last executing test programs: 10.371302066s ago: executing program 2 (id=1558): prlimit64(0x0, 0x6, 0x0, 0x0) syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xbd}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) creat(0x0, 0x50) pipe2(&(0x7f0000000040), 0x0) 9.45273067s ago: executing program 2 (id=1563): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003000052a36627"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000500)={0x0, 0xffffffffffffffc1}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000340), 0x8001, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x90) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) preadv(r6, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) read$char_usb(r6, &(0x7f0000000240)=""/34, 0x43) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000100)={{0x0, 0x3}}) 8.598830315s ago: executing program 3 (id=1567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x202, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r3, 0x1027}], 0x1, 0x0, 0x0, 0xfffffe88) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) dup2(r2, r1) syz_io_uring_setup(0x31c7, &(0x7f0000000280)={0x0, 0x400000, 0x2, 0x3}, &(0x7f00000001c0), &(0x7f00000005c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x2, 0x10, 0x54a5, 0x8b61, 0xcc2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4f, 0xc9, 0xb3}}]}}]}}, 0x0) 7.822889776s ago: executing program 0 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x88}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000006b40)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10, 0x117, 0x3}}], 0x10}}], 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r8, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000100ac1e010108000a00020000000800090000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44054}, 0x24008004) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x6, r9, 0x1, 0x2, 0x6, @random="151e22501e1e"}, 0x14) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x8c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x50483, 0x1}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4b}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x77365}]}}}]}, 0x8c}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty}}}], 0x20}}], 0x1, 0x0) 7.371687931s ago: executing program 0 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)=ANY=[], 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d00001800000028bd700000000000050006002b0000000a00000000000000fc0100000000000000000000000000000300000000009b9305000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x39ce, &(0x7f0000000080)={0x0, 0xffffffff, 0x40, 0x10002, 0x0, 0x0, r2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) statx(r5, &(0x7f0000000300)='./file2\x00', 0x2100, 0x80, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@md0, r7, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r8 = io_uring_setup(0x15ae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) socket$inet(0x2, 0x2, 0x0) 6.656659481s ago: executing program 3 (id=1575): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0xf4ffffffffffffff, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 6.16382968s ago: executing program 3 (id=1578): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0xfffffffffffffe36) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 5.769632815s ago: executing program 1 (id=1579): syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0xfffffffd}, 0x1c) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000080)=""/12) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x4}) (async, rerun: 64) syz_open_dev$dri(0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0x4c000000) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)}, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) io_setup(0x0, &(0x7f00000004c0)) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000006000000000000000000000000000000ff0700000000000003000000000000000000000000000000000000000000000000000000000000000e0000000300000002000000000000000f00000000000000070000000000000093ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd6410f200"/640]) (async, rerun: 64) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) (async, rerun: 64) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100000000000c0099"], 0x28}}, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000a40)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x7edb, 0x400, 0x3, 0xb9, 0x0, r1}, &(0x7f0000000140), 0x0) (async) r6 = syz_io_uring_setup(0x0, &(0x7f0000000640)={0x0, 0x0, 0x2}, &(0x7f0000000400), &(0x7f0000000180)) io_uring_setup(0x2e51, &(0x7f0000000300)={0x0, 0xdb90, 0x2268, 0x1, 0x28a, 0x0, r6}) 5.731523028s ago: executing program 0 (id=1580): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b0b, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 5.663745961s ago: executing program 2 (id=1581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r6) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 5.066289124s ago: executing program 4 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x50, r1, 0x101, 0x0, 0xfac02, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) 4.976604717s ago: executing program 3 (id=1583): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xffd8, 0x0, 0x0) 4.775289545s ago: executing program 4 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (fail_nth: 6) 4.684787403s ago: executing program 3 (id=1585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x202, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r3, 0x1027}], 0x1, 0x0, 0x0, 0xfffffe88) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) dup2(r2, r1) syz_io_uring_setup(0x31c7, &(0x7f0000000280)={0x0, 0x400000, 0x2, 0x3}, &(0x7f00000001c0), &(0x7f00000005c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x2, 0x10, 0x54a5, 0x8b61, 0xcc2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4f, 0xc9, 0xb3}}]}}]}}, 0x0) 4.666013639s ago: executing program 1 (id=1586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) (fail_nth: 4) 3.579344735s ago: executing program 4 (id=1587): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x6, 0x0, &(0x7f0000000200)=[{0x2, 0x9}, {0x9, 0xfe}, {0xfff, 0x8}, {0x3, 0x48d}, {0x5, 0x8}, {0x2, 0x4}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454da, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80247008, &(0x7f0000000100)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@map, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000001c0)={@map, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffc46, 0x0, 0x0, 0x0, 0x0}, 0x6b) 3.45358279s ago: executing program 1 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000001400000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000000080002400000000e05000300020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 3.200024828s ago: executing program 1 (id=1589): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008859f1108205e605004e010203010902"], 0x0) socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001200)='qnx4\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15002100000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 3.139016038s ago: executing program 4 (id=1590): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x2, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r3) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, {{0x2, 0x0, @loopback}}]}, 0x190) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x90) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x2, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r3) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, {{0x2, 0x0, @loopback}}]}, 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x90) (async) 2.795227306s ago: executing program 4 (id=1591): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x3, [{r1}, {r1, 0x0, 0x0, 0x8000}, {r1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f904", 0x11}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff580001c0"]) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 2.43054877s ago: executing program 0 (id=1592): ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='ext4_sync_fs\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002a00)="c69e401fa7ff6a5c67481893017007463b8609091ba8f23295c6269b88196491", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/206, 0xce}], 0x1}}], 0x13, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001780)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x6, 0x4) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r3, 0x0, 0x0) 2.081621003s ago: executing program 3 (id=1593): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000002c0)="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") r1 = gettid() r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r3, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='[!/-,-/:\x00', &(0x7f0000000080)='\a)\xfb\\\x00', &(0x7f0000000100)='-\\\xb4{\'\xcb!{-[\xa9\x00', &(0x7f0000000140)=',\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='!.@#-\x00'], 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) syz_clone(0x22080400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000002c0)="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") (async) gettid() (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) (async) fcntl$dupfd(r2, 0x0, r2) (async) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) (async) readv(r3, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='[!/-,-/:\x00', &(0x7f0000000080)='\a)\xfb\\\x00', &(0x7f0000000100)='-\\\xb4{\'\xcb!{-[\xa9\x00', &(0x7f0000000140)=',\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='!.@#-\x00'], 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) (async) syz_clone(0x22080400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa4) (async) 1.635451153s ago: executing program 4 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), 0x0) unshare(0x28020480) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x9, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x105) shutdown(r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) move_mount(r3, &(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x15, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000cc44}, 0x0) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000900000200c4329700002000000000"], 0x10}}, 0x0) 1.285759686s ago: executing program 1 (id=1595): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xffd8, 0x0, 0x0) 1.239028539s ago: executing program 2 (id=1596): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000140)={r2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = gettid() ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0xe, &(0x7f0000003140)=""/4095, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8501) 1.117393181s ago: executing program 0 (id=1597): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}, 0x37}], 0x600, 0x0, 0x0) 1.038851486s ago: executing program 1 (id=1598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0xffff) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x35}}, './file0\x00'}) ftruncate(r4, 0x1e) fcntl$addseals(r2, 0x409, 0x7) (async) r5 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x541b, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000100)={0x10001, 0x2, 0x7, 0x800, 0x7, 0x1, 0x8}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="bd42140706832e0e4943dd"], 0x0}, 0x0) 146.745759ms ago: executing program 2 (id=1599): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) shutdown(r0, 0x1) recvmsg(r0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x1000000}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 65.189085ms ago: executing program 0 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001100001000a0475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r1, @ANYBLOB='\v'], 0x20}}, 0x0) 0s ago: executing program 2 (id=1601): syz_usb_connect(0x3, 0xfb, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007a70f020431950220100010203010902e9000100fc00000904d30000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000f5ff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000da82850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x76, 0x4e, 0x10, 0x5752, 0x75b9, 0xae00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4000000fffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c000000000005000c0000000000"], 0x70}}, 0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000068000100000000000000000102000000000000000c000b"], 0x24}}, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered disabled state [ 487.733243][T11563] bridge_slave_1: entered allmulticast mode [ 487.757792][T11563] bridge_slave_1: entered promiscuous mode [ 487.881725][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.957979][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.030581][ T6479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.075920][ T5227] Bluetooth: hci1: command tx timeout [ 488.129690][ T46] usb 1-1: USB disconnect, device number 55 [ 488.221328][ T6479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.274251][T11563] team0: Port device team_slave_0 added [ 488.308931][T11563] team0: Port device team_slave_1 added [ 488.320713][ T5281] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 488.338645][ T5281] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input53 [ 488.498822][ T6479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.629222][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.666016][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.736212][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.825187][ T6479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.863366][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.902442][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.021748][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.027787][T11668] vivid-000: disconnect [ 489.118050][T11668] vivid-000: reconnect [ 489.123056][T10262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.153942][T10262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.181545][T10262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.191543][T10262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.202292][T10262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.237036][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.508513][T11563] hsr_slave_0: entered promiscuous mode [ 489.519163][T11563] hsr_slave_1: entered promiscuous mode [ 490.155942][ T5238] Bluetooth: hci1: command tx timeout [ 490.356399][ T25] usb 4-1: USB disconnect, device number 54 [ 490.362394][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 490.380348][ T6479] bridge_slave_1: left allmulticast mode [ 490.400545][ T6479] bridge_slave_1: left promiscuous mode [ 490.423816][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.453885][ T6479] bridge_slave_0: left allmulticast mode [ 490.484363][ T6479] bridge_slave_0: left promiscuous mode [ 490.506079][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.615331][T11687] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1303'. [ 491.086846][ T25] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 491.311501][ T25] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 491.334848][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.350976][ T25] usb 1-1: Product: syz [ 491.356372][ T5238] Bluetooth: hci2: command tx timeout [ 491.369940][ T25] usb 1-1: Manufacturer: syz [ 491.374960][ T25] usb 1-1: SerialNumber: syz [ 491.400701][ T25] usb 1-1: config 0 descriptor?? [ 491.538152][ T6479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.554560][ T6479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.572913][ T6479] bond0 (unregistering): Released all slaves [ 491.937021][ T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 491.969884][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 491.985562][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 492.524557][ T6479] hsr_slave_0: left promiscuous mode [ 492.537172][ T6479] hsr_slave_1: left promiscuous mode [ 492.551186][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.563163][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.577398][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.585014][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.685260][ T6479] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 492.704798][ T6479] veth1_macvtap: left promiscuous mode [ 492.735017][ T6479] veth0_macvtap: left promiscuous mode [ 492.779055][ T6479] veth1_vlan: left promiscuous mode [ 492.812841][ T6479] veth0_vlan: left promiscuous mode [ 493.436496][ T5238] Bluetooth: hci2: command tx timeout [ 493.542493][ T6479] team0 (unregistering): Port device macvlan2 removed [ 493.642867][ T5285] usb 1-1: USB disconnect, device number 56 [ 493.888806][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 494.085915][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 494.103067][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 494.115889][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.131242][T11726] binder: BINDER_SET_CONTEXT_MGR already set [ 494.138128][T11726] binder: 11725:11726 ioctl 4018620d 20000100 returned -16 [ 494.154101][ T8] usb 4-1: Product: syz [ 494.168718][ T8] usb 4-1: Manufacturer: syz [ 494.170176][T11729] binder: BINDER_SET_CONTEXT_MGR already set [ 494.175712][ T8] usb 4-1: SerialNumber: syz [ 494.189481][T11729] binder: 11725:11729 ioctl 4018620d 20000040 returned -16 [ 494.211465][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 494.230805][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 494.453365][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 494.467173][ T8] r8152-cfgselector 4-1: bad CDC descriptors [ 494.477814][ T8] r8152-cfgselector 4-1: USB disconnect, device number 55 [ 494.527396][T11732] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 494.683441][ T6479] team0 (unregistering): Port device team_slave_1 removed [ 494.770730][ T6479] team0 (unregistering): Port device team_slave_0 removed [ 495.416057][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 495.517777][ T5238] Bluetooth: hci2: command tx timeout [ 495.579668][T11724] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1310'. [ 495.626397][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 495.643037][T11673] chnl_net:caif_netlink_parms(): no params data found [ 495.660317][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 495.705849][ T8] usb 4-1: config 0 has no interface number 0 [ 495.725818][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.745983][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 495.793999][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 495.830219][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 495.855773][ T8] usb 4-1: Product: syz [ 495.860171][ T8] usb 4-1: SerialNumber: syz [ 495.871134][ T8] usb 4-1: config 0 descriptor?? [ 495.880047][ T8] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 495.897445][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input54 [ 496.096960][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 496.439625][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.458156][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.465593][T11673] bridge_slave_0: entered allmulticast mode [ 496.473578][T11673] bridge_slave_0: entered promiscuous mode [ 496.518674][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.528770][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.539938][T11673] bridge_slave_1: entered allmulticast mode [ 496.554193][T11673] bridge_slave_1: entered promiscuous mode [ 496.653276][T11746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.707751][T11746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.714065][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.742375][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.901209][ T940] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 496.931764][T11563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.939026][ T940] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 496.967849][T11563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.990204][ T940] usb 3-1: USB disconnect, device number 52 [ 497.014245][T11673] team0: Port device team_slave_0 added [ 497.044916][T11673] team0: Port device team_slave_1 added [ 497.076988][T11563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.123894][T11748] netlink: 'syz.3.1314': attribute type 4 has an invalid length. [ 497.216068][T11563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.309549][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.336388][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.383662][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.410600][ T940] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 497.479364][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.502007][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.579630][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.597685][ T5238] Bluetooth: hci2: command tx timeout [ 497.660713][ T940] usb 3-1: Using ep0 maxpacket: 32 [ 497.869252][ T940] usb 3-1: device descriptor read/all, error -71 [ 498.088675][T11673] hsr_slave_0: entered promiscuous mode [ 498.104928][T11673] hsr_slave_1: entered promiscuous mode [ 498.123333][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.133712][T11673] Cannot create hsr debugfs directory [ 498.195837][ T8] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 498.359238][ T46] usb 4-1: USB disconnect, device number 56 [ 498.370335][ T46] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 498.428323][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.453586][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.488558][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 498.564796][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.590118][ T8] usb 1-1: config 0 descriptor?? [ 498.597216][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.863828][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.908060][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.915390][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.028498][ T8] logitech-djreceiver 0003:046D:C534.004E: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0 [ 499.071036][T11787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.112219][T11787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.140457][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.147743][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.217202][ T8] usb 1-1: USB disconnect, device number 57 [ 499.329669][ T940] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 499.355831][ T5238] Bluetooth: hci0: command tx timeout [ 499.987990][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.117996][T11673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.228462][T11673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 500.300040][T11673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 500.366863][T11673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 500.398097][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1325'. [ 500.438061][T11563] veth0_vlan: entered promiscuous mode [ 500.645061][T11563] veth1_vlan: entered promiscuous mode [ 500.998257][T11563] veth0_macvtap: entered promiscuous mode [ 501.060212][T11563] veth1_macvtap: entered promiscuous mode [ 501.209368][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.251576][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.274786][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.291034][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.334014][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.351124][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.385857][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.433098][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.456611][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.475712][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.542362][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.633347][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.688536][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.718450][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.755903][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.784966][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.836758][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.862037][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.866941][T11830] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 501.887287][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.907802][T11563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.945869][T11563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.979780][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.008744][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.015119][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.060018][T11563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.090466][T11563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.110842][T11563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.138093][T11563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.201799][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.236361][ T5283] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 502.295868][ T5285] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 502.368023][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.435750][ T5283] usb 1-1: Using ep0 maxpacket: 16 [ 502.449704][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.456980][ T8068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.463893][ T5283] usb 1-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 502.482258][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.508231][ T5285] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 502.511436][ T5283] usb 1-1: Product: syz [ 502.518173][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.536260][ T5283] usb 1-1: Manufacturer: syz [ 502.540938][ T5283] usb 1-1: SerialNumber: syz [ 502.557783][ T5285] usb 4-1: config 0 descriptor?? [ 502.580449][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.587725][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.600182][ T5283] usb 1-1: config 0 descriptor?? [ 502.610959][ T5285] pwc: Samsung MPC-C10 USB webcam detected. [ 502.666303][ T8] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 502.678859][ T8074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.718451][ T8074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.814469][ T5285] pwc: send_video_command error -71 [ 502.830268][ T5285] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 502.856553][ T5285] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 502.873984][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.889772][ T8] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 502.898012][ T5285] usb 4-1: USB disconnect, device number 58 [ 502.913795][ T8] usb 3-1: config 0 has no interface number 0 [ 502.921324][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.951286][ T8] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.971856][T11673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.991133][ T8] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.039211][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 503.089222][ T8] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 503.122239][ T8] usb 3-1: Manufacturer: syz [ 503.153497][ T8] usb 3-1: config 0 descriptor?? [ 503.163154][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.425759][ T5285] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 503.506616][T11673] veth0_vlan: entered promiscuous mode [ 503.573703][T11673] veth1_vlan: entered promiscuous mode [ 503.624850][ T8] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.004F/input/input55 [ 503.647865][ T5285] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 503.669758][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.711409][ T5285] usb 4-1: config 0 descriptor?? [ 503.747011][ T5285] pwc: Samsung MPC-C10 USB webcam detected. [ 503.804411][T11673] veth0_macvtap: entered promiscuous mode [ 503.825252][ T8] sony 0003:054C:03D5.004F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 503.887136][ T8] usb 3-1: USB disconnect, device number 55 [ 503.921164][T11673] veth1_macvtap: entered promiscuous mode [ 503.960888][ T29] audit: type=1326 audit(1724753585.176:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.028379][ T29] audit: type=1326 audit(1724753585.176:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.052229][ T29] audit: type=1326 audit(1724753585.176:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.079576][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.080218][ T29] audit: type=1326 audit(1724753585.176:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.140391][ T29] audit: type=1326 audit(1724753585.176:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.160878][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.193857][ T29] audit: type=1326 audit(1724753585.176:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.216983][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.247033][ T29] audit: type=1326 audit(1724753585.176:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.271657][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.295976][ T29] audit: type=1326 audit(1724753585.176:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.317971][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.326639][ T5285] pwc: recv_control_msg error -32 req 02 val 2b00 [ 504.358108][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.368838][ T5285] pwc: recv_control_msg error -32 req 02 val 2700 [ 504.377400][ T29] audit: type=1326 audit(1724753585.176:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.393188][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.435810][ T5285] pwc: recv_control_msg error -32 req 04 val 1700 [ 504.444496][ T5285] pwc: recv_control_msg error -32 req 02 val 2c00 [ 504.471439][ T5285] pwc: recv_control_msg error -32 req 04 val 1000 [ 504.492658][ T29] audit: type=1326 audit(1724753585.176:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.3.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x7ffc0000 [ 504.493425][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.575970][ T5285] pwc: recv_control_msg error -71 req 04 val 1300 [ 504.590004][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.616312][ T5285] pwc: recv_control_msg error -71 req 04 val 1400 [ 504.620577][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.635312][ T5285] pwc: recv_control_msg error -71 req 02 val 2000 [ 504.654546][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.666201][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 504.666718][ T5285] pwc: recv_control_msg error -71 req 02 val 2100 [ 504.695059][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.705439][ T5285] pwc: recv_control_msg error -71 req 02 val 2200 [ 504.727136][ T5285] pwc: recv_control_msg error -71 req 06 val 0600 [ 504.740894][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.748807][ T5285] pwc: recv_control_msg error -71 req 04 val 1500 [ 504.766148][ T5226] usb 1-1: USB disconnect, device number 58 [ 504.800212][ T5285] pwc: recv_control_msg error -71 req 02 val 2500 [ 504.826351][ T5285] pwc: recv_control_msg error -71 req 02 val 2400 [ 504.844251][ T5285] pwc: recv_control_msg error -71 req 02 val 2600 [ 504.901628][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.935728][ T5285] pwc: recv_control_msg error -71 req 02 val 2900 [ 504.963152][ T5285] pwc: recv_control_msg error -71 req 02 val 2800 [ 504.973220][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.995787][ T5285] pwc: recv_control_msg error -71 req 04 val 1100 [ 505.048065][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.063340][ T5285] pwc: recv_control_msg error -71 req 04 val 1200 [ 505.083890][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.127685][ T5285] pwc: Registered as video71. [ 505.135940][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.163375][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.186859][ T5285] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 505.196638][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.253555][ T5285] usb 4-1: USB disconnect, device number 59 [ 505.309591][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.356258][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.419106][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.465212][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.503103][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.579767][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.648062][T11673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.666294][T11673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.676778][T11673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.695779][T11673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.971973][T11898] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 506.511685][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.543902][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.580565][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.584125][T11912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1343'. [ 506.592361][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.685869][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 506.895883][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 506.915521][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 506.947340][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 507.022191][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 507.031755][ T5226] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 507.056658][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.083974][ T25] usb 2-1: Product: syz [ 507.103283][ T25] usb 2-1: Manufacturer: syz [ 507.122966][ T25] usb 2-1: SerialNumber: syz [ 507.155745][ T53] bridge_slave_1: left allmulticast mode [ 507.165212][ T53] bridge_slave_1: left promiscuous mode [ 507.177143][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.200435][ T25] usb 2-1: config 0 descriptor?? [ 507.232587][ T53] bridge_slave_0: left allmulticast mode [ 507.244975][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 507.260626][ T53] bridge_slave_0: left promiscuous mode [ 507.273494][ T5226] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 507.285532][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.293570][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.304257][ T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 507.327223][ T5226] usb 4-1: Product: syz [ 507.335960][ T5226] usb 4-1: Manufacturer: syz [ 507.346047][ T5226] usb 4-1: SerialNumber: syz [ 507.373465][ T5226] usb 4-1: config 0 descriptor?? [ 507.475780][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 507.681823][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 507.728193][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.793110][ T8] usb 1-1: config 0 descriptor?? [ 507.847275][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 507.866649][ T5226] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 507.886862][ T25] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 507.922219][ T5226] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 507.940426][ T5226] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 508.569155][ T25] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 508.601049][ T25] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 508.626319][ T25] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 508.655288][ T25] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 508.684958][ T25] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 508.710446][ T25] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 508.752742][ T25] usb 2-1: USB disconnect, device number 44 [ 508.876076][ T8] ath6kl: Failed to submit usb control message: -110 [ 508.927667][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 508.935166][ T8] ath6kl: Unable to send get target info: -110 [ 508.978491][ T8] ath6kl: Failed to init ath6kl core: -110 [ 508.992865][ T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 509.575393][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.617164][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.669153][ T53] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 509.715027][ T53] bond0 (unregistering): Released all slaves [ 509.774219][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 510.517116][ T53] hsr_slave_0: left promiscuous mode [ 510.536552][ T53] hsr_slave_1: left promiscuous mode [ 510.554954][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.563890][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.584900][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.593134][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.646682][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 510.726916][ T940] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 510.739862][ T53] veth1_macvtap: left promiscuous mode [ 510.745504][ T53] veth0_macvtap: left promiscuous mode [ 510.817080][ T53] veth1_vlan: left promiscuous mode [ 510.822522][ T53] veth0_vlan: left promiscuous mode [ 510.922864][ T25] usb 1-1: USB disconnect, device number 59 [ 510.937116][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.994486][ T940] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.005485][ T5286] usb 4-1: USB disconnect, device number 60 [ 511.032552][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.054815][ T940] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.065743][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.073113][ T940] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.085944][ T940] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 511.097999][ T8] usb 5-1: Product: syz [ 511.102247][ T8] usb 5-1: Manufacturer: syz [ 511.116417][ T8] usb 5-1: SerialNumber: syz [ 511.143828][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.196143][T11968] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 511.274722][ T5286] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 511.342950][ T5286] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz0 [ 511.726237][T11984] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 512.028500][ T940] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 512.032039][ T940] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input57 [ 512.423543][ T8] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 512.439950][ T8] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 512.450363][ T8] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 512.589062][T11968] vivid-000: disconnect [ 512.637033][T11968] vivid-000: reconnect [ 512.963641][ T53] team0 (unregistering): Port device team_slave_1 removed [ 513.143110][ T53] team0 (unregistering): Port device team_slave_0 removed [ 513.813751][ T940] usb 2-1: USB disconnect, device number 45 [ 513.819746][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 514.379625][T11978] netlink: 'syz.3.1352': attribute type 26 has an invalid length. [ 514.391330][T11966] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1349'. [ 514.435838][T11981] netlink: 'syz.4.1349': attribute type 12 has an invalid length. [ 514.454145][T11981] netlink: 'syz.4.1349': attribute type 29 has an invalid length. [ 514.487209][T11981] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 514.495097][T11981] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1349'. [ 514.877416][ T5286] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 514.887157][ T8] cdc_ncm 5-1:1.0: setting tx_max = 32 [ 515.035947][ T8] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 515.118316][ T5286] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 515.145491][ T8] usb 5-1: USB disconnect, device number 52 [ 515.205522][ T5286] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 515.221791][ T8] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 515.290346][ T5286] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 515.353251][ T5286] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.418862][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.504220][ T5286] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.707787][T12017] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 515.862935][T12045] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 515.892905][ T5286] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 515.940407][T12047] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 516.323321][T12057] xt_TCPMSS: Only works on TCP SYN packets [ 516.353130][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 516.353150][ T29] audit: type=1326 audit(1724753597.576:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.2.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6022179e79 code=0x0 [ 516.381682][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.446632][ T5286] usb 4-1: USB disconnect, device number 61 [ 516.775836][ T29] audit: type=1326 audit(1724753597.996:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12064 comm="syz.3.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f88379e79 code=0x0 [ 516.908963][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 517.365875][ T25] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 517.555704][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 517.555774][ T5286] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 517.568001][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 517.604998][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.640275][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.663584][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.666066][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 517.680198][ T25] usb 1-1: Product: syz [ 517.690471][ T25] usb 1-1: Manufacturer: syz [ 517.700697][ T25] usb 1-1: SerialNumber: syz [ 517.714846][ T25] usb 1-1: config 0 descriptor?? [ 517.735014][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.785965][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 517.802061][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.825742][ T5286] usb 5-1: config 0 has no interfaces? [ 517.843156][ T5286] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 517.892859][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.904022][ T5286] usb 5-1: config 0 descriptor?? [ 518.201920][T12091] bridge0: entered promiscuous mode [ 518.202096][T12091] vlan2: entered promiscuous mode [ 518.202250][T12091] vlan2: entered allmulticast mode [ 518.202268][T12091] bridge0: entered allmulticast mode [ 518.215818][ T5281] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 518.223112][T12091] bridge0: left allmulticast mode [ 518.223383][T12091] bridge0: left promiscuous mode [ 518.336797][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 518.367030][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 518.406012][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 518.408250][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.408317][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 518.408350][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 518.408401][ T5281] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.408458][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.411911][ T5281] usb 4-1: config 0 descriptor?? [ 518.605239][T12086] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 518.631423][ T5281] hub 4-1:0.0: USB hub found [ 518.745544][ T1171] usb 5-1: USB disconnect, device number 53 [ 518.833550][ T5281] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 518.862473][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.908858][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.976791][ T25] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 518.987312][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 519.003597][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 519.040674][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 519.056720][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 519.066144][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 519.077753][ T5281] usbhid 4-1:0.0: can't add hid device: -71 [ 519.083843][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 519.096114][ T25] usb 1-1: USB disconnect, device number 60 [ 519.150085][ T5281] usb 4-1: USB disconnect, device number 62 [ 519.233813][T12104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 519.244417][T12104] FAULT_INJECTION: forcing a failure. [ 519.244417][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.255513][T12106] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 519.258791][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.1.1384 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 519.277304][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 519.287409][T12104] Call Trace: [ 519.290741][T12104] [ 519.293710][T12104] dump_stack_lvl+0x241/0x360 [ 519.298430][T12104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.303660][T12104] ? __pfx__printk+0x10/0x10 [ 519.308298][T12104] ? snprintf+0xda/0x120 [ 519.312576][T12104] should_fail_ex+0x3b0/0x4e0 [ 519.317290][T12104] _copy_to_user+0x2f/0xb0 [ 519.321737][T12104] simple_read_from_buffer+0xca/0x150 [ 519.327135][T12104] proc_fail_nth_read+0x1ec/0x260 [ 519.332209][T12104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.337797][T12104] ? rw_verify_area+0x520/0x6b0 [ 519.342678][T12104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.348241][T12104] vfs_read+0x204/0xbc0 [ 519.352434][T12104] ? __pfx_lock_release+0x10/0x10 [ 519.357486][T12104] ? __pfx_vfs_read+0x10/0x10 [ 519.362207][T12104] ? __fget_files+0x29/0x470 [ 519.366821][T12104] ? __fget_files+0x3f6/0x470 [ 519.371527][T12104] ksys_read+0x1a0/0x2c0 [ 519.375792][T12104] ? __pfx_ksys_read+0x10/0x10 [ 519.380570][T12104] ? do_syscall_64+0x100/0x230 [ 519.385350][T12104] ? do_syscall_64+0xb6/0x230 [ 519.390046][T12104] do_syscall_64+0xf3/0x230 [ 519.394591][T12104] ? clear_bhb_loop+0x35/0x90 [ 519.399312][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.405221][T12104] RIP: 0033:0x7fa9089788bc [ 519.409647][T12104] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 519.429280][T12104] RSP: 002b:00007fa9096ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.437745][T12104] RAX: ffffffffffffffda RBX: 00007fa908b15f80 RCX: 00007fa9089788bc [ 519.445729][T12104] RDX: 000000000000000f RSI: 00007fa9096ad0a0 RDI: 0000000000000004 [ 519.453716][T12104] RBP: 00007fa9096ad090 R08: 0000000000000000 R09: 0000000000000000 [ 519.461709][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.469720][T12104] R13: 0000000000000000 R14: 00007fa908b15f80 R15: 00007fa908c3fa38 [ 519.477747][T12104] [ 519.642209][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 519.785491][T12118] FAULT_INJECTION: forcing a failure. [ 519.785491][T12118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.802652][T12118] CPU: 1 UID: 0 PID: 12118 Comm: syz.0.1390 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 519.813495][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 519.823594][T12118] Call Trace: [ 519.826920][T12118] [ 519.829883][T12118] dump_stack_lvl+0x241/0x360 [ 519.829970][T12119] ip6tnl1: entered promiscuous mode [ 519.834581][T12118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.834609][T12118] ? __pfx__printk+0x10/0x10 [ 519.843578][T12119] ip6tnl1: entered allmulticast mode [ 519.845024][T12118] ? __pfx_lock_release+0x10/0x10 [ 519.859998][T12118] should_fail_ex+0x3b0/0x4e0 [ 519.864739][T12118] _copy_from_iter+0x1f6/0x1960 [ 519.869654][T12118] ? __virt_addr_valid+0x183/0x530 [ 519.874829][T12118] ? __pfx_lock_release+0x10/0x10 [ 519.879921][T12118] ? __alloc_skb+0x28f/0x440 [ 519.884648][T12118] ? __pfx__copy_from_iter+0x10/0x10 [ 519.889992][T12118] ? __virt_addr_valid+0x183/0x530 [ 519.895673][T12118] ? __virt_addr_valid+0x183/0x530 [ 519.900828][T12118] ? __virt_addr_valid+0x45f/0x530 [ 519.905980][T12118] ? __check_object_size+0x49c/0x900 [ 519.911313][T12118] netlink_sendmsg+0x73d/0xcb0 [ 519.916234][T12118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.921565][T12118] ? __import_iovec+0x536/0x820 [ 519.926461][T12118] ? aa_sock_msg_perm+0x91/0x160 [ 519.931449][T12118] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 519.936789][T12118] ? security_socket_sendmsg+0x87/0xb0 [ 519.942304][T12118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.947629][T12118] __sock_sendmsg+0x221/0x270 [ 519.952379][T12118] ____sys_sendmsg+0x525/0x7d0 [ 519.957204][T12118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.962570][T12118] __sys_sendmsg+0x2b0/0x3a0 [ 519.967205][T12118] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.972649][T12118] ? vfs_write+0x7c4/0xc90 [ 519.977764][T12118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.984430][T12118] do_syscall_64+0xf3/0x230 [ 519.988977][T12118] ? clear_bhb_loop+0x35/0x90 [ 519.993710][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.999664][T12118] RIP: 0033:0x7f27df379e79 [ 520.004122][T12118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.024211][T12118] RSP: 002b:00007f27e0101038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.032684][T12118] RAX: ffffffffffffffda RBX: 00007f27df515f80 RCX: 00007f27df379e79 [ 520.040706][T12118] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 520.048732][T12118] RBP: 00007f27e0101090 R08: 0000000000000000 R09: 0000000000000000 [ 520.056754][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.064776][T12118] R13: 0000000000000000 R14: 00007f27df515f80 R15: 00007f27df63fa38 [ 520.072823][T12118] [ 520.141499][T12125] netlink: 'syz.1.1388': attribute type 7 has an invalid length. [ 520.150484][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 520.365823][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 520.375580][ T25] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 520.384723][ T46] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 520.416655][ T25] usb 3-1: config 0 has no interface number 0 [ 520.434634][ T46] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz0 [ 520.450235][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 520.485796][ T25] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 520.519443][ T25] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 520.532213][ T25] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 520.560870][ T25] usb 3-1: Product: syz [ 520.582583][ T25] usb 3-1: SerialNumber: syz [ 520.604692][ T25] usb 3-1: config 0 descriptor?? [ 520.637768][ T25] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 520.665736][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input58 [ 520.890003][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 521.228082][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 521.402662][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 521.468304][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.495254][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.535860][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 521.654688][T12151] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 521.725995][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 521.733761][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.755004][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.778096][ T25] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 521.792663][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.803308][ T25] usb 4-1: Product: syz [ 521.811193][ T25] usb 4-1: Manufacturer: syz [ 521.824640][ T25] usb 4-1: SerialNumber: syz [ 521.916431][ T5286] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 522.115851][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 522.150567][ T5286] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 522.187148][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.195499][ T25] usbhid 4-1:1.0: can't add hid device: -71 [ 522.203128][ T25] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 522.223734][ T25] usb 4-1: USB disconnect, device number 63 [ 522.230400][ T5286] usb 1-1: Product: syz [ 522.247039][ T5286] usb 1-1: Manufacturer: syz [ 522.280055][ T5286] usb 1-1: SerialNumber: syz [ 522.315260][ T5286] usb 1-1: config 0 descriptor?? [ 522.360443][ T5286] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 522.779428][ T25] usb 3-1: USB disconnect, device number 56 [ 522.843628][T12175] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1406'. [ 522.847919][ T25] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 523.211827][ T5286] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 523.242797][ T5286] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 523.265235][ T5286] usb 1-1: USB disconnect, device number 61 [ 523.271293][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 523.282056][ T8] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 523.365754][ T1171] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 523.492077][ T8] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 523.493096][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1411'. [ 523.522265][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.543374][ T8] usb 4-1: Product: syz [ 523.549250][ T1171] usb 2-1: Using ep0 maxpacket: 32 [ 523.566663][ T1171] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 523.574930][ T1171] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 523.590699][ T8] usb 4-1: Manufacturer: syz [ 523.595361][ T8] usb 4-1: SerialNumber: syz [ 523.624558][ T1171] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 523.646710][ T8] usb 4-1: config 0 descriptor?? [ 523.655533][ T1171] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 523.676653][ T1171] usb 2-1: config 0 interface 0 has no altsetting 0 [ 523.723195][ T1171] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 523.744116][ T1171] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 523.769933][ T1171] usb 2-1: Product: syz [ 523.778096][ T1171] usb 2-1: Manufacturer: syz [ 523.800866][ T1171] usb 2-1: SerialNumber: syz [ 523.828908][ T1171] usb 2-1: config 0 descriptor?? [ 523.841540][ T1171] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 523.909499][ T1171] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 524.125491][T12177] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 524.133259][ T1171] usb 2-1: USB disconnect, device number 46 [ 524.133341][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 524.207688][ T1171] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 524.366318][ T8] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 524.415329][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 524.418482][T12206] IPVS: set_ctl: invalid protocol: 5 6.0.0.0:0 [ 524.917094][ T46] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 525.126646][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 525.164044][ T46] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 525.189418][ T46] usb 3-1: config 0 has no interface number 0 [ 525.204741][ T46] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.233210][ T46] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.263567][ T46] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 525.283606][ T46] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 525.304004][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 525.310277][ T46] usb 3-1: Product: syz [ 525.330835][ T46] usb 3-1: SerialNumber: syz [ 525.363684][ T46] usb 3-1: config 0 descriptor?? [ 525.404936][ T46] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 525.427513][ T46] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input59 [ 525.816812][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 525.925575][ T1171] usb 4-1: USB disconnect, device number 64 [ 526.030918][ T29] audit: type=1326 audit(1724753607.256:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.104288][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 526.113807][ T29] audit: type=1326 audit(1724753607.286:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.189736][ T29] audit: type=1326 audit(1724753607.286:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.213668][ T29] audit: type=1326 audit(1724753607.286:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.245045][ T29] audit: type=1326 audit(1724753607.286:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.268487][ T29] audit: type=1326 audit(1724753607.286:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.292162][ T29] audit: type=1326 audit(1724753607.286:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.314839][ T29] audit: type=1326 audit(1724753607.286:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.368014][ T29] audit: type=1326 audit(1724753607.286:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.392346][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.440398][ T29] audit: type=1326 audit(1724753607.286:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12221 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa908979e79 code=0x7fc00000 [ 526.464554][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.596438][T12242] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 526.655056][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'. [ 527.774197][ T25] usb 3-1: USB disconnect, device number 57 [ 527.807484][ T25] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 527.936747][ T5281] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 528.146269][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 528.161465][ T5281] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2 [ 528.173734][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.183902][ T5281] usb 1-1: Product: syz [ 528.200823][ T5281] usb 1-1: Manufacturer: syz [ 528.209051][ T5281] usb 1-1: SerialNumber: syz [ 528.222283][ T5281] usb 1-1: config 0 descriptor?? [ 528.241991][ T5281] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 528.456198][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 528.573756][ T5281] gspca_sunplus: reg_r err -71 [ 528.592697][ T5281] usb 1-1: USB disconnect, device number 62 [ 528.645744][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 528.666162][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 528.694997][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.753811][ T25] usb 3-1: config 0 descriptor?? [ 528.819402][T12276] netlink: 'syz.1.1434': attribute type 4 has an invalid length. [ 528.858551][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 529.409742][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 530.182861][ T25] gspca_sonixj: reg_w1 err -110 [ 530.243886][ T25] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 530.895751][ T1171] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 531.106131][ T1171] usb 2-1: Using ep0 maxpacket: 32 [ 531.154941][ T1171] usb 2-1: config 0 has no interfaces? [ 531.179216][ T1171] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 531.208876][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.252693][ T1171] usb 2-1: config 0 descriptor?? [ 531.605826][ T5281] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 531.825824][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 531.858128][ T5281] usb 5-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 531.880061][ T1171] usb 3-1: USB disconnect, device number 58 [ 531.892229][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.919806][ T5281] usb 5-1: Product: syz [ 531.927276][ T5281] usb 5-1: Manufacturer: syz [ 531.962632][ T5281] usb 5-1: SerialNumber: syz [ 531.993297][ T5281] usb 5-1: config 0 descriptor?? [ 532.221204][ T1171] usb 5-1: USB disconnect, device number 54 [ 532.496071][ T5281] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 532.698944][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.717552][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.729152][ T5281] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 532.739115][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.775537][ T5281] usb 1-1: config 0 descriptor?? [ 532.965907][ T1171] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 533.000599][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.017972][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.033350][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.044695][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.156244][ T1171] usb 4-1: Using ep0 maxpacket: 16 [ 533.165134][ T1171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.181170][ T1171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.202837][ T1171] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 533.223506][ T1171] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 533.232633][ T1171] usb 4-1: Product: syz [ 533.249539][ T1171] usb 4-1: Manufacturer: syz [ 533.285785][ T1171] usb 4-1: config 0 descriptor?? [ 533.433364][ T5281] cm6533_jd 0003:0D8C:0022.0052: unknown main item tag 0x0 [ 533.489041][ T5281] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0052/input/input60 [ 533.493674][ T5283] usb 2-1: USB disconnect, device number 47 [ 533.613957][ T5281] cm6533_jd 0003:0D8C:0022.0052: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 533.779815][ T5281] usb 1-1: USB disconnect, device number 63 [ 533.796095][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.830722][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.945273][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 534.022193][ T1171] kovaplus 0003:1E7D:2D50.0053: unknown main item tag 0xd [ 534.070447][ T1171] kovaplus 0003:1E7D:2D50.0053: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 534.212094][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 534.420073][ T1171] kovaplus 0003:1E7D:2D50.0053: couldn't init struct kovaplus_device [ 534.457638][ T1171] kovaplus 0003:1E7D:2D50.0053: couldn't install mouse [ 534.500589][ T1171] kovaplus 0003:1E7D:2D50.0053: probe with driver kovaplus failed with error -71 [ 534.559388][ T1171] usb 4-1: USB disconnect, device number 65 [ 534.864745][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.938991][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.265782][ T940] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 535.455719][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 535.495034][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.532350][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.557948][ T940] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 535.570080][ T940] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 535.579166][ T940] usb 3-1: Product: syz [ 535.584704][ T940] usb 3-1: Manufacturer: syz [ 535.611461][ T940] usb 3-1: config 0 descriptor?? [ 535.854219][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1462'. [ 536.052470][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.106123][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.327188][ T940] usbhid 3-1:0.0: can't add hid device: -71 [ 536.333291][ T940] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 536.407566][ T940] usb 3-1: USB disconnect, device number 59 [ 537.285731][ T5281] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 537.376148][ T1171] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 537.469263][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 537.481167][ T5281] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 537.500853][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.521948][ T5281] usb 4-1: Product: syz [ 537.527178][ T5281] usb 4-1: Manufacturer: syz [ 537.531824][ T5281] usb 4-1: SerialNumber: syz [ 537.552005][ T5281] r8152-cfgselector 4-1: Unknown version 0x0000 [ 537.558654][ T5281] r8152-cfgselector 4-1: config 0 descriptor?? [ 537.610083][ T1171] usb 1-1: Using ep0 maxpacket: 32 [ 537.643651][ T1171] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.690427][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.714753][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.734478][ T1171] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 537.744577][ T1171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.744758][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 537.763456][ T1171] usb 1-1: config 0 descriptor?? [ 537.797380][ T5281] r8152-cfgselector 4-1: Unknown version 0x0000 [ 537.804074][T12430] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 537.822344][ T5281] r8152-cfgselector 4-1: bad CDC descriptors [ 537.844988][ T1171] hub 1-1:0.0: USB hub found [ 537.858126][ T5281] r8152-cfgselector 4-1: USB disconnect, device number 66 [ 538.052335][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 538.052357][ T29] audit: type=1326 audit(1724753619.276:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.4.1472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x0 [ 538.088664][ T1171] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 538.336000][ T1171] hid-generic 0003:046D:C314.0054: item fetching failed at offset 0/1 [ 538.362443][ T1171] hid-generic 0003:046D:C314.0054: probe with driver hid-generic failed with error -22 [ 538.687031][ T1171] usb 1-1: USB disconnect, device number 64 [ 539.013392][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 539.105948][ T1171] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 539.196049][ T5286] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 539.296221][ T5281] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 539.322618][ T1171] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 539.332960][ T1171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.344856][ T1171] usb 4-1: config 0 descriptor?? [ 539.366273][ T1171] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 539.388071][ T5286] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.403566][ T5286] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24, setting to 8 [ 539.425148][ T5286] usb 3-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.40 [ 539.435991][ T940] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 539.446114][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.467667][ T5286] usb 3-1: Product:  [ 539.471903][ T5286] usb 3-1: Manufacturer: ࠬ [ 539.485807][ T5286] usb 3-1: SerialNumber: 訪ꩬ㬮利휶튵謯礎ջ부ば寂栿᪟떓ὄʧ⽹광ෛ㌼ਧ次唰阺낾꿑ᇄ踐嗯͖Ϛ硹迸䟧灪㔅禲錈惋뷓뵫젷糋属큥퓤恒ﭵ쇴ᬪ吪昮嗐 [ 539.514876][ T5281] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 539.520147][T12462] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 539.546391][ T5281] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 539.570236][ T1171] usb 4-1: USB disconnect, device number 67 [ 539.585801][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.627940][ T5281] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 539.640122][ T5281] usb 5-1: No valid video chain found. [ 539.666286][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 539.677675][ T940] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.706816][ T940] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.723306][ T940] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.743323][ T940] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.759109][ T940] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.771688][ T5286] usbhid 3-1:1.0: can't add hid device: -71 [ 539.771820][ T5286] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 539.779663][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.804273][ T5286] usb 3-1: USB disconnect, device number 60 [ 539.866372][ T5281] usb 5-1: USB disconnect, device number 55 [ 540.024500][ T940] usb 1-1: GET_CAPABILITIES returned 0 [ 540.030404][ T940] usbtmc 1-1:16.0: can't read capabilities [ 540.270985][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.317199][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.343353][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.382914][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.404215][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.423185][T12489] vivid-003: ================= START STATUS ================= [ 540.454312][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.479235][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.488401][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.488501][T12489] vivid-003: Radio HW Seek Mode: [ 540.497507][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.525734][ T5286] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 540.541242][T12489] Bounded [ 540.550072][T12489] vivid-003: Radio Programmable HW Seek: false [ 540.585972][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.595108][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.608107][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.617235][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.626346][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.632409][ T46] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 540.643927][T12489] vivid-003: RDS Rx I/O Mode: Block I/O [ 540.671645][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.680796][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.689907][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.700792][T12489] vivid-003: Generate RBDS Instead of RDS: false [ 540.707392][T12489] vivid-003: RDS Reception: true [ 540.712401][T12489] vivid-003: RDS Program Type: 0 inactive [ 540.718272][T12489] vivid-003: RDS PS Name: inactive [ 540.723497][T12489] vivid-003: RDS Radio Text: inactive [ 540.729074][T12489] vivid-003: RDS Traffic Announcement: false inactive [ 540.737672][T12489] vivid-003: RDS Traffic Program: false inactive [ 540.744397][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.745392][T12489] vivid-003: RDS Music: [ 540.753456][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.773380][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.786760][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 540.805092][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.821797][ T46] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz0 [ 540.832489][T12489] false inactive [ 540.846932][T12489] vivid-003: ================== END STATUS ================== [ 540.850286][ T5286] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 540.915828][ T1171] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 540.931680][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.954962][ T5286] usb 4-1: config 0 descriptor?? [ 541.097562][ T1171] usb 5-1: Using ep0 maxpacket: 16 [ 541.116568][ T1171] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 541.126239][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.134288][ T1171] usb 5-1: Product: syz [ 541.140653][ T1171] usb 5-1: Manufacturer: syz [ 541.145322][ T1171] usb 5-1: SerialNumber: syz [ 541.166679][ T1171] usb 5-1: config 0 descriptor?? [ 541.188357][ T1171] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 541.199516][ T5286] usbhid 4-1:0.0: can't add hid device: -71 [ 541.217574][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 541.250465][ T5286] usb 4-1: USB disconnect, device number 68 [ 541.356058][ T5281] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 541.391307][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.403977][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.425506][ T1171] pwc: Failed to set LED on/off time (-71) [ 541.450124][ T1171] pwc: send_video_command error -71 [ 541.457941][ T1171] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 541.468941][ T1171] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 541.484055][ T1171] usb 5-1: USB disconnect, device number 56 [ 541.568383][ T5281] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 541.579579][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.591945][ T5281] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 541.605044][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.624788][ T5281] usb 3-1: SerialNumber: syz [ 542.042939][T12512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1492'. [ 542.129233][ T46] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 542.316389][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 542.337788][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 542.375352][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.401039][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 542.412088][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.420648][ T46] usb 4-1: Product: syz [ 542.430531][ T46] usb 4-1: Manufacturer: syz [ 542.435440][ T46] usb 4-1: SerialNumber: syz [ 542.455087][ T46] usb 4-1: config 0 descriptor?? [ 542.473972][ T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 542.493133][ T46] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 542.507790][T12521] fuse: Unknown parameter 'group_id00000000000000000000' [ 542.510416][ T5283] usb 1-1: USB disconnect, device number 65 [ 543.026237][T12527] FAULT_INJECTION: forcing a failure. [ 543.026237][T12527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.094566][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.0.1497 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 543.105756][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 543.115856][T12527] Call Trace: [ 543.119160][T12527] [ 543.122123][T12527] dump_stack_lvl+0x241/0x360 [ 543.126853][T12527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.132081][T12527] ? __pfx__printk+0x10/0x10 [ 543.136717][T12527] ? vfs_write+0x7c4/0xc90 [ 543.141181][T12527] should_fail_ex+0x3b0/0x4e0 [ 543.145904][T12527] _copy_from_user+0x2f/0xe0 [ 543.150544][T12527] move_addr_to_kernel+0x82/0x150 [ 543.155616][T12527] __sys_bind+0x168/0x2f0 [ 543.159980][T12527] ? __pfx___sys_bind+0x10/0x10 [ 543.164885][T12527] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 543.171275][T12527] ? do_syscall_64+0x100/0x230 [ 543.176082][T12527] __x64_sys_bind+0x7a/0x90 [ 543.180621][T12527] do_syscall_64+0xf3/0x230 [ 543.185184][T12527] ? clear_bhb_loop+0x35/0x90 [ 543.189905][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.195836][T12527] RIP: 0033:0x7f27df379e79 [ 543.200280][T12527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.220014][T12527] RSP: 002b:00007f27e0101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 543.228604][T12527] RAX: ffffffffffffffda RBX: 00007f27df515f80 RCX: 00007f27df379e79 [ 543.236619][T12527] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000003 [ 543.244629][T12527] RBP: 00007f27e0101090 R08: 0000000000000000 R09: 0000000000000000 [ 543.252636][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.260635][T12527] R13: 0000000000000000 R14: 00007f27df515f80 R15: 00007f27df63fa38 [ 543.268654][T12527] [ 543.308665][ T46] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 543.349275][ T46] em28xx 4-1:0.0: Config register raw data: 0x56 [ 543.527537][T12531] binder: 12529:12531 ioctl 4018620d 0 returned -22 [ 543.552695][ T46] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 543.561491][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.570146][ T46] em28xx 4-1:0.0: No AC97 audio processor [ 543.624886][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.957510][ T46] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 544.117665][ T5281] usb 3-1: 0:2 : does not exist [ 544.123501][ T5281] usb 3-1: unit 5 not found! [ 544.159427][ T5281] usb 3-1: USB disconnect, device number 61 [ 544.163659][ T1171] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 544.176958][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 544.207816][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.251565][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.263130][ T46] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 544.275307][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.283069][ T7383] udevd[7383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.290350][ T46] usb 1-1: config 0 descriptor?? [ 544.345821][ T1171] usb 5-1: device descriptor read/64, error -71 [ 544.396312][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 544.605895][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 544.615790][ T1171] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 544.628074][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 544.646015][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.654398][ T25] usb 2-1: Product: syz [ 544.665153][ T25] usb 2-1: Manufacturer: syz [ 544.670109][ T25] usb 2-1: SerialNumber: syz [ 544.680662][ T25] usb 2-1: config 0 descriptor?? [ 544.692977][ T25] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 544.775943][ T1171] usb 5-1: device descriptor read/64, error -71 [ 544.899217][ T5283] usb 4-1: USB disconnect, device number 69 [ 544.909664][ T1171] usb usb5-port1: attempt power cycle [ 544.926892][ T46] elecom 0003:056E:00E6.0056: item fetching failed at offset 2/5 [ 544.927770][ T5283] em28xx 4-1:0.0: Disconnecting em28xx [ 544.958223][ T46] elecom 0003:056E:00E6.0056: probe with driver elecom failed with error -22 [ 544.995165][ T5283] em28xx 4-1:0.0: Freeing device [ 545.224741][T12555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1505'. [ 545.255743][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 545.337868][T12557] FAULT_INJECTION: forcing a failure. [ 545.337868][T12557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.361698][T12557] CPU: 1 UID: 0 PID: 12557 Comm: syz.2.1506 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 545.366038][ T1171] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 545.372562][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 545.390199][T12557] Call Trace: [ 545.393523][T12557] [ 545.396476][T12557] dump_stack_lvl+0x241/0x360 [ 545.401321][T12557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.406570][T12557] ? __pfx__printk+0x10/0x10 [ 545.411224][T12557] ? __pfx_lock_release+0x10/0x10 [ 545.416319][T12557] should_fail_ex+0x3b0/0x4e0 [ 545.421095][T12557] _copy_from_user+0x2f/0xe0 [ 545.425750][T12557] copy_msghdr_from_user+0xae/0x680 [ 545.426204][ T1171] usb 5-1: device descriptor read/8, error -71 [ 545.430986][T12557] ? do_raw_spin_unlock+0x13c/0x8b0 [ 545.442390][T12557] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 545.448273][T12557] __sys_sendmsg+0x23d/0x3a0 [ 545.452919][T12557] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.458120][T12557] ? __pfx_sched_clock_cpu+0x10/0x10 [ 545.463467][T12557] ? note_interrupt+0x579/0x9c0 [ 545.468425][T12557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.474829][T12557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.481225][T12557] ? __irq_exit_rcu+0x100/0x1c0 [ 545.486158][T12557] ? do_syscall_64+0xb6/0x230 [ 545.490897][T12557] do_syscall_64+0xf3/0x230 [ 545.495460][T12557] ? clear_bhb_loop+0x35/0x90 [ 545.500373][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.506333][T12557] RIP: 0033:0x7f6022179e79 [ 545.510807][T12557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.530468][T12557] RSP: 002b:00007f6022faa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.538944][T12557] RAX: ffffffffffffffda RBX: 00007f6022315f80 RCX: 00007f6022179e79 [ 545.546986][T12557] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 545.555009][T12557] RBP: 00007f6022faa090 R08: 0000000000000000 R09: 0000000000000000 [ 545.563034][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.571066][T12557] R13: 0000000000000000 R14: 00007f6022315f80 R15: 00007f602243fa38 [ 545.579103][T12557] [ 545.715816][ T1171] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 545.735579][ T25] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 545.752575][ T1171] usb 5-1: device descriptor read/8, error -71 [ 545.753670][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 545.792444][T12565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.809482][ T25] usb 2-1: USB disconnect, device number 49 [ 545.896280][ T1171] usb usb5-port1: unable to enumerate USB device [ 546.458379][T12570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1509'. [ 546.668837][ T29] audit: type=1326 audit(1724753627.896:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.2.1510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6022179e79 code=0x0 [ 546.696809][ T25] usb 1-1: USB disconnect, device number 66 [ 546.885883][ T1171] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 547.108855][ T1171] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 547.151468][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.206371][ T1171] usb 2-1: Product: syz [ 547.225746][ T1171] usb 2-1: Manufacturer: syz [ 547.233975][ T1171] usb 2-1: SerialNumber: syz [ 547.273939][ T1171] usb 2-1: config 0 descriptor?? [ 547.494308][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.766936][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.011401][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.053389][ T1171] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 548.066427][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 548.298363][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.356708][ T5286] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 548.573180][ T53] bridge_slave_1: left allmulticast mode [ 548.575939][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 548.587699][ T53] bridge_slave_1: left promiscuous mode [ 548.600511][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.611405][ T53] bridge_slave_0: left allmulticast mode [ 548.623141][ T53] bridge_slave_0: left promiscuous mode [ 548.630819][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.674309][ T5286] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 548.748872][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.777729][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 548.790251][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 548.803529][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 548.812800][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 548.822682][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 548.832860][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.882657][ T5286] usb 3-1: Product: syz [ 548.901686][ T5286] usb 3-1: Manufacturer: syz [ 548.918904][ T5286] usb 3-1: SerialNumber: syz [ 548.952087][ T5286] r8152-cfgselector 3-1: Unknown version 0x0000 [ 548.963631][ T5286] r8152-cfgselector 3-1: config 0 descriptor?? [ 549.541763][ T5281] usb 2-1: USB disconnect, device number 50 [ 549.636639][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.651520][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.663874][ T53] bond0 (unregistering): Released all slaves [ 550.736332][ T53] hsr_slave_0: left promiscuous mode [ 550.757968][ T53] hsr_slave_1: left promiscuous mode [ 550.785815][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.804635][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.827256][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.846348][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.855485][ T29] audit: type=1326 audit(1724753632.076:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12627 comm="syz.0.1526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27df379e79 code=0x0 [ 550.875852][ T5238] Bluetooth: hci4: command tx timeout [ 550.934365][ T25] r8152-cfgselector 3-1: USB disconnect, device number 62 [ 550.983087][ T53] veth1_macvtap: left promiscuous mode [ 551.004780][ T53] veth0_macvtap: left promiscuous mode [ 551.045973][ T53] veth1_vlan: left promiscuous mode [ 551.051397][ T53] veth0_vlan: left promiscuous mode [ 551.386043][ T5286] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 551.528986][T12641] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1528'. [ 551.545828][ T25] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 551.585853][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 551.606318][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.618013][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.639785][ T5286] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 551.658165][ T5286] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 551.676022][ T5286] usb 2-1: Product: syz [ 551.684889][ T5286] usb 2-1: Manufacturer: syz [ 551.705436][ T5286] usb 2-1: config 0 descriptor?? [ 551.750097][ T25] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.787957][ T25] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.819379][ T25] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.819504][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 551.819536][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.828566][T12638] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 552.124887][T12634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.134704][T12634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.304101][ T5286] kovaplus 0003:1E7D:2D50.0057: unknown main item tag 0xd [ 552.326324][ T5286] kovaplus 0003:1E7D:2D50.0057: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 552.535531][ T53] team0 (unregistering): Port device team_slave_1 removed [ 552.631780][ T53] team0 (unregistering): Port device team_slave_0 removed [ 552.665886][ T25] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 552.688628][ T25] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input62 [ 552.691617][ T5286] kovaplus 0003:1E7D:2D50.0057: couldn't init struct kovaplus_device [ 552.739214][ T5286] kovaplus 0003:1E7D:2D50.0057: couldn't install mouse [ 552.800825][ T5286] kovaplus 0003:1E7D:2D50.0057: probe with driver kovaplus failed with error -71 [ 552.955939][ T5238] Bluetooth: hci4: command tx timeout [ 552.967740][ T5286] usb 2-1: USB disconnect, device number 51 [ 553.019023][T12653] vivid-000: disconnect [ 553.041708][T12653] vivid-000: reconnect [ 554.307690][ T5283] usb 3-1: USB disconnect, device number 63 [ 554.307700][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 554.377189][T12600] chnl_net:caif_netlink_parms(): no params data found [ 554.567629][ T5238] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18 [ 554.665796][ T1171] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 554.937703][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 554.974497][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.029012][ T1171] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 555.038307][ T5227] Bluetooth: hci4: command tx timeout [ 555.085414][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.093028][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.102766][ T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 555.141886][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.155111][ T1171] usb 5-1: config 0 descriptor?? [ 555.181571][T12600] bridge_slave_0: entered allmulticast mode [ 555.206726][ T1171] gspca_main: spca561-2.14.0 probing abcd:cdee [ 555.230902][T12600] bridge_slave_0: entered promiscuous mode [ 555.318744][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.339085][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 555.371689][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.393021][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.398615][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.430833][T12600] bridge_slave_1: entered allmulticast mode [ 555.445224][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.469301][T12600] bridge_slave_1: entered promiscuous mode [ 555.484856][ T25] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 555.526256][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.526349][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.598938][ T25] usb 3-1: config 0 descriptor?? [ 555.640838][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 555.751476][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.770351][ T1171] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 555.800724][ T1171] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.814869][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.828059][ T1171] usb 5-1: MIDIStreaming interface descriptor not found [ 556.093632][T12600] team0: Port device team_slave_0 added [ 556.113598][T12600] team0: Port device team_slave_1 added [ 556.316649][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.341076][ T5286] usb 5-1: USB disconnect, device number 61 [ 556.341236][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.474686][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.559102][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.584301][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.623862][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.974889][T12600] hsr_slave_0: entered promiscuous mode [ 557.015933][T12600] hsr_slave_1: entered promiscuous mode [ 557.032971][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.060925][T12600] Cannot create hsr debugfs directory [ 557.115850][ T5227] Bluetooth: hci4: command tx timeout [ 557.406023][ T5285] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 557.507473][ T25] usb 3-1: USB disconnect, device number 64 [ 557.617256][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 557.640749][ T5285] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 557.661102][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.681724][ T5285] usb 1-1: config 0 descriptor?? [ 558.356501][ T46] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 558.562035][T12600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.587822][ T46] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.646805][ T46] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 558.664986][ T46] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.682141][T12600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 558.683374][ T46] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 558.711193][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.725134][T12600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.744390][T12720] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 558.827787][T12600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 559.491728][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.583745][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.612453][ T46] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 559.663464][ T46] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input63 [ 559.685967][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.693270][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.858212][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.858340][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.976869][ T5283] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 560.032945][T12720] vivid-000: disconnect [ 560.048781][T12720] vivid-000: reconnect [ 560.156302][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 560.176062][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.233357][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.298058][ T5283] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 560.350515][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.410757][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.431296][ T5283] usb 2-1: config 0 descriptor?? [ 560.583849][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 560.685217][ T5285] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 560.741088][ T5285] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 560.812890][ T5285] asix 1-1:0.0: probe with driver asix failed with error -71 [ 560.847153][T12600] veth0_vlan: entered promiscuous mode [ 560.923123][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.936747][ T5285] usb 1-1: USB disconnect, device number 67 [ 560.976577][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.010496][T12600] veth1_vlan: entered promiscuous mode [ 561.070728][ T5283] hid (null): bogus close delimiter [ 561.116066][ T5286] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 561.164675][T12600] veth0_macvtap: entered promiscuous mode [ 561.183601][ T5281] usb 3-1: USB disconnect, device number 65 [ 561.189632][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 561.235021][T12600] veth1_macvtap: entered promiscuous mode [ 561.259322][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.324737][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.336225][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.361879][ T5283] usb 2-1: string descriptor 0 read error: -71 [ 561.369472][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 561.373772][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.395670][ T5286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 561.406376][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.421022][ T5286] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 561.440989][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 561.449846][ T5283] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 561.459465][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.474959][ T5283] letsketch 0003:6161:4D15.0058: probe with driver letsketch failed with error -32 [ 561.491116][ T5286] usb 5-1: Product: syz [ 561.492725][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.511445][ T5286] usb 5-1: Manufacturer: syz [ 561.515969][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.523363][ T5286] usb 5-1: SerialNumber: syz [ 561.533470][ T5283] usb 2-1: USB disconnect, device number 52 [ 561.540263][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.552241][ T5286] usb 5-1: config 0 descriptor?? [ 561.564429][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.587915][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.595161][T12754] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.612521][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.669609][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.733933][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.764676][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.783745][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.823258][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.848309][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.882814][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.902896][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.919962][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.939120][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.958241][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.978075][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.983250][ T5283] usb 5-1: USB disconnect, device number 62 [ 562.035312][T12600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.053501][T12600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.064062][T12600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.076399][T12600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.113223][T12774] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1556'. [ 562.278981][ T8070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.300129][ T8070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.397563][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.405488][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.565926][ T5283] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 562.775788][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 562.795434][ T5283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 562.836825][ T5283] usb 5-1: language id specifier not provided by device, defaulting to English [ 562.874658][ T5283] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 562.885800][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 562.894191][ T5283] usb 5-1: Product: syz [ 562.901245][ T5283] usb 5-1: Manufacturer: 잘讯ȫ䱒툳㶊褁왡圃橒ᮑ汇鑹紶ᡋ闔跂礴뮥绰妚袎镍봭옲ȇ屬祿唲適⫱䀈᪁䮎鬎鮆욈熖䜮ꗢ轤⮦妊议鳣㴌㭐䛟愍ሬ拙釼 [ 562.990501][ T5283] usb 5-1: SerialNumber: syz [ 563.033752][ T5283] usb 5-1: config 0 descriptor?? [ 563.099050][T12754] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.439283][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.459705][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.540989][T12811] FAULT_INJECTION: forcing a failure. [ 563.540989][T12811] name failslab, interval 1, probability 0, space 0, times 0 [ 563.560560][ T5285] usb 5-1: USB disconnect, device number 63 [ 563.575757][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.3.1564 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 563.586607][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 563.596718][T12811] Call Trace: [ 563.600006][T12811] [ 563.602946][T12811] dump_stack_lvl+0x241/0x360 [ 563.607644][T12811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.612843][T12811] ? __pfx__printk+0x10/0x10 [ 563.617445][T12811] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 563.623003][T12811] ? __pfx___might_resched+0x10/0x10 [ 563.628323][T12811] should_fail_ex+0x3b0/0x4e0 [ 563.633095][T12811] ? __pmd_alloc+0x110/0x630 [ 563.637802][T12811] should_failslab+0xac/0x100 [ 563.642534][T12811] ? __pmd_alloc+0x110/0x630 [ 563.647629][T12811] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 563.653057][T12811] __pmd_alloc+0x110/0x630 [ 563.657531][T12811] ? __pfx___pmd_alloc+0x10/0x10 [ 563.662528][T12811] ? __pfx_lock_release+0x10/0x10 [ 563.667643][T12811] handle_mm_fault+0xe86/0x1980 [ 563.672656][T12811] ? __pfx_handle_mm_fault+0x10/0x10 [ 563.677982][T12811] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 563.684345][T12811] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 563.689750][T12811] exc_page_fault+0x2b9/0x8c0 [ 563.694466][T12811] asm_exc_page_fault+0x26/0x30 [ 563.699335][T12811] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 563.705167][T12811] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 563.724899][T12811] RSP: 0018:ffffc9000495fd50 EFLAGS: 00050212 [ 563.730985][T12811] RAX: 0000000000000000 RBX: 0000000020000050 RCX: 0000000000000010 [ 563.738979][T12811] RDX: 0000000000000000 RSI: ffffc9000495fdc0 RDI: 0000000020000040 [ 563.746969][T12811] RBP: ffffc9000495fe30 R08: ffffc9000495fdcf R09: 1ffff9200092bfb9 [ 563.754958][T12811] R10: dffffc0000000000 R11: fffff5200092bfba R12: 0000000000000010 [ 563.762956][T12811] R13: dffffc0000000000 R14: 0000000020000040 R15: ffffc9000495fdc0 [ 563.771390][T12811] _copy_to_user+0x86/0xb0 [ 563.775824][T12811] put_timespec64+0xfa/0x150 [ 563.780439][T12811] ? __pfx_put_timespec64+0x10/0x10 [ 563.785683][T12811] __x64_sys_clock_getres+0x209/0x270 [ 563.791125][T12811] ? __pfx___x64_sys_clock_getres+0x10/0x10 [ 563.797057][T12811] ? do_syscall_64+0x100/0x230 [ 563.801833][T12811] ? do_syscall_64+0xb6/0x230 [ 563.806524][T12811] do_syscall_64+0xf3/0x230 [ 563.811040][T12811] ? clear_bhb_loop+0x35/0x90 [ 563.815734][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.821671][T12811] RIP: 0033:0x7fe4a9779e79 [ 563.826121][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.845772][T12811] RSP: 002b:00007fe4aa58f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e5 [ 563.854230][T12811] RAX: ffffffffffffffda RBX: 00007fe4a9915f80 RCX: 00007fe4a9779e79 [ 563.862212][T12811] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000002 [ 563.870212][T12811] RBP: 00007fe4aa58f090 R08: 0000000000000000 R09: 0000000000000000 [ 563.878192][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.886184][T12811] R13: 0000000000000001 R14: 00007fe4a9915f80 R15: 00007fe4a9a3fa38 [ 563.894214][T12811] [ 564.004361][T12815] xt_nfacct: accounting object `syz1' does not exists [ 564.019115][ T5281] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 564.038078][T12815] fuse: Bad value for 'fd' [ 564.227787][ T5281] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.251387][ T5281] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.294331][ T5281] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 564.347719][ T5281] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 564.368633][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.390034][T12809] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 564.575758][ T5283] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 564.766256][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 564.821240][ T5283] usb 4-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 564.836728][T12841] fuse: Unknown parameter 'smackfsfloor' [ 564.877409][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.935719][ T5283] usb 4-1: Product: syz [ 564.939961][ T5283] usb 4-1: Manufacturer: syz [ 564.944592][ T5283] usb 4-1: SerialNumber: syz [ 565.009410][ T5283] usb 4-1: config 0 descriptor?? [ 565.216688][ T5281] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 565.234355][ T1171] usb 4-1: USB disconnect, device number 70 [ 565.256117][ T5281] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input64 [ 565.366756][ T5283] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 565.507442][T12809] vivid-000: disconnect [ 565.548773][T12809] vivid-000: reconnect [ 565.629414][ T5283] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 565.683765][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 565.725110][ T5283] usb 2-1: Product: syz [ 565.782140][ T5283] usb 2-1: config 0 descriptor?? [ 565.826544][ T5283] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 565.880182][ T5283] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 566.098688][T12873] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1574'. [ 566.354733][ T5283] usb 2-1: USB disconnect, device number 53 [ 566.416007][ T5283] ftdi_sio 2-1:0.0: device disconnected [ 566.683828][T12883] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1577'. [ 566.857917][ T1171] usb 3-1: USB disconnect, device number 66 [ 566.858044][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 567.277235][ T5285] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 567.486556][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 567.499276][ T5285] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 567.522535][ T5285] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.548705][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.576234][ T1171] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 567.596131][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.640937][ T5285] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.704238][ T5285] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.739910][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.789551][ T1171] usb 3-1: Using ep0 maxpacket: 16 [ 567.809233][ T1171] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 567.845687][ T1171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.872740][ T1171] usb 3-1: config 0 descriptor?? [ 567.931029][ T1171] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 567.979222][T12916] FAULT_INJECTION: forcing a failure. [ 567.979222][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 567.994606][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.016550][ T5285] usb 1-1: usb_control_msg returned -32 [ 568.036423][ T5285] usbtmc 1-1:16.0: can't read capabilities [ 568.066117][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.082706][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.4.1584 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 568.093551][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 568.103658][T12916] Call Trace: [ 568.106975][T12916] [ 568.109941][T12916] dump_stack_lvl+0x241/0x360 [ 568.114675][T12916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.119921][T12916] ? __pfx__printk+0x10/0x10 [ 568.124579][T12916] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 568.130093][T12916] ? __pfx___might_resched+0x10/0x10 [ 568.135441][T12916] should_fail_ex+0x3b0/0x4e0 [ 568.140178][T12916] should_failslab+0xac/0x100 [ 568.144909][T12916] ? ip_set_create+0x330/0x1900 [ 568.149834][T12916] __kmalloc_cache_noprof+0x6c/0x2c0 [ 568.155154][T12916] ip_set_create+0x330/0x1900 [ 568.159949][T12916] ? trace_raw_output_contention_end+0x70/0xd0 [ 568.166126][T12916] ? __pfx_ip_set_create+0x10/0x10 [ 568.171267][T12916] ? trace_contention_end+0x3c/0x120 [ 568.176595][T12916] ? nfnetlink_rcv_msg+0x225/0x1180 [ 568.181816][T12916] nfnetlink_rcv_msg+0xbec/0x1180 [ 568.186861][T12916] ? kernel_text_address+0xa7/0xe0 [ 568.191989][T12916] ? nfnetlink_rcv_msg+0x225/0x1180 [ 568.197230][T12916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 568.202728][T12916] ? netlink_deliver_tap+0x19d/0x1b0 [ 568.208024][T12916] ? netlink_unicast+0x7c4/0x990 [ 568.212994][T12916] ? netlink_sendmsg+0x8e4/0xcb0 [ 568.218043][T12916] ? __sock_sendmsg+0x221/0x270 [ 568.222944][T12916] ? ____sys_sendmsg+0x525/0x7d0 [ 568.227952][T12916] ? __sys_sendmsg+0x2b0/0x3a0 [ 568.232743][T12916] ? do_syscall_64+0xf3/0x230 [ 568.237440][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.243541][T12916] netlink_rcv_skb+0x1e3/0x430 [ 568.248344][T12916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 568.253820][T12916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.259153][T12916] ? apparmor_capable+0x13b/0x1b0 [ 568.264200][T12916] ? bpf_lsm_capable+0x9/0x10 [ 568.268890][T12916] ? security_capable+0x90/0xb0 [ 568.273801][T12916] nfnetlink_rcv+0x297/0x2ad0 [ 568.278503][T12916] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 568.284264][T12916] ? __dev_queue_xmit+0x2da/0x3e90 [ 568.289403][T12916] ? __dev_queue_xmit+0x1763/0x3e90 [ 568.294624][T12916] ? kasan_save_track+0x51/0x80 [ 568.299503][T12916] ? do_syscall_64+0xf3/0x230 [ 568.304194][T12916] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 568.309327][T12916] ? __dev_queue_xmit+0x2da/0x3e90 [ 568.314462][T12916] ? __pfx___dev_queue_xmit+0x10/0x10 [ 568.319876][T12916] ? ref_tracker_free+0x643/0x7e0 [ 568.324933][T12916] ? __asan_memcpy+0x40/0x70 [ 568.329546][T12916] ? __pfx_ref_tracker_free+0x10/0x10 [ 568.334961][T12916] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.340300][T12916] ? skb_clone+0x240/0x390 [ 568.344738][T12916] ? __pfx_lock_release+0x10/0x10 [ 568.349794][T12916] ? __netlink_deliver_tap+0x77e/0x7c0 [ 568.355274][T12916] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.360491][T12916] netlink_unicast+0x7f6/0x990 [ 568.365293][T12916] ? __pfx_netlink_unicast+0x10/0x10 [ 568.370603][T12916] ? __virt_addr_valid+0x183/0x530 [ 568.375766][T12916] ? __check_object_size+0x49c/0x900 [ 568.381105][T12916] ? bpf_lsm_netlink_send+0x9/0x10 [ 568.386268][T12916] netlink_sendmsg+0x8e4/0xcb0 [ 568.391075][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.396385][T12916] ? __import_iovec+0x536/0x820 [ 568.401262][T12916] ? aa_sock_msg_perm+0x91/0x160 [ 568.406229][T12916] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 568.411533][T12916] ? security_socket_sendmsg+0x87/0xb0 [ 568.417018][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.422324][T12916] __sock_sendmsg+0x221/0x270 [ 568.427035][T12916] ____sys_sendmsg+0x525/0x7d0 [ 568.431840][T12916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.437177][T12916] __sys_sendmsg+0x2b0/0x3a0 [ 568.441880][T12916] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.447641][T12916] ? vfs_write+0x7c4/0xc90 [ 568.452136][T12916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.458500][T12916] ? do_syscall_64+0x100/0x230 [ 568.463294][T12916] ? do_syscall_64+0xb6/0x230 [ 568.467988][T12916] do_syscall_64+0xf3/0x230 [ 568.472510][T12916] ? clear_bhb_loop+0x35/0x90 [ 568.477217][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.483144][T12916] RIP: 0033:0x7fb362979e79 [ 568.487577][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.507222][T12916] RSP: 002b:00007fb3637f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.515668][T12916] RAX: ffffffffffffffda RBX: 00007fb362b15f80 RCX: 00007fb362979e79 [ 568.523657][T12916] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 568.531701][T12916] RBP: 00007fb3637f2090 R08: 0000000000000000 R09: 0000000000000000 [ 568.539708][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.547702][T12916] R13: 0000000000000000 R14: 00007fb362b15f80 R15: 00007fb362c3fa38 [ 568.555714][T12916] [ 568.607534][T12924] FAULT_INJECTION: forcing a failure. [ 568.607534][T12924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.641559][T12924] CPU: 1 UID: 0 PID: 12924 Comm: syz.1.1586 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 568.652409][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 568.662507][T12924] Call Trace: [ 568.665821][T12924] [ 568.668848][T12924] dump_stack_lvl+0x241/0x360 [ 568.673592][T12924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.678848][T12924] ? __pfx__printk+0x10/0x10 [ 568.683494][T12924] ? __pfx_lock_release+0x10/0x10 [ 568.688672][T12924] should_fail_ex+0x3b0/0x4e0 [ 568.693488][T12924] _copy_from_iter+0x1f6/0x1960 [ 568.698391][T12924] ? __virt_addr_valid+0x183/0x530 [ 568.703548][T12924] ? __pfx_lock_release+0x10/0x10 [ 568.708636][T12924] ? __alloc_skb+0x28f/0x440 [ 568.713277][T12924] ? __pfx__copy_from_iter+0x10/0x10 [ 568.718612][T12924] ? __virt_addr_valid+0x183/0x530 [ 568.723753][T12924] ? __virt_addr_valid+0x183/0x530 [ 568.728880][T12924] ? __virt_addr_valid+0x45f/0x530 [ 568.734023][T12924] ? __check_object_size+0x49c/0x900 [ 568.739336][T12924] netlink_sendmsg+0x73d/0xcb0 [ 568.744145][T12924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.749455][T12924] ? __import_iovec+0x536/0x820 [ 568.754329][T12924] ? aa_sock_msg_perm+0x91/0x160 [ 568.759296][T12924] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 568.764605][T12924] ? security_socket_sendmsg+0x87/0xb0 [ 568.770092][T12924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.775396][T12924] __sock_sendmsg+0x221/0x270 [ 568.780109][T12924] ____sys_sendmsg+0x525/0x7d0 [ 568.784912][T12924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.790234][T12924] __sys_sendmsg+0x2b0/0x3a0 [ 568.794860][T12924] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.799993][T12924] ? vfs_write+0x7c4/0xc90 [ 568.804465][T12924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.810817][T12924] ? do_syscall_64+0x100/0x230 [ 568.815607][T12924] ? do_syscall_64+0xb6/0x230 [ 568.820305][T12924] do_syscall_64+0xf3/0x230 [ 568.824829][T12924] ? clear_bhb_loop+0x35/0x90 [ 568.829547][T12924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.835458][T12924] RIP: 0033:0x7fa908979e79 [ 568.839887][T12924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.859523][T12924] RSP: 002b:00007fa9096ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.867966][T12924] RAX: ffffffffffffffda RBX: 00007fa908b15f80 RCX: 00007fa908979e79 [ 568.875954][T12924] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 568.883942][T12924] RBP: 00007fa9096ad090 R08: 0000000000000000 R09: 0000000000000000 [ 568.891934][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.900011][T12924] R13: 0000000000000000 R14: 00007fa908b15f80 R15: 00007fa908c3fa38 [ 568.908121][T12924] [ 569.009347][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.041196][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.315907][ T5285] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 569.507739][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 569.531269][ T5285] usb 4-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 569.556033][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.582046][ T5285] usb 4-1: Product: syz [ 569.619507][ T5285] usb 4-1: Manufacturer: syz [ 569.632090][ T5285] usb 4-1: SerialNumber: syz [ 569.662846][ T5285] usb 4-1: config 0 descriptor?? [ 569.886038][ T1171] gspca_sonixj: reg_w1 err -110 [ 569.895831][ T5283] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 569.914790][ T5285] usb 4-1: USB disconnect, device number 71 [ 569.915775][ T1171] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 570.118089][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 570.132480][ T5283] usb 2-1: config 0 has no interfaces? [ 570.141243][ T5283] usb 2-1: New USB device found, idVendor=0582, idProduct=05e6, bcdDevice=4e.00 [ 570.145381][T12948] kvm: kvm [12946]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4 [ 570.166174][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.179809][ T25] usb 1-1: USB disconnect, device number 68 [ 570.190506][ T5283] usb 2-1: Product: syz [ 570.195085][ T5283] usb 2-1: Manufacturer: syz [ 570.210776][ T5283] usb 2-1: SerialNumber: syz [ 570.224035][ T5283] usb 2-1: config 0 descriptor?? [ 570.448668][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.474504][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.523295][T12939] team0: entered promiscuous mode [ 570.528850][T12939] team_slave_0: entered promiscuous mode [ 570.534969][T12939] team_slave_1: entered promiscuous mode [ 570.553167][T12939] team0: left promiscuous mode [ 570.570215][T12939] team_slave_0: left promiscuous mode [ 570.584932][T12939] team_slave_1: left promiscuous mode [ 570.678653][ T5281] usb 2-1: USB disconnect, device number 54 [ 571.339188][ T25] usb 3-1: USB disconnect, device number 67 [ 571.357321][ T29] audit: type=1326 audit(1724753652.586:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.491698][ T29] audit: type=1326 audit(1724753652.586:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.630343][ T29] audit: type=1326 audit(1724753652.616:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.685772][ T5281] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 571.728507][ T29] audit: type=1326 audit(1724753652.616:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.825769][ T29] audit: type=1326 audit(1724753652.616:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.893347][ T5281] usb 5-1: config 0 has no interfaces? [ 571.903439][ T5281] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 571.922823][ T29] audit: type=1326 audit(1724753652.616:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 571.975707][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.984098][ T29] audit: type=1326 audit(1724753652.616:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb362979e79 code=0x7ffc0000 [ 572.003330][ T5281] usb 5-1: config 0 descriptor?? [ 572.035817][ T5285] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 572.065318][ T29] audit: type=1326 audit(1724753652.616:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb362978810 code=0x7ffc0000 [ 572.105058][ T29] audit: type=1326 audit(1724753652.616:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb362979a7b code=0x7ffc0000 [ 572.135114][ T29] audit: type=1326 audit(1724753652.616:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb362979a7b code=0x7ffc0000 [ 572.205811][ T5285] usb 2-1: device descriptor read/64, error -71 [ 572.487514][ T5285] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 572.675724][ T5285] usb 2-1: device descriptor read/64, error -71 [ 572.717830][ C0] ------------[ cut here ]------------ [ 572.723919][ C0] WARNING: CPU: 0 PID: 4678 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 572.732518][ C0] Modules linked in: [ 572.736506][ C0] CPU: 0 UID: 0 PID: 4678 Comm: udevd Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 572.746873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 572.756984][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 572.761944][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 db c0 81 f7 66 90 e8 d4 c0 81 f7 31 ff 48 89 de ba 02 00 00 00 e8 75 94 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 572.781629][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 572.787788][ C0] RAX: e8adb7e843be2400 RBX: ffff888062b62640 RCX: ffffffff81703f6a [ 572.795861][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: ffffffff8c606f40 [ 572.803852][ C0] RBP: 0000000000000001 R08: ffffffff937348df R09: 1ffffffff26e691b [ 572.811979][ C0] R10: dffffc0000000000 R11: fffffbfff26e691c R12: dffffc0000000000 [ 572.820004][ C0] R13: dffffc0000000000 R14: ffff8880262b1dc0 R15: ffff888017f11a00 [ 572.828295][ C0] FS: 00007f17b6594c80(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 572.837297][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.843912][ C0] CR2: 00007f27e00456c0 CR3: 000000007de50000 CR4: 00000000003506f0 [ 572.851930][ C0] DR0: 0000000000000200 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.859950][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 572.868013][ C0] Call Trace: [ 572.871320][ C0] [ 572.874193][ C0] ? __warn+0x163/0x4e0 [ 572.878405][ C0] ? ip_rt_bug+0x2c/0x110 [ 572.882945][ C0] ? report_bug+0x2b3/0x500 [ 572.887495][ C0] ? ip_rt_bug+0x2c/0x110 [ 572.891834][ C0] ? handle_bug+0x3e/0x70 [ 572.896196][ C0] ? exc_invalid_op+0x1a/0x50 [ 572.900877][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 572.905961][ C0] ? mark_lock+0x9a/0x350 [ 572.910304][ C0] ? ip_rt_bug+0x2c/0x110 [ 572.914638][ C0] ip_push_pending_frames+0xbf/0x150 [ 572.919971][ C0] __icmp_send+0xf89/0x14e0 [ 572.924497][ C0] ? __icmp_send+0x59c/0x14e0 [ 572.929209][ C0] ? __pfx___icmp_send+0x10/0x10 [ 572.934168][ C0] ? mark_lock+0x9a/0x350 [ 572.938564][ C0] ? look_up_lock_class+0x77/0x160 [ 572.943725][ C0] ? mark_lock+0x9a/0x350 [ 572.948212][ C0] ipv4_link_failure+0x62f/0xa10 [ 572.953460][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 572.959005][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 572.964141][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 572.969746][ C0] arp_error_report+0x114/0x160 [ 572.974666][ C0] neigh_invalidate+0x244/0x470 [ 572.979609][ C0] neigh_timer_handler+0x8a5/0xfe0 [ 572.985207][ C0] call_timer_fn+0x18e/0x650 [ 572.989905][ C0] ? irqentry_exit+0x63/0x90 [ 572.994540][ C0] ? call_timer_fn+0xc0/0x650 [ 572.999291][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 573.004951][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 573.010231][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 573.015910][ C0] __run_timer_base+0x66a/0x8e0 [ 573.020779][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 573.026190][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.032538][ C0] run_timer_softirq+0xb7/0x170 [ 573.037445][ C0] handle_softirqs+0x2c4/0x970 [ 573.042235][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 573.047078][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 573.052409][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 573.057749][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 573.062356][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 573.067605][ C0] irq_exit_rcu+0x9/0x30 [ 573.071868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.077549][ C0] [ 573.080492][ C0] [ 573.083422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.089452][ C0] RIP: 0010:lock_release+0x658/0xa30 [ 573.094849][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 15 d6 8a 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 573.114499][ C0] RSP: 0018:ffffc900032bf280 EFLAGS: 00000206 [ 573.120779][ C0] RAX: 0000000000000001 RBX: 1ffff92000657e62 RCX: ffffc900032bf303 [ 573.128811][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606f40 [ 573.136819][ C0] RBP: ffffc900032bf3b0 R08: ffffffff9017f86f R09: 1ffffffff202ff0d [ 573.144803][ C0] R10: dffffc0000000000 R11: fffffbfff202ff0e R12: 1ffff92000657e5c [ 573.152813][ C0] R13: 0000000000000246 R14: ffffc900032bf310 R15: dffffc0000000000 [ 573.160843][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 573.165920][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 573.171135][ C0] ? __pfx_lock_release+0x10/0x10 [ 573.176309][ C0] ? deref_stack_reg+0x1c7/0x260 [ 573.181289][ C0] is_bpf_text_address+0x280/0x2a0 [ 573.186454][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 573.191887][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 573.198103][ C0] kernel_text_address+0xa7/0xe0 [ 573.203050][ C0] __kernel_text_address+0xd/0x40 [ 573.208122][ C0] unwind_get_return_address+0x5d/0xc0 [ 573.213598][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.219725][ C0] arch_stack_walk+0x125/0x1b0 [ 573.224512][ C0] stack_trace_save+0x118/0x1d0 [ 573.229434][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 573.234847][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.241065][ C0] kasan_save_track+0x3f/0x80 [ 573.245835][ C0] ? kasan_save_track+0x3f/0x80 [ 573.250750][ C0] ? kasan_save_free_info+0x40/0x50 [ 573.256100][ C0] ? poison_slab_object+0xe0/0x150 [ 573.261261][ C0] ? __kasan_slab_free+0x37/0x60 [ 573.266275][ C0] ? kfree+0x149/0x360 [ 573.270354][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 573.276211][ C0] ? tomoyo_path_perm+0x2b7/0x740 [ 573.281240][ C0] ? security_inode_getattr+0xd8/0x130 [ 573.286734][ C0] ? vfs_getattr+0x45/0x430 [ 573.291328][ C0] ? vfs_statx+0x199/0x490 [ 573.295796][ C0] ? vfs_fstatat+0x145/0x190 [ 573.300408][ C0] ? __x64_sys_newfstatat+0x11d/0x1a0 [ 573.305806][ C0] ? do_syscall_64+0xf3/0x230 [ 573.310479][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.316622][ C0] ? tomoyo_encode+0x26f/0x540 [ 573.321392][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 573.327230][ C0] kasan_save_free_info+0x40/0x50 [ 573.332260][ C0] poison_slab_object+0xe0/0x150 [ 573.337247][ C0] __kasan_slab_free+0x37/0x60 [ 573.342021][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 573.347906][ C0] kfree+0x149/0x360 [ 573.351844][ C0] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 573.357541][ C0] tomoyo_path_perm+0x2b7/0x740 [ 573.362401][ C0] ? terminate_walk+0x365/0x430 [ 573.367301][ C0] ? tomoyo_path_perm+0x287/0x740 [ 573.372355][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 573.377823][ C0] security_inode_getattr+0xd8/0x130 [ 573.383151][ C0] vfs_getattr+0x45/0x430 [ 573.387540][ C0] vfs_statx+0x199/0x490 [ 573.391805][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 573.396618][ C0] ? getname_flags+0x1e3/0x540 [ 573.401390][ C0] vfs_fstatat+0x145/0x190 [ 573.405879][ C0] __x64_sys_newfstatat+0x11d/0x1a0 [ 573.411106][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 573.416890][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.423235][ C0] ? do_syscall_64+0x100/0x230 [ 573.428039][ C0] ? do_syscall_64+0xb6/0x230 [ 573.432722][ C0] do_syscall_64+0xf3/0x230 [ 573.437259][ C0] ? clear_bhb_loop+0x35/0x90 [ 573.441945][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.447892][ C0] RIP: 0033:0x7f17b61165f4 [ 573.452326][ C0] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 573.472241][ C0] RSP: 002b:00007ffcb3282638 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 573.480773][ C0] RAX: ffffffffffffffda RBX: 00007ffcb3283fd8 RCX: 00007f17b61165f4 [ 573.488808][ C0] RDX: 00007ffcb3282648 RSI: 00007ffcb3282ad8 RDI: 00000000ffffff9c [ 573.496816][ C0] RBP: 00007ffcb32826d8 R08: 0000000000000000 R09: 0000000000000000 [ 573.504804][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb3282ad8 [ 573.512814][ C0] R13: 00007ffcb3282648 R14: 0000565357f97910 R15: 0000000000000000 [ 573.520857][ C0] [ 573.523880][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 573.531173][ C0] CPU: 0 UID: 0 PID: 4678 Comm: udevd Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 573.541426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 573.551502][ C0] Call Trace: [ 573.554809][ C0] [ 573.557685][ C0] dump_stack_lvl+0x241/0x360 [ 573.562385][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.567599][ C0] ? __pfx__printk+0x10/0x10 [ 573.572235][ C0] ? vscnprintf+0x5d/0x90 [ 573.576610][ C0] panic+0x349/0x860 [ 573.580527][ C0] ? __warn+0x172/0x4e0 [ 573.584735][ C0] ? __pfx_panic+0x10/0x10 [ 573.589458][ C0] __warn+0x346/0x4e0 [ 573.593443][ C0] ? ip_rt_bug+0x2c/0x110 [ 573.597779][ C0] report_bug+0x2b3/0x500 [ 573.602134][ C0] ? ip_rt_bug+0x2c/0x110 [ 573.606466][ C0] handle_bug+0x3e/0x70 [ 573.610621][ C0] exc_invalid_op+0x1a/0x50 [ 573.615126][ C0] asm_exc_invalid_op+0x1a/0x20 [ 573.619979][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 573.624918][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 db c0 81 f7 66 90 e8 d4 c0 81 f7 31 ff 48 89 de ba 02 00 00 00 e8 75 94 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 573.644628][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 573.650716][ C0] RAX: e8adb7e843be2400 RBX: ffff888062b62640 RCX: ffffffff81703f6a [ 573.658704][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: ffffffff8c606f40 [ 573.666683][ C0] RBP: 0000000000000001 R08: ffffffff937348df R09: 1ffffffff26e691b [ 573.674767][ C0] R10: dffffc0000000000 R11: fffffbfff26e691c R12: dffffc0000000000 [ 573.682779][ C0] R13: dffffc0000000000 R14: ffff8880262b1dc0 R15: ffff888017f11a00 [ 573.690811][ C0] ? mark_lock+0x9a/0x350 [ 573.695236][ C0] ip_push_pending_frames+0xbf/0x150 [ 573.700557][ C0] __icmp_send+0xf89/0x14e0 [ 573.705090][ C0] ? __icmp_send+0x59c/0x14e0 [ 573.709799][ C0] ? __pfx___icmp_send+0x10/0x10 [ 573.714745][ C0] ? mark_lock+0x9a/0x350 [ 573.719191][ C0] ? look_up_lock_class+0x77/0x160 [ 573.724330][ C0] ? mark_lock+0x9a/0x350 [ 573.728704][ C0] ipv4_link_failure+0x62f/0xa10 [ 573.733669][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 573.739142][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 573.744278][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 573.749772][ C0] arp_error_report+0x114/0x160 [ 573.754659][ C0] neigh_invalidate+0x244/0x470 [ 573.759548][ C0] neigh_timer_handler+0x8a5/0xfe0 [ 573.764691][ C0] call_timer_fn+0x18e/0x650 [ 573.769387][ C0] ? irqentry_exit+0x63/0x90 [ 573.774013][ C0] ? call_timer_fn+0xc0/0x650 [ 573.778849][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 573.784523][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 573.789662][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 573.795326][ C0] __run_timer_base+0x66a/0x8e0 [ 573.800199][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 573.805588][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.811948][ C0] run_timer_softirq+0xb7/0x170 [ 573.816827][ C0] handle_softirqs+0x2c4/0x970 [ 573.821601][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 573.826375][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 573.831670][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 573.836880][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 573.841650][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 573.846863][ C0] irq_exit_rcu+0x9/0x30 [ 573.851112][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.856760][ C0] [ 573.859710][ C0] [ 573.862665][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.868748][ C0] RIP: 0010:lock_release+0x658/0xa30 [ 573.874076][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 15 d6 8a 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 573.893721][ C0] RSP: 0018:ffffc900032bf280 EFLAGS: 00000206 [ 573.899803][ C0] RAX: 0000000000000001 RBX: 1ffff92000657e62 RCX: ffffc900032bf303 [ 573.907794][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606f40 [ 573.915766][ C0] RBP: ffffc900032bf3b0 R08: ffffffff9017f86f R09: 1ffffffff202ff0d [ 573.923743][ C0] R10: dffffc0000000000 R11: fffffbfff202ff0e R12: 1ffff92000657e5c [ 573.931758][ C0] R13: 0000000000000246 R14: ffffc900032bf310 R15: dffffc0000000000 [ 573.939765][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 573.944831][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 573.950045][ C0] ? __pfx_lock_release+0x10/0x10 [ 573.955110][ C0] ? deref_stack_reg+0x1c7/0x260 [ 573.960080][ C0] is_bpf_text_address+0x280/0x2a0 [ 573.965322][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 573.970654][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 573.976826][ C0] kernel_text_address+0xa7/0xe0 [ 573.981797][ C0] __kernel_text_address+0xd/0x40 [ 573.986833][ C0] unwind_get_return_address+0x5d/0xc0 [ 573.992301][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.998372][ C0] arch_stack_walk+0x125/0x1b0 [ 574.003148][ C0] stack_trace_save+0x118/0x1d0 [ 574.008029][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 574.013445][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.019448][ C0] kasan_save_track+0x3f/0x80 [ 574.024149][ C0] ? kasan_save_track+0x3f/0x80 [ 574.029029][ C0] ? kasan_save_free_info+0x40/0x50 [ 574.034261][ C0] ? poison_slab_object+0xe0/0x150 [ 574.039402][ C0] ? __kasan_slab_free+0x37/0x60 [ 574.044344][ C0] ? kfree+0x149/0x360 [ 574.048501][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 574.054318][ C0] ? tomoyo_path_perm+0x2b7/0x740 [ 574.059346][ C0] ? security_inode_getattr+0xd8/0x130 [ 574.064916][ C0] ? vfs_getattr+0x45/0x430 [ 574.069490][ C0] ? vfs_statx+0x199/0x490 [ 574.073907][ C0] ? vfs_fstatat+0x145/0x190 [ 574.078598][ C0] ? __x64_sys_newfstatat+0x11d/0x1a0 [ 574.084022][ C0] ? do_syscall_64+0xf3/0x230 [ 574.088752][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.094928][ C0] ? tomoyo_encode+0x26f/0x540 [ 574.099738][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 574.105562][ C0] kasan_save_free_info+0x40/0x50 [ 574.110615][ C0] poison_slab_object+0xe0/0x150 [ 574.115579][ C0] __kasan_slab_free+0x37/0x60 [ 574.120385][ C0] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 574.126211][ C0] kfree+0x149/0x360 [ 574.130161][ C0] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 574.135827][ C0] tomoyo_path_perm+0x2b7/0x740 [ 574.140705][ C0] ? terminate_walk+0x365/0x430 [ 574.145615][ C0] ? tomoyo_path_perm+0x287/0x740 [ 574.151034][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 574.156498][ C0] security_inode_getattr+0xd8/0x130 [ 574.161827][ C0] vfs_getattr+0x45/0x430 [ 574.166181][ C0] vfs_statx+0x199/0x490 [ 574.170556][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 574.175345][ C0] ? getname_flags+0x1e3/0x540 [ 574.180128][ C0] vfs_fstatat+0x145/0x190 [ 574.184555][ C0] __x64_sys_newfstatat+0x11d/0x1a0 [ 574.189773][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 574.195566][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.201914][ C0] ? do_syscall_64+0x100/0x230 [ 574.206700][ C0] ? do_syscall_64+0xb6/0x230 [ 574.211379][ C0] do_syscall_64+0xf3/0x230 [ 574.215884][ C0] ? clear_bhb_loop+0x35/0x90 [ 574.220569][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.226480][ C0] RIP: 0033:0x7f17b61165f4 [ 574.230936][ C0] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 574.250728][ C0] RSP: 002b:00007ffcb3282638 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 574.259153][ C0] RAX: ffffffffffffffda RBX: 00007ffcb3283fd8 RCX: 00007f17b61165f4 [ 574.267146][ C0] RDX: 00007ffcb3282648 RSI: 00007ffcb3282ad8 RDI: 00000000ffffff9c [ 574.275157][ C0] RBP: 00007ffcb32826d8 R08: 0000000000000000 R09: 0000000000000000 [ 574.283165][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb3282ad8 [ 574.291172][ C0] R13: 00007ffcb3282648 R14: 0000565357f97910 R15: 0000000000000000 [ 574.299194][ C0] [ 574.302518][ C0] Kernel Offset: disabled [ 574.307008][ C0] Rebooting in 86400 seconds..