last executing test programs: 6.335442005s ago: executing program 4 (id=728): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.23457707s ago: executing program 4 (id=729): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r0}) write(r4, 0x0, 0x0) 5.1738314s ago: executing program 2 (id=733): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091401001000786895770000040001"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) dup3(r5, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f00000003c0)=ANY=[], 0x100000530) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.114073178s ago: executing program 1 (id=734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008004) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r4, 0x0, 0x0, 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x34000000, @local}}}, 0x88) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) 5.038618853s ago: executing program 4 (id=735): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4.810828977s ago: executing program 4 (id=736): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000100)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read(r0, &(0x7f00000002c0)=""/319, 0x13f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000025000000bf0900000000000055090100030000009500000000000000bf91000000000000b7020000000000008500000095000000b700000000000000950000000000000017574442430ea5ed980ba729791f18a8fca414df12300aee53005b30dfba04bc20f0f97ae2f7ba0511bfb9b740265e5be427e2db570044c62d6a5e75dbf641ba323cb4713d8edc421749ccbcd622c9"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r1) 4.112565942s ago: executing program 2 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 3.851986918s ago: executing program 0 (id=740): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000200)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.823868559s ago: executing program 2 (id=741): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 3.618285879s ago: executing program 2 (id=743): r0 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6}, 0x38) close(r0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.575553165s ago: executing program 4 (id=744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000240)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000120001000000000000000000e000000200000000000000000000000000000000000033000c0015"], 0x48}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x3}]}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) 3.389648303s ago: executing program 3 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r0}) write(r4, 0x0, 0x0) 2.875615283s ago: executing program 0 (id=746): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x115, 0x0, 0x0, {0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.569275113s ago: executing program 2 (id=747): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="278ccad80010b15bf557e680f6a967e3687043908568789de8f39c7ca80b2ab5959ce9b24bd1d54ccc1b07ee08ebaf131b171f1fda0b51dc2c81bdbf8f3ccfc633928da35a369273a0c1534b103e6fb08e133f02d99a7a2e40e6b9c32be1881eb0d9046fb70e1d845657fd9fad455af067d5478c34cf9a757d4fcb9ebcc947a0cb87e890df4e35d249ae", @ANYRES16=r5, @ANYBLOB="01000000000000000000030000000c0009800800020034000000"], 0x20}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r7, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 2.511572543s ago: executing program 4 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006480)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=0x0, 0x0) pause() syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x1d2d, 0x0, 0x11, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000140)="83", 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r7 = epoll_create1(0x0) eventfd(0x0) epoll_pwait(r7, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000000101030f0000000000000000000000000400028008000840000000000c0019080000020040010000"], 0x2c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 2.393429719s ago: executing program 0 (id=749): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091401001000786895770000040001"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) dup3(r5, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f00000003c0)=ANY=[], 0x100000530) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.163341675s ago: executing program 1 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x100000, @private1, 0x216}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000e851bad3cdc8f84ddb91bbd5a359316ef3a83f8337b0d69719b4f1d6b5d2465fb3649b9efe72f9967246c95497e1cd565a854bf6bce5760bcce68752195e26b4e8316c2b2b1146c84d33c15ed35ced4964178a4fc5c239a974a3dbee4c20024820aad779596b00dd8998a705dca89900a54e95c29e2446fc51c0a50f90df61fa636257b2e1f91c41ab91b669a55fa40331d7d3f1", @ANYRES16=r5, @ANYBLOB="010000000000000000000500000004000180bc000380b700040008feff0ee24b55c3e4b1b10376cfc8955b7af5a87e0238e016b0936f93f75fd3b03a23b1a6941c7e58dacfc0eda480d2f7193e9bfae57707337f65af02a69bfb437412f7fc76afd0532f0a7e7368184504c6e347cd0cd5435326078f90fcc38e87b2e1da85013ea6ec08a3f08b672e59e91c344984b3a4ff72838d4613a64236939cd68e3baa9aac20a326492a88d40ad5799177daf08599060d6841c9db40ce395e8adbd7217eb408483fcdfdc244266533f600"], 0xd4}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000002c0)={0x80000, 0x1, 0xc63, 0xfff, 0x34}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x20) setuid(0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 2.162431638s ago: executing program 3 (id=751): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0xf000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500)={0x100000, 0x9883cc54e17de64b}) 2.023826826s ago: executing program 3 (id=752): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x0, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x10e, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024"], 0x0) 1.96920635s ago: executing program 2 (id=753): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0441b613a31ed707e2"}, @timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="c109000000000000001d1e010271261c", 0x10}], 0x1}, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x4000007b, r5, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0xa}, @lsrr={0x83, 0x3, 0x84}, @ra={0x94, 0x4, 0x1}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) connect(r2, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.546831047s ago: executing program 1 (id=754): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.427568261s ago: executing program 1 (id=755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_GETX(r4, 0x40189206, &(0x7f0000000140)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) syz_io_uring_setup(0x18a1, &(0x7f0000000240)={0x0, 0x8, 0x10100, 0x2, 0x0, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000500)=0xa, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 1.21200161s ago: executing program 3 (id=756): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.124743278s ago: executing program 0 (id=757): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x80}}, 0x0) 758.386268ms ago: executing program 3 (id=758): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) r1 = fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fanotify_mark(r1, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r2, &(0x7f0000001840)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 720.428048ms ago: executing program 0 (id=759): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={0x0}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) 299.534471ms ago: executing program 0 (id=760): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) sendmmsg$inet(r4, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="bd", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x1895, &(0x7f00000002c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 270.466545ms ago: executing program 1 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x57e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 210.771914ms ago: executing program 3 (id=762): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008004) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r4, 0x0, 0x0, 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x34000000, @local}}}, 0x88) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) 0s ago: executing program 1 (id=763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500)={0x100000, 0x9883cc54e17de64b}) kernel console output (not intermixed with test programs): ved in 2025, please contact the netdev mailing list [ 104.309927][ T5602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.372205][ T5308] usb 4-1: Using ep0 maxpacket: 8 [ 104.397059][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.419065][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.460053][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.490932][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.506227][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.537498][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.547266][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.568087][ T5602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.579447][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.598165][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.650052][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.737206][ T5308] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.749106][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.765627][ T5602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.782005][ T5308] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.794464][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.805898][ T5308] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.861724][ T5308] usb 4-1: string descriptor 0 read error: -22 [ 104.873620][ T5308] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.888484][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.011069][ T5308] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.069422][ T5602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.152367][ T5669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.104'. [ 105.198794][ T5669] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4 [ 105.418874][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.438953][ T25] usb 4-1: USB disconnect, device number 4 [ 105.563280][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.629169][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.690201][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.721255][ T5232] Bluetooth: hci5: command tx timeout [ 106.083801][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.177266][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.213260][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.221222][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.270520][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.277713][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.857539][ T5704] kvm: emulating exchange as write [ 107.199631][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.383301][ T5717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.116'. [ 107.396129][ T5602] veth0_vlan: entered promiscuous mode [ 107.398166][ T5717] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4 [ 107.437289][ T5602] veth1_vlan: entered promiscuous mode [ 107.592644][ T5602] veth0_macvtap: entered promiscuous mode [ 107.614606][ T5602] veth1_macvtap: entered promiscuous mode [ 107.694958][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.757593][ T5725] process 'syz.3.119' launched './file0' with NULL argv: empty string added [ 107.764552][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.811501][ T5232] Bluetooth: hci5: command tx timeout [ 107.834304][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.882842][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.908638][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.926300][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.939357][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.962202][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.992080][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.013106][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.052140][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.169001][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.225084][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.237547][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.250684][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.265800][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.279766][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.300274][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.321909][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.342096][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.371653][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.397551][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.434532][ T5602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.449912][ T5602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.461419][ T5602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.470283][ T5602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.480935][ T5312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.652317][ T5746] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.126'. [ 108.685208][ T5746] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4 [ 108.700924][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 108.719941][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 108.744978][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.770139][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.815514][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.849604][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.863629][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.878086][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.893730][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 108.901896][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.918038][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.932241][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.944056][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.962448][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 108.973355][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 109.002437][ T5312] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.016536][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.032522][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.051458][ T5312] usb 4-1: string descriptor 0 read error: -22 [ 109.067054][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.076117][ T5312] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 109.097090][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.107557][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.173066][ T5312] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 109.550891][ T5312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.623374][ T5758] netlink: 'syz.4.129': attribute type 12 has an invalid length. [ 109.640106][ T5758] netlink: 'syz.4.129': attribute type 11 has an invalid length. [ 109.654751][ T5758] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.129'. [ 109.740928][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 109.763030][ T5312] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 109.785386][ T5312] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 109.821234][ T5312] usb 3-1: config 8 has no interface number 0 [ 109.847888][ T5312] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 109.869385][ T5312] usb 3-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.891580][ T5232] Bluetooth: hci5: command tx timeout [ 109.894527][ T5312] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 109.909811][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.921535][ T5312] usb 3-1: Product: syz [ 109.925772][ T5312] usb 3-1: Manufacturer: syz [ 109.930508][ T5312] usb 3-1: SerialNumber: syz [ 109.991433][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.111090][ T941] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.201220][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 110.217493][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 110.231855][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 110.248097][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.261753][ T5775] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.82'. [ 110.264834][ T8] usb 5-1: config 0 descriptor?? [ 110.276745][ T5775] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 110.323357][ T941] usb 2-1: config 0 has no interfaces? [ 110.329934][ T941] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.393595][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.428198][ T941] usb 2-1: config 0 descriptor?? [ 110.534734][ T5312] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 110.560428][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 110.583525][ T5312] usb 3-1: USB disconnect, device number 3 [ 110.819222][ T5761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.845451][ T5761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.884170][ T5763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.911951][ T5763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.950061][ T5785] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.971060][ T5785] openvswitch: netlink: Tunnel attr 2 has unexpected len 13 expected 4 [ 111.226076][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 111.242747][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.283083][ T8] usb 5-1: USB disconnect, device number 4 [ 111.620941][ T5278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.810923][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 111.853208][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.866979][ T5278] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9f.c0 [ 111.895502][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.904175][ T5278] usb 3-1: Product: syz [ 111.909100][ T5278] usb 3-1: Manufacturer: syz [ 111.914073][ T5278] usb 3-1: SerialNumber: syz [ 111.926161][ T5278] usb 3-1: config 0 descriptor?? [ 111.945951][ T5278] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 111.971557][ T5278] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 112.016724][ T5278] usbserial_generic 3-1:0.0: device has no bulk endpoints [ 112.863901][ T5280] usb 2-1: USB disconnect, device number 8 [ 113.231004][ T5308] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.440810][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 113.455376][ T5308] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.473024][ T5308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.505333][ T5308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.541074][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.564691][ T5308] usb 5-1: Product: syz [ 113.576632][ T5308] usb 5-1: Manufacturer: syz [ 113.587515][ T5308] usb 5-1: SerialNumber: syz [ 113.671085][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.820011][ T5308] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.881052][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 113.900516][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 113.988165][ T25] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 114.052557][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.077945][ T25] usb 2-1: Product: syz [ 114.089137][ T25] usb 2-1: Manufacturer: syz [ 114.099365][ T25] usb 2-1: SerialNumber: syz [ 114.117106][ T25] usb 2-1: config 0 descriptor?? [ 114.147147][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 114.389957][ T941] usb 3-1: USB disconnect, device number 4 [ 115.977670][ T941] usb 5-1: USB disconnect, device number 5 [ 116.028990][ T941] usblp1: removed [ 116.280104][ T5312] usb 2-1: USB disconnect, device number 9 [ 116.891616][ T5280] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.911197][ T5278] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.983270][ T29] audit: type=1326 audit(1725929806.412:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 117.007542][ T29] audit: type=1326 audit(1725929806.412:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 117.039529][ T29] audit: type=1326 audit(1725929806.412:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 117.070454][ T29] audit: type=1326 audit(1725929806.412:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 117.096129][ T29] audit: type=1326 audit(1725929806.412:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5852 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 117.101551][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 117.135867][ T5278] usb 5-1: config 0 has no interfaces? [ 117.141789][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.152167][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.162796][ T5280] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 117.173251][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.182647][ T5278] usb 5-1: config 0 descriptor?? [ 117.216034][ T5280] usb 1-1: config 0 descriptor?? [ 117.239497][ T5280] ums-alauda 1-1:0.0: USB Mass Storage device detected [ 117.614253][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.642378][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.689969][ T5870] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 118.017229][ T941] usb 1-1: USB disconnect, device number 6 [ 118.270920][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.481102][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 118.493683][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.514199][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.553680][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.580871][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.610809][ T25] usb 2-1: Product: syz [ 118.615030][ T25] usb 2-1: Manufacturer: syz [ 118.635773][ T25] usb 2-1: SerialNumber: syz [ 118.864597][ T25] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.056532][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.069966][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.081603][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.091980][ T5280] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.116407][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.125319][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 119.136499][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.290934][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 119.316201][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 119.355310][ T5280] usb 3-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 119.384969][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.410457][ T5280] usb 3-1: Product: syz [ 119.415193][ T5280] usb 3-1: Manufacturer: syz [ 119.423282][ T5280] usb 3-1: SerialNumber: syz [ 119.443333][ T5280] usb 3-1: config 0 descriptor?? [ 119.506028][ T5280] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 119.729303][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 119.787751][ T941] usb 5-1: USB disconnect, device number 6 [ 120.475111][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.512481][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.527897][ T5893] bridge_slave_0: entered allmulticast mode [ 120.537466][ T5893] bridge_slave_0: entered promiscuous mode [ 120.555961][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.581120][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.603627][ T5893] bridge_slave_1: entered allmulticast mode [ 120.630985][ T5893] bridge_slave_1: entered promiscuous mode [ 120.787926][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.841507][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.002708][ T5893] team0: Port device team_slave_0 added [ 121.051235][ T5308] usb 2-1: USB disconnect, device number 10 [ 121.051526][ T5893] team0: Port device team_slave_1 added [ 121.096577][ T5308] usblp1: removed [ 121.241085][ T5232] Bluetooth: hci6: command tx timeout [ 121.355315][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.375314][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.410616][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.435048][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.444254][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.470925][ T5280] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.490651][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.503244][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 121.607435][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 121.661051][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 121.675345][ T5280] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 121.685454][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.706055][ T941] usb 3-1: USB disconnect, device number 5 [ 121.720469][ T5280] usb 5-1: Product: syz [ 121.748071][ T5280] usb 5-1: Manufacturer: syz [ 121.763573][ T5280] usb 5-1: SerialNumber: syz [ 121.786412][ T5280] usb 5-1: config 0 descriptor?? [ 121.817322][ T5280] usb 5-1: bad CDC descriptors [ 121.835595][ T5893] hsr_slave_0: entered promiscuous mode [ 121.844358][ T5280] cp210x 5-1:0.0: cp210x converter detected [ 121.890155][ T5893] hsr_slave_1: entered promiscuous mode [ 121.942076][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.979662][ T5893] Cannot create hsr debugfs directory [ 122.479408][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.540439][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.580896][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 122.803385][ T5280] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 122.814692][ T5939] input: syz0 as /devices/virtual/input/input9 [ 122.827009][ T5280] cp210x 5-1:0.0: querying part number failed [ 122.871323][ T5280] usb 5-1: cp210x converter now attached to ttyUSB0 [ 122.907049][ T5280] usb 5-1: USB disconnect, device number 7 [ 122.976533][ T5280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.033782][ T5280] cp210x 5-1:0.0: device disconnected [ 123.094037][ T5939] Cannot find set identified by id 0 to match [ 123.222441][ T5893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.320909][ T5232] Bluetooth: hci6: command tx timeout [ 123.383108][ T5893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.677164][ T5893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.894387][ T5893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.070929][ T941] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.216968][ T5893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.248929][ T5893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.276604][ T5893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.321071][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 124.321401][ T5312] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.338161][ T5893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.356212][ T941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.420348][ T941] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.470840][ T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 124.520278][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.533125][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 124.553267][ T941] usb 1-1: Product: syz [ 124.569319][ T941] usb 1-1: Manufacturer: syz [ 124.577743][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 124.595065][ T941] usb 1-1: SerialNumber: syz [ 124.636534][ T5312] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 124.664476][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.683923][ T5312] usb 2-1: Product: syz [ 124.690472][ T5312] usb 2-1: Manufacturer: syz [ 124.718950][ T5312] usb 2-1: SerialNumber: syz [ 124.744731][ T5312] usb 2-1: config 0 descriptor?? [ 124.747972][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.766272][ T5312] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 124.858333][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.874846][ T941] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.933250][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.940455][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.027521][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.034889][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.400966][ T5232] Bluetooth: hci6: command tx timeout [ 126.015072][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.260361][ T5893] veth0_vlan: entered promiscuous mode [ 126.336246][ T5893] veth1_vlan: entered promiscuous mode [ 126.496795][ T5893] veth0_macvtap: entered promiscuous mode [ 126.515356][ T5893] veth1_macvtap: entered promiscuous mode [ 126.551340][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.562792][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.576890][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.623813][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.657326][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.688695][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.726430][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.745220][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.774118][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.835520][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.841008][ T941] usb 1-1: USB disconnect, device number 7 [ 126.862398][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.917490][ T941] usblp1: removed [ 126.925570][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.964914][ T8] usb 2-1: USB disconnect, device number 11 [ 126.982587][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.035037][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.061823][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.092180][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.120061][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.135009][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.149733][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.170324][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.183629][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.195657][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.206617][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.218308][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.230526][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.254245][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.404729][ T5893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.439381][ T5893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.467322][ T5893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.480980][ T5232] Bluetooth: hci6: command tx timeout [ 127.496354][ T5893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.577222][ T6006] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.898681][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.944454][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.065374][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.096272][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.359038][ T6023] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 128.580209][ T6028] netlink: 'syz.1.206': attribute type 12 has an invalid length. [ 128.608383][ T6028] netlink: 'syz.1.206': attribute type 11 has an invalid length. [ 128.618336][ T6028] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.206'. [ 128.735913][ T6029] mmap: syz.4.205 (6029) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.963712][ T5312] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.191284][ T5312] usb 2-1: Using ep0 maxpacket: 16 [ 129.208343][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 129.236290][ T5312] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.260417][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.277801][ T5312] usb 2-1: config 0 descriptor?? [ 129.525648][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.602929][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 129.730977][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 129.755346][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 129.806851][ T25] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 129.821707][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.836733][ T25] usb 5-1: Product: syz [ 129.851038][ T25] usb 5-1: Manufacturer: syz [ 129.861125][ T25] usb 5-1: SerialNumber: syz [ 129.869708][ T6055] macvlan2: entered allmulticast mode [ 129.887299][ T25] usb 5-1: config 0 descriptor?? [ 129.895285][ T6055] team_slave_0: entered promiscuous mode [ 129.901377][ T6055] team_slave_1: entered promiscuous mode [ 129.916590][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.934530][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 129.945911][ T6055] team0: entered allmulticast mode [ 129.959351][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.982747][ T6055] team_slave_0: entered allmulticast mode [ 130.099538][ T6055] team_slave_1: entered allmulticast mode [ 130.132859][ T6055] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.173305][ T6055] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 130.337566][ T6056] bond0: entered promiscuous mode [ 130.432120][ T6056] bond_slave_0: entered promiscuous mode [ 130.462779][ T6056] bond_slave_1: entered promiscuous mode [ 130.514063][ T6056] macvlan2: entered promiscuous mode [ 130.554611][ T6056] team0: entered promiscuous mode [ 130.985720][ T6066] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 131.383576][ T5312] usbhid 2-1:0.0: can't add hid device: -71 [ 131.423592][ T5312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.435260][ T5312] usb 2-1: USB disconnect, device number 12 [ 132.021058][ T941] usb 5-1: USB disconnect, device number 8 [ 132.854885][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 132.879059][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 133.065767][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'. [ 133.168893][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.179266][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.304980][ T6115] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 133.445323][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 133.475700][ T6121] netlink: 'syz.2.232': attribute type 25 has an invalid length. [ 133.539326][ T6121] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.548617][ T6121] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.557494][ T6121] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.566269][ T6121] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.588093][ T29] audit: type=1326 audit(1725929823.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6106 comm="syz.1.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37d17def9 code=0x0 [ 134.050908][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.109875][ T6107] infiniband syz2: set active [ 134.115338][ T6107] infiniband syz2: added team_slave_1 [ 134.161469][ T6107] syz2: rxe_create_cq: returned err = -12 [ 134.179028][ T6107] infiniband syz2: Couldn't create ib_mad CQ [ 134.207468][ T6107] infiniband syz2: Couldn't open port 1 [ 134.241059][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 134.267742][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 134.324318][ T5280] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 134.362861][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.390413][ T5280] usb 5-1: Product: syz [ 134.416519][ T5280] usb 5-1: Manufacturer: syz [ 134.436726][ T6139] vlan2: entered promiscuous mode [ 134.452799][ T6107] RDS/IB: syz2: added [ 134.457074][ T5280] usb 5-1: SerialNumber: syz [ 134.472256][ T6107] smc: adding ib device syz2 with port count 1 [ 134.493404][ T5280] usb 5-1: config 0 descriptor?? [ 134.509961][ T6139] bond0: entered promiscuous mode [ 134.518723][ T6107] smc: ib device syz2 port 1 has pnetid [ 134.537822][ T6139] bond_slave_0: entered promiscuous mode [ 134.560117][ T6139] bond_slave_1: entered promiscuous mode [ 134.568314][ T5280] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 134.583165][ T6139] bond0: left promiscuous mode [ 134.606064][ T6139] bond_slave_0: left promiscuous mode [ 134.648545][ T6139] bond_slave_1: left promiscuous mode [ 135.269240][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 135.339268][ T6152] usb usb8: usbfs: process 6152 (syz.2.242) did not claim interface 0 before use [ 135.372091][ T29] audit: type=1326 audit(1725929824.802:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6151 comm="syz.2.242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0 [ 135.830907][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.020801][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 136.058768][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.070172][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.106859][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 136.131218][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.167543][ T25] usb 1-1: Product: syz [ 136.186214][ T25] usb 1-1: Manufacturer: syz [ 136.209471][ T25] usb 1-1: SerialNumber: syz [ 136.464615][ T25] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.751964][ T25] usb 5-1: USB disconnect, device number 9 [ 138.447816][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 138.603907][ T8] usb 1-1: USB disconnect, device number 8 [ 138.664413][ T8] usblp1: removed [ 138.736538][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 138.747527][ T6201] netlink: 80 bytes leftover after parsing attributes in process `syz.2.256'. [ 138.827440][ T6204] netlink: 'syz.2.256': attribute type 10 has an invalid length. [ 138.868689][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 139.099295][ T6204] team0: Port device wlan1 added [ 139.441905][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.641097][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 139.655838][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 139.718721][ T25] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 139.744528][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.773303][ T25] usb 5-1: Product: syz [ 139.784362][ T25] usb 5-1: Manufacturer: syz [ 139.803088][ T25] usb 5-1: SerialNumber: syz [ 139.829788][ T25] usb 5-1: config 0 descriptor?? [ 139.853772][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 140.482297][ T941] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.673147][ T941] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 140.683019][ T941] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 140.707594][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.749783][ T941] usb 2-1: config 0 has no interface number 0 [ 140.766233][ T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.781031][ T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 140.795190][ T941] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.849105][ T941] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.887188][ T941] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 140.910765][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.928081][ T941] usb 2-1: config 0 descriptor?? [ 140.949216][ T941] gspca_main: spca561-2.14.0 probing abcd:cdee [ 141.194232][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 141.503144][ T941] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 141.551675][ T941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.567059][ T941] usb 2-1: MIDIStreaming interface descriptor not found [ 142.108684][ T8] usb 5-1: USB disconnect, device number 10 [ 143.121228][ T6276] Cannot find add_set index 0 as target [ 143.301948][ T941] usb 2-1: USB disconnect, device number 13 [ 143.485822][ T6283] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 143.495019][ T6283] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 143.873253][ T6293] input: syz1 as /devices/virtual/input/input14 [ 144.641211][ T6307] binder: 6304:6307 ioctl c018620c 20000180 returned -1 [ 145.334047][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 146.198648][ T5278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.394621][ T5278] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 146.460440][ T5278] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 146.536752][ T5278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.571748][ T5278] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 146.713095][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723896][ T5278] usb 3-1: Product: syz [ 146.728143][ T5278] usb 3-1: Manufacturer: syz [ 146.733729][ T5278] usb 3-1: SerialNumber: syz [ 146.758027][ T5278] usb 3-1: config 0 descriptor?? [ 147.124017][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 147.544134][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 147.606383][ T5276] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 147.791056][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 147.796963][ T5276] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.796998][ T5276] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.804213][ T5276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.804252][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.804275][ T5276] usb 2-1: Product: syz [ 147.804293][ T5276] usb 2-1: Manufacturer: syz [ 147.804311][ T5276] usb 2-1: SerialNumber: syz [ 148.053234][ T5276] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 148.788731][ T5232] Bluetooth: hci6: Malformed LE Event: 0x1d [ 148.805722][ T6409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.892605][ T5278] ch341 3-1:0.0: ch341-uart converter detected [ 148.933721][ T5278] usb 3-1: failed to receive control message: -71 [ 148.963388][ T5278] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 148.995517][ T6409] team_slave_0: left allmulticast mode [ 149.023541][ T5278] usb 3-1: USB disconnect, device number 6 [ 149.047225][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.062139][ T5278] ch341 3-1:0.0: device disconnected [ 149.108551][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.401196][ T6409] team0: Port device team_slave_0 removed [ 150.317286][ T5276] usb 2-1: USB disconnect, device number 14 [ 150.375242][ T5276] usblp1: removed [ 150.412095][ T6427] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 152.374323][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 152.469766][ T29] audit: type=1326 audit(1725929841.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.4.333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0 [ 152.740809][ T5276] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.940773][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 152.974050][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.016169][ T5276] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.083343][ T5276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.129161][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.169140][ T5276] usb 1-1: Product: syz [ 153.186142][ T5276] usb 1-1: Manufacturer: syz [ 153.249123][ T5276] usb 1-1: SerialNumber: syz [ 153.511902][ T5276] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.240978][ T5280] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.090806][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 155.102183][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.132275][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.150825][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.185949][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 155.192676][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 155.243938][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.274786][ T5280] usb 5-1: config 0 descriptor?? [ 155.291688][ T6503] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.312342][ T5280] hub 5-1:0.0: USB hub found [ 155.330874][ T941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 155.568324][ T941] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 155.585843][ T941] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 155.635352][ T941] usb 2-1: Manufacturer: syz [ 155.669467][ T941] usb 2-1: config 0 descriptor?? [ 155.821463][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 156.224263][ T941] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 156.258289][ T941] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 156.431806][ T8] usb 1-1: USB disconnect, device number 9 [ 156.462425][ T8] usblp1: removed [ 156.818607][ T25] usb 2-1: USB disconnect, device number 15 [ 157.515896][ T5280] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 157.545313][ T5280] usbhid 5-1:0.0: can't add hid device: -71 [ 157.563829][ T5280] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 157.786288][ T5280] usb 5-1: USB disconnect, device number 11 [ 159.440837][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.660236][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 159.696073][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.732225][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.764418][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.778360][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.818509][ T8] usb 2-1: Product: syz [ 159.838604][ T8] usb 2-1: Manufacturer: syz [ 159.849894][ T8] usb 2-1: SerialNumber: syz [ 160.141283][ T8] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.822105][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.851322][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.275966][ T1178] Bluetooth: hci7: Frame reassembly failed (-84) [ 162.323291][ T1178] Bluetooth: hci7: Frame reassembly failed (-84) [ 162.708539][ T8] usb 2-1: USB disconnect, device number 16 [ 162.750221][ T8] usblp1: removed [ 163.200905][ T5280] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.303157][ T6655] netlink: 'syz.4.383': attribute type 4 has an invalid length. [ 163.561370][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 164.156123][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 164.188378][ T5280] usb 1-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 164.201032][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.213840][ T5280] usb 1-1: Product: syz [ 164.218053][ T5280] usb 1-1: Manufacturer: syz [ 164.232163][ T5280] usb 1-1: SerialNumber: syz [ 164.240841][ T5280] usb 1-1: config 0 descriptor?? [ 164.280839][ T5232] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 164.283876][ T5241] Bluetooth: hci7: command 0x1003 tx timeout [ 164.364934][ T5280] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 165.605123][ T29] audit: type=1326 audit(1725929855.032:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6659 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0 [ 165.664819][ T6666] loop0: detected capacity change from 0 to 524287999 [ 165.723608][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.733106][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.773400][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.782630][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.802963][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.812268][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.822229][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.831418][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.840370][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.849615][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.858087][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.867378][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.884217][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.893433][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.912872][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.922118][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.983615][ T6666] ldm_validate_partition_table(): Disk read failed. [ 166.035019][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.044392][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 166.059963][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.069328][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 166.088753][ T6666] Dev loop0: unable to read RDB block 0 [ 166.136392][ T6666] loop0: unable to read partition table [ 166.149745][ T6666] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 166.257435][ T6673] can: request_module (can-proto-0) failed. [ 166.570085][ T941] usb 1-1: USB disconnect, device number 10 [ 166.628412][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.685951][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.921150][ T6690] can: request_module (can-proto-0) failed. [ 169.648455][ T5232] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 169.662917][ T5232] Bluetooth: hci6: Injecting HCI hardware error event [ 169.712579][ T5232] Bluetooth: hci6: hardware error 0x00 [ 169.760870][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 170.772258][ T5358] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.803744][ T6745] can: request_module (can-proto-0) failed. [ 170.972980][ T5358] usb 3-1: Using ep0 maxpacket: 8 [ 171.004515][ T5358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 171.038479][ T5358] usb 3-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 171.062107][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.115585][ T5358] usb 3-1: Product: syz [ 171.133482][ T5358] usb 3-1: Manufacturer: syz [ 171.141471][ T5358] usb 3-1: SerialNumber: syz [ 171.166550][ T5358] usb 3-1: config 0 descriptor?? [ 171.184510][ T5358] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 171.721206][ T5241] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 172.291164][ T5232] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 173.244792][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.272210][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.367400][ T5308] usb 3-1: USB disconnect, device number 7 [ 175.249916][ T6805] netlink: 'syz.1.424': attribute type 12 has an invalid length. [ 175.258501][ T6805] netlink: 'syz.1.424': attribute type 11 has an invalid length. [ 175.294533][ T6805] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.424'. [ 175.338981][ T6807] x_tables: unsorted entry at hook 2 [ 175.358677][ T6808] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 175.610991][ T5308] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 175.810759][ T5308] usb 2-1: Using ep0 maxpacket: 16 [ 175.825284][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 175.840753][ T5308] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 175.849967][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.892871][ T5308] usb 2-1: config 0 descriptor?? [ 176.733968][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.782385][ T6819] can: request_module (can-proto-0) failed. [ 176.816509][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 176.842380][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.967407][ T5308] hid (null): nested delimiters [ 176.983493][ T5308] hid (null): nested delimiters [ 177.002659][ T5308] hid (null): nested delimiters [ 177.022491][ T5308] hid (null): report_id 2838798905 is invalid [ 177.045251][ T5308] hid (null): unknown global tag 0xc [ 177.077823][ T5308] hid (null): unknown global tag 0xa5 [ 177.094917][ T5308] hid (null): unknown global tag 0xd [ 177.120591][ T5308] hid (null): unknown global tag 0xc [ 177.130980][ T5280] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.159906][ T5308] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 177.210081][ T5308] hid-generic 0003:0158:0100.0002: unexpected long global item [ 177.294584][ T5308] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 177.360877][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 177.388167][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 177.427667][ T5280] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 177.446723][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.469113][ T5280] usb 5-1: Product: syz [ 177.478539][ T5280] usb 5-1: Manufacturer: syz [ 177.489395][ T5280] usb 5-1: SerialNumber: syz [ 177.517261][ T5280] usb 5-1: config 0 descriptor?? [ 177.558462][ T5280] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 177.657947][ T5308] usb 2-1: USB disconnect, device number 17 [ 178.003348][ T6831] IPVS: stopping backup sync thread 6066 ... [ 178.841250][ T5232] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 179.340273][ T5280] usb 5-1: USB disconnect, device number 12 [ 181.736173][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 181.939473][ T29] audit: type=1326 audit(1725929871.352:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.2.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0 [ 182.447647][ T62] Bluetooth: hci7: Frame reassembly failed (-84) [ 182.489638][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 182.509646][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 182.518851][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 182.527929][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 182.540957][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 182.548435][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 182.560784][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.752791][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 182.798570][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.869609][ T8] usb 2-1: config 0 descriptor?? [ 182.905303][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 184.444460][ T5241] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 184.608138][ T5235] Bluetooth: hci8: command tx timeout [ 184.831241][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 184.835079][ T6882] chnl_net:caif_netlink_parms(): no params data found [ 185.026476][ T5235] Bluetooth: hci4: link tx timeout [ 185.032435][ T5235] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.165518][ T8] gp8psk: usb in 128 operation failed. [ 185.174471][ T941] IPVS: starting estimator thread 0... [ 185.197640][ T8] gp8psk: usb in 137 operation failed. [ 185.219510][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.270855][ T6913] IPVS: using max 15 ests per chain, 36000 per kthread [ 185.299588][ T8] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 185.352672][ T8] usb 2-1: media controller created [ 185.439010][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.465081][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.480122][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.504442][ T6882] bridge_slave_0: entered allmulticast mode [ 185.530158][ T6882] bridge_slave_0: entered promiscuous mode [ 185.542248][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.580329][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.609999][ T6882] bridge_slave_1: entered allmulticast mode [ 185.622298][ T6882] bridge_slave_1: entered promiscuous mode [ 185.642036][ T8] gp8psk_fe: Frontend attached [ 185.647659][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 185.709040][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 185.721021][ T5276] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.810117][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.874114][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.884541][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.912943][ T8] gp8psk: usb in 138 operation failed. [ 185.925843][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.932793][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 185.953661][ T5276] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 185.971244][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.981339][ T8] gp8psk: found Genpix USB device pID = 203 (hex) [ 186.002784][ T5276] usb 5-1: config 0 descriptor?? [ 186.114464][ T6882] team0: Port device team_slave_0 added [ 186.129429][ T6882] team0: Port device team_slave_1 added [ 186.239853][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.280024][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.377336][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.410539][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.420364][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.437105][ T6921] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 186.465432][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.513528][ T6921] PKCS7: Only support pkcs7_signedData type [ 186.519606][ T5276] hackrf 5-1:0.0: Board ID: 00 [ 186.540767][ T5276] hackrf 5-1:0.0: Firmware version: [ 186.594027][ T6882] hsr_slave_0: entered promiscuous mode [ 186.606245][ T5276] hackrf 5-1:0.0: Registered as swradio16 [ 186.629378][ T5276] hackrf 5-1:0.0: Registered as swradio17 [ 186.639866][ T6882] hsr_slave_1: entered promiscuous mode [ 186.656104][ T5276] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 186.676352][ T6882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.684622][ T5235] Bluetooth: hci8: command tx timeout [ 186.728057][ T6882] Cannot create hsr debugfs directory [ 186.784705][ T46] usb 2-1: USB disconnect, device number 18 [ 187.083742][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 187.125255][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 187.147865][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 187.165375][ T6933] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 187.318633][ T5278] usb 5-1: USB disconnect, device number 13 [ 187.694952][ T6882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.856059][ T6882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.268578][ T6882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.761271][ T5241] Bluetooth: hci8: command tx timeout [ 189.065759][ T6947] input: syz1 as /devices/virtual/input/input18 [ 189.178734][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 189.529430][ T5241] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 189.529858][ T6957] loop0: detected capacity change from 0 to 524287999 [ 189.545662][ T6882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.567417][ C1] blk_print_req_error: 7 callbacks suppressed [ 189.567432][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.582781][ C1] buffer_io_error: 7 callbacks suppressed [ 189.582792][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.645640][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.659631][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.668920][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.685376][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.694682][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.705849][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.724131][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.733336][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.747082][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 189.763100][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.772404][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.780505][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.789715][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.798725][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.808007][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.817730][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.826993][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.835983][ T6957] ldm_validate_partition_table(): Disk read failed. [ 189.844339][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.853668][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.866802][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.876024][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 189.887350][ T6957] Dev loop0: unable to read RDB block 0 [ 189.894593][ T6957] loop0: unable to read partition table [ 189.905412][ T6957] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 189.937139][ T6955] bridge1: entered promiscuous mode [ 189.942783][ T6955] bridge1: entered allmulticast mode [ 190.356299][ T6882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.399601][ T6882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.517827][ T6882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.580897][ T6882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.840924][ T5241] Bluetooth: hci8: command tx timeout [ 191.055940][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.068455][ T29] audit: type=1326 audit(1725929880.492:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.141768][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.148863][ T29] audit: type=1326 audit(1725929880.492:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.185553][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 191.192804][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.201544][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.237398][ T29] audit: type=1326 audit(1725929880.492:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.299974][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.307285][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.370997][ T29] audit: type=1326 audit(1725929880.492:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.409377][ T29] audit: type=1326 audit(1725929880.492:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.447609][ T29] audit: type=1326 audit(1725929880.522:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.501044][ T5278] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.527942][ T29] audit: type=1326 audit(1725929880.522:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.603399][ T29] audit: type=1326 audit(1725929880.522:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.624726][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.635003][ T29] audit: type=1326 audit(1725929880.522:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.656306][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.690567][ T29] audit: type=1326 audit(1725929880.532:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6983 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x7ffc0000 [ 191.725061][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.739192][ T6882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.750357][ T5278] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 191.801054][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.820092][ T5278] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 191.845759][ T5278] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 191.896497][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.940978][ T5278] usb 3-1: Product: syz [ 191.964048][ T5278] usb 3-1: Manufacturer: syz [ 191.992569][ T5278] usb 3-1: SerialNumber: syz [ 192.038825][ T5278] usb 3-1: config 0 descriptor?? [ 192.070597][ T5278] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 192.745344][ T8] IPVS: starting estimator thread 0... [ 192.862386][ T7010] IPVS: using max 25 ests per chain, 60000 per kthread [ 192.925348][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 193.053806][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.181104][ T46] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 193.269478][ T6882] veth0_vlan: entered promiscuous mode [ 193.352531][ T6882] veth1_vlan: entered promiscuous mode [ 193.373540][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.409504][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.445614][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.455739][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.498461][ T46] usb 5-1: SerialNumber: syz [ 193.520059][ T46] usb 5-1: bad CDC descriptors [ 193.547118][ T6882] veth0_macvtap: entered promiscuous mode [ 193.561734][ T5241] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 193.571658][ T5241] Bluetooth: hci4: Injecting HCI hardware error event [ 193.580007][ T5235] Bluetooth: hci4: hardware error 0x00 [ 193.611686][ T6882] veth1_macvtap: entered promiscuous mode [ 193.831980][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.875631][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.888407][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.907542][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.966017][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.051390][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.065676][ T5278] scsi host1: usb-storage 3-1:0.0 [ 194.106872][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.148970][ T5278] usb 3-1: USB disconnect, device number 8 [ 194.160811][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.212831][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.246990][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.280493][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.296084][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.296110][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.296129][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.312182][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.593053][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.623863][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.644243][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.705366][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.740615][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.760074][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.770936][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.793705][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.810912][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.831051][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.848101][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.860341][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.872956][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.883679][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.898257][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.910876][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.925006][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.946615][ T5278] usb 5-1: USB disconnect, device number 14 [ 194.977305][ T46] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 194.999604][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.021139][ T46] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 195.055502][ T6882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.078080][ T6882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.087590][ T46] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 195.108734][ T46] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 195.127791][ T6882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.137994][ T46] usb 2-1: Product: syz [ 195.150114][ T46] usb 2-1: SerialNumber: syz [ 195.154960][ T6882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.192977][ T46] option 2-1:7.0: GSM modem (1-port) converter detected [ 195.470103][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.506959][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.595316][ T5241] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 195.603044][ T5241] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 195.695612][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.724534][ T5235] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.740335][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.202421][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.431485][ T5276] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.459557][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 196.485842][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 196.508085][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 196.534272][ T46] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 196.553159][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.575834][ T46] usb 5-1: Product: syz [ 196.583452][ T46] usb 5-1: Manufacturer: syz [ 196.595748][ T46] usb 5-1: SerialNumber: syz [ 196.630375][ T46] usb 5-1: config 0 descriptor?? [ 196.643334][ T5276] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 196.665811][ T46] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204 [ 196.673292][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.751379][ T5276] usb 1-1: config 0 descriptor?? [ 196.780457][ T5276] gspca_main: spca508-2.14.0 probing 8086:0110 [ 196.931337][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.958239][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.038077][ T5276] gspca_spca508: reg_read err -32 [ 197.316990][ T7073] loop0: detected capacity change from 0 to 524287999 [ 197.358252][ T5307] usb 2-1: USB disconnect, device number 19 [ 197.379639][ T5307] option 2-1:7.0: device disconnected [ 197.412065][ C0] blk_print_req_error: 7 callbacks suppressed [ 197.412090][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.427546][ C0] buffer_io_error: 7 callbacks suppressed [ 197.427594][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.473544][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.482851][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.491885][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.501206][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.509776][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.519103][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.529982][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.539295][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.548430][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.557730][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.572209][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.581455][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.589637][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.598859][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.608486][ T7073] ldm_validate_partition_table(): Disk read failed. [ 197.616207][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.625615][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.633785][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.643013][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 197.661759][ T7073] Dev loop0: unable to read RDB block 0 [ 197.673197][ T7073] loop0: unable to read partition table [ 197.688444][ T7073] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 197.780844][ T5276] gspca_spca508: reg_read err -71 [ 197.793527][ T5276] gspca_spca508: reg write: error -71 [ 197.819968][ T5276] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 197.872738][ T5276] usb 1-1: USB disconnect, device number 11 [ 198.816274][ T7090] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 198.902189][ T5276] usb 5-1: USB disconnect, device number 15 [ 199.982459][ T7118] loop0: detected capacity change from 0 to 524287999 [ 200.018157][ T7118] ldm_validate_partition_table(): Disk read failed. [ 200.025946][ T7118] Dev loop0: unable to read RDB block 0 [ 200.061186][ T7118] loop0: unable to read partition table [ 200.107186][ T7118] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 200.270841][ T5307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.491231][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 200.513810][ T5307] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 200.545255][ T5307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.565660][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.639442][ T5307] IPVS: starting estimator thread 0... [ 200.710954][ T5276] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 200.740961][ T7133] IPVS: using max 24 ests per chain, 57600 per kthread [ 200.890902][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 200.902697][ T5276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.928440][ T5276] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 200.941947][ T5276] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.960506][ T5276] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 200.990807][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 200.999239][ T5276] usb 5-1: Product: syz [ 201.006323][ T5276] usb 5-1: Manufacturer: syz [ 201.016770][ T5276] usb 5-1: SerialNumber: syz [ 201.058841][ T5276] appletouch 5-1:1.0: Could not find int-in endpoint [ 201.070349][ T5276] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 201.118140][ T5276] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 201.272499][ T46] usb 5-1: USB disconnect, device number 16 [ 201.321640][ T5245] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 201.331954][ T5245] Bluetooth: hci5: Injecting HCI hardware error event [ 201.340469][ T5245] Bluetooth: hci5: hardware error 0x00 [ 201.355018][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.515'. [ 201.671016][ T5276] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 201.801064][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 201.805848][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 201.812363][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 201.819257][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 201.880893][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 201.915647][ T5276] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 201.939402][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.957407][ T5276] usb 1-1: config 0 descriptor?? [ 201.979228][ T5276] gspca_main: sq930x-2.14.0 probing 041e:403c [ 202.311009][ T5280] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.530868][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 202.542234][ T5280] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 202.567617][ T5280] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 202.584727][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.623123][ T5280] usb 2-1: Product: syz [ 202.640196][ T5280] usb 2-1: Manufacturer: syz [ 202.652218][ T5280] usb 2-1: SerialNumber: syz [ 202.673436][ T5280] usb 2-1: config 0 descriptor?? [ 202.705281][ T5280] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 202.993637][ T46] usb 3-1: USB disconnect, device number 9 [ 203.000602][ T5276] gspca_sq930x: ucbus_write failed -71 [ 203.013361][ T5276] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 203.039699][ T5276] usb 1-1: USB disconnect, device number 12 [ 203.401612][ T5245] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 203.744892][ T7182] netlink: 'syz.4.527': attribute type 12 has an invalid length. [ 203.767675][ T7182] netlink: 'syz.4.527': attribute type 11 has an invalid length. [ 203.777202][ T7182] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.527'. [ 203.945765][ T5280] gspca_zc3xx: reg_w_i err -71 [ 204.021061][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.043665][ T5245] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 204.052600][ T5245] Bluetooth: hci8: Injecting HCI hardware error event [ 204.061507][ T5235] Bluetooth: hci8: hardware error 0x00 [ 204.131242][ T5276] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 204.205635][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 204.226004][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.242333][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 204.255817][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.277013][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 204.288330][ T46] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 204.300609][ T46] usb 1-1: Product: syz [ 204.304906][ T46] usb 1-1: Manufacturer: syz [ 204.309651][ T46] usb 1-1: SerialNumber: syz [ 204.325411][ T46] appletouch 1-1:1.0: Could not find int-in endpoint [ 204.337023][ T46] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 204.350928][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 204.352753][ T46] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 204.376657][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 204.406250][ T7191] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 204.424243][ T5276] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 204.440794][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.485845][ T5276] usb 5-1: config 0 descriptor?? [ 204.546121][ T46] usb 1-1: USB disconnect, device number 13 [ 204.622345][ T5280] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 204.645885][ T5280] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 204.667597][ T5280] usb 2-1: USB disconnect, device number 20 [ 205.014988][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.164937][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.409231][ T5276] hid (null): nested delimiters [ 205.496852][ T5276] hid (null): nested delimiters [ 205.528362][ T5276] hid (null): nested delimiters [ 205.551913][ T5276] hid (null): report_id 2838798905 is invalid [ 205.584293][ T5276] hid (null): unknown global tag 0xc [ 205.611509][ T5276] hid (null): unknown global tag 0xa5 [ 205.629626][ T5276] hid (null): unknown global tag 0xd [ 205.656280][ T5276] hid (null): unknown global tag 0xc [ 205.722344][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.723687][ T5276] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 205.730124][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.806179][ T5276] hid-generic 0003:0158:0100.0003: unexpected long global item [ 205.858594][ T5276] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 205.963915][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 205.981215][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 206.013735][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.052925][ T46] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.090827][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.099950][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.118805][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.153994][ T5235] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 206.161024][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.329481][ T25] usb 1-1: config 0 descriptor?? [ 206.816904][ T25] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 206.957291][ T5276] usb 5-1: USB disconnect, device number 17 [ 207.362254][ T7224] x_tables: unsorted entry at hook 2 [ 208.208096][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.243828][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.378510][ T5312] usb 2-1: USB disconnect, device number 21 [ 208.840266][ T7255] netlink: 'syz.1.549': attribute type 12 has an invalid length. [ 208.881452][ T7255] netlink: 'syz.1.549': attribute type 11 has an invalid length. [ 208.923985][ T7255] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.549'. [ 209.391706][ T5307] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 209.605540][ T2980] Bluetooth: hci7: Frame reassembly failed (-84) [ 209.630418][ T25] usb 1-1: USB disconnect, device number 14 [ 209.677635][ T25] iowarrior 1-1:0.0: I/O-Warror #1 now disconnected [ 209.721065][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 209.741472][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 209.825831][ T5307] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 209.915111][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.943254][ T5307] usb 2-1: config 0 descriptor?? [ 209.954455][ T7275] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 209.961555][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.000514][ T7275] vhci_hcd vhci_hcd.0: Device attached [ 210.300961][ T5276] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 210.399083][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 210.443100][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.475107][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.486031][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.508630][ T7282] vivid-000: ================= START STATUS ================= [ 210.520474][ T7282] vivid-000: Generate PTS: true [ 210.528619][ T7282] vivid-000: Generate SCR: true [ 210.535723][ T7282] tpg source WxH: 320x180 (R'G'B) [ 210.541415][ T7282] tpg field: 1 [ 210.545076][ T7282] tpg crop: 320x180@0x0 [ 210.551341][ T7282] tpg compose: 320x180@0x0 [ 210.557973][ T7282] tpg colorspace: 8 [ 210.578345][ T7282] tpg transfer function: 0/0 [ 210.586950][ T7282] tpg quantization: 0/0 [ 210.598722][ T7282] tpg RGB range: 0/2 [ 210.604290][ T7282] vivid-000: ================== END STATUS ================== [ 210.620385][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.656150][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.679995][ T5307] hid (null): nested delimiters [ 210.721011][ T5307] hid (null): nested delimiters [ 210.735554][ T5307] hid (null): nested delimiters [ 210.746517][ T5307] hid (null): report_id 2838798905 is invalid [ 210.767643][ T5307] hid (null): unknown global tag 0xc [ 210.793112][ T5307] hid (null): unknown global tag 0xa5 [ 210.798598][ T5307] hid (null): unknown global tag 0xd [ 210.827278][ T5307] hid (null): unknown global tag 0xc [ 210.854533][ T5307] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 210.860921][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 210.867675][ T5307] hid-generic 0003:0158:0100.0004: unexpected long global item [ 210.899576][ T25] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 210.916959][ T5307] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 210.921486][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.963310][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.315007][ T5312] usb 2-1: USB disconnect, device number 22 [ 211.322548][ T7276] vhci_hcd: connection reset by peer [ 211.372265][ T2989] vhci_hcd: stop threads [ 211.378159][ T2989] vhci_hcd: release socket [ 211.433631][ T2989] vhci_hcd: disconnect device [ 211.641001][ T5245] Bluetooth: hci7: command 0x1003 tx timeout [ 211.652242][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 213.084348][ T7325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 213.090936][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.104685][ T7325] vhci_hcd vhci_hcd.0: Device attached [ 213.248328][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.266130][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.369541][ T5312] usb 1-1: USB disconnect, device number 15 [ 213.411473][ T5308] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 213.660566][ T7341] netlink: 'syz.0.574': attribute type 12 has an invalid length. [ 213.674178][ T7341] netlink: 'syz.0.574': attribute type 11 has an invalid length. [ 213.682437][ T7341] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.574'. [ 213.751307][ T2989] Bluetooth: hci7: Frame reassembly failed (-84) [ 214.051316][ T5312] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 214.243653][ T5312] usb 1-1: Using ep0 maxpacket: 16 [ 214.279122][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 214.330878][ T5312] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 214.340083][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.355803][ T5312] usb 1-1: config 0 descriptor?? [ 214.488411][ T7326] vhci_hcd: connection reset by peer [ 214.512876][ T2989] vhci_hcd: stop threads [ 214.538881][ T2989] vhci_hcd: release socket [ 214.565076][ T2989] vhci_hcd: disconnect device [ 214.906829][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.032776][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.106898][ T5312] hid (null): nested delimiters [ 215.127244][ T5312] hid (null): nested delimiters [ 215.138192][ T5312] hid (null): nested delimiters [ 215.147476][ T5312] hid (null): report_id 2838798905 is invalid [ 215.171199][ T5312] hid (null): unknown global tag 0xc [ 215.188776][ T5312] hid (null): unknown global tag 0xa5 [ 215.220198][ T5312] hid (null): unknown global tag 0xd [ 215.256240][ T5312] hid (null): unknown global tag 0xc [ 215.280257][ T5312] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 215.298140][ T5312] hid-generic 0003:0158:0100.0005: unexpected long global item [ 215.316614][ T5312] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 215.330475][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.359439][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.501084][ T5276] vhci_hcd: vhci_device speed not set [ 215.800832][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 215.801100][ T5245] Bluetooth: hci7: command 0x1003 tx timeout [ 215.974106][ T5280] usb 1-1: USB disconnect, device number 16 [ 216.100941][ T941] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 216.331014][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 216.362090][ T941] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.393908][ T941] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.439913][ T941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.470868][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.514354][ T941] usbtmc 3-1:16.0: bulk endpoints not found [ 216.651982][ T7383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 216.658563][ T7383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.700302][ T7383] vhci_hcd vhci_hcd.0: Device attached [ 216.880981][ T5280] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 216.991005][ T5312] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 217.108140][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.154057][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.185205][ T5280] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 217.194632][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.214015][ T5280] usb 2-1: config 0 descriptor?? [ 217.336551][ T7384] vhci_hcd: connection reset by peer [ 217.358311][ T62] vhci_hcd: stop threads [ 217.378745][ T62] vhci_hcd: release socket [ 217.403641][ T62] vhci_hcd: disconnect device [ 217.752022][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 217.767404][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 217.793683][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 217.820473][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 217.850848][ T5280] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 217.961149][ T5280] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 218.005228][ T5280] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 218.521055][ T5308] vhci_hcd: vhci_device speed not set [ 218.824043][ T941] usb 3-1: USB disconnect, device number 10 [ 219.013369][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -108 [ 219.050908][ T7414] netlink: 'syz.3.597': attribute type 12 has an invalid length. [ 219.078739][ T7414] netlink: 'syz.3.597': attribute type 11 has an invalid length. [ 219.130271][ T7414] netlink: 150484 bytes leftover after parsing attributes in process `syz.3.597'. [ 219.193419][ T8] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 219.442820][ T8] usb 2-1: device descriptor read/64, error -32 [ 219.458277][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.490867][ T941] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.535018][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.771126][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 219.791975][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.820949][ T941] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 219.846089][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.858636][ T941] usb 3-1: config 0 descriptor?? [ 220.059304][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.094738][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.120134][ T7438] tc_dump_action: action bad kind [ 220.153326][ T7435] sctp: [Deprecated]: syz.4.603 (pid 7435) Use of int in max_burst socket option deprecated. [ 220.153326][ T7435] Use struct sctp_assoc_value instead [ 220.187867][ T941] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 220.301485][ T7435] x_tables: duplicate underflow at hook 3 [ 220.416561][ T5276] usb 2-1: USB disconnect, device number 23 [ 220.496183][ T7447] netlink: 'syz.1.606': attribute type 12 has an invalid length. [ 220.531489][ T7447] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 220.565416][ T7447] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.606'. [ 220.880885][ T5280] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.013730][ T5276] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 221.101696][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 221.109115][ T5280] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 221.134532][ T5280] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.169357][ T5280] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.196536][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.211007][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 221.220201][ T5280] usbtmc 1-1:16.0: bulk endpoints not found [ 221.228394][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 221.270539][ T5276] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 221.299964][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.322306][ T5276] usb 2-1: config 0 descriptor?? [ 221.401843][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.591191][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 221.603487][ T8] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 221.638390][ T8] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 221.688091][ T8] usb 5-1: config 135 has no interface number 0 [ 221.696953][ T8] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.730346][ T8] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 221.748694][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.759817][ T8] usb 5-1: Product: syz [ 221.768487][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.777990][ T8] usb 5-1: Manufacturer: syz [ 221.791629][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.805194][ T8] usb 5-1: SerialNumber: syz [ 221.839640][ T8] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 221.849475][ T5276] hid (null): nested delimiters [ 221.873228][ T5276] hid (null): nested delimiters [ 221.878168][ T5276] hid (null): nested delimiters [ 221.883387][ T8] usb 5-1: No valid video chain found. [ 221.892397][ T5276] hid (null): report_id 2838798905 is invalid [ 221.898568][ T5276] hid (null): unknown global tag 0xc [ 221.904026][ T5276] hid (null): unknown global tag 0xa5 [ 221.909491][ T5276] hid (null): unknown global tag 0xd [ 221.920989][ T5276] hid (null): unknown global tag 0xc [ 221.942779][ T5276] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 221.950261][ T5276] hid-generic 0003:0158:0100.0007: unexpected long global item [ 221.976992][ T5276] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 222.037838][ T5276] usb 5-1: USB disconnect, device number 18 [ 222.092604][ T5308] usb 2-1: USB disconnect, device number 24 [ 222.121827][ T5312] vhci_hcd: vhci_device speed not set [ 223.554139][ T46] usb 3-1: USB disconnect, device number 11 [ 223.607553][ T8] usb 1-1: USB disconnect, device number 17 [ 223.616121][ T2980] Bluetooth: hci7: Frame reassembly failed (-84) [ 223.629478][ T46] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 223.940916][ T7490] usb usb8: usbfs: process 7490 (syz.4.618) did not claim interface 0 before use [ 224.029630][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 224.029652][ T29] audit: type=1326 audit(1725929913.452:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7488 comm="syz.4.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0 [ 224.059972][ T7495] x_tables: unsorted entry at hook 2 [ 224.980765][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 225.200861][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 225.228130][ T46] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 225.256550][ T46] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 225.314246][ T46] usb 5-1: config 135 has no interface number 0 [ 225.343056][ T46] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.364887][ T46] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 225.380764][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.405393][ T46] usb 5-1: Product: syz [ 225.423248][ T46] usb 5-1: Manufacturer: syz [ 225.440459][ T46] usb 5-1: SerialNumber: syz [ 225.473671][ T46] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 225.498343][ T46] usb 5-1: No valid video chain found. [ 225.641652][ T5245] Bluetooth: hci7: command 0x1003 tx timeout [ 225.650072][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 225.678451][ T46] usb 5-1: USB disconnect, device number 19 [ 225.921834][ T7529] netlink: 'syz.2.632': attribute type 11 has an invalid length. [ 225.940000][ T7529] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.632'. [ 226.080949][ T5276] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 226.183139][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.266241][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.281118][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 226.315821][ T5276] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 226.353699][ T5276] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.397315][ T5276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.426981][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.472672][ T5276] usbtmc 2-1:16.0: bulk endpoints not found [ 226.793981][ T7549] x_tables: unsorted entry at hook 2 [ 226.870891][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.066043][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.086677][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.111897][ T46] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 227.131303][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.148123][ T46] usb 3-1: config 0 descriptor?? [ 227.657799][ T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 227.676768][ T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 227.697344][ T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 227.724912][ T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 227.747583][ T46] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 227.783055][ T46] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 227.819068][ T46] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 228.080035][ T29] audit: type=1326 audit(1725929917.502:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000 [ 228.112788][ T29] audit: type=1326 audit(1725929917.502:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000 [ 228.144822][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 228.185152][ T29] audit: type=1326 audit(1725929917.512:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f002197def9 code=0x7ffc0000 [ 228.393117][ T29] audit: type=1326 audit(1725929917.822:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000 [ 228.419449][ T29] audit: type=1326 audit(1725929917.822:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7560 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x7ffc0000 [ 228.778230][ T5276] usb 2-1: USB disconnect, device number 25 [ 229.000610][ C1] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -108 [ 229.171205][ T46] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 229.518842][ T46] usb 3-1: device descriptor read/64, error -32 [ 229.529960][ T62] Bluetooth: hci7: Frame reassembly failed (-84) [ 229.683792][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.715269][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.852900][ T7586] capability: warning: `syz.3.647' uses 32-bit capabilities (legacy support in use) [ 230.493485][ T5312] usb 3-1: USB disconnect, device number 12 [ 230.903662][ T7602] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 231.250961][ T46] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 231.440990][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 231.480214][ T46] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 231.515047][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.528222][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.539738][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.554276][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.563798][ T5245] Bluetooth: hci7: command 0x1003 tx timeout [ 231.570327][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 231.602801][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.617722][ T46] usbtmc 2-1:16.0: bulk endpoints not found [ 232.351091][ T46] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.550947][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 232.559582][ T46] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 232.569131][ T46] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 232.581406][ T46] usb 5-1: config 8 has no interface number 0 [ 232.588635][ T46] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 232.602362][ T46] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.628811][ T46] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 232.648153][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.669207][ T46] usb 5-1: Product: syz [ 232.674038][ T46] usb 5-1: Manufacturer: syz [ 232.679065][ T46] usb 5-1: SerialNumber: syz [ 232.731499][ T5312] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 232.963288][ T5312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.012661][ T5312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.039292][ T7639] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.658'. [ 233.050564][ T7639] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 233.076899][ T5312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 233.100353][ T5312] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 233.119684][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.161470][ T7627] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 233.208179][ T5312] hub 1-1:1.0: bad descriptor, ignoring hub [ 233.234018][ T5312] hub 1-1:1.0: probe with driver hub failed with error -5 [ 233.255210][ T5312] cdc_wdm 1-1:1.0: skipping garbage [ 233.273546][ T5312] cdc_wdm 1-1:1.0: skipping garbage [ 233.306493][ T5312] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 233.332994][ T5312] cdc_wdm 1-1:1.0: Unknown control protocol [ 233.581269][ T46] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 233.610603][ T46] usb 5-1: USB disconnect, device number 20 [ 233.706155][ T7648] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 233.792302][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.817311][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.913285][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.959261][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.991773][ T5276] usb 2-1: USB disconnect, device number 26 [ 234.233243][ T7627] netlink: 'syz.0.661': attribute type 30 has an invalid length. [ 234.629003][ T62] Bluetooth: hci7: Frame reassembly failed (-84) [ 234.836509][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 234.886872][ T29] audit: type=1326 audit(1725929924.312:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.2.669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612757def9 code=0x0 [ 235.173721][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 235.362857][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 235.404157][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 235.456405][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 235.529626][ T46] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 235.570835][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.604868][ T46] usb 5-1: Product: syz [ 235.619830][ T46] usb 5-1: Manufacturer: syz [ 235.633087][ T46] usb 5-1: SerialNumber: syz [ 235.676743][ T46] usb 5-1: config 0 descriptor?? [ 235.731709][ T46] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204 [ 235.912977][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 236.033953][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.061381][ T5276] usb 1-1: USB disconnect, device number 18 [ 236.083172][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.680862][ T5245] Bluetooth: hci7: command 0x1003 tx timeout [ 236.681045][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 236.832761][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.876321][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.296877][ T46] usb 5-1: USB disconnect, device number 21 [ 237.621016][ T5312] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.681442][ T7701] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 237.890858][ T5312] usb 3-1: Using ep0 maxpacket: 16 [ 237.909022][ T7710] x_tables: unsorted entry at hook 2 [ 237.918797][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.009358][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.029359][ T5312] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 238.075665][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.119040][ T5312] usb 3-1: config 0 descriptor?? [ 238.193504][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 238.451855][ T7724] netlink: 'syz.4.685': attribute type 12 has an invalid length. [ 238.494298][ T7724] netlink: 'syz.4.685': attribute type 11 has an invalid length. [ 238.502898][ T7724] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.685'. [ 238.642978][ T5312] elecom 0003:056E:00FC.0009: unexpected long global item [ 239.010124][ T5312] elecom 0003:056E:00FC.0009: probe with driver elecom failed with error -22 [ 239.562742][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 240.318150][ T5312] usb 3-1: USB disconnect, device number 13 [ 240.330841][ T5278] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.530951][ T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 240.538659][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 240.558901][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 240.590946][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 240.622878][ T5278] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 240.632656][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.641740][ T5278] usb 1-1: Product: syz [ 240.647285][ T5278] usb 1-1: Manufacturer: syz [ 240.666553][ T5278] usb 1-1: SerialNumber: syz [ 240.688990][ T7757] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 240.708987][ T5278] usb 1-1: config 0 descriptor?? [ 240.734884][ T5278] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204 [ 240.751118][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 240.759090][ T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.778566][ T46] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 240.820063][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 240.834482][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.844991][ T46] usb 2-1: Product: syz [ 240.849269][ T46] usb 2-1: Manufacturer: syz [ 240.854425][ T46] usb 2-1: SerialNumber: syz [ 241.010401][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.040017][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.090540][ T46] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.124962][ T7760] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 241.571299][ T5235] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 242.635297][ T5276] usb 1-1: USB disconnect, device number 19 [ 242.733539][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'. [ 242.880346][ T7786] vlan2: entered promiscuous mode [ 242.895357][ T7786] bridge0: entered promiscuous mode [ 242.969199][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 243.170959][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 243.220460][ T8] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 243.293420][ T8] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 243.323740][ T8] usb 5-1: config 8 has no interface number 0 [ 243.359520][ T8] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 243.388787][ T941] usb 2-1: USB disconnect, device number 27 [ 243.423856][ T941] usblp1: removed [ 243.438426][ T8] usb 5-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.508497][ T8] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 243.538096][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.550745][ T8] usb 5-1: Product: syz [ 243.555226][ T8] usb 5-1: Manufacturer: syz [ 243.560117][ T8] usb 5-1: SerialNumber: syz [ 243.865428][ T7811] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.703'. [ 243.877398][ T7811] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 243.918181][ T7812] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 244.099235][ T8] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 244.154512][ T8] usb 5-1: USB disconnect, device number 22 [ 244.941410][ T35] Bluetooth: hci7: Frame reassembly failed (-84) [ 245.413466][ T7832] x_tables: unsorted entry at hook 2 [ 246.597305][ T7846] xt_NFQUEUE: number of total queues is 0 [ 246.646458][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.670604][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.001114][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 247.672918][ T7872] x_tables: unsorted entry at hook 2 [ 247.750960][ T5278] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 247.952331][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 247.970078][ T5278] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 247.992161][ T5278] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 248.005710][ T5278] usb 1-1: config 8 has no interface number 0 [ 248.014798][ T5278] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 248.027594][ T5278] usb 1-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.046894][ T5278] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 248.058554][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.067475][ T5278] usb 1-1: Product: syz [ 248.075304][ T5278] usb 1-1: Manufacturer: syz [ 248.080258][ T5278] usb 1-1: SerialNumber: syz [ 248.471317][ T7887] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.724'. [ 248.481277][ T7887] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 249.252925][ T7899] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 249.318684][ T5278] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 249.407387][ T5278] usb 1-1: USB disconnect, device number 20 [ 249.670104][ T1178] Bluetooth: hci7: Frame reassembly failed (-84) [ 250.094019][ T7913] netlink: 'syz.3.737': attribute type 12 has an invalid length. [ 250.161140][ T7913] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.737'. [ 250.695822][ T7923] netlink: 'syz.3.742': attribute type 3 has an invalid length. [ 250.796115][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 250.824817][ T29] audit: type=1326 audit(1725929940.252:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7926 comm="syz.4.744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002197def9 code=0x0 [ 250.845630][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.721299][ T5235] Bluetooth: hci7: command 0x1003 tx timeout [ 251.721986][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 252.180917][ T7952] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 252.260811][ T941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.338364][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.390563][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.406064][ T7961] netlink: 'syz.2.753': attribute type 12 has an invalid length. [ 252.426459][ T7961] netlink: 'syz.2.753': attribute type 11 has an invalid length. [ 252.470607][ T7961] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.753'. [ 252.485480][ T941] usb 5-1: Using ep0 maxpacket: 32 [ 252.498966][ T941] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.510069][ T941] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.525784][ T941] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.545076][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.554061][ T941] usb 5-1: Product: syz [ 252.558373][ T941] usb 5-1: Manufacturer: syz [ 252.566263][ T941] usb 5-1: SerialNumber: syz [ 252.761407][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.789076][ T941] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.961044][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 252.998446][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 253.060166][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 253.086657][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.281963][ T25] usb 3-1: config 0 descriptor?? [ 253.843866][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.995423][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.121927][ T30] INFO: task syz.2.33:5430 blocked for more than 143 seconds. [ 254.125524][ T25] hid (null): nested delimiters [ 254.129454][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 254.157689][ T25] hid (null): nested delimiters [ 254.186970][ T25] hid (null): nested delimiters [ 254.200696][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.215397][ T25] hid (null): report_id 2838798905 is invalid [ 254.240531][ T25] hid (null): unknown global tag 0xc [ 254.259512][ T25] hid (null): unknown global tag 0xa5 [ 254.464158][ T25] hid (null): unknown global tag 0xd [ 254.482815][ T2980] Bluetooth: hci7: Frame reassembly failed (-84) [ 254.489993][ T30] task:syz.2.33 state:D stack:24672 pid:5430 tgid:5430 ppid:5226 flags:0x00000004 [ 254.588450][ T25] hid (null): unknown global tag 0xc [ 254.736635][ T30] Call Trace: [ 254.899198][ T30] [ 254.973238][ T30] __schedule+0x17ae/0x4a10 [ 254.974492][ T25] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 254.989339][ T30] ? __pfx___schedule+0x10/0x10 [ 255.018187][ T25] hid-generic 0003:0158:0100.000A: unexpected long global item [ 255.039081][ T25] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 255.059357][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.079295][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 255.127646][ T30] ? schedule+0x90/0x320 [ 255.149246][ T30] schedule+0x14b/0x320 [ 255.173279][ T30] schedule_preempt_disabled+0x13/0x30 [ 255.189450][ T30] __mutex_lock+0x6a4/0xd70 [ 255.205077][ T941] usb 5-1: USB disconnect, device number 23 [ 255.218120][ T30] ? __mutex_lock+0x527/0xd70 [ 255.230319][ T30] ? hugetlb_fault+0x56f/0x3770 [ 255.237142][ T941] usblp1: removed [ 255.248621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 255.258833][ T30] hugetlb_fault+0x56f/0x3770 [ 255.264527][ T30] ? __lock_acquire+0x137a/0x2040 [ 255.270228][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 255.279338][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 255.284918][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 255.290357][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 255.296527][ T30] handle_mm_fault+0x183d/0x1ad0 [ 255.310758][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 255.316093][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.326526][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 255.336415][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 255.350723][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 255.360718][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 255.366032][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 255.380702][ T30] ? exc_page_fault+0x113/0x8c0 [ 255.391144][ T30] exc_page_fault+0x459/0x8c0 [ 255.395996][ T30] asm_exc_page_fault+0x26/0x30 [ 255.406160][ T30] RIP: 0033:0x7f9f7b34597c [ 255.420707][ T30] RSP: 002b:00007ffdbd0c77f8 EFLAGS: 00010246 [ 255.426850][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 255.444546][ T30] RDX: 0000000000000010 RSI: 00007f9f7ae005d5 RDI: 0000000020000d00 [ 255.460689][ T30] RBP: 00007f9f7b537a80 R08: 00007f9f7b200000 R09: 0000000000000001 [ 255.468742][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000162bb [ 255.491935][ T30] R13: 00007ffdbd0c7900 R14: 0000000000000032 R15: fffffffffffffffe [ 255.500213][ T30] [ 255.504440][ T30] INFO: task syz.2.33:5431 blocked for more than 144 seconds. [ 255.518231][ T941] usb 3-1: USB disconnect, device number 14 [ 255.521047][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 255.533671][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.548763][ T30] task:syz.2.33 state:D stack:25968 pid:5431 tgid:5430 ppid:5226 flags:0x00004006 [ 255.569664][ T30] Call Trace: [ 255.574373][ T30] [ 255.577382][ T30] __schedule+0x17ae/0x4a10 [ 255.582411][ T30] ? __pfx___schedule+0x10/0x10 [ 255.587540][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.592705][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.598903][ T30] ? schedule+0x90/0x320 [ 255.603262][ T30] schedule+0x14b/0x320 [ 255.607471][ T30] io_schedule+0x8d/0x110 [ 255.612092][ T30] folio_wait_bit_common+0x882/0x12b0 [ 255.617537][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 255.624086][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 255.629684][ T30] ? _raw_spin_unlock+0x28/0x50 [ 255.634801][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 255.640611][ T30] __filemap_get_folio+0xb7/0xc10 [ 255.645980][ T30] hugetlb_fault+0x1b72/0x3770 [ 255.653821][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 255.659127][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.664439][ T30] handle_mm_fault+0x183d/0x1ad0 [ 255.669467][ T30] ? mt_find+0x226/0x850 [ 255.675094][ T30] ? __pfx_mt_find+0x10/0x10 [ 255.679748][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 255.686548][ T30] ? find_vma+0xf9/0x170 [ 255.691503][ T30] ? __pfx_find_vma+0x10/0x10 [ 255.696257][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.702927][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 255.708263][ T30] exc_page_fault+0x2b9/0x8c0 [ 255.713132][ T30] asm_exc_page_fault+0x26/0x30 [ 255.718046][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 255.725351][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 255.745969][ T30] RSP: 0018:ffffc90004acfad0 EFLAGS: 00050246 [ 255.753520][ T30] RAX: ffffffff84aa0e01 RBX: 00000000200118c0 RCX: 0000000000000040 [ 255.763048][ T30] RDX: 0000000000000000 RSI: ffffc90004acfb60 RDI: 0000000020011880 [ 255.771171][ T30] RBP: ffffc90004acfc10 R08: ffffc90004acfb9f R09: 1ffff92000959f73 [ 255.779217][ T30] R10: dffffc0000000000 R11: fffff52000959f74 R12: 0000000000000040 [ 255.788524][ T30] R13: 0000000000011240 R14: 0000000020011880 R15: ffffc90004acfb60 [ 255.797492][ T30] ? __pfx__copy_to_user+0x1/0x10 [ 255.803264][ T30] _copy_to_user+0x86/0xb0 [ 255.807786][ T30] rng_dev_read+0x3be/0x6d0 [ 255.813055][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 255.818179][ T30] ? security_file_permission+0x7f/0xa0 [ 255.824324][ T30] ? rw_verify_area+0x52a/0x6b0 [ 255.829230][ T30] vfs_readv+0x6c2/0xa90 [ 255.833714][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 255.838815][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 255.843841][ T30] ? __fget_files+0x29/0x470 [ 255.848499][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 255.853538][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 255.861387][ T30] ? do_syscall_64+0x100/0x230 [ 255.866227][ T30] ? do_syscall_64+0xb6/0x230 [ 255.872270][ T30] do_syscall_64+0xf3/0x230 [ 255.876845][ T30] ? clear_bhb_loop+0x35/0x90 [ 255.882567][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.888562][ T30] RIP: 0033:0x7f9f7b37def9 [ 255.894177][ T30] RSP: 002b:00007f9f7c177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 255.903722][ T30] RAX: ffffffffffffffda RBX: 00007f9f7b535f80 RCX: 00007f9f7b37def9 [ 255.911925][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 255.919937][ T30] RBP: 00007f9f7b3f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 255.928562][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.936676][ T30] R13: 0000000000000000 R14: 00007f9f7b535f80 R15: 00007ffdbd0c7698 [ 255.945086][ T30] [ 255.948195][ T30] INFO: task syz.2.33:5434 blocked for more than 145 seconds. [ 255.959924][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 255.982047][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.001874][ T30] task:syz.2.33 state:D stack:22352 pid:5434 tgid:5430 ppid:5226 flags:0x00004004 [ 256.021984][ T30] Call Trace: [ 256.025694][ T30] [ 256.028648][ T30] __schedule+0x17ae/0x4a10 [ 256.039159][ T30] ? __pfx___schedule+0x10/0x10 [ 256.058716][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.059546][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.065180][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.071783][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.076535][ T30] ? schedule+0x90/0x320 [ 256.086512][ T30] schedule+0x14b/0x320 [ 256.092142][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.097849][ T30] __mutex_lock+0x6a4/0xd70 [ 256.102635][ T30] ? __mutex_lock+0x527/0xd70 [ 256.107371][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 256.113173][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.118234][ T30] ? __pfx_up_write+0x10/0x10 [ 256.124507][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.129774][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 256.135938][ T30] hugetlb_wp+0x104d/0x3a90 [ 256.140488][ T30] ? mark_lock+0x9a/0x350 [ 256.145148][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 256.150047][ T30] ? __pfx___might_resched+0x10/0x10 [ 256.155526][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 256.160609][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 256.166889][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.172461][ T30] ? __filemap_get_folio+0x769/0xc10 [ 256.177801][ T30] hugetlb_fault+0x27b2/0x3770 [ 256.182884][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 256.188076][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.193330][ T30] handle_mm_fault+0x183d/0x1ad0 [ 256.198422][ T30] ? mt_find+0x226/0x850 [ 256.205388][ T30] ? __pfx_mt_find+0x10/0x10 [ 256.210026][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 256.215428][ T30] ? find_vma+0xf9/0x170 [ 256.219708][ T30] ? __pfx_find_vma+0x10/0x10 [ 256.225785][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.233323][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 256.238677][ T30] exc_page_fault+0x2b9/0x8c0 [ 256.243531][ T30] asm_exc_page_fault+0x26/0x30 [ 256.248591][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 256.253832][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 256.274419][ T30] RSP: 0018:ffffc90004b57778 EFLAGS: 00050202 [ 256.280537][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 256.288667][ T30] RDX: 0000000000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3fba40 [ 256.296773][ T30] RBP: ffffc90004b57ec8 R08: ffffffff8ff74aef R09: 1ffffffff1fee95d [ 256.304958][ T30] R10: dffffc0000000000 R11: fffffbfff1fee95e R12: 1ffff9200096af7d [ 256.314203][ T30] R13: 1ffff9200096af08 R14: 0000000020800000 R15: 0000000000800000 [ 256.322342][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 256.327548][ T30] ? stack_trace_save+0x118/0x1d0 [ 256.338054][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 256.344088][ T30] ? stack_depot_save_flags+0x29/0x830 [ 256.349756][ T30] ? kasan_save_track+0x51/0x80 [ 256.355572][ T30] ? kasan_save_track+0x3f/0x80 [ 256.360504][ T30] ? kasan_save_free_info+0x40/0x50 [ 256.365896][ T30] ? poison_slab_object+0xe0/0x150 [ 256.378265][ T30] ? __kasan_slab_free+0x37/0x60 [ 256.383459][ T30] ? kfree+0x149/0x360 [ 256.387601][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 256.393697][ T30] ? security_file_ioctl+0x75/0xb0 [ 256.398870][ T30] ? __se_sys_ioctl+0x47/0x170 [ 256.403733][ T30] ? do_syscall_64+0xf3/0x230 [ 256.408439][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.416036][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 256.420992][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 256.426091][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.432715][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 256.438400][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.444699][ T30] ? kfree+0x149/0x360 [ 256.448847][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 256.460366][ T30] ? smack_log+0x123/0x540 [ 256.466521][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.475008][ T30] ? __pfx_smack_log+0x10/0x10 [ 256.479862][ T30] ? smk_access+0x4ab/0x4e0 [ 256.484583][ T30] ? smk_tskacc+0x300/0x370 [ 256.489258][ T30] ? smack_file_ioctl+0x2fa/0x3a0 [ 256.494570][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 256.500114][ T30] ? __fget_files+0x3f6/0x470 [ 256.504934][ T30] ? __fget_files+0x29/0x470 [ 256.509560][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 256.514897][ T30] ? security_file_ioctl+0x87/0xb0 [ 256.520097][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 256.525876][ T5245] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 256.549519][ T30] __se_sys_ioctl+0xfc/0x170 [ 256.555433][ T30] do_syscall_64+0xf3/0x230 [ 256.560074][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.564963][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.571041][ T30] RIP: 0033:0x7f9f7b37def9 [ 256.577508][ T30] RSP: 002b:00007f9f7c156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.586175][ T30] RAX: ffffffffffffffda RBX: 00007f9f7b536058 RCX: 00007f9f7b37def9 [ 256.594525][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 256.603228][ T30] RBP: 00007f9f7b3f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 256.611415][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.619442][ T30] R13: 0000000000000000 R14: 00007f9f7b536058 R15: 00007ffdbd0c7698 [ 256.627692][ T30] [ 256.631012][ T30] INFO: task syz.3.122:5733 blocked for more than 145 seconds. [ 256.649831][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 256.666442][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.699113][ T30] task:syz.3.122 state:D stack:24672 pid:5733 tgid:5733 ppid:5225 flags:0x00000004 [ 256.720769][ T30] Call Trace: [ 256.724163][ T30] [ 256.727142][ T30] __schedule+0x17ae/0x4a10 [ 256.750816][ T30] ? __pfx___schedule+0x10/0x10 [ 256.755773][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.770762][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.776302][ T30] ? schedule+0x90/0x320 [ 256.791922][ T30] schedule+0x14b/0x320 [ 256.796186][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.810688][ T30] __mutex_lock+0x6a4/0xd70 [ 256.815279][ T30] ? __mutex_lock+0x527/0xd70 [ 256.820036][ T30] ? hugetlb_fault+0x56f/0x3770 [ 256.825162][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.830264][ T30] hugetlb_fault+0x56f/0x3770 [ 256.835116][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.841769][ T30] ? __lock_acquire+0x137a/0x2040 [ 256.846848][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 256.852068][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 256.857516][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 256.864789][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 256.870571][ T30] handle_mm_fault+0x183d/0x1ad0 [ 256.876802][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 256.885617][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.895036][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 256.900283][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 256.906882][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 256.912405][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 256.917653][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 256.923674][ T30] ? exc_page_fault+0x113/0x8c0 [ 256.928584][ T30] exc_page_fault+0x459/0x8c0 [ 256.933377][ T30] asm_exc_page_fault+0x26/0x30 [ 256.938274][ T30] RIP: 0033:0x7f8ac5045063 [ 256.942921][ T30] RSP: 002b:00007ffed7accd60 EFLAGS: 00010246 [ 256.949041][ T30] RAX: 0000000020000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 256.957171][ T30] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 000055556b3ea3c8 [ 256.965327][ T30] RBP: 00007ffed7acce78 R08: 0000000000000000 R09: 0000000000000000 [ 256.973394][ T30] R10: 0000000000000000 R11: 0000000000000002 R12: 000000000001ab64 [ 256.984057][ T30] R13: 00007ffed7accea0 R14: 0000000000000032 R15: fffffffffffffffe [ 256.992262][ T30] [ 257.016191][ T30] [ 257.016191][ T30] Showing all locks held in the system: [ 257.045050][ T30] 1 lock held by khungtaskd/30: [ 257.049981][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 257.061484][ T30] 1 lock held by udevd/4677: [ 257.066134][ T30] 2 locks held by getty/4983: [ 257.072221][ T30] #0: ffff88802fb3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 257.083750][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 257.096549][ T30] 2 locks held by syz.2.33/5430: [ 257.101863][ T30] #0: ffff88801bbfd3d0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 257.112399][ T30] #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 257.123515][ T30] 3 locks held by syz.2.33/5431: [ 257.128524][ T30] #0: ffff8880668d9e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 257.138774][ T30] #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 257.149818][ T30] #2: ffff888034cfa0e8 (&resv_map->rw_sema){.+.+}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 257.160915][ T30] 2 locks held by syz.2.33/5434: [ 257.165896][ T30] #0: ffff8880668d9e18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 257.177151][ T30] #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 257.189331][ T30] 2 locks held by syz.3.122/5733: [ 257.194675][ T30] #0: ffff888024884df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 257.206055][ T30] #1: ffff888020ea8578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 257.217202][ T30] 3 locks held by syz.3.762/7991: [ 257.222301][ T30] #0: ffff888026e210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 257.232531][ T30] #1: ffff88807e4960a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 257.242832][ T30] #2: ffffffff8e73d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 257.253129][ T30] [ 257.255476][ T30] ============================================= [ 257.255476][ T30] [ 257.357941][ T30] NMI backtrace for cpu 0 [ 257.362357][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 257.371171][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.381268][ T30] Call Trace: [ 257.384590][ T30] [ 257.387554][ T30] dump_stack_lvl+0x241/0x360 [ 257.392281][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.397526][ T30] ? __pfx__printk+0x10/0x10 [ 257.402166][ T30] ? vprintk_emit+0x667/0x7c0 [ 257.406925][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 257.412014][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 257.417038][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.422543][ T30] ? _printk+0xd5/0x120 [ 257.426712][ T30] ? __pfx__printk+0x10/0x10 [ 257.431314][ T30] ? __wake_up_klogd+0xcc/0x110 [ 257.436181][ T30] ? __pfx__printk+0x10/0x10 [ 257.440782][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 257.445818][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 257.451816][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 257.457815][ T30] watchdog+0xff4/0x1040 [ 257.462080][ T30] ? watchdog+0x1ea/0x1040 [ 257.466518][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.471212][ T30] kthread+0x2f0/0x390 [ 257.475303][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.479997][ T30] ? __pfx_kthread+0x10/0x10 [ 257.484631][ T30] ret_from_fork+0x4b/0x80 [ 257.489064][ T30] ? __pfx_kthread+0x10/0x10 [ 257.493677][ T30] ret_from_fork_asm+0x1a/0x30 [ 257.498481][ T30] [ 257.502614][ T30] Sending NMI from CPU 0 to CPUs 1: [ 257.508604][ C1] NMI backtrace for cpu 1 [ 257.508620][ C1] CPU: 1 UID: 0 PID: 2980 Comm: kworker/u8:8 Not tainted 6.11.0-rc7-syzkaller #0 [ 257.508639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.508651][ C1] Workqueue: bat_events batadv_nc_worker [ 257.508681][ C1] RIP: 0010:__local_bh_enable_ip+0x132/0x200 [ 257.508707][ C1] Code: 05 2b 7b ac 7e 25 00 ff 00 00 3d 00 02 00 00 75 0a 48 8b 7c 24 18 e8 ad 3b 18 00 b8 01 00 00 00 44 29 f8 65 01 05 06 7b ac 7e <65> 8b 05 ff 7a ac 7e a9 00 ff ff 00 75 19 48 c7 c7 40 ca e9 8b e8 [ 257.508722][ C1] RSP: 0018:ffffc90009617a00 EFLAGS: 00000083 [ 257.508737][ C1] RAX: 00000000fffffe00 RBX: 1ffff920012c2f44 RCX: ffffffff9a0fd903 [ 257.508750][ C1] RDX: dffffc0000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3fba40 [ 257.508763][ C1] RBP: ffffc90009617ab0 R08: ffffffff8ff74aef R09: 1ffffffff1fee95d [ 257.508776][ C1] R10: dffffc0000000000 R11: fffffbfff1fee95e R12: dffffc0000000000 [ 257.508789][ C1] R13: 1ffff920012c2f48 R14: ffffc90009617a40 R15: 0000000000000201 [ 257.508802][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 257.508817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.508829][ C1] CR2: 00007fed4ef042d8 CR3: 000000000e534000 CR4: 00000000003506f0 [ 257.508845][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.508856][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.508867][ C1] Call Trace: [ 257.508873][ C1] [ 257.508881][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 257.508904][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 257.508936][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.508958][ C1] ? nmi_handle+0x2a/0x5a0 [ 257.508984][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 257.509006][ C1] ? nmi_handle+0x14f/0x5a0 [ 257.509021][ C1] ? nmi_handle+0x2a/0x5a0 [ 257.509039][ C1] ? __local_bh_enable_ip+0x132/0x200 [ 257.509061][ C1] ? default_do_nmi+0x63/0x160 [ 257.509084][ C1] ? exc_nmi+0x123/0x1f0 [ 257.509106][ C1] ? end_repeat_nmi+0xf/0x53 [ 257.509135][ C1] ? __local_bh_enable_ip+0x132/0x200 [ 257.509157][ C1] ? __local_bh_enable_ip+0x132/0x200 [ 257.509181][ C1] ? __local_bh_enable_ip+0x132/0x200 [ 257.509203][ C1] [ 257.509209][ C1] [ 257.509216][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 257.509243][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.509267][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 257.509294][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 257.509342][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 257.509378][ C1] batadv_nc_worker+0x328/0x610 [ 257.509403][ C1] ? batadv_nc_worker+0xcb/0x610 [ 257.509431][ C1] ? process_scheduled_works+0x945/0x1830 [ 257.509455][ C1] process_scheduled_works+0xa2c/0x1830 [ 257.509495][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.509524][ C1] ? assign_work+0x364/0x3d0 [ 257.509549][ C1] worker_thread+0x86d/0xd10 [ 257.509582][ C1] ? __kthread_parkme+0x169/0x1d0 [ 257.509609][ C1] ? __pfx_worker_thread+0x10/0x10 [ 257.509632][ C1] kthread+0x2f0/0x390 [ 257.509658][ C1] ? __pfx_worker_thread+0x10/0x10 [ 257.509681][ C1] ? __pfx_kthread+0x10/0x10 [ 257.509708][ C1] ret_from_fork+0x4b/0x80 [ 257.509733][ C1] ? __pfx_kthread+0x10/0x10 [ 257.509759][ C1] ret_from_fork_asm+0x1a/0x30 [ 257.509793][ C1] [ 257.528324][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 257.528345][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 257.528373][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.528388][ T30] Call Trace: [ 257.528398][ T30] [ 257.528409][ T30] dump_stack_lvl+0x241/0x360 [ 257.528445][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.528474][ T30] ? __pfx__printk+0x10/0x10 [ 257.528496][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.528539][ T30] ? vscnprintf+0x5d/0x90 [ 257.528572][ T30] panic+0x349/0x860 [ 257.528598][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 257.528632][ T30] ? __pfx_panic+0x10/0x10 [ 257.528654][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 257.528682][ T30] ? __irq_work_queue_local+0x137/0x410 [ 257.528717][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 257.528743][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 257.528774][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 257.528810][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 257.528845][ T30] watchdog+0x1033/0x1040 [ 257.528881][ T30] ? watchdog+0x1ea/0x1040 [ 257.528930][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.528964][ T30] kthread+0x2f0/0x390 [ 257.529000][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.529031][ T30] ? __pfx_kthread+0x10/0x10 [ 257.529068][ T30] ret_from_fork+0x4b/0x80 [ 257.529101][ T30] ? __pfx_kthread+0x10/0x10 [ 257.529137][ T30] ret_from_fork_asm+0x1a/0x30 [ 257.529198][ T30] [ 257.534605][ T30] Kernel Offset: disabled [ 257.992286][ T30] Rebooting in 86400 seconds..