 2818.838373][T29902] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2818.854160][T29902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2818.872905][T29902] usb 2-1: Product: syz [ 2818.885432][T29902] usb 2-1: Manufacturer: syz [ 2818.900721][T29902] usb 2-1: SerialNumber: syz [ 2818.914629][T29902] usb 2-1: config 0 descriptor?? [ 2818.955786][ T5091] usb 3-1: USB disconnect, device number 71 [ 2819.144494][T29902] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 2819.175230][T29902] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2819.225035][T29902] usb 2-1: USB disconnect, device number 102 [ 2819.541545][T19490] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2819.637502][T10123] r8152-cfgselector 1-1: USB disconnect, device number 119 [ 2819.747953][T19490] usb 5-1: Using ep0 maxpacket: 8 [ 2819.798350][T19490] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2819.819467][T19490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2819.832228][T19490] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x76 has an invalid bInterval 100, changing to 10 [ 2819.854683][T19490] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 24936, setting to 1024 [ 2819.866583][T19490] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2819.877849][T19490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.908661][T19490] hub 5-1:1.0: bad descriptor, ignoring hub [ 2819.914792][T19490] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2819.960084][T19490] cdc_wdm 5-1:1.0: skipping garbage [ 2819.965361][T19490] cdc_wdm 5-1:1.0: skipping garbage [ 2819.999033][T19490] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2820.135298][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13007'. [ 2820.270360][T19490] usb 5-1: USB disconnect, device number 106 [ 2820.510929][ T29] audit: type=1326 audit(1720504376.355:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.13005" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2820.627513][T19490] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 2820.667447][ T6629] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 2820.836148][T19490] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 2820.876024][T19490] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2820.888370][T19490] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2820.917597][T19490] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2820.917758][T10123] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2820.931218][T19490] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2820.945487][ T6629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2820.965432][T19490] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2820.975232][ T6629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2820.995493][T19490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.004293][ T6629] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 26984, setting to 64 [ 2821.026065][T19490] usb 4-1: config 0 descriptor?? [ 2821.032728][ T6629] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2821.052919][ T6629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.075098][T16500] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2821.087889][ T6629] hub 5-1:1.0: bad descriptor, ignoring hub [ 2821.093892][ T6629] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2821.112932][ T6629] cdc_wdm 5-1:1.0: skipping garbage [ 2821.123576][ T6629] cdc_wdm 5-1:1.0: skipping garbage [ 2821.129914][ T6629] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2821.170555][T10123] usb 3-1: Using ep0 maxpacket: 32 [ 2821.187730][T10123] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2821.216824][T10123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.243737][T10123] usb 3-1: Product: syz [ 2821.260027][T10123] usb 3-1: Manufacturer: syz [ 2821.274237][T10123] usb 3-1: SerialNumber: syz [ 2821.301146][T10123] usb 3-1: config 0 descriptor?? [ 2821.497888][ T6629] usb 5-1: USB disconnect, device number 107 [ 2821.542524][T10123] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 2821.587488][T10123] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2821.642350][T10123] usb 3-1: USB disconnect, device number 72 [ 2821.657488][T19490] usb 4-1: string descriptor 0 read error: -71 [ 2821.698730][T19490] usbhid 4-1:0.0: can't add hid device: -71 [ 2821.704827][T19490] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2821.757022][T19490] usb 4-1: USB disconnect, device number 57 [ 2823.617742][T19490] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2823.656976][ T29] audit: type=1326 audit(1720504379.495:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16564 comm="syz.3.13024" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ab579 code=0x0 [ 2823.720954][T10123] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2823.821508][T19490] usb 1-1: Using ep0 maxpacket: 8 [ 2823.845287][T19490] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2823.856107][T19490] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2823.867318][T19490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has an invalid bInterval 100, changing to 10 [ 2823.902341][T19490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 24936, setting to 1024 [ 2823.914635][T19490] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2823.929765][T10123] usb 5-1: Using ep0 maxpacket: 32 [ 2823.931882][T19490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.970019][T10123] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2823.973904][T19490] hub 1-1:1.0: bad descriptor, ignoring hub [ 2823.987511][T10123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2823.987926][T19490] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2824.016148][T10123] usb 5-1: Product: syz [ 2824.026665][T10123] usb 5-1: Manufacturer: syz [ 2824.037091][T19490] cdc_wdm 1-1:1.0: skipping garbage [ 2824.047991][T19490] cdc_wdm 1-1:1.0: skipping garbage [ 2824.053341][T19490] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2824.056786][T10123] usb 5-1: SerialNumber: syz [ 2824.088601][T10123] usb 5-1: config 0 descriptor?? [ 2824.316693][T10123] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2824.335812][ T5091] usb 1-1: USB disconnect, device number 120 [ 2824.347623][T10123] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2824.384427][T10123] usb 5-1: USB disconnect, device number 108 [ 2824.697389][ T5091] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 2824.909997][ T5091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2824.942950][ T5091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2824.973076][ T5091] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x76 has invalid maxpacket 26984, setting to 64 [ 2824.992429][ T5091] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2825.027813][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2825.060810][T16570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2825.088977][ T5091] hub 1-1:1.0: bad descriptor, ignoring hub [ 2825.111299][ T5091] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2825.132093][ T5091] cdc_wdm 1-1:1.0: skipping garbage [ 2825.143115][ T5091] cdc_wdm 1-1:1.0: skipping garbage [ 2825.157586][ T5091] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2825.439803][T19490] usb 1-1: USB disconnect, device number 121 [ 2826.067406][ T5091] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2826.277404][ T5091] usb 4-1: Using ep0 maxpacket: 16 [ 2826.287022][ T5091] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2826.306527][ T5091] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2826.330471][ T5091] usb 4-1: Product: syz [ 2826.334705][ T5091] usb 4-1: Manufacturer: syz [ 2826.353194][ T5091] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2826.368595][ T5091] r8152-cfgselector 4-1: config 0 descriptor?? [ 2826.467536][T29902] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2826.485626][ T29] audit: type=1326 audit(1720504382.325:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16611 comm="syz.0.13042" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2826.634572][ T5091] r8152-cfgselector 4-1: Needed 1 retries to read version [ 2826.664089][ T5091] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2826.677549][T29902] usb 3-1: Using ep0 maxpacket: 32 [ 2826.713795][T29902] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2826.727462][ T5091] r8152-cfgselector 4-1: bad CDC descriptors [ 2826.760140][T29902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.787570][T29902] usb 3-1: Product: syz [ 2826.802105][T29902] usb 3-1: Manufacturer: syz [ 2826.822627][T29902] usb 3-1: SerialNumber: syz [ 2826.848562][T29902] usb 3-1: config 0 descriptor?? [ 2826.932308][ T29] audit: type=1326 audit(1720504382.775:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16618 comm="syz.1.13044" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 2827.073764][T29902] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 2827.101428][T29902] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2827.156237][T29902] usb 3-1: USB disconnect, device number 73 [ 2828.077617][ T5091] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2828.318465][ T5091] usb 5-1: Using ep0 maxpacket: 32 [ 2828.334071][ T5091] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2828.357293][ T5091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2828.377565][ T5091] usb 5-1: Product: syz [ 2828.381803][ T5091] usb 5-1: Manufacturer: syz [ 2828.407154][ T5091] usb 5-1: SerialNumber: syz [ 2828.428485][ T5091] usb 5-1: config 0 descriptor?? [ 2828.598015][T10123] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2828.659631][ T5091] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2828.683646][ T5091] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2828.723349][ T5091] usb 5-1: USB disconnect, device number 109 [ 2828.817316][T10123] usb 3-1: Using ep0 maxpacket: 32 [ 2828.830857][T10123] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2828.840264][T10123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2828.857284][T10123] usb 3-1: Product: syz [ 2828.869402][T10123] usb 3-1: Manufacturer: syz [ 2828.874402][T10123] usb 3-1: SerialNumber: syz [ 2828.892015][T10123] usb 3-1: config 0 descriptor?? [ 2829.028543][T19490] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2829.223510][T19490] usb 2-1: Using ep0 maxpacket: 8 [ 2829.240946][T19490] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2829.271694][T19490] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2829.296746][T19490] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2829.334000][T19490] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2829.356935][T19490] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2829.359123][T10123] rtl8150 3-1:0.0: couldn't reset the device [ 2829.383221][T10123] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5 [ 2829.395489][T19490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.406267][T10123] usb 3-1: USB disconnect, device number 74 [ 2829.468037][T19490] hub 2-1:1.0: bad descriptor, ignoring hub [ 2829.491701][T19490] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2829.526662][T19490] cdc_wdm 2-1:1.0: skipping garbage [ 2829.539420][T19490] cdc_wdm 2-1:1.0: skipping garbage [ 2829.559133][T19490] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2829.580069][T19490] cdc_wdm 2-1:1.0: Unknown control protocol [ 2829.764503][T16547] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 2829.947402][T10123] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2829.956374][T16644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2829.983812][T16644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2830.167775][T10123] usb 1-1: Using ep0 maxpacket: 32 [ 2830.174912][T10123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2830.196157][T10123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2830.217470][T10123] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2830.239572][T10123] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2830.255891][T10123] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2830.258064][T19490] usb 2-1: USB disconnect, device number 103 [ 2830.280061][T10123] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2830.292531][T10123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.307385][T10123] usb 1-1: Product: syz [ 2830.321928][T10123] usb 1-1: Manufacturer: syz [ 2830.326585][T10123] usb 1-1: SerialNumber: syz [ 2830.407497][T16547] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2830.587603][T10123] cdc_ncm 1-1:1.0: bind() failure [ 2830.602473][T10123] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2830.610263][T16547] usb 3-1: Using ep0 maxpacket: 32 [ 2830.626515][T10123] cdc_ncm 1-1:1.1: bind() failure [ 2830.639701][T16547] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2830.659520][T10123] usb 1-1: USB disconnect, device number 122 [ 2830.665627][T16547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.694410][T16547] usb 3-1: Product: syz [ 2830.710014][T16547] usb 3-1: Manufacturer: syz [ 2830.730413][T16547] usb 3-1: SerialNumber: syz [ 2830.761749][T16547] usb 3-1: config 0 descriptor?? [ 2830.978343][T16664] input: syz0 as /devices/virtual/input/input152 [ 2831.002752][T16547] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate [ 2831.028837][T16547] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2831.087792][T16547] usb 3-1: USB disconnect, device number 75 [ 2831.207541][T10123] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 2831.429363][T10123] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 2831.457337][T10123] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2831.496746][T10123] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2831.524830][T10123] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2831.556201][ T29] audit: type=1326 audit(1720504387.385:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16669 comm="syz.4.13060" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2831.590623][T10123] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2831.599997][T10123] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2831.627296][T10123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2831.648605][T10123] usb 2-1: config 0 descriptor?? [ 2831.757437][T19490] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2831.979572][T19490] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2832.008678][T19490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2832.058515][T19490] usb 4-1: config 0 descriptor?? [ 2832.182418][ T29] audit: type=1326 audit(1720504388.015:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.0.13062" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2832.433936][T32495] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 2832.443092][T32495] Bluetooth: Unexpected start frame (len 12) [ 2832.488825][T19490] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 2832.688620][T19490] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2832.722615][T19490] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 2832.813210][T32495] Bluetooth: Unexpected continuation frame (len 18) [ 2832.906476][ T6629] usb 4-1: USB disconnect, device number 59 [ 2833.076114][T16685] input: syz0 as /devices/virtual/input/input153 [ 2833.947802][T10123] usb 2-1: string descriptor 0 read error: -71 [ 2833.983782][T10123] usbhid 2-1:0.0: can't add hid device: -71 [ 2833.997439][T10123] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2834.033570][T10123] usb 2-1: USB disconnect, device number 104 [ 2834.071901][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13071'. [ 2834.085822][T12924] Bluetooth: Unexpected start frame (len 12) [ 2834.092450][ T6629] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2834.220362][T12924] Bluetooth: Unexpected continuation frame (len 18) [ 2834.267425][T16547] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2834.277373][ T6629] usb 1-1: Using ep0 maxpacket: 16 [ 2834.296971][ T6629] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2834.316647][ T6629] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2834.342483][ T6629] usb 1-1: Product: syz [ 2834.356946][ T6629] usb 1-1: Manufacturer: syz [ 2834.384335][T16697] input: syz0 as /devices/virtual/input/input154 [ 2834.387877][ T6629] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2834.409167][ T6629] r8152-cfgselector 1-1: config 0 descriptor?? [ 2834.467368][T16547] usb 3-1: Using ep0 maxpacket: 8 [ 2834.476300][T16547] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2834.508233][T16547] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2834.527557][T19490] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2834.539983][T16547] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2834.562187][T16547] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2834.583818][T16547] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2834.604069][T16547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.621312][T16547] hub 3-1:1.0: bad descriptor, ignoring hub [ 2834.633611][T16547] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2834.645734][ T6629] r8152-cfgselector 1-1: Needed 1 retries to read version [ 2834.668099][T16547] cdc_wdm 3-1:1.0: skipping garbage [ 2834.673371][T16547] cdc_wdm 3-1:1.0: skipping garbage [ 2834.676314][ T6629] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2834.685703][ T6629] r8152-cfgselector 1-1: bad CDC descriptors [ 2834.689526][T16547] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2834.717414][T16547] cdc_wdm 3-1:1.0: Unknown control protocol [ 2834.737565][T19490] usb 5-1: Using ep0 maxpacket: 32 [ 2834.771340][T19490] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2834.802292][T19490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.839938][T19490] usb 5-1: Product: syz [ 2834.847958][T19490] usb 5-1: Manufacturer: syz [ 2834.852816][T19490] usb 5-1: SerialNumber: syz [ 2834.881257][T19490] usb 5-1: config 0 descriptor?? [ 2835.104697][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2835.117716][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2835.136661][T16547] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2835.143777][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2835.144876][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2835.187768][T19490] usb 5-1: USB disconnect, device number 110 [ 2835.359436][T16547] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2835.376852][T16547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2835.399991][T16547] usb 2-1: config 0 descriptor?? [ 2835.528673][ T5091] usb 3-1: USB disconnect, device number 76 [ 2835.549252][ T29] audit: type=1326 audit(1720504391.385:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16716 comm="syz.3.13077" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ab579 code=0x0 [ 2835.814672][T16547] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 2836.022581][T16547] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2836.037388][T16547] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 2836.088117][T12924] Bluetooth: hci3: command 0x0405 tx timeout [ 2836.230048][T16547] usb 2-1: USB disconnect, device number 105 [ 2836.361488][ T29] audit: type=1326 audit(1720504392.205:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16726 comm="syz.4.13079" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2836.383213][ C1] vkms_vblank_simulate: vblank timer overrun [ 2836.737846][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.746738][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.767810][ T29] audit: type=1326 audit(1720504392.605:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16729 comm="syz.2.13080" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2836.793552][ T5091] r8152-cfgselector 1-1: USB disconnect, device number 123 [ 2837.022755][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13083'. [ 2837.367495][ T5091] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2837.587982][ T5091] usb 1-1: Using ep0 maxpacket: 32 [ 2837.605758][ T5091] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2837.637384][ T5091] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2837.667440][ T5091] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2837.697305][ T5091] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2837.717478][ T5091] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2837.762631][ T5091] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2837.777375][ T5091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2837.777892][T16751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13087'. [ 2837.805854][ T5091] usb 1-1: Product: syz [ 2837.816006][ T5091] usb 1-1: Manufacturer: syz [ 2837.829498][ T5091] usb 1-1: SerialNumber: syz [ 2838.094484][ T5091] cdc_ncm 1-1:1.0: bind() failure [ 2838.111909][ T5091] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2838.147814][ T5091] cdc_ncm 1-1:1.1: bind() failure [ 2838.167482][T32495] Bluetooth: hci3: command 0x0405 tx timeout [ 2838.174032][ T5091] usb 1-1: USB disconnect, device number 124 [ 2838.477901][ T5149] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2838.649518][T19490] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2838.687448][ T5149] usb 2-1: Using ep0 maxpacket: 32 [ 2838.701515][ T5149] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2838.737966][ T5149] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2838.771725][ T5149] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2838.790879][ T5149] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2838.820421][ T5149] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2838.841086][T19490] usb 5-1: Using ep0 maxpacket: 32 [ 2838.862352][T19490] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2838.884970][ T5149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2838.903404][T19490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.911786][ T5149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.923644][T19490] usb 5-1: Product: syz [ 2838.932776][ T5149] usb 2-1: Product: syz [ 2838.938990][T19490] usb 5-1: Manufacturer: syz [ 2838.947180][ T5149] usb 2-1: Manufacturer: syz [ 2838.952644][T19490] usb 5-1: SerialNumber: syz [ 2838.962038][ T5149] usb 2-1: SerialNumber: syz [ 2838.972469][T19490] usb 5-1: config 0 descriptor?? [ 2839.113960][ T29] audit: type=1326 audit(1720504394.955:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.2.13091" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2839.225621][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2839.242772][T19490] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2839.267567][ T5149] cdc_ncm 2-1:1.0: bind() failure [ 2839.284720][ T5149] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2839.296070][T19490] usb 5-1: USB disconnect, device number 111 [ 2839.337529][ T5149] cdc_ncm 2-1:1.1: bind() failure [ 2839.376414][ T5149] usb 2-1: USB disconnect, device number 106 [ 2839.687442][ T25] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2839.878057][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 2839.910343][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2839.937459][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2839.958718][ T25] usb 1-1: Product: syz [ 2839.963148][ T25] usb 1-1: Manufacturer: syz [ 2840.004944][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2840.028130][ T25] r8152-cfgselector 1-1: config 0 descriptor?? [ 2840.262725][ T25] r8152-cfgselector 1-1: Needed 1 retries to read version [ 2840.274154][T32495] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2840.274467][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2840.301885][ T25] r8152-cfgselector 1-1: bad CDC descriptors [ 2840.440115][T12924] Bluetooth: Unexpected continuation frame (len 18) [ 2840.497565][ T5149] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2840.521804][T16778] input: syz0 as /devices/virtual/input/input155 [ 2840.682707][ T5149] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 2840.711709][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2840.733278][ T5149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2840.754572][ T5149] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2840.777336][ T5149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2840.784437][ T5149] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2840.797352][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2840.835494][ T5149] usb 2-1: config 0 descriptor?? [ 2841.087390][ T9551] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2841.297519][ T9551] usb 4-1: Using ep0 maxpacket: 16 [ 2841.323784][ T9551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2841.345323][ T5149] usb 2-1: string descriptor 0 read error: -71 [ 2841.361378][ T9551] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2841.386880][ T5149] usbhid 2-1:0.0: can't add hid device: -71 [ 2841.391595][ T9551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.414531][ T5149] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2841.425480][ T9551] usb 4-1: config 0 descriptor?? [ 2841.443022][ T5149] usb 2-1: USB disconnect, device number 107 [ 2841.688862][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2841.724511][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2841.904816][ T29] audit: type=1326 audit(1720504397.745:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.4.13101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2841.969469][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2842.032507][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2842.351637][ T9551] hid (null): report_id 2838798905 is invalid [ 2842.378535][ T9551] hid (null): unknown global tag 0xc [ 2842.383941][ T9551] hid (null): unknown global tag 0xa5 [ 2842.435910][ T9551] hid (null): unknown global tag 0xd [ 2842.447702][ T9551] hid (null): unknown global tag 0xc [ 2842.456529][ T9551] hid-generic 0003:0158:0100.0120: unknown main item tag 0x1 [ 2842.481780][T19490] r8152-cfgselector 1-1: USB disconnect, device number 125 [ 2842.512465][ T9551] hid-generic 0003:0158:0100.0120: unexpected long global item [ 2842.534322][ T9551] hid-generic 0003:0158:0100.0120: probe with driver hid-generic failed with error -22 [ 2842.727604][ T5149] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2842.917479][ T5149] usb 3-1: Using ep0 maxpacket: 8 [ 2842.929836][ T5149] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2842.954976][ T5149] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2842.977489][T19490] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2842.993283][ T5149] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2843.022359][ T5149] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2843.052289][ T5149] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2843.085774][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.149114][ T5149] hub 3-1:1.0: bad descriptor, ignoring hub [ 2843.168568][ T5149] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2843.197412][T19490] usb 1-1: Using ep0 maxpacket: 32 [ 2843.205960][ T5149] cdc_wdm 3-1:1.0: skipping garbage [ 2843.247074][ T5149] cdc_wdm 3-1:1.0: skipping garbage [ 2843.261099][T19490] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2843.274710][ T5149] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2843.293212][T19490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.303107][ T5149] cdc_wdm 3-1:1.0: Unknown control protocol [ 2843.323911][T19490] usb 1-1: Product: syz [ 2843.340346][T19490] usb 1-1: Manufacturer: syz [ 2843.361979][ T5149] usb 3-1: USB disconnect, device number 77 [ 2843.389161][T19490] usb 1-1: SerialNumber: syz [ 2843.416305][T19490] usb 1-1: config 0 descriptor?? [ 2843.651974][T19490] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 2843.682154][T19490] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2843.762384][T19490] usb 1-1: USB disconnect, device number 126 [ 2843.944270][ T5149] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2844.007491][ T25] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2844.118581][T19490] usb 4-1: USB disconnect, device number 60 [ 2844.138303][ T5149] usb 3-1: Using ep0 maxpacket: 8 [ 2844.151683][ T5149] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2844.176415][ T5149] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2844.194052][ T5149] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2844.205948][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 2844.213294][ T5149] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2844.227582][ T5149] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2844.240867][ T25] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2844.254341][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.279064][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2844.307355][ T25] usb 2-1: Product: syz [ 2844.311743][ T25] usb 2-1: Manufacturer: syz [ 2844.316411][ T25] usb 2-1: SerialNumber: syz [ 2844.343144][ T5149] hub 3-1:1.0: bad descriptor, ignoring hub [ 2844.352882][ T25] usb 2-1: config 0 descriptor?? [ 2844.364850][ T5149] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2844.383177][ T5149] cdc_wdm 3-1:1.0: skipping garbage [ 2844.393719][ T5149] cdc_wdm 3-1:1.0: skipping garbage [ 2844.414849][ T5149] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2844.437511][ T5149] cdc_wdm 3-1:1.0: Unknown control protocol [ 2844.738376][ T9551] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2844.808019][ T5091] usb 3-1: USB disconnect, device number 78 [ 2844.816539][ T25] rtl8150 2-1:0.0: couldn't reset the device [ 2844.838775][ T25] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 2844.871600][ T25] usb 2-1: USB disconnect, device number 108 [ 2844.887433][ T5149] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2844.949670][ T9551] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2844.967521][ T9551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2844.998633][ T9551] usb 1-1: config 0 descriptor?? [ 2845.054245][ T29] audit: type=1326 audit(1720504400.895:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.4.13110" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7474579 code=0x0 [ 2845.117356][ T5149] usb 4-1: Using ep0 maxpacket: 32 [ 2845.125235][ T5149] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2845.147638][ T5149] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2845.188738][ T5149] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2845.215819][ T5149] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2845.244949][ T5149] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2845.320691][ T5149] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2845.345539][ T5149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.374893][ T5149] usb 4-1: Product: syz [ 2845.385029][ T5149] usb 4-1: Manufacturer: syz [ 2845.395153][ T5149] usb 4-1: SerialNumber: syz [ 2845.425374][ T9551] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 2845.626301][ T9551] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2845.642933][ T9551] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 2845.896970][T10123] usb 1-1: USB disconnect, device number 127 [ 2845.976731][ T6629] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2846.001246][ T5149] cdc_ncm 4-1:1.0: bind() failure [ 2846.020262][ T5149] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2846.047523][ T5149] cdc_ncm 4-1:1.1: bind() failure [ 2846.081981][ T5149] usb 4-1: USB disconnect, device number 61 [ 2846.178776][ T6629] usb 2-1: Using ep0 maxpacket: 32 [ 2846.201216][ T6629] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2846.222436][ T2461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.227932][ T6629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.267322][ T6629] usb 2-1: Product: syz [ 2846.278083][ T6629] usb 2-1: Manufacturer: syz [ 2846.293003][ T6629] usb 2-1: SerialNumber: syz [ 2846.319349][ T6629] usb 2-1: config 0 descriptor?? [ 2846.471016][ T2461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.764058][ T2461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.978560][ T2461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2847.157033][ T6629] rtl8150 2-1:0.0: couldn't reset the device [ 2847.167555][ T6629] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 2847.187360][ T5149] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2847.207843][ T6629] usb 2-1: USB disconnect, device number 109 [ 2847.286934][T32495] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2847.309331][T32495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2847.318911][T32495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2847.336521][T32495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2847.348060][T32495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2847.355696][T32495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2847.417368][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 2847.486306][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2847.527418][ T5149] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2847.564382][ T2461] bridge_slave_1: left allmulticast mode [ 2847.570982][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.579299][ T2461] bridge_slave_1: left promiscuous mode [ 2847.585096][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.623596][ T5149] usb 1-1: config 0 descriptor?? [ 2847.661599][ T2461] bridge_slave_0: left allmulticast mode [ 2847.685697][ T2461] bridge_slave_0: left promiscuous mode [ 2847.688550][ T58] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 2847.698193][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.851861][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2847.868126][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2847.914643][ T58] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 2847.946319][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2847.978056][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2848.021925][ T58] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2848.059136][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2848.086460][ T58] hub 5-1:1.0: bad descriptor, ignoring hub [ 2848.128355][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2848.147830][T16547] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2848.154139][ T58] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2848.177672][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2848.188689][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 2848.194013][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 2848.235608][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2848.388966][T16547] usb 4-1: Using ep0 maxpacket: 32 [ 2848.498240][T16547] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2848.530423][ T5149] hid (null): report_id 2838798905 is invalid [ 2848.569399][ T58] usb 5-1: USB disconnect, device number 112 [ 2848.581882][T16547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2848.597523][ T5149] hid (null): unknown global tag 0xc [ 2848.602939][ T5149] hid (null): unknown global tag 0xa5 [ 2848.637922][T16547] usb 4-1: Product: syz [ 2848.642244][T16547] usb 4-1: Manufacturer: syz [ 2848.664873][ T5149] hid (null): unknown global tag 0xd [ 2848.698058][ T5149] hid (null): unknown global tag 0xc [ 2848.717131][T16547] usb 4-1: SerialNumber: syz [ 2848.729434][ T5149] hid-generic 0003:0158:0100.0121: unknown main item tag 0x1 [ 2848.768083][T16547] usb 4-1: config 0 descriptor?? [ 2848.787503][ T5149] hid-generic 0003:0158:0100.0121: unexpected long global item [ 2848.795991][ T5149] hid-generic 0003:0158:0100.0121: probe with driver hid-generic failed with error -22 [ 2849.014181][T16547] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 2849.027502][ T58] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2849.051869][T16547] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2849.148429][T16547] usb 4-1: USB disconnect, device number 62 [ 2849.307455][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 2849.319737][ T58] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 2849.360859][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2849.402810][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2849.453061][T32495] Bluetooth: hci1: command tx timeout [ 2849.536101][ T58] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2849.691862][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.738462][T12924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2849.760232][T12924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2849.785453][T12924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2849.796700][ T58] hub 5-1:1.0: bad descriptor, ignoring hub [ 2849.802961][ T58] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2849.811264][T12924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2849.819197][T12924] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2849.826486][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 2849.831847][T12924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2849.839000][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 2849.844420][ T58] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2850.129404][ T58] usb 5-1: USB disconnect, device number 113 [ 2850.250005][ T58] usb 1-1: USB disconnect, device number 2 [ 2850.326025][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2850.353570][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2850.377845][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2850.394798][ T2461] bond0 (unregistering): Released all slaves [ 2850.537571][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 2850.553695][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2850.607875][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2850.623525][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2850.688696][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2850.735923][ T25] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2850.770057][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.785367][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 2850.798488][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2850.833318][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 2850.855228][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 2850.918051][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2850.950890][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 2851.028014][ T25] usb 4-1: USB disconnect, device number 63 [ 2851.531460][T32495] Bluetooth: hci1: command tx timeout [ 2851.562573][ T2461] hsr_slave_0: left promiscuous mode [ 2851.597709][ T2461] hsr_slave_1: left promiscuous mode [ 2851.646476][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2851.658534][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2851.697385][ T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2851.706227][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2851.738261][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2851.790157][ T2461] veth1_macvtap: left promiscuous mode [ 2851.795798][ T2461] veth0_macvtap: left promiscuous mode [ 2851.812960][ T2461] veth1_vlan: left promiscuous mode [ 2851.827355][ T58] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2851.835757][ T2461] veth0_vlan: left promiscuous mode [ 2851.919002][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 2851.927552][T32495] Bluetooth: hci4: command tx timeout [ 2851.930579][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2851.966263][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2852.007516][ T5091] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2852.009522][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2852.056702][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 2852.080089][ T58] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2852.095153][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2852.112384][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2852.125934][ T25] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2852.145646][ T58] usb 5-1: Product: syz [ 2852.151636][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.166188][ T58] usb 5-1: Manufacturer: syz [ 2852.201997][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 2852.208892][ T58] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2852.215206][ T58] r8152-cfgselector 5-1: config 0 descriptor?? [ 2852.228690][ T5091] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2852.231711][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2852.265252][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.284612][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 2852.295107][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 2852.300659][ T5091] usb 1-1: config 0 descriptor?? [ 2852.326091][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2852.338806][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 2852.483673][ T58] r8152-cfgselector 5-1: Needed 1 retries to read version [ 2852.492965][ T58] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2852.506163][ T58] r8152-cfgselector 5-1: bad CDC descriptors [ 2852.716527][ T6629] usb 4-1: USB disconnect, device number 64 [ 2852.721509][ T5091] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 2852.930053][ T5091] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2852.949157][ T5091] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 2853.137786][ T5091] usb 1-1: USB disconnect, device number 3 [ 2853.464519][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 2853.565487][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 2853.607594][T32495] Bluetooth: hci1: command tx timeout [ 2853.789783][ T5091] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2853.987433][ T5091] usb 4-1: Using ep0 maxpacket: 32 [ 2853.998753][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2854.008824][T32495] Bluetooth: hci4: command tx timeout [ 2854.034321][ T5091] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2854.071209][ T5091] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2854.097001][ T5091] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2854.105481][ T5091] usb 4-1: Product: syz [ 2854.109982][T16905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.117306][ T5091] usb 4-1: Manufacturer: syz [ 2854.124339][ T5091] usb 4-1: SerialNumber: syz [ 2854.148433][ T5091] usb 4-1: config 0 descriptor?? [ 2854.185686][T16905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.220212][T16905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.269219][T16905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2854.454819][ T5091] usb 4-1: USB disconnect, device number 65 [ 2854.540509][ T6629] r8152-cfgselector 5-1: USB disconnect, device number 114 [ 2855.068854][ T6629] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 2855.103463][T16845] chnl_net:caif_netlink_parms(): no params data found [ 2855.292160][T16867] chnl_net:caif_netlink_parms(): no params data found [ 2855.329442][ T6629] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 2855.368539][ T6629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2855.413438][ T6629] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2855.475031][ T6629] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2855.507520][ T6629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2855.524434][ T6629] hub 5-1:1.0: bad descriptor, ignoring hub [ 2855.547675][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 2855.554925][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 2855.562243][ T6629] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2855.586978][ T6629] cdc_wdm 5-1:1.0: skipping garbage [ 2855.595447][T16845] bridge_slave_0: entered allmulticast mode [ 2855.603681][ T6629] cdc_wdm 5-1:1.0: skipping garbage [ 2855.619493][ T6629] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2855.632842][T16845] bridge_slave_0: entered promiscuous mode [ 2855.659366][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 2855.666578][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2855.687732][T32495] Bluetooth: hci1: command tx timeout [ 2855.737548][T16845] bridge_slave_1: entered allmulticast mode [ 2855.781565][T16845] bridge_slave_1: entered promiscuous mode [ 2855.907749][ T5091] usb 5-1: USB disconnect, device number 115 [ 2856.087544][T32495] Bluetooth: hci4: command tx timeout [ 2856.106068][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2856.159342][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2856.224635][ T29] audit: type=1326 audit(1720504412.065:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16919 comm="syz.0.13132" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2856.321195][T16547] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2856.464098][T16867] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.478219][T16867] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.495200][T16867] bridge_slave_0: entered allmulticast mode [ 2856.503835][T16867] bridge_slave_0: entered promiscuous mode [ 2856.517782][T16547] usb 5-1: Using ep0 maxpacket: 8 [ 2856.525851][T16547] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 2856.535346][T16867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.554139][T16867] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.565303][T16867] bridge_slave_1: entered allmulticast mode [ 2856.571185][T16547] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2856.585850][T16867] bridge_slave_1: entered promiscuous mode [ 2856.604715][T16547] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2856.624167][T16845] team0: Port device team_slave_0 added [ 2856.644058][T16547] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2856.667716][ T6629] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2856.667911][T16547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.703780][T16845] team0: Port device team_slave_1 added [ 2856.726895][T16547] hub 5-1:1.0: bad descriptor, ignoring hub [ 2856.743592][T16547] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2856.768088][T16547] cdc_wdm 5-1:1.0: skipping garbage [ 2856.788444][T16547] cdc_wdm 5-1:1.0: skipping garbage [ 2856.793768][T16547] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2856.877594][ T6629] usb 4-1: Using ep0 maxpacket: 8 [ 2856.891732][ T6629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2856.916728][ T6629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2856.931412][T16867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2856.958832][ T6629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2856.990544][ T6629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2856.992593][T16867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2857.027990][ T6629] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2857.042846][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.051847][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.057427][ T6629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.077764][ C1] vkms_vblank_simulate: vblank timer overrun [ 2857.090624][ T5091] usb 5-1: USB disconnect, device number 116 [ 2857.147427][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2857.151747][ T6629] hub 4-1:1.0: bad descriptor, ignoring hub [ 2857.185069][ T6629] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2857.202734][ T6629] cdc_wdm 4-1:1.0: skipping garbage [ 2857.241022][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2857.247197][ T6629] cdc_wdm 4-1:1.0: skipping garbage [ 2857.257886][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.287890][ T6629] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2857.304104][ T6629] cdc_wdm 4-1:1.0: Unknown control protocol [ 2857.307284][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2857.358986][ T6629] usb 4-1: USB disconnect, device number 66 [ 2857.498972][T16867] team0: Port device team_slave_0 added [ 2857.519563][T16867] team0: Port device team_slave_1 added [ 2857.771370][T16845] hsr_slave_0: entered promiscuous mode [ 2857.794167][T16845] hsr_slave_1: entered promiscuous mode [ 2857.856804][T16845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2857.877422][T16845] Cannot create hsr debugfs directory [ 2857.893205][T16867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2857.917337][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2857.983611][ T6629] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2857.996388][T16867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2858.102286][T16867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2858.124071][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2858.157505][ T58] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2858.180830][T32495] Bluetooth: hci4: command tx timeout [ 2858.188969][ T6629] usb 4-1: Using ep0 maxpacket: 8 [ 2858.219962][ T6629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2858.230232][T16867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2858.280697][ T6629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2858.310704][ T6629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2858.339765][ T58] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 2858.359839][ T6629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2858.377790][ T58] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2858.397362][ T6629] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2858.417899][ T58] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2858.430486][ T6629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.447169][ T58] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2858.472389][ T6629] hub 4-1:1.0: bad descriptor, ignoring hub [ 2858.472830][T16867] hsr_slave_0: entered promiscuous mode [ 2858.487661][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2858.494702][ T6629] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2858.504870][ T58] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2858.514382][ T5149] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2858.530665][ T6629] cdc_wdm 4-1:1.0: skipping garbage [ 2858.546815][T16867] hsr_slave_1: entered promiscuous mode [ 2858.554334][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.562674][ T6629] cdc_wdm 4-1:1.0: skipping garbage [ 2858.570627][T16867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2858.579771][ T6629] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2858.585759][ T6629] cdc_wdm 4-1:1.0: Unknown control protocol [ 2858.600169][ T58] usb 5-1: config 0 descriptor?? [ 2858.605938][T16867] Cannot create hsr debugfs directory [ 2858.747461][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 2858.764285][ T5149] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2858.795810][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2858.836225][ T5149] usb 1-1: Product: syz [ 2858.854441][ T5149] usb 1-1: Manufacturer: syz [ 2858.881396][ T5149] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2858.906925][ T5149] r8152-cfgselector 1-1: config 0 descriptor?? [ 2858.987974][T16547] usb 4-1: USB disconnect, device number 67 [ 2859.123115][ T58] usb 5-1: string descriptor 0 read error: -71 [ 2859.145914][ T5149] r8152-cfgselector 1-1: Needed 1 retries to read version [ 2859.162094][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 2859.176226][ T5149] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2859.184303][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2859.202941][ T5149] r8152-cfgselector 1-1: bad CDC descriptors [ 2859.214548][ T58] usb 5-1: USB disconnect, device number 117 [ 2860.280437][T16845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2860.298215][T16547] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2860.401300][T16867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2860.469819][T16845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2860.495927][T16845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2860.498227][T16547] usb 4-1: Using ep0 maxpacket: 32 [ 2860.523772][T16547] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2860.527437][T16845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2860.550662][T16547] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2860.577509][T16547] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2860.596985][T16547] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2860.617370][T16547] usb 4-1: Product: syz [ 2860.625066][T16547] usb 4-1: Manufacturer: syz [ 2860.625253][T16867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2860.636738][T16547] usb 4-1: SerialNumber: syz [ 2860.665343][T16547] usb 4-1: config 0 descriptor?? [ 2860.802050][T16867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2860.940301][T16867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2860.957447][ T6629] usb 4-1: USB disconnect, device number 68 [ 2861.156877][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2861.237835][T16547] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 2861.284258][T16845] 8021q: adding VLAN 0 to HW filter on device team0 [ 2861.333901][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2861.341164][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2861.375144][T16867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2861.411196][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 2861.418454][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2861.469373][T16867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2861.511975][T16867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2861.559944][T16867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2861.927016][T16845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2862.045773][T16867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2862.127678][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2862.153983][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 2862.219665][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2862.228127][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2862.272778][T16845] veth0_vlan: entered promiscuous mode [ 2862.305975][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2862.313281][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2862.337653][T29902] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2862.358345][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 2862.376300][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2862.390527][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2862.400759][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.424117][T16845] veth1_vlan: entered promiscuous mode [ 2862.438239][ T25] usb 1-1: config 0 descriptor?? [ 2862.457671][T19490] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2862.529973][T29902] usb 4-1: Using ep0 maxpacket: 16 [ 2862.569240][T29902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 2862.583345][T16867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2862.596860][T16867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2862.617752][T29902] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2862.631887][T29902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.665806][T29902] usb 4-1: config 0 descriptor?? [ 2862.668096][T19490] usb 5-1: Using ep0 maxpacket: 16 [ 2862.684913][T29902] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2862.687496][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2862.727828][T19490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2862.759962][T19490] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2862.779466][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.807463][T16845] veth0_macvtap: entered promiscuous mode [ 2862.816659][T19490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.836517][T16845] veth1_macvtap: entered promiscuous mode [ 2862.847525][T19490] usb 5-1: config 0 descriptor?? [ 2862.896855][T16867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2862.934293][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2862.947062][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2862.971478][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.984326][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.997385][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2863.023048][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.033501][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.057437][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2863.080081][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.097427][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.097677][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.126174][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2863.138817][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.177596][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.218355][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2863.249601][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.280704][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2863.322019][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.359464][T16845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2863.420348][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.449706][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.468834][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.510706][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.511271][ T25] hid (null): report_id 2838798905 is invalid [ 2863.550387][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.561396][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.597550][ T25] hid (null): unknown global tag 0xc [ 2863.617461][ T25] hid (null): unknown global tag 0xa5 [ 2863.622944][ T25] hid (null): unknown global tag 0xd [ 2863.637311][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.649559][ T25] hid (null): unknown global tag 0xc [ 2863.657346][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.676863][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.687720][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.727431][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.762535][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.780131][ T25] hid-generic 0003:0158:0100.0122: unknown main item tag 0x1 [ 2863.782603][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.817430][ T25] hid-generic 0003:0158:0100.0122: unexpected long global item [ 2863.838408][ T25] hid-generic 0003:0158:0100.0122: probe with driver hid-generic failed with error -22 [ 2863.867614][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.873594][T19490] hid (null): report_id 2838798905 is invalid [ 2863.897679][T16845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2863.917463][T19490] hid (null): unknown global tag 0xc [ 2863.944160][T16845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2863.958249][T19490] hid (null): unknown global tag 0xa5 [ 2863.997504][T19490] hid (null): unknown global tag 0xd [ 2863.998484][T16845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2864.056809][T16845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.075657][T19490] hid-generic 0003:0158:0100.0123: unknown main item tag 0x1 [ 2864.115893][T19490] hid-generic 0003:0158:0100.0123: unexpected long global item [ 2864.129484][T16845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.138189][T19490] hid-generic 0003:0158:0100.0123: probe with driver hid-generic failed with error -22 [ 2864.221721][T16845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.251571][T16845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2864.545704][T16867] veth0_vlan: entered promiscuous mode [ 2864.675240][T16867] veth1_vlan: entered promiscuous mode [ 2864.821791][T10055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2864.867337][T10055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2865.035728][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2865.084109][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2865.157740][T16867] veth0_macvtap: entered promiscuous mode [ 2865.211856][T16867] veth1_macvtap: entered promiscuous mode [ 2865.317905][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.356019][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.396000][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.447345][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.493882][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.547915][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.592536][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.639697][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.672177][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.708654][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.747374][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.786538][ T25] usb 1-1: USB disconnect, device number 5 [ 2865.818492][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.876649][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2865.913078][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2865.960411][T16867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2866.042655][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.059026][ T29] audit: type=1326 audit(1720504421.905:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.2.13115" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7438579 code=0x0 [ 2866.091499][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.114090][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.147126][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.188870][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.209551][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.245280][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.279377][ T5091] usb 4-1: USB disconnect, device number 69 [ 2866.298455][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.335864][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.339905][ T9551] usb 5-1: USB disconnect, device number 118 [ 2866.357640][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2866.396137][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.417149][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.465036][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.493193][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2866.515024][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2866.535927][T16867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2866.567975][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 2866.586908][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2866.620908][T16867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2866.630752][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2866.658156][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2866.676208][T16867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2866.689168][T16867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2866.705703][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2866.725776][T16867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2866.746066][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2866.804557][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.839312][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 2866.845302][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2866.856338][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 2866.862049][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 2866.871832][ T25] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2866.881563][ T25] cdc_wdm 1-1:1.0: Unknown control protocol [ 2867.229967][T10055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2867.267352][T10055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2867.353096][ T2792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2867.381652][ T2792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2867.980571][T17058] cdc_wdm 1-1:1.0: Error autopm - -16 [ 2867.981024][ T6629] usb 1-1: USB disconnect, device number 6 [ 2868.014978][T17076] cdc_wdm 1-1:1.0: Error autopm - -16 [ 2868.604144][T17106] tap0: tun_chr_ioctl cmd 1074025677 [ 2868.620028][T17106] tap0: linktype set to 147 [ 2868.888230][T12924] Bluetooth: hci4: command 0x0405 tx timeout [ 2869.275430][T29902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2869.490344][T29902] usb 1-1: Using ep0 maxpacket: 16 [ 2869.522549][T29902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2869.566221][T29902] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2869.596415][T29902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2869.641791][T29902] usb 1-1: config 0 descriptor?? [ 2869.698050][T17895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2869.888512][T17119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.944197][T17119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2870.123134][T17895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2870.210814][T17119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2870.245776][T17119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2870.483823][T17895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2870.503353][T29902] hid (null): report_id 2838798905 is invalid [ 2870.583184][T29902] hid (null): unknown global tag 0xc [ 2870.620054][T29902] hid (null): unknown global tag 0xa5 [ 2870.625473][T29902] hid (null): unknown global tag 0xd [ 2870.690485][T29902] hid-generic 0003:0158:0100.0124: unknown main item tag 0x1 [ 2870.718192][T29902] hid-generic 0003:0158:0100.0124: unexpected long global item [ 2870.740740][T29902] hid-generic 0003:0158:0100.0124: probe with driver hid-generic failed with error -22 [ 2871.012652][T17895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2871.094580][T32495] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2871.108428][T32495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2871.121434][T32495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2871.131942][T32495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2871.140315][T32495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2871.147942][T32495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2871.558666][T16547] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2871.657721][T17895] bridge_slave_1: left allmulticast mode [ 2871.686434][T17895] bridge_slave_1: left promiscuous mode [ 2871.697803][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2871.801555][T17895] bridge_slave_0: left allmulticast mode [ 2871.827425][T16547] usb 4-1: Using ep0 maxpacket: 8 [ 2871.838149][T17895] bridge_slave_0: left promiscuous mode [ 2871.861881][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 2871.862133][T16547] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2872.045689][T16547] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2872.154432][ T58] usb 1-1: USB disconnect, device number 7 [ 2872.157368][T16547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2872.219108][T16547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2872.277522][T16547] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2872.311280][T16547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2872.350415][T16547] hub 4-1:1.0: bad descriptor, ignoring hub [ 2872.386228][T16547] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2872.408200][T16547] cdc_wdm 4-1:1.0: skipping garbage [ 2872.419280][T16547] cdc_wdm 4-1:1.0: skipping garbage [ 2872.449825][T16547] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2872.466040][T16547] cdc_wdm 4-1:1.0: Unknown control protocol [ 2873.208311][T12924] Bluetooth: hci1: command tx timeout [ 2873.948687][T17895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2873.978985][T17895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2874.011382][T17895] bond0 (unregistering): Released all slaves [ 2874.109453][ T29] audit: type=1326 audit(1720504429.955:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17188 comm="syz.1.13171" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x0 [ 2874.787963][T17895] hsr_slave_0: left promiscuous mode [ 2874.831026][T17895] hsr_slave_1: left promiscuous mode [ 2874.849063][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2874.866619][T17895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2874.902915][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2874.927393][T17895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2875.021497][T17895] veth1_macvtap: left promiscuous mode [ 2875.027163][T17895] veth0_macvtap: left promiscuous mode [ 2875.057629][T17895] veth1_vlan: left promiscuous mode [ 2875.064929][T17895] veth0_vlan: left promiscuous mode [ 2875.290630][T32495] Bluetooth: hci1: command tx timeout [ 2876.734121][T17895] team0 (unregistering): Port device team_slave_1 removed [ 2876.814573][T17895] team0 (unregistering): Port device team_slave_0 removed [ 2877.349118][ T9551] usb 4-1: USB disconnect, device number 70 [ 2877.355176][T17163] cdc_wdm 4-1:1.0: Error autopm - -16 [ 2877.368038][T32495] Bluetooth: hci1: command 0x040f tx timeout [ 2877.376667][T17179] cdc_wdm 4-1:1.0: Error autopm - -16 [ 2878.303486][T17164] chnl_net:caif_netlink_parms(): no params data found [ 2878.747514][T16547] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 2878.800852][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2878.837016][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 2878.867151][T17164] bridge_slave_0: entered allmulticast mode [ 2878.901084][T17164] bridge_slave_0: entered promiscuous mode [ 2878.933027][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2878.960734][T16547] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 2878.988411][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 2879.008656][T16547] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2879.013912][T17164] bridge_slave_1: entered allmulticast mode [ 2879.051613][T17164] bridge_slave_1: entered promiscuous mode [ 2879.099002][T16547] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2879.136471][T16547] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2879.183312][T16547] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2879.200282][T16547] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2879.265060][T17164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2879.300951][T16547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2879.321855][T17164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2879.361717][T16547] usb 1-1: config 0 descriptor?? [ 2879.448164][T32495] Bluetooth: hci1: command 0x040f tx timeout [ 2879.521165][T17164] team0: Port device team_slave_0 added [ 2879.599635][T17164] team0: Port device team_slave_1 added [ 2879.744220][ T29] audit: type=1326 audit(1720504435.585:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.1.13185" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x0 [ 2879.800669][T17164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2879.837257][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2879.937292][T17164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2879.946762][T16547] usb 1-1: string descriptor 0 read error: -71 [ 2879.989892][T17164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2880.009868][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2880.036913][T16547] usbhid 1-1:0.0: can't add hid device: -71 [ 2880.046385][T16547] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2880.097340][T16547] usb 1-1: USB disconnect, device number 8 [ 2880.131932][T17164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2880.454793][T17164] hsr_slave_0: entered promiscuous mode [ 2880.514376][T17164] hsr_slave_1: entered promiscuous mode [ 2880.531691][T17164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2880.547871][T17164] Cannot create hsr debugfs directory [ 2880.987341][T10123] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2880.997405][ T5149] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 2881.227437][T10123] usb 4-1: Using ep0 maxpacket: 8 [ 2881.229336][ T5149] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 2881.252265][T10123] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2881.265540][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2881.290883][T10123] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2881.294410][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2881.336621][ T5149] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2881.340523][T10123] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2881.376771][ T5149] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2881.407930][T10123] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2881.447522][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2881.457144][T10123] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2881.481606][ T5149] usb 1-1: config 0 descriptor?? [ 2881.482707][T10123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2881.529177][T32495] Bluetooth: hci1: command 0x040f tx timeout [ 2881.570993][T10123] hub 4-1:1.0: bad descriptor, ignoring hub [ 2881.576977][T10123] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2881.638642][T10123] cdc_wdm 4-1:1.0: skipping garbage [ 2881.678534][T10123] cdc_wdm 4-1:1.0: skipping garbage [ 2881.709460][T10123] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2881.715439][T10123] cdc_wdm 4-1:1.0: Unknown control protocol [ 2881.798857][T10123] usb 4-1: USB disconnect, device number 71 [ 2882.187987][T17164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2882.238210][ T5149] usb 1-1: string descriptor 0 read error: -71 [ 2882.265466][T17164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2882.282150][ T5149] usbhid 1-1:0.0: can't add hid device: -71 [ 2882.293555][T17164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2882.307537][ T5149] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2882.337017][ T5149] usb 1-1: USB disconnect, device number 9 [ 2882.374380][T17164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2882.716925][T17164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2882.823310][T17164] 8021q: adding VLAN 0 to HW filter on device team0 [ 2882.858438][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2882.865715][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2882.949307][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2882.956508][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2882.980306][T17314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2883.067672][ T5149] wlan1: No basic rates, using min rate instead [ 2883.076908][T17314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2883.091509][T17164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2883.107669][ T5149] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2883.129789][T17164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2883.147384][ T5149] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2883.185188][T17314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2883.281565][T17314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2883.306150][T17164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2883.415843][T17164] veth0_vlan: entered promiscuous mode [ 2883.474270][T17314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2883.493193][T17164] veth1_vlan: entered promiscuous mode [ 2883.701119][T17164] veth0_macvtap: entered promiscuous mode [ 2883.726778][T17164] veth1_macvtap: entered promiscuous mode [ 2883.776955][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.802965][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.843333][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.901655][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.901686][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.901708][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.901727][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.901745][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.901766][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.901784][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.901806][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.902128][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.902152][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2883.902171][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2883.912896][T17164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2884.103575][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.120464][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.134103][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.148687][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.160518][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.173613][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.183842][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.194738][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.205951][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.226843][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.246087][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.290919][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.347404][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2884.362447][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 2884.397319][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2884.430110][T17164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2884.499462][T10055] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 2884.573954][T17164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2884.608289][T17164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2884.637126][T17164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2884.658526][T17164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2884.669060][ T62] wlan1: authentication with 08:02:11:00:00:00 timed out [ 2884.885357][ T29] audit: type=1326 audit(1720504440.725:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17340 comm="syz.0.13202" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2884.967363][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2885.057953][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2885.153199][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2885.175299][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2885.339278][T17351] tap0: tun_chr_ioctl cmd 1074025677 [ 2885.344843][T17351] tap0: linktype set to 147 [ 2885.742381][T17375] tap0: tun_chr_ioctl cmd 1074025677 [ 2885.763175][T17375] tap0: linktype set to 147 [ 2886.336808][ T6629] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 2886.559702][ T6629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2886.596080][ T6629] usb 4-1: config 0 has no interfaces? [ 2886.618317][ T6629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2886.657585][ T6629] usb 4-1: config 0 has no interfaces? [ 2886.676752][ T6629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2886.700485][ T6629] usb 4-1: config 0 has no interfaces? [ 2886.739348][ T6629] usb 4-1: string descriptor 0 read error: -22 [ 2886.749390][ T6629] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2886.785018][ T6629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.861692][ T6629] usb 4-1: config 0 descriptor?? [ 2887.174272][T29902] usb 4-1: USB disconnect, device number 72 [ 2887.270605][T17407] syz_tun: entered promiscuous mode [ 2887.301390][T17407] macvtap1: entered promiscuous mode [ 2887.332285][T17407] macvtap1: entered allmulticast mode [ 2887.362557][T17407] syz_tun: entered allmulticast mode [ 2887.498754][T17407] syz_tun: left allmulticast mode [ 2887.539539][T17407] syz_tun: left promiscuous mode [ 2888.401065][ T29] audit: type=1326 audit(1720504444.235:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17433 comm="syz.0.13225" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747b579 code=0x0 [ 2888.597580][ T5149] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2888.787954][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 2888.813015][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2888.830405][T19490] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2888.842868][ T5149] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2888.853387][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.872659][ T5149] usb 4-1: config 0 descriptor?? [ 2889.037402][T19490] usb 1-1: Using ep0 maxpacket: 32 [ 2889.047484][ T6629] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2889.070681][T19490] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2889.092867][T19490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.125748][T19490] usb 1-1: Product: syz [ 2889.136191][T19490] usb 1-1: Manufacturer: syz [ 2889.146390][T19490] usb 1-1: SerialNumber: syz [ 2889.148442][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.169312][T19490] usb 1-1: config 0 descriptor?? [ 2889.232014][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2889.258957][ T6629] usb 2-1: Using ep0 maxpacket: 32 [ 2889.279314][ T6629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2889.307350][ T6629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2889.334346][ T6629] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2889.368822][ T6629] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2889.410525][ T6629] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2889.452003][ T6629] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2889.471752][ T6629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.490802][ T6629] usb 2-1: Product: syz [ 2889.495095][ T6629] usb 2-1: Manufacturer: syz [ 2889.514322][ T6629] usb 2-1: SerialNumber: syz [ 2889.525123][ T29] audit: type=1326 audit(1720504445.375:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.2.13229" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7457579 code=0x0 [ 2889.560277][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.589712][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2889.647355][T10123] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2889.777825][ T6629] cdc_ncm 2-1:1.0: bind() failure [ 2889.805023][ T6629] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2889.824256][ T6629] cdc_ncm 2-1:1.1: bind() failure [ 2889.851743][T10123] usb 5-1: Using ep0 maxpacket: 32 [ 2889.862823][T10123] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2889.878730][ T6629] usb 2-1: USB disconnect, device number 110 [ 2889.887433][T10123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.914713][T10123] usb 5-1: Product: syz [ 2889.947503][T10123] usb 5-1: Manufacturer: syz [ 2889.972178][T10123] usb 5-1: SerialNumber: syz [ 2890.002592][T10123] usb 5-1: config 0 descriptor?? [ 2890.084483][ T5149] hid (null): report_id 2838798905 is invalid [ 2890.107678][ T5149] hid (null): unknown global tag 0xc [ 2890.132163][ T5149] hid (null): unknown global tag 0xa5 [ 2890.150221][ T5149] hid (null): unknown global tag 0xd [ 2890.207957][ T5149] hid-generic 0003:0158:0100.0125: unknown main item tag 0x1 [ 2890.224952][ T5149] hid-generic 0003:0158:0100.0125: unexpected long global item [ 2890.245923][ T5149] hid-generic 0003:0158:0100.0125: probe with driver hid-generic failed with error -22 [ 2890.260160][T10123] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 2890.291929][T10123] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2890.357993][T10123] usb 5-1: USB disconnect, device number 119 [ 2891.073489][T17457] syz_tun: entered promiscuous mode [ 2891.096971][T17457] macvtap1: entered promiscuous mode [ 2891.123622][T17457] macvtap1: entered allmulticast mode [ 2891.154938][T17457] syz_tun: entered allmulticast mode [ 2891.176540][T17457] syz_tun: left allmulticast mode [ 2891.208318][T17457] syz_tun: left promiscuous mode [ 2891.222379][T19490] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 2891.249732][T19490] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 2891.419173][T10123] usb 1-1: USB disconnect, device number 10 [ 2891.599324][T12924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2891.611152][T12924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2891.621232][T12924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2891.630313][T12924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2891.639217][T12924] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2891.646689][T12924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2891.879206][T16547] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 2892.083591][T17895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2892.101323][T16547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.187327][T16547] usb 5-1: config 0 has no interfaces? [ 2892.210677][T16547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.228698][T16547] usb 5-1: config 0 has no interfaces? [ 2892.239041][T16547] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.256403][T16547] usb 5-1: config 0 has no interfaces? [ 2892.266402][T16547] usb 5-1: string descriptor 0 read error: -22 [ 2892.273204][T16547] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2892.290893][T16547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.319690][T16547] usb 5-1: config 0 descriptor?? [ 2892.463595][T17895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2892.556848][T16547] usb 5-1: USB disconnect, device number 120 [ 2892.604277][ T5149] usb 4-1: USB disconnect, device number 73 [ 2892.733257][T17895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2892.874718][T17895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2893.017850][T10123] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 2893.045750][T17462] chnl_net:caif_netlink_parms(): no params data found [ 2893.240799][T10123] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2893.267376][T10123] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2893.282968][T10123] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2893.298042][T10123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2893.319911][T10123] usb 1-1: config 0 descriptor?? [ 2893.340383][T17895] bridge_slave_1: left allmulticast mode [ 2893.360209][T17895] bridge_slave_1: left promiscuous mode [ 2893.372938][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 2893.404831][T17895] bridge_slave_0: left allmulticast mode [ 2893.414583][T17895] bridge_slave_0: left promiscuous mode [ 2893.422074][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 2893.607982][ T6629] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2893.692694][T12924] Bluetooth: hci1: command tx timeout [ 2893.808710][T10123] usb 1-1: string descriptor 0 read error: -71 [ 2893.817912][T10123] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2893.818230][ T6629] usb 2-1: Using ep0 maxpacket: 32 [ 2893.835770][T10123] usb 1-1: USB disconnect, device number 11 [ 2893.888936][ T6629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2893.912662][ T6629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2893.960183][ T6629] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2893.980631][ T6629] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2894.026043][ T6629] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2894.067836][ T6629] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2894.077778][ T6629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2894.085823][ T6629] usb 2-1: Product: syz [ 2894.104708][ T6629] usb 2-1: Manufacturer: syz [ 2894.114081][ T6629] usb 2-1: SerialNumber: syz [ 2894.875868][T17895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2894.908069][T17895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2894.934686][T17895] bond0 (unregistering): Released all slaves [ 2895.096554][T17497] syz_tun: entered promiscuous mode [ 2895.124973][T17497] macvtap1: entered promiscuous mode [ 2895.134388][T17497] macvtap1: entered allmulticast mode [ 2895.140675][T17497] syz_tun: entered allmulticast mode [ 2895.147931][T19490] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2895.161044][T17497] syz_tun: left allmulticast mode [ 2895.180791][T17497] syz_tun: left promiscuous mode [ 2895.271854][ T6629] cdc_ncm 2-1:1.0: bind() failure [ 2895.292680][ T6629] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2895.315336][ T6629] cdc_ncm 2-1:1.1: bind() failure [ 2895.336756][ T6629] usb 2-1: USB disconnect, device number 111 [ 2895.343102][T19490] usb 5-1: Using ep0 maxpacket: 32 [ 2895.359026][T19490] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2895.399732][T19490] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2895.419820][T19490] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2895.457415][T19490] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2895.486824][T19490] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2895.487982][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.512249][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.527801][T19490] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2895.556177][T17462] bridge_slave_0: entered allmulticast mode [ 2895.562473][T19490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2895.579084][T17462] bridge_slave_0: entered promiscuous mode [ 2895.598532][T19490] usb 5-1: Product: syz [ 2895.602863][T19490] usb 5-1: Manufacturer: syz [ 2895.621445][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.637380][T19490] usb 5-1: SerialNumber: syz [ 2895.647983][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.666286][T17462] bridge_slave_1: entered allmulticast mode [ 2895.674445][T17462] bridge_slave_1: entered promiscuous mode [ 2895.769758][T32495] Bluetooth: hci1: command tx timeout [ 2895.924335][T17462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2895.954644][T19490] cdc_ncm 5-1:1.0: bind() failure [ 2895.996926][T19490] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2896.018713][T17462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2896.037566][T19490] cdc_ncm 5-1:1.1: bind() failure [ 2896.053881][T19490] usb 5-1: USB disconnect, device number 121 [ 2896.077478][T17895] hsr_slave_0: left promiscuous mode [ 2896.111123][T17895] hsr_slave_1: left promiscuous mode [ 2896.129832][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2896.162739][T17895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2896.231075][T17895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2896.268720][T17895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2896.328502][T17895] veth1_macvtap: left promiscuous mode [ 2896.341080][T17895] veth0_macvtap: left promiscuous mode [ 2896.354411][T17895] veth1_vlan: left promiscuous mode [ 2896.375211][T17895] veth0_vlan: left promiscuous mode [ 2896.629675][ T5149] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 2896.871483][ T5149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2896.882043][ T5149] usb 2-1: config 0 has no interfaces? [ 2896.932085][ T5149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2896.942391][ T5149] usb 2-1: config 0 has no interfaces? [ 2896.958780][ T5149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2896.969220][ T5149] usb 2-1: config 0 has no interfaces? [ 2897.001967][ T5149] usb 2-1: string descriptor 0 read error: -22 [ 2897.017477][ T5149] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2897.026670][ T5149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.069991][ T5149] usb 2-1: config 0 descriptor?? [ 2897.297072][T10123] usb 2-1: USB disconnect, device number 112 [ 2897.851811][T32495] Bluetooth: hci1: command 0x040f tx timeout [ 2897.959718][T17895] team0 (unregistering): Port device team_slave_1 removed [ 2898.090396][T17895] team0 (unregistering): Port device team_slave_0 removed [ 2898.188084][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.194633][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.728740][T17462] team0: Port device team_slave_0 added [ 2899.758277][T17462] team0: Port device team_slave_1 added [ 2899.926197][T17573] ------------[ cut here ]------------ [ 2899.931869][T12924] Bluetooth: hci1: command 0x040f tx timeout [ 2899.938290][T17573] WARNING: CPU: 1 PID: 17573 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x36a/0x6c0 [ 2899.947996][T17573] Modules linked in: [ 2899.951941][T17573] CPU: 1 PID: 17573 Comm: syz.4.13269 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 2899.962362][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 2899.972698][T17573] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 2899.978963][T17573] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 92 cd a8 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 2899.999039][T17573] RSP: 0018:ffffc900043976e0 EFLAGS: 00010246 [ 2900.005160][T17573] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 2900.013518][T17573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004397768 [ 2900.021633][T17573] RBP: ffffc900043977f8 R08: ffffc90004397767 R09: 0000000000000000 [ 2900.029744][T17573] R10: ffffc90004397740 R11: fffff52000872eed R12: 1ffff92000872ee4 [ 2900.037845][T17573] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000872ee0 [ 2900.045873][T17573] FS: 0000000000000000(0000) GS:ffff8880b9500000(0063) knlGS:00000000f5d8db40 [ 2900.054996][T17573] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2900.061758][T17573] CR2: 00000000203d0000 CR3: 000000004f6ea000 CR4: 00000000003506f0 [ 2900.069904][T17573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004520 [ 2900.078035][T17573] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2900.086045][T17573] Call Trace: [ 2900.089727][T17573] [ 2900.092719][T17573] ? __warn+0x163/0x4e0 [ 2900.096930][T17573] ? __alloc_pages_noprof+0x36a/0x6c0 [ 2900.102598][T17573] ? report_bug+0x2b3/0x500 [ 2900.107153][T17573] ? __alloc_pages_noprof+0x36a/0x6c0 [ 2900.112650][T17573] ? handle_bug+0x3e/0x70 [ 2900.117038][T17573] ? exc_invalid_op+0x1a/0x50 [ 2900.121901][T17573] ? asm_exc_invalid_op+0x1a/0x20 [ 2900.127001][T17573] ? __alloc_pages_noprof+0x36a/0x6c0 [ 2900.132533][T17573] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 2900.138398][T17573] ? irqentry_exit+0x63/0x90 [ 2900.143063][T17573] __kmalloc_large_node+0x8b/0x1d0 [ 2900.148389][T17573] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 2900.154516][T17573] __kmalloc_noprof+0x2aa/0x400 [ 2900.159570][T17573] ? _copy_from_user+0xa6/0xe0 [ 2900.164395][T17573] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 2900.170532][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.176936][T17573] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2900.182384][T17573] ? _raw_spin_unlock+0x28/0x50 [ 2900.187342][T17573] drm_ioctl_kernel+0x33a/0x440 [ 2900.192255][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.198759][T17573] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2900.204175][T17573] ? __might_fault+0xc6/0x120 [ 2900.208998][T17573] drm_ioctl+0x611/0xad0 [ 2900.213294][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.219793][T17573] ? __pfx_drm_ioctl+0x10/0x10 [ 2900.224672][T17573] ? drm_compat_ioctl+0xae/0x350 [ 2900.229748][T17573] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 2900.235344][T17573] ? security_file_ioctl_compat+0x87/0xb0 [ 2900.241278][T17573] __se_compat_sys_ioctl+0x51c/0xca0 [ 2900.246628][T17573] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2900.253435][T17573] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2900.259719][T17573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2900.266119][T17573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2900.272877][T17573] ? lockdep_hardirqs_on+0x99/0x150 [ 2900.278222][T17573] __do_fast_syscall_32+0xb4/0x120 [ 2900.283398][T17573] ? ret_from_fork_asm+0x1a/0x30 [ 2900.288489][T17573] ? lockdep_hardirqs_on+0x99/0x150 [ 2900.293760][T17573] do_fast_syscall_32+0x34/0x80 [ 2900.298781][T17573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2900.305143][T17573] RIP: 0023:0xf7474579 [ 2900.309341][T17573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2900.329757][T17573] RSP: 002b:00000000f5d8d57c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2900.338451][T17573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 2900.346466][T17573] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2900.354645][T17573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2900.362751][T17573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2900.370839][T17573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2900.378948][T17573] [ 2900.382005][T17573] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2900.389308][T17573] CPU: 1 PID: 17573 Comm: syz.4.13269 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 2900.399573][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2900.409662][T17573] Call Trace: [ 2900.412956][T17573] [ 2900.415922][T17573] dump_stack_lvl+0x241/0x360 [ 2900.420630][T17573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2900.425868][T17573] ? __pfx__printk+0x10/0x10 [ 2900.430578][T17573] ? vscnprintf+0x5d/0x90 [ 2900.434945][T17573] panic+0x349/0x860 [ 2900.438886][T17573] ? __warn+0x172/0x4e0 [ 2900.443067][T17573] ? __pfx_panic+0x10/0x10 [ 2900.447527][T17573] __warn+0x346/0x4e0 [ 2900.451542][T17573] ? __alloc_pages_noprof+0x36a/0x6c0 [ 2900.456947][T17573] report_bug+0x2b3/0x500 [ 2900.461296][T17573] ? __alloc_pages_noprof+0x36a/0x6c0 [ 2900.466693][T17573] handle_bug+0x3e/0x70 [ 2900.470870][T17573] exc_invalid_op+0x1a/0x50 [ 2900.475388][T17573] asm_exc_invalid_op+0x1a/0x20 [ 2900.480252][T17573] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 2900.486251][T17573] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 92 cd a8 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 2900.505892][T17573] RSP: 0018:ffffc900043976e0 EFLAGS: 00010246 [ 2900.511984][T17573] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 2900.519962][T17573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004397768 [ 2900.527939][T17573] RBP: ffffc900043977f8 R08: ffffc90004397767 R09: 0000000000000000 [ 2900.535918][T17573] R10: ffffc90004397740 R11: fffff52000872eed R12: 1ffff92000872ee4 [ 2900.543906][T17573] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92000872ee0 [ 2900.551916][T17573] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 2900.557757][T17573] ? irqentry_exit+0x63/0x90 [ 2900.562421][T17573] __kmalloc_large_node+0x8b/0x1d0 [ 2900.567671][T17573] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 2900.573757][T17573] __kmalloc_noprof+0x2aa/0x400 [ 2900.578647][T17573] ? _copy_from_user+0xa6/0xe0 [ 2900.583422][T17573] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 2900.589344][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.595696][T17573] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2900.600916][T17573] ? _raw_spin_unlock+0x28/0x50 [ 2900.605812][T17573] drm_ioctl_kernel+0x33a/0x440 [ 2900.610676][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.617013][T17573] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2900.622400][T17573] ? __might_fault+0xc6/0x120 [ 2900.627101][T17573] drm_ioctl+0x611/0xad0 [ 2900.631365][T17573] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 2900.637709][T17573] ? __pfx_drm_ioctl+0x10/0x10 [ 2900.642501][T17573] ? drm_compat_ioctl+0xae/0x350 [ 2900.647467][T17573] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 2900.653061][T17573] ? security_file_ioctl_compat+0x87/0xb0 [ 2900.658801][T17573] __se_compat_sys_ioctl+0x51c/0xca0 [ 2900.664101][T17573] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2900.669932][T17573] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2900.675941][T17573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2900.682463][T17573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2900.689088][T17573] ? lockdep_hardirqs_on+0x99/0x150 [ 2900.694368][T17573] __do_fast_syscall_32+0xb4/0x120 [ 2900.699527][T17573] ? ret_from_fork_asm+0x1a/0x30 [ 2900.704498][T17573] ? lockdep_hardirqs_on+0x99/0x150 [ 2900.709732][T17573] do_fast_syscall_32+0x34/0x80 [ 2900.714604][T17573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2900.720952][T17573] RIP: 0023:0xf7474579 [ 2900.725030][T17573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2900.744681][T17573] RSP: 002b:00000000f5d8d57c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2900.753283][T17573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 2900.761341][T17573] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2900.769332][T17573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2900.777330][T17573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2900.785863][T17573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2900.793961][T17573] [ 2900.797290][T17573] Kernel Offset: disabled [ 2900.801713][T17573] Rebooting in 86400 seconds..