last executing test programs: 11.272576679s ago: executing program 4 (id=3322): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x19) openat$nullb(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecbb5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) 10.007275077s ago: executing program 3 (id=3327): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, 0x0, 0x0) 9.691542258s ago: executing program 4 (id=3328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 9.652628232s ago: executing program 3 (id=3329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.925261161s ago: executing program 1 (id=3332): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.751689135s ago: executing program 3 (id=3334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0xffffffff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x80}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000740)={&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x54, 0x20048885}, 0x20084054) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x2, 0x0, 'queue0\x00', 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000400)={0xa, 0x4e21, 0x1000000080000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000080)={0x0, 0x3, 0x0, "b80100000000000000000000000000000000000000000000b700"}) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 8.109997123s ago: executing program 1 (id=3336): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0x12, 0x7, './file0/file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.942738056s ago: executing program 1 (id=3337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x19f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00'], 0x28}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.918773171s ago: executing program 3 (id=3338): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000107000000090400000503000000092100000001220500090581030000000000090502030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="56e5566b207cb0c7c4b17f87617ed8cb", 0x10}], 0x1, 0xf739, 0x0) 7.530211102s ago: executing program 1 (id=3340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x19) openat$nullb(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecbb5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) 6.282841099s ago: executing program 4 (id=3346): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xfc}, @l2cap_cid_signaling={{0xf8}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x2, 0x51}, {0x9, 0x3ff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x2, 0xfffa, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x42, 0x8001, 0x6, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0xffff, 0x2, 0x7fff, 0x7ff}}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_ews={0x7, 0x2, 0x1b1b}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0xf956, 0x0, 0x1, 0x1}}]}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0x101) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 5.75242119s ago: executing program 2 (id=3348): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0x12, 0x7, './file0/file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.61406711s ago: executing program 1 (id=3349): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 5.539204211s ago: executing program 2 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, &(0x7f00000002c0)='sockfs\x00', 0x2009008, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mknod(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {@flock_openafs}, {}]}) 4.391129164s ago: executing program 2 (id=3351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.298482776s ago: executing program 3 (id=3352): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x3}, 0x0, 0x0, 0x2, 0x1}, 0x20) syz_io_uring_setup(0xfffffffc, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) shutdown(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4.027862863s ago: executing program 4 (id=3353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)=""/4087, 0xff7}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.991522836s ago: executing program 0 (id=3354): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB], 0x6c}}, 0x0) 3.929393221s ago: executing program 1 (id=3355): pipe2(&(0x7f0000000300), 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0xee, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb15"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2f}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x0, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100)) 2.886860935s ago: executing program 3 (id=3356): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 2.880446444s ago: executing program 0 (id=3357): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x480}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0) 2.770904719s ago: executing program 2 (id=3358): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x400443c8, 0x20000002) 2.769800371s ago: executing program 4 (id=3359): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xfc}, @l2cap_cid_signaling={{0xf8}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x2, 0x51}, {0x9, 0x3ff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x2, 0xfffa, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x42, 0x8001, 0x6, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0xffff, 0x2, 0x7fff, 0x7ff}}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_ews={0x7, 0x2, 0x1b1b}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0xf956, 0x0, 0x1, 0x1}}]}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0x101) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 2.729440437s ago: executing program 0 (id=3360): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000f50e0000000000000000008510000006000000180000000000000000000000000000006600000000000000180000000000000000000000001500009500000000000000440300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000000000040000000000c7de47219500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0xf18}}}, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000500)={0x2a, 0x2}, 0xc) read(r7, &(0x7f00000001c0)=""/149, 0x95) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x8919, 0x0) write$binfmt_script(r8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @prog_id}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 2.311779229s ago: executing program 0 (id=3361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, &(0x7f00000002c0)='sockfs\x00', 0x2009008, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mknod(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {@flock_openafs}, {}]}) 1.223388105s ago: executing program 0 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, &(0x7f00000002c0)='sockfs\x00', 0x2009008, 0x0) chdir(&(0x7f0000000080)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {@flock_openafs}, {}]}) 1.109667373s ago: executing program 2 (id=3363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x204, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1e0, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "2d5014b2109a"}, {0xdd, 0x58, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9"}, {0xdd, 0xc6, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d"}, {0xdd, 0x65, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642c"}, {0xdd, 0x6, "83534cd40fda"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x204}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x33) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 1.099682048s ago: executing program 4 (id=3364): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc8, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xfc}, @l2cap_cid_signaling={{0xf8}, [@l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x60, 0x8}, {0x5, 0xfffc, 0xa7, 0x5}}, @l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x3, 0xc, 0x0, 0x6}}, @l2cap_conf_rsp={{0x5, 0x31, 0x14}, {0x3, 0xc, 0xbc, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x0, 0x2400, 0x2, 0x7800}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x100}}, @l2cap_conf_req={{0x4, 0x2, 0x51}, {0x9, 0x3ff, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x2, 0xfffa, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x42, 0x8001, 0x6, 0x4}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0xffff, 0x2, 0x7fff, 0x7ff}}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_ews={0x7, 0x2, 0x1b1b}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x2, 0xf956, 0x0, 0x1, 0x1}}]}}, @l2cap_info_rsp={{0xb, 0x8, 0x59}, {0x4, 0xaae9, "a6aba2538f93b03e6aef22892d9b98385e1df1b3891207edbf1d954e7423ade5b055495719ea413f488160e3c063ef6461cf331038d364cb0d6f9cec069df069488d19df8ebb3ce2079c2e30af76940121e9ec219f"}}, @l2cap_disconn_rsp={{0x7, 0xa0, 0x4}, {0xffff, 0x101}}]}}, 0x101) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) 127.497049ms ago: executing program 0 (id=3365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x368, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x300) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x9}]}}) 0s ago: executing program 2 (id=3366): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x9c, 0x3, 0x8, [{@dev}, {@remote}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7fc00000 [ 415.299772][ T29] audit: type=1326 audit(1720204657.127:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10001 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7fc00000 [ 415.300939][ T29] audit: type=1326 audit(1720204657.127:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10001 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7fc00000 [ 415.301289][ T29] audit: type=1326 audit(1720204657.127:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10001 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7fc00000 [ 415.301330][ T29] audit: type=1326 audit(1720204657.127:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10001 comm="syz.1.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7fc00000 [ 416.102284][T10036] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 416.149009][T10036] team0: Port device geneve1 added [ 416.904786][ T785] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 416.931203][T10044] overlayfs: failed to resolve './file1': -2 [ 417.903860][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 417.910915][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 417.993070][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.021197][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.031743][ T785] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.041213][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.059224][ T785] usb 4-1: config 0 descriptor?? [ 418.175359][ T785] hub 4-1:0.0: USB hub found [ 418.295556][ T785] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 418.327862][ T5107] kernel write not supported for file /input/event0 (pid: 5107 comm: kworker/1:3) [ 418.359303][ T785] usbhid 4-1:0.0: can't add hid device: -71 [ 418.391912][ T785] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 418.480629][ T785] usb 4-1: USB disconnect, device number 21 [ 418.623796][ T931] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.885113][T10074] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 419.503801][ T931] usb 1-1: Using ep0 maxpacket: 32 [ 419.513431][ T931] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 419.605542][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.631826][ T931] usb 1-1: Product: syz [ 419.656557][ T931] usb 1-1: Manufacturer: syz [ 419.673087][ T931] usb 1-1: SerialNumber: syz [ 419.696619][ T931] usb 1-1: config 0 descriptor?? [ 419.715010][ T931] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 419.938955][ T931] gspca_stk1135: reg_w 0x2 err -71 [ 419.948471][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 419.973805][ T931] gspca_stk1135: Sensor write failed [ 419.979150][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.011718][ T931] gspca_stk1135: Sensor write failed [ 420.024646][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.040970][ T931] gspca_stk1135: Sensor read failed [ 420.050143][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.062322][ T931] gspca_stk1135: Sensor read failed [ 420.070605][ T931] gspca_stk1135: Detected sensor type unknown (0x0) [ 420.086029][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.092790][ T931] gspca_stk1135: Sensor read failed [ 420.113162][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.133102][ T931] gspca_stk1135: Sensor read failed [ 420.143933][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.153345][ T931] gspca_stk1135: Sensor write failed [ 420.173849][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 420.181900][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 420.200974][ T931] gspca_stk1135: Sensor write failed [ 420.208737][ T931] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 420.237698][ T931] usb 1-1: USB disconnect, device number 22 [ 420.343884][ T8] usb 2-1: device descriptor read/64, error -71 [ 420.613997][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 420.775750][ T8] usb 2-1: device descriptor read/64, error -71 [ 420.906607][ T8] usb usb2-port1: attempt power cycle [ 421.345532][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 421.404531][ T8] usb 2-1: device descriptor read/8, error -71 [ 421.693811][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 421.736766][ T8] usb 2-1: device descriptor read/8, error -71 [ 421.860747][T10206] serio: Serial port pts0 [ 421.874988][ T8] usb usb2-port1: unable to enumerate USB device [ 421.884493][ T785] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 421.987668][T10216] 8021q: VLANs not supported on hsr0 [ 422.073871][ T785] usb 5-1: Using ep0 maxpacket: 8 [ 422.095560][ T785] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 422.110598][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.122103][ T785] usb 5-1: Product: syz [ 422.127050][ T785] usb 5-1: Manufacturer: syz [ 422.131758][ T785] usb 5-1: SerialNumber: syz [ 422.138876][ T785] usb 5-1: config 0 descriptor?? [ 422.146617][ T785] gspca_main: sq930x-2.14.0 probing 2770:930c [ 422.307354][T10233] serio: Serial port pts1 [ 422.803863][ T785] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 423.044129][ T785] gspca_sq930x: Sensor ov9630 not yet treated [ 423.050392][ T785] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 423.065819][ T785] usb 5-1: USB disconnect, device number 22 [ 425.449141][T10341] capability: warning: `syz.3.1380' uses 32-bit capabilities (legacy support in use) [ 428.713819][ T5107] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 428.899570][T10461] lo: entered promiscuous mode [ 428.912047][ T5107] usb 1-1: Using ep0 maxpacket: 16 [ 428.919450][ T5107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.935195][ T5107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.943738][T10461] lo: left promiscuous mode [ 428.963195][ T5107] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 428.993825][ T5107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.011916][ T5107] usb 1-1: config 0 descriptor?? [ 429.557850][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.574846][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.846868][ T5107] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 429.915984][ T5107] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 429.975596][ T5107] microsoft 0003:045E:07DA.0005: no inputs found [ 429.981976][ T5107] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 430.330779][ T5135] usb 1-1: USB disconnect, device number 23 [ 431.854840][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 432.286221][T10612] "syz.1.1504" (10612) uses obsolete ecb(arc4) skcipher [ 432.691530][T10639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.284895][T10686] No such timeout policy "syz0" [ 434.233370][T10768] serio: Serial port pts0 [ 434.964071][T10818] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 435.059733][T10820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 435.086936][T10820] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 436.563926][ T5135] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 436.756622][ T5135] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 436.770379][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.782628][ T5135] usb 1-1: config 0 descriptor?? [ 436.790768][ T5135] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 437.314452][T10942] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 437.406417][T10942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.864114][ T5086] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 438.052106][T10980] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 438.070206][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.102175][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.122068][ T5086] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.132328][ T5086] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 438.142865][ T5086] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.154442][ T5086] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 438.158419][T10983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.175502][ T5086] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.185641][ T5086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.193783][ T5086] usb 4-1: Product: syz [ 438.198331][ T5086] usb 4-1: Manufacturer: syz [ 438.203060][ T5086] usb 4-1: SerialNumber: syz [ 438.222128][ T5135] usb 1-1: USB disconnect, device number 24 [ 438.447669][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.464832][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.708698][T11001] serio: Serial port pts0 [ 439.021118][T11012] netlink: 'syz.2.1679': attribute type 1 has an invalid length. [ 439.112722][T11018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.337115][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.344908][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.551205][ T5086] cdc_ncm 4-1:1.0: bind() failure [ 440.567711][ T5086] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 440.584953][ T5086] cdc_ncm 4-1:1.1: bind() failure [ 440.600525][ T5086] usb 4-1: USB disconnect, device number 22 [ 442.405491][ T4481] Bluetooth: hci0: command 0x0406 tx timeout [ 443.631207][T11177] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 443.649851][T11177] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1749'. [ 443.764581][ T931] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 443.954252][ T931] usb 2-1: Using ep0 maxpacket: 16 [ 443.961500][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.005209][ T931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.044217][ T931] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.065300][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.106272][ T931] usb 2-1: config 0 descriptor?? [ 446.283914][ T931] usbhid 2-1:0.0: can't add hid device: -71 [ 446.293988][ T931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 446.325094][ T931] usb 2-1: USB disconnect, device number 21 [ 447.010632][T11335] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 447.110675][T11342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.124175][ T931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 448.323925][ T931] usb 2-1: Using ep0 maxpacket: 8 [ 448.336052][ T931] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 448.346837][ T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.364664][ T931] usb 2-1: Product: syz [ 448.373412][ T931] usb 2-1: Manufacturer: syz [ 448.379492][ T931] usb 2-1: SerialNumber: syz [ 448.396573][ T931] usb 2-1: config 0 descriptor?? [ 448.410311][ T931] gspca_main: sq930x-2.14.0 probing 2770:930c [ 448.779113][ T931] gspca_sq930x: reg_r 001f failed -32 [ 448.786673][ T931] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 448.797890][ T931] usb 2-1: USB disconnect, device number 22 [ 451.684846][ T5138] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 451.727470][ T5138] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 452.077073][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 454.268166][T11638] serio: Serial port pts0 [ 459.934865][ T785] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 460.124125][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 460.145578][ T785] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 460.181181][ T785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.202058][ T785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.222369][ T785] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.273325][ T785] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.300574][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.371330][ T5138] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 460.523325][ T785] usb 1-1: usb_control_msg returned -32 [ 460.534763][ T785] usbtmc 1-1:16.0: can't read capabilities [ 460.585783][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.616020][ T5138] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.646328][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.676723][ T5138] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.703889][ T5138] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 460.735375][ T785] usb 1-1: USB disconnect, device number 25 [ 460.744478][ T5138] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.761132][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.779786][ T5138] usb 2-1: Product: syz [ 460.793844][ T5138] usb 2-1: Manufacturer: syz [ 460.800797][ T5138] usb 2-1: SerialNumber: syz [ 461.034372][ T5138] cdc_ncm 2-1:1.0: bind() failure [ 461.053267][ T5138] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 461.083977][ T5138] cdc_ncm 2-1:1.1: bind() failure [ 461.113412][ T5138] usb 2-1: USB disconnect, device number 23 [ 465.324043][ T5135] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 465.817724][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.855366][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.876822][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.921987][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.925742][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 465.968412][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 465.973758][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 465.990734][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.001099][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 466.037095][ T5135] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.040683][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 466.067932][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.101987][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 466.109478][ T5135] usb 1-1: Product: syz [ 466.109503][ T5135] usb 1-1: Manufacturer: syz [ 466.109517][ T5135] usb 1-1: SerialNumber: syz [ 466.290574][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 466.326616][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.097213][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.100744][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.104944][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.104977][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.105004][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.156496][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.215348][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.240126][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.258692][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.278929][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.310387][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.346075][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.378926][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.404618][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.426781][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.453851][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.492146][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.516508][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.540436][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.558776][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.593255][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.615862][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.649839][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.684607][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.716256][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.746500][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.781506][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.796257][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.804893][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.812645][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.820905][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.829210][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.864482][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.872811][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.873088][T12028] serio: Serial port pts0 [ 467.889808][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.900938][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.916301][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.930889][ T5138] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 467.956370][ T5138] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 468.517236][ T5135] cdc_ncm 1-1:1.0: bind() failure [ 468.544261][ T5135] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 468.551254][ T5135] cdc_ncm 1-1:1.1: bind() failure [ 468.578631][ T5135] usb 1-1: USB disconnect, device number 26 [ 469.658402][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 469.666279][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 469.675487][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 469.730422][T12057] input: syz0 as /devices/virtual/input/input9 [ 470.003342][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.011203][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.018923][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.026616][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.034582][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.042214][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.077221][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.178076][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.317603][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.460191][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.560205][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.598098][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.631093][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.683306][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.720682][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.750921][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.778550][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.813856][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.872092][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.886812][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.917164][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.949818][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 470.982239][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.019287][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.036616][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.045661][ T785] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 471.079090][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.120132][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.148491][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.174967][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.201131][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.229634][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.254804][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.291106][ T785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.302404][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.322649][ T785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.333364][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.351360][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.362656][ T785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.376892][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.384646][ T785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.404038][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.411492][ T785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.421904][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.438739][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.447719][ T785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 471.468248][ T5135] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.488373][ T785] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.504291][ T5135] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 471.521747][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.523471][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 471.539992][ T785] usb 5-1: Product: syz [ 471.550934][ T785] usb 5-1: Manufacturer: syz [ 471.586831][ T785] usb 5-1: SerialNumber: syz [ 471.845933][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.865619][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.124942][ T785] cdc_ncm 5-1:1.0: bind() failure [ 472.145018][ T785] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 472.152002][ T785] cdc_ncm 5-1:1.1: bind() failure [ 472.192222][ T785] usb 5-1: USB disconnect, device number 23 [ 472.274398][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.282605][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.316740][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.343834][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.373773][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.387936][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.413786][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.433779][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.459080][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.482122][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.498096][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.519619][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.539568][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.562398][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.579075][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.600758][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.622839][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.637458][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.653788][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.671421][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.687257][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.703911][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.720880][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.741450][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.760832][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.781179][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.808061][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.829379][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.844874][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.860126][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.875998][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.893883][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.917576][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.935271][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.955230][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 472.973320][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.009874][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.030950][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.050965][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.075718][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.093852][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.114257][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.121748][ T5138] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 473.153965][ T5138] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 473.294808][ T5107] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 473.513906][ T5107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.542456][ T5107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.593280][ T5107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 473.622680][ T5107] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 473.645547][ T5107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.662609][ T5107] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 473.693056][ T5107] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.714685][ T5107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.730362][ T5107] usb 1-1: Product: syz [ 473.735469][ T5107] usb 1-1: Manufacturer: syz [ 473.740096][ T5107] usb 1-1: SerialNumber: syz [ 474.048655][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.062816][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.985816][ T5107] cdc_ncm 1-1:1.0: bind() failure [ 476.014608][ T5107] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 476.021452][ T5107] cdc_ncm 1-1:1.1: bind() failure [ 476.081817][ T5107] usb 1-1: USB disconnect, device number 27 [ 476.903973][ T785] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 477.130140][ T785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.164351][ T785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.201030][ T785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.241626][ T785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 477.274792][ T785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 477.305690][ T785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 477.387367][ T785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.421895][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.445750][ T785] usb 2-1: Product: syz [ 477.449944][ T785] usb 2-1: Manufacturer: syz [ 477.463496][ T785] usb 2-1: SerialNumber: syz [ 477.764471][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.773823][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.807045][ T5138] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 479.035947][ T5138] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 479.060488][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.095052][ T5138] usb 5-1: config 0 descriptor?? [ 479.110391][ T5138] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 479.624344][ T785] cdc_ncm 2-1:1.0: bind() failure [ 479.655504][ T785] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 479.677428][ T785] cdc_ncm 2-1:1.1: bind() failure [ 479.698043][ T785] usb 2-1: USB disconnect, device number 24 [ 480.373945][ T785] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 480.560796][ T5138] usb 5-1: USB disconnect, device number 24 [ 480.605927][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.643242][ T785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.677414][ T785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.703778][ T785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 480.728512][ T785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 480.759884][ T785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 480.809263][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.846538][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.874102][ T785] usb 3-1: Product: syz [ 480.902873][ T785] usb 3-1: Manufacturer: syz [ 480.914436][ T785] usb 3-1: SerialNumber: syz [ 480.980277][T12389] sctp: [Deprecated]: syz.1.2282 (pid 12389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.980277][T12389] Use struct sctp_sack_info instead [ 481.187252][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.198363][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.693958][ T5138] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 481.943852][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 481.979108][ T5138] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 482.003580][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.029803][ T5138] usb 5-1: Product: syz [ 482.038607][ T5138] usb 5-1: Manufacturer: syz [ 482.048776][ T5138] usb 5-1: SerialNumber: syz [ 482.068152][ T5138] usb 5-1: config 0 descriptor?? [ 482.099471][ T5138] gspca_main: sq930x-2.14.0 probing 2770:930c [ 482.305386][ T5138] gspca_sq930x: reg_r 001f failed -32 [ 482.319301][ T5138] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 483.083919][ T785] cdc_ncm 3-1:1.0: bind() failure [ 483.114990][ T785] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 483.142882][ T785] cdc_ncm 3-1:1.1: bind() failure [ 483.158140][ T785] usb 3-1: USB disconnect, device number 24 [ 483.563788][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 483.637670][ T5138] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 483.744026][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 483.755644][ T8] usb 4-1: config 0 has no interfaces? [ 483.761130][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 483.764301][ T785] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 483.779527][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.818251][ T8] usb 4-1: config 0 descriptor?? [ 483.841127][ T5138] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 483.850493][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.861755][ T5138] usb 2-1: Product: syz [ 483.866725][ T5138] usb 2-1: Manufacturer: syz [ 483.872188][ T5138] usb 2-1: SerialNumber: syz [ 483.901399][ T5138] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.001637][ T785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.021667][ T785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.036613][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.043645][ T785] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.061404][ T785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.072369][ T785] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.082739][ T785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 484.096650][ T785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.106743][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.118332][ T785] usb 1-1: Product: syz [ 484.122521][ T785] usb 1-1: Manufacturer: syz [ 484.131560][ T785] usb 1-1: SerialNumber: syz [ 484.316961][T12463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.334502][T12463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.375725][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.385471][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.469973][ T5138] usb 5-1: USB disconnect, device number 25 [ 484.544419][ T50] usb 2-1: USB disconnect, device number 25 [ 484.570316][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 485.126003][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 485.148663][ T8] ath9k_htc: Failed to initialize the device [ 485.172564][ T50] usb 2-1: ath9k_htc: USB layer deinitialized [ 485.664277][ T50] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 485.864277][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 485.890015][ T50] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 485.903925][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.913535][ T50] usb 2-1: Product: syz [ 485.920246][ T50] usb 2-1: Manufacturer: syz [ 485.937308][ T50] usb 2-1: SerialNumber: syz [ 485.955665][ T50] usb 2-1: config 0 descriptor?? [ 485.976380][ T50] gspca_main: sq930x-2.14.0 probing 2770:930c [ 486.185332][ T50] gspca_sq930x: reg_r 001f failed -32 [ 486.201600][ T50] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 486.286322][ T50] usb 4-1: USB disconnect, device number 23 [ 486.451689][ T785] cdc_ncm 1-1:1.0: bind() failure [ 486.459316][ T785] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 486.467849][ T785] cdc_ncm 1-1:1.1: bind() failure [ 486.479118][ T785] usb 1-1: USB disconnect, device number 28 [ 487.433852][ T5138] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 487.634727][ T5138] usb 1-1: Using ep0 maxpacket: 32 [ 487.643035][ T5138] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 487.663861][ T5138] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 487.700364][ T5138] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 487.733955][ T5138] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 487.769140][ T5138] usb 1-1: config 0 interface 0 has no altsetting 0 [ 487.792430][ T5138] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 487.813790][ T5138] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 487.822253][ T5138] usb 1-1: Product: syz [ 487.843775][ T5138] usb 1-1: Manufacturer: syz [ 487.849393][ T5138] usb 1-1: SerialNumber: syz [ 487.866588][ T5138] usb 1-1: config 0 descriptor?? [ 487.879361][ T5138] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 487.906124][ T5138] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 488.143958][ T785] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 488.169092][ T50] usb 1-1: USB disconnect, device number 29 [ 488.178677][ T50] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 488.316288][ T5135] usb 2-1: USB disconnect, device number 26 [ 488.348492][ T785] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 488.363889][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.400507][ T785] usb 3-1: config 0 descriptor?? [ 488.422936][ T785] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 488.483909][ T4481] Bluetooth: hci1: command 0x0406 tx timeout [ 489.593987][ T5138] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 489.795273][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 489.818471][ T5138] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 489.837823][ T785] usb 3-1: USB disconnect, device number 25 [ 489.838163][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.870494][ T5138] usb 1-1: Product: syz [ 489.882381][ T5138] usb 1-1: Manufacturer: syz [ 489.895313][ T5138] usb 1-1: SerialNumber: syz [ 489.910582][ T5138] usb 1-1: config 0 descriptor?? [ 489.923270][ T5138] gspca_main: sq930x-2.14.0 probing 2770:930c [ 490.152467][ T5138] gspca_sq930x: reg_r 001f failed -32 [ 490.164943][ T5138] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 491.005088][ T931] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 491.206848][ T931] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 491.219900][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.231528][ T931] usb 4-1: config 0 descriptor?? [ 491.241861][ T931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 492.042382][T12810] "syz.1.2475" (12810) uses obsolete ecb(arc4) skcipher [ 492.133535][T12816] serio: Serial port pts0 [ 492.327342][ T5135] usb 1-1: USB disconnect, device number 30 [ 492.511207][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 492.671952][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 492.682443][ T931] usb 4-1: USB disconnect, device number 24 [ 493.524680][ T785] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 493.713776][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 493.726454][ T785] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 493.736042][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.744712][ T785] usb 3-1: Product: syz [ 493.749219][ T785] usb 3-1: Manufacturer: syz [ 493.753990][ T785] usb 3-1: SerialNumber: syz [ 493.765757][ T785] usb 3-1: config 0 descriptor?? [ 493.774696][ T785] gspca_main: sq930x-2.14.0 probing 2770:930c [ 494.030765][ T785] gspca_sq930x: reg_r 001f failed -32 [ 494.036405][ T785] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 494.269923][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 496.322139][ T931] usb 3-1: USB disconnect, device number 26 [ 497.178022][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.208139][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.256373][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.310881][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.343987][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.386185][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.426211][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.457913][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.492984][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.528895][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.559455][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.593092][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.630114][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.661782][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.693941][ T5135] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 497.696294][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.754740][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.800759][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.831563][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.866653][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.893993][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 497.898033][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.914361][ T5135] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 497.932961][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.932984][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 497.949456][ T5135] usb 3-1: Product: syz [ 497.957991][ T5135] usb 3-1: Manufacturer: syz [ 497.966976][ T5135] usb 3-1: SerialNumber: syz [ 497.981221][ T5135] usb 3-1: config 0 descriptor?? [ 497.998473][ T5135] gspca_main: sq930x-2.14.0 probing 2770:930c [ 498.020665][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.054009][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.092260][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.125456][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.146325][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.259555][ T5135] gspca_sq930x: reg_r 001f failed -32 [ 498.284277][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.292453][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.307027][ T5135] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 498.313725][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.322208][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.358442][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.381290][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.402887][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.424225][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.431661][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.452926][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.471003][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.490208][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.523726][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.546681][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.561612][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.579687][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.589414][ T931] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.599335][T12980] netlink: 900 bytes leftover after parsing attributes in process `syz.4.2546'. [ 498.603819][ T931] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 498.817765][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 499.056676][T13003] random: crng reseeded on system resumption [ 499.353866][T12932] syz.3.2526: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 499.373184][T12932] CPU: 1 PID: 12932 Comm: syz.3.2526 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 499.383364][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 499.393429][T12932] Call Trace: [ 499.396703][T12932] [ 499.399630][T12932] dump_stack_lvl+0x241/0x360 [ 499.404326][T12932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.409538][T12932] ? __pfx__printk+0x10/0x10 [ 499.414129][T12932] ? __rcu_read_unlock+0xa1/0x110 [ 499.419154][T12932] warn_alloc+0x278/0x410 [ 499.423484][T12932] ? __pfx_warn_alloc+0x10/0x10 [ 499.428341][T12932] ? translate_table+0x174/0x2260 [ 499.433361][T12932] ? __get_vm_area_node+0x23d/0x270 [ 499.438559][T12932] __vmalloc_node_range_noprof+0x69f/0x1460 [ 499.444469][T12932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.450854][T12932] ? rcu_is_watching+0x15/0xb0 [ 499.455628][T12932] ? trace_kmalloc+0x1f/0xd0 [ 499.460220][T12932] ? __kmalloc_node_noprof+0x247/0x440 [ 499.465681][T12932] ? kvmalloc_node_noprof+0x72/0x190 [ 499.470970][T12932] kvmalloc_node_noprof+0x142/0x190 [ 499.476170][T12932] ? translate_table+0x174/0x2260 [ 499.481191][T12932] translate_table+0x174/0x2260 [ 499.486058][T12932] ? __pfx_translate_table+0x10/0x10 [ 499.491334][T12932] ? __might_fault+0xaa/0x120 [ 499.496003][T12932] ? __pfx_lock_release+0x10/0x10 [ 499.501036][T12932] ? __might_fault+0xaa/0x120 [ 499.505709][T12932] ? __might_fault+0xc6/0x120 [ 499.510381][T12932] ? _copy_from_user+0xa6/0xe0 [ 499.515136][T12932] ? copy_from_sockptr_offset+0x6b/0xb0 [ 499.520676][T12932] do_ipt_set_ctl+0xe3d/0x1250 [ 499.525450][T12932] ? __pfx___might_resched+0x10/0x10 [ 499.530732][T12932] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 499.535922][T12932] ? __pfx_lock_release+0x10/0x10 [ 499.540948][T12932] ? __mutex_unlock_slowpath+0x21d/0x750 [ 499.546572][T12932] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 499.551941][T12932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.557916][T12932] ? __pfx___mutex_lock+0x10/0x10 [ 499.562933][T12932] ? module_put+0x13a/0x2d0 [ 499.567432][T12932] nf_setsockopt+0x295/0x2c0 [ 499.572016][T12932] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 499.577901][T12932] smc_setsockopt+0x275/0xe50 [ 499.582575][T12932] ? __pfx_smc_setsockopt+0x10/0x10 [ 499.587766][T12932] ? __pfx_lock_release+0x10/0x10 [ 499.592778][T12932] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 499.598311][T12932] ? security_socket_setsockopt+0x87/0xb0 [ 499.604027][T12932] ? __pfx_smc_setsockopt+0x10/0x10 [ 499.609214][T12932] do_sock_setsockopt+0x3af/0x720 [ 499.614238][T12932] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 499.619774][T12932] ? __fget_files+0x29/0x470 [ 499.624368][T12932] ? __fget_files+0x3f6/0x470 [ 499.629047][T12932] __sys_setsockopt+0x1ae/0x250 [ 499.633895][T12932] __x64_sys_setsockopt+0xb5/0xd0 [ 499.638915][T12932] do_syscall_64+0xf3/0x230 [ 499.643415][T12932] ? clear_bhb_loop+0x35/0x90 [ 499.648090][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.653982][T12932] RIP: 0033:0x7fdedc975bd9 [ 499.658413][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.678100][T12932] RSP: 002b:00007fdedd77e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.686507][T12932] RAX: ffffffffffffffda RBX: 00007fdedcb03f60 RCX: 00007fdedc975bd9 [ 499.694472][T12932] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 499.702433][T12932] RBP: 00007fdedc9e4aa1 R08: 0000000000000298 R09: 0000000000000000 [ 499.710392][T12932] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 499.718352][T12932] R13: 000000000000000b R14: 00007fdedcb03f60 R15: 00007fff445ed598 [ 499.726329][T12932] [ 499.759634][T12932] Mem-Info: [ 499.762943][T12932] active_anon:268 inactive_anon:3103 isolated_anon:0 [ 499.762943][T12932] active_file:7259 inactive_file:52132 isolated_file:0 [ 499.762943][T12932] unevictable:768 dirty:144 writeback:0 [ 499.762943][T12932] slab_reclaimable:9405 slab_unreclaimable:98337 [ 499.762943][T12932] mapped:13783 shmem:1266 pagetables:737 [ 499.762943][T12932] sec_pagetables:0 bounce:0 [ 499.762943][T12932] kernel_misc_reclaimable:0 [ 499.762943][T12932] free:1370199 free_pcp:1615 free_cma:0 [ 499.808102][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.814764][T12932] Node 0 active_anon:1072kB inactive_anon:12512kB active_file:28968kB inactive_file:208528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:55132kB dirty:576kB writeback:0kB shmem:3528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9920kB pagetables:2948kB sec_pagetables:0kB all_unreclaimable? no [ 499.853955][T12932] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 499.884127][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.898682][T12932] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.925768][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.933420][T12932] lowmem_reserve[]: 0 2571 2571 0 0 [ 499.939378][T12932] Node 0 DMA32 free:1525560kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:12176kB active_file:28704kB inactive_file:208476kB unevictable:1536kB writepending:576kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1360kB local_pcp:500kB free_cma:0kB [ 499.969973][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.014751][T12932] lowmem_reserve[]: 0 0 0 0 0 [ 500.022925][T12932] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:264kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 500.049777][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.060283][T12932] lowmem_reserve[]: 0 0 0 0 0 [ 500.068386][T12932] Node 1 Normal free:3946236kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.110682][T12932] lowmem_reserve[]: 0 0 0 0 0 [ 500.150646][T12932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.182774][T12932] Node 0 DMA32: 950*4kB (ME) 1143*8kB (UME) 1002*16kB (UME) 709*32kB (UME) 339*64kB (UME) 129*128kB (UM) 90*256kB (UME) 96*512kB (UME) 63*1024kB (UME) 30*2048kB (UM) 302*4096kB (UM) = 1525008kB [ 500.212260][T12932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.231346][T12932] Node 1 Normal: 3*4kB (U) 4*8kB (U) 3*16kB (U) 9*32kB (U) 8*64kB (UM) 3*128kB (U) 6*256kB (UM) 4*512kB (UM) 1*1024kB (U) 4*2048kB (U) 960*4096kB (M) = 3946236kB [ 500.266989][T12932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.284725][T12932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.299708][T12932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.310871][T12932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.337160][T12932] 60661 total pagecache pages [ 500.355701][T12932] 0 pages in swap cache [ 500.359987][T12932] Free swap = 124368kB [ 500.374162][T12932] Total swap = 124996kB [ 500.378356][T12932] 2097051 pages RAM [ 500.382170][T12932] 0 pages HighMem/MovableOnly [ 500.409339][T12932] 400873 pages reserved [ 500.413538][T12932] 0 pages cma reserved [ 500.419306][ T785] usb 3-1: USB disconnect, device number 27 [ 501.767257][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.774429][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.922821][T13264] netlink: 828 bytes leftover after parsing attributes in process `syz.4.2676'. [ 505.358253][T13296] netlink: 828 bytes leftover after parsing attributes in process `syz.0.2690'. [ 507.833831][ T5135] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 508.433886][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 508.812089][ T5135] usb 1-1: Using ep0 maxpacket: 8 [ 508.854054][ T5135] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 508.894128][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.915342][ T5135] usb 1-1: Product: syz [ 508.919571][ T5135] usb 1-1: Manufacturer: syz [ 508.942262][ T5135] usb 1-1: SerialNumber: syz [ 508.967854][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 508.979075][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.002046][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.033760][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.052577][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.076340][ T8] usb 4-1: config 0 descriptor?? [ 509.146269][ T5135] usb 1-1: config 0 descriptor?? [ 509.154458][ T5135] gspca_main: sq930x-2.14.0 probing 2770:930c [ 510.193796][ T5135] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 510.256786][ T5095] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 510.393834][ T785] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 510.597763][ T785] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 510.619880][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.627995][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 510.634466][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.640856][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 510.657197][ T8] usb 4-1: USB disconnect, device number 25 [ 510.663884][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.685520][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.699347][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.714960][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.723306][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.733336][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.750527][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.767319][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.816557][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.834591][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.845765][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.861683][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.875919][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.885641][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.901033][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 510.914537][T13417] Illegal XDP return value 4294967274 on prog (id 176) dev N/A, expect packet loss! [ 510.933196][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.954990][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.981921][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 511.011518][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.030487][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 511.062102][ T785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 511.090322][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.100073][ T785] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 511.117030][ T785] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 511.130809][ T785] usb 3-1: Product: syz [ 511.135236][ T785] usb 3-1: Manufacturer: syz [ 511.139855][ T785] usb 3-1: SerialNumber: syz [ 511.163984][ T5135] gspca_sq930x: Unknown sensor [ 511.169788][ T785] usb 3-1: config 0 descriptor?? [ 511.174964][ T5135] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 511.189382][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 511.189397][ T29] audit: type=1326 audit(1720204753.497:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.200832][ T5135] usb 1-1: USB disconnect, device number 31 [ 511.239360][ T785] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 511.256223][ T29] audit: type=1326 audit(1720204753.527:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.294424][ T29] audit: type=1326 audit(1720204753.527:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.350196][ T29] audit: type=1326 audit(1720204753.527:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.395491][ T29] audit: type=1326 audit(1720204753.527:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.441646][ T29] audit: type=1326 audit(1720204753.537:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.484066][ T5086] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 511.509211][ T29] audit: type=1326 audit(1720204753.537:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.520788][ T8] usb 3-1: USB disconnect, device number 28 [ 511.532494][ T29] audit: type=1326 audit(1720204753.537:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13429 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6bed75bd9 code=0x7ffc0000 [ 511.577678][ T8] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 512.343952][ T5086] usb 4-1: Using ep0 maxpacket: 8 [ 512.364859][ T5086] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 512.374540][ T5086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.382565][ T5086] usb 4-1: Product: syz [ 512.387025][ T5086] usb 4-1: Manufacturer: syz [ 512.391755][ T5086] usb 4-1: SerialNumber: syz [ 512.399145][ T5086] usb 4-1: config 0 descriptor?? [ 512.407893][ T5086] gspca_main: sq930x-2.14.0 probing 2770:930c [ 512.633903][ T931] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 512.820106][ T5095] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 512.830199][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.842976][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.863307][ T931] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 512.894134][ T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.905936][ T931] usb 1-1: config 0 descriptor?? [ 513.063925][ T5086] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 513.150879][T13458] netlink: 'syz.4.2759': attribute type 9 has an invalid length. [ 513.160508][T13458] netlink: 'syz.4.2759': attribute type 7 has an invalid length. [ 513.169349][T13458] netlink: 'syz.4.2759': attribute type 8 has an invalid length. [ 513.326393][ T931] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x0 [ 513.355896][ T931] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x0 [ 513.420839][ T29] audit: type=1326 audit(1720204755.727:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7ffc0000 [ 513.452749][ T29] audit: type=1326 audit(1720204755.727:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.1.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae07f75bd9 code=0x7ffc0000 [ 513.528441][ T931] usb 1-1: USB disconnect, device number 32 [ 513.922930][T13480] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2769'. [ 514.162864][ T5086] gspca_sq930x: Unknown sensor [ 514.173811][ T5086] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 514.944371][ T5086] usb 4-1: USB disconnect, device number 26 [ 515.586981][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 517.423963][ T5086] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 517.625827][ T5086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 517.667580][ T5086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 517.704100][ T5086] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 517.751051][ T5086] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.778619][ T5086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.808018][ T5086] usb 3-1: config 0 descriptor?? [ 517.836342][T13527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.911814][T13543] program syz.4.2787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.339476][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.415847][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.569677][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.587064][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.606809][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.675931][ T5086] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 518.712916][ T5086] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 518.738427][ T5086] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 518.780818][ T5086] usb 3-1: USB disconnect, device number 29 [ 519.853824][ T25] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 519.954983][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 520.140778][T13563] team_slave_0: entered promiscuous mode [ 520.147422][T13563] team_slave_0: entered allmulticast mode [ 520.837517][T13563] team0: Port device team_slave_0 removed [ 520.855997][ T25] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 520.874796][ T25] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 520.882907][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 520.972507][ T25] usb 5-1: string descriptor 0 read error: -22 [ 520.984034][ T25] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 520.993573][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.014532][ T25] usb 5-1: config 0 descriptor?? [ 521.021351][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 521.047777][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 521.275780][T13587] program syz.3.2800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.365228][ T25] usb 5-1: USB disconnect, device number 26 [ 522.109310][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 523.763841][ T5138] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 523.967893][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 524.792318][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 524.873890][ T5138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.902551][ T5138] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.933753][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.007735][T13632] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2815'. [ 525.017426][ T5138] usb 5-1: config 0 descriptor?? [ 525.034585][T13613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 525.227742][T13632] /dev/loop0: Can't open blockdev [ 525.655557][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 525.972545][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 526.063928][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 526.106938][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 526.134666][ T931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 526.164517][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 526.187928][ T5138] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 526.273238][ T5138] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 526.296754][ T5138] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 526.348361][ T5138] usb 5-1: USB disconnect, device number 27 [ 526.369246][ T931] usb 4-1: Using ep0 maxpacket: 32 [ 526.395900][ T931] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 526.420532][ T931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.483696][ T931] usb 4-1: Product: syz [ 526.500809][ T931] usb 4-1: Manufacturer: syz [ 526.529617][ T931] usb 4-1: SerialNumber: syz [ 526.591869][ T931] usb 4-1: config 0 descriptor?? [ 526.609064][ T931] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 527.023950][ T931] gspca_stk1135: reg_w 0x2 err -71 [ 527.044409][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.050780][ T931] gspca_stk1135: Sensor write failed [ 527.113710][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.120786][ T931] gspca_stk1135: Sensor write failed [ 527.133712][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.163785][ T931] gspca_stk1135: Sensor read failed [ 527.169872][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.202717][ T931] gspca_stk1135: Sensor read failed [ 527.224812][ T931] gspca_stk1135: Detected sensor type unknown (0x0) [ 527.397607][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.434676][ T931] gspca_stk1135: Sensor read failed [ 527.440010][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.463956][ T931] gspca_stk1135: Sensor read failed [ 527.469388][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.663977][ T5138] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 527.707089][ T931] gspca_stk1135: Sensor write failed [ 527.723909][ T931] gspca_stk1135: serial bus timeout: status=0x00 [ 527.730402][ T931] gspca_stk1135: Sensor write failed [ 527.894171][ T931] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 527.914131][ T931] usb 4-1: USB disconnect, device number 27 [ 527.955003][ T5138] usb 5-1: Using ep0 maxpacket: 32 [ 527.968965][ T5138] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 528.061429][ T5138] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 528.134305][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 528.142621][ T5138] usb 5-1: Product: syz [ 528.147427][ T5138] usb 5-1: Manufacturer: syz [ 528.152059][ T5138] usb 5-1: SerialNumber: syz [ 528.158895][ T5138] usb 5-1: config 0 descriptor?? [ 528.192698][T13666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 528.628981][ T931] usb 5-1: USB disconnect, device number 28 [ 529.343987][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 529.431310][T13685] team_slave_0: entered promiscuous mode [ 529.448605][T13685] team_slave_0: entered allmulticast mode [ 529.569223][T13685] team0: Port device team_slave_0 removed [ 529.583804][ T931] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 529.823754][ T931] usb 5-1: Using ep0 maxpacket: 8 [ 529.848791][ T931] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 529.858604][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.888799][ T931] usb 5-1: Product: syz [ 529.909014][ T931] usb 5-1: Manufacturer: syz [ 529.923958][ T931] usb 5-1: SerialNumber: syz [ 529.939388][ T5095] Bluetooth: hci1: command 0x0406 tx timeout [ 529.951118][ T931] usb 5-1: config 0 descriptor?? [ 529.982245][ T931] gspca_main: sq930x-2.14.0 probing 2770:930c [ 530.863856][ T4481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 530.954170][ T4481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 530.959038][ T931] gspca_sq930x: reg_r 001f failed -110 [ 530.968597][ T4481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 530.986629][ T931] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 530.994046][ T4481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.005555][ T4481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 531.013924][ T4481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 531.938584][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.008463][T13705] chnl_net:caif_netlink_parms(): no params data found [ 532.175372][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.366164][ T5138] usb 5-1: USB disconnect, device number 29 [ 532.380451][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.670354][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 533.153714][ T5095] Bluetooth: hci5: command tx timeout [ 533.641238][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.706179][T13705] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.714424][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.844175][T13705] bridge_slave_0: entered allmulticast mode [ 534.875376][T13705] bridge_slave_0: entered promiscuous mode [ 534.906457][T13705] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.951306][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.010755][T13705] bridge_slave_1: entered allmulticast mode [ 535.073939][T13705] bridge_slave_1: entered promiscuous mode [ 535.218278][ T5095] Bluetooth: hci5: command tx timeout [ 535.485574][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.617339][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.771462][T13705] team0: Port device team_slave_0 added [ 536.865919][T13705] team0: Port device team_slave_1 added [ 536.910591][ T35] bridge_slave_1: left allmulticast mode [ 536.922368][ T35] bridge_slave_1: left promiscuous mode [ 536.932728][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.984796][ T35] bridge_slave_0: left allmulticast mode [ 537.000311][ T35] bridge_slave_0: left promiscuous mode [ 537.020769][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.212816][ T933] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 537.354099][ T5095] Bluetooth: hci5: command tx timeout [ 538.098584][ T933] usb 5-1: Using ep0 maxpacket: 8 [ 538.148506][ T933] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 538.210266][ T933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.246272][ T933] usb 5-1: Product: syz [ 538.250490][ T933] usb 5-1: Manufacturer: syz [ 538.275959][ T933] usb 5-1: SerialNumber: syz [ 538.313610][ T933] usb 5-1: config 0 descriptor?? [ 538.326100][ T933] gspca_main: sq930x-2.14.0 probing 2770:930c [ 538.375285][ T4481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.391975][ T4481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.413565][ T4481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.432453][ T4481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.445254][ T4481] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 538.452948][ T4481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.541573][ T50] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 538.753825][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 538.762192][ T50] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.803104][ T50] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.826658][ T50] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 538.863905][ T50] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.883108][ T50] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 538.897277][ T50] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 538.911019][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.044279][ T933] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 539.085369][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.107607][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.143150][ T35] bond0 (unregistering): Released all slaves [ 539.172534][ T35] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 539.188335][ T35] bond1 (unregistering): Released all slaves [ 539.314056][ T933] gspca_sq930x: Sensor ov9630 not yet treated [ 539.336952][ T933] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 539.364112][ T4481] Bluetooth: hci5: command tx timeout [ 539.364139][ T933] usb 5-1: USB disconnect, device number 30 [ 539.404034][ T50] ntrig 0003:1B96:000A.000E: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 539.418653][ T35] bond2 (unregistering): Released all slaves [ 539.646642][ T50] usb 1-1: USB disconnect, device number 33 [ 539.770622][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.794051][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.827385][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.904775][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.911760][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.953265][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.270258][T13705] hsr_slave_0: entered promiscuous mode [ 540.278792][T13705] hsr_slave_1: entered promiscuous mode [ 540.296121][T13705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.304337][T13705] Cannot create hsr debugfs directory [ 541.064173][ T4481] Bluetooth: hci2: command tx timeout [ 541.097857][ T35] hsr_slave_0: left promiscuous mode [ 541.106207][ T35] hsr_slave_1: left promiscuous mode [ 541.148294][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.185400][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.205426][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.223154][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.310379][ T35] veth1_macvtap: left promiscuous mode [ 541.318313][ T35] veth0_macvtap: left promiscuous mode [ 541.328154][ T35] veth1_vlan: left promiscuous mode [ 541.338750][ T35] veth0_vlan: left promiscuous mode [ 541.550927][T13814] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.165907][ T35] team0 (unregistering): Port device team_slave_1 removed [ 542.288336][ T35] team0 (unregistering): Port device team_slave_0 removed [ 543.123807][ T4481] Bluetooth: hci2: command tx timeout [ 544.295184][ T5138] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 544.504038][ T5138] usb 3-1: Using ep0 maxpacket: 32 [ 544.526275][ T5138] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.559407][ T5138] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.579209][ T5138] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 544.591754][ T5138] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.616075][ T5138] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 544.679940][ T5138] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 544.723814][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.918444][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.025351][T13781] chnl_net:caif_netlink_parms(): no params data found [ 545.118440][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.203280][ T5138] ntrig 0003:1B96:000A.000F: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 545.217412][ T4481] Bluetooth: hci2: command tx timeout [ 545.306359][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.411916][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.501147][ T5138] usb 3-1: USB disconnect, device number 30 [ 545.610752][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.634555][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.652034][T13781] bridge_slave_0: entered allmulticast mode [ 545.662999][T13781] bridge_slave_0: entered promiscuous mode [ 545.696769][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.727084][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.754119][T13781] bridge_slave_1: entered allmulticast mode [ 545.773305][T13781] bridge_slave_1: entered promiscuous mode [ 545.893490][T13705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.033851][T13705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.055580][T13781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.804392][T13705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.848896][T13705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.901249][T13781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.091367][T13781] team0: Port device team_slave_0 added [ 547.112238][ T35] bridge_slave_1: left allmulticast mode [ 547.121771][ T35] bridge_slave_1: left promiscuous mode [ 547.142684][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.176201][ T35] bridge_slave_0: left allmulticast mode [ 547.182581][ T35] bridge_slave_0: left promiscuous mode [ 547.189018][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.284119][ T4481] Bluetooth: hci2: command tx timeout [ 547.323709][ T933] kernel write not supported for file /input/event0 (pid: 933 comm: kworker/0:3) [ 547.758021][ T35] team0: Port device geneve1 removed [ 547.815911][ T785] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 548.030247][ T785] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 548.039844][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.061275][ T785] usb 1-1: config 0 descriptor?? [ 548.084987][ T785] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 548.102495][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.111485][ T785] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 548.129542][ T785] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 548.140592][ T785] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 548.150040][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.160070][ T785] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 548.170765][ T35] bond0 (unregistering): Released all slaves [ 548.181638][ T785] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 549.052182][ T35] bond1 (unregistering): Released all slaves [ 549.239240][T13781] team0: Port device team_slave_1 added [ 549.528523][T13781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.546847][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.581220][T13781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.624408][T13781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.639930][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.668035][T13781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.679994][ T933] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 549.830822][ T931] usb 1-1: USB disconnect, device number 34 [ 549.863927][ T933] usb 3-1: Using ep0 maxpacket: 32 [ 549.890064][T13781] hsr_slave_0: entered promiscuous mode [ 549.899378][T13781] hsr_slave_1: entered promiscuous mode [ 549.903574][ T933] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.917273][ T933] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.927499][ T933] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 549.940367][ T933] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 549.951456][ T933] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 549.965978][ T933] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 550.027611][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.103056][ T35] hsr_slave_0: left promiscuous mode [ 550.167803][ T35] hsr_slave_1: left promiscuous mode [ 550.233680][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.275974][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.394431][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.523971][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.602442][ T35] veth1_macvtap: left promiscuous mode [ 550.615783][ T35] veth0_macvtap: left promiscuous mode [ 550.623138][ T35] veth1_vlan: left promiscuous mode [ 550.631992][ T35] veth0_vlan: left promiscuous mode [ 550.706548][ T5138] kernel write not supported for file /input/event0 (pid: 5138 comm: kworker/0:6) [ 550.770405][ T933] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 551.064525][ T933] usb 3-1: USB disconnect, device number 31 [ 551.546318][ T35] team0 (unregistering): Port device team_slave_1 removed [ 553.002137][ T5138] kernel write not supported for file /input/event0 (pid: 5138 comm: kworker/0:6) [ 554.621209][T13705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.760403][T13705] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.788554][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.796088][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.888104][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.895289][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.570480][T13781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.614705][T13781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.653513][T13781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.691823][T13781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 556.584396][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.864286][T13705] veth0_vlan: entered promiscuous mode [ 556.963911][T13705] veth1_vlan: entered promiscuous mode [ 557.058892][T13781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.131019][T13781] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.162308][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.169500][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.188420][ T5138] kernel write not supported for file /input/event0 (pid: 5138 comm: kworker/0:6) [ 557.207985][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.215111][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.227916][T13705] veth0_macvtap: entered promiscuous mode [ 557.288352][T13705] veth1_macvtap: entered promiscuous mode [ 557.401720][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.447171][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.466014][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.508309][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.538128][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.549645][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.583504][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.628551][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.646878][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.678731][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.728894][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.760841][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.791527][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.830397][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.868690][T13705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.920208][T13705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.944937][T13705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.963750][T13705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.746130][ T2822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.757148][ T2822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.903344][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.911941][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.076984][T14007] program syz.4.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.120486][T13781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.712682][T13781] veth0_vlan: entered promiscuous mode [ 559.769002][T13781] veth1_vlan: entered promiscuous mode [ 560.074093][ T5086] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 560.234968][T13781] veth0_macvtap: entered promiscuous mode [ 560.274094][ T5086] usb 4-1: Using ep0 maxpacket: 32 [ 560.298585][ T5086] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 560.365938][T13781] veth1_macvtap: entered promiscuous mode [ 560.372208][ T5086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.672322][ T5086] usb 4-1: Product: syz [ 560.703317][ T5086] usb 4-1: Manufacturer: syz [ 560.730868][ T5086] usb 4-1: SerialNumber: syz [ 560.763509][ T931] kernel write not supported for file /input/event0 (pid: 931 comm: kworker/0:2) [ 560.764094][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.776852][ T5086] usb 4-1: config 0 descriptor?? [ 560.793591][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.803571][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.869940][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.883933][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.908332][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.931169][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 560.931186][ T29] audit: type=1804 audit(1720204803.237:121): pid=14023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2925" name="/newroot/351/bus/file0" dev="overlay" ino=1831 res=1 errno=0 [ 560.959126][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.999069][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.016741][T13781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.067222][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.067951][ T5086] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 028 [ 561.101211][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.132636][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.179119][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.199361][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.220123][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.253369][T13781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.297656][T13781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.300017][ T931] usb 4-1: USB disconnect, device number 28 [ 561.342013][T13781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.438960][T13781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.467853][T13781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.490656][T13781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.508714][T13781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.574362][ T5138] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 561.660720][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.732313][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.780992][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.833578][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.847920][ T5138] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 561.876463][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.969711][ T5138] usb 3-1: config 0 descriptor?? [ 561.992991][ T5138] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 562.003125][ T5138] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 562.020876][ T5138] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 562.039714][ T5138] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 562.068034][ T5138] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 562.078777][ T5138] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 563.254302][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.260776][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.323827][ T5107] usb 3-1: USB disconnect, device number 32 [ 568.079180][ T785] kernel write not supported for file /input/event0 (pid: 785 comm: kworker/1:2) [ 569.557076][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 570.574114][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 572.230544][ T5107] kernel write not supported for file /input/event0 (pid: 5107 comm: kworker/1:3) [ 572.892890][ T29] audit: type=1400 audit(1720204815.197:122): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="cgroup.events" requested=w pid=14122 comm="syz.2.2950" [ 573.203879][ T5086] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 573.483795][ T5086] usb 5-1: Using ep0 maxpacket: 32 [ 573.871904][ T5086] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 574.109728][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.124187][ T5086] usb 5-1: Product: syz [ 574.128388][ T5086] usb 5-1: Manufacturer: syz [ 574.134603][ T5086] usb 5-1: SerialNumber: syz [ 574.146156][ T5086] usb 5-1: config 0 descriptor?? [ 574.439264][ T5086] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 031 [ 575.229903][ T25] usb 5-1: USB disconnect, device number 31 [ 575.293452][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 576.801084][ T5107] kernel write not supported for file /input/event0 (pid: 5107 comm: kworker/1:3) [ 578.369562][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'. [ 578.415870][T14180] team_slave_0: entered promiscuous mode [ 578.434918][T14180] team_slave_0: entered allmulticast mode [ 579.393830][T14180] team0: Port device team_slave_0 removed [ 579.499824][T14188] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2968'. [ 580.255080][T14197] loop7: detected capacity change from 0 to 16384 [ 580.447800][T14197] blk_print_req_error: 4 callbacks suppressed [ 580.447820][T14197] I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 580.449077][T14203] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.460559][T14197] buffer_io_error: 4 callbacks suppressed [ 580.460573][T14197] Buffer I/O error on dev loop7, logical block 32, lost async page write [ 580.533351][T14203] Buffer I/O error on dev loop7, logical block 0, async page read [ 580.574648][T14203] ldm_validate_partition_table(): Disk read failed. [ 580.574830][ T931] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 580.608562][T14203] Dev loop7: unable to read RDB block 0 [ 580.663870][T14203] loop7: unable to read partition table [ 580.694135][T14203] loop7: partition table beyond EOD, truncated [ 580.712867][T14203] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 580.800684][ T931] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 580.827823][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.857485][ T931] usb 4-1: config 0 descriptor?? [ 580.879021][ T931] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 580.891520][ T931] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 580.901797][ T931] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 580.906828][T14216] sch_fq: defrate 4294967292 ignored. [ 580.913760][ T931] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 580.960211][ T931] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 580.971720][ T931] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 582.635671][ T931] usb 4-1: USB disconnect, device number 29 [ 583.286696][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 583.482638][T14230] team_slave_0: entered promiscuous mode [ 583.490615][T14230] team_slave_0: entered allmulticast mode [ 583.553738][T14230] team0: Port device team_slave_0 removed [ 583.571270][T14235] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2981'. [ 584.467174][T14248] loop7: detected capacity change from 0 to 16384 [ 584.815580][T14248] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 586.039466][T14251] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.061098][T14251] Buffer I/O error on dev loop7, logical block 0, async page read [ 586.079412][T14251] ldm_validate_partition_table(): Disk read failed. [ 586.109948][T14251] Dev loop7: unable to read RDB block 0 [ 586.116672][T14251] loop7: unable to read partition table [ 586.122698][T14251] loop7: partition table beyond EOD, truncated [ 586.136217][T14251] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 586.421365][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2992'. [ 586.431247][ T4481] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 586.608571][T14275] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2994'. [ 591.976154][T14318] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3006'. [ 592.297556][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 592.954725][T14312] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 593.292165][T14312] Bluetooth: hci2: command 0x0406 tx timeout [ 595.612355][T14365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3017'. [ 595.680293][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3019'. [ 599.667737][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 599.906464][T14419] loop7: detected capacity change from 0 to 16384 [ 600.127079][ T5086] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 600.394441][ T5086] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 600.509315][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.601013][T14419] I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 600.614302][T14427] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.615092][ T5086] usb 4-1: config 0 descriptor?? [ 600.663355][T14419] Buffer I/O error on dev loop7, logical block 64, lost async page write [ 600.666159][ T5086] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 600.693833][T14427] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.734251][T14427] ldm_validate_partition_table(): Disk read failed. [ 600.745440][ T5086] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 600.782203][ T5086] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 600.791187][T14427] Dev loop7: unable to read RDB block 0 [ 600.791606][ T5086] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 600.854546][T14427] loop7: unable to read partition table [ 600.887293][ T5086] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 600.923914][T14427] loop7: partition table beyond EOD, truncated [ 600.937075][ T5086] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 600.967945][T14427] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 601.437474][T14446] loop7: detected capacity change from 0 to 16384 [ 601.640179][T14446] I/O error, dev loop7, sector 896 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 601.674343][ T933] usb 4-1: USB disconnect, device number 30 [ 601.809242][ T4481] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 605.828482][T14488] loop7: detected capacity change from 0 to 16384 [ 606.145080][T14494] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 606.160631][T14488] I/O error, dev loop7, sector 384 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 606.190942][T14494] Buffer I/O error on dev loop7, logical block 1, async page read [ 606.269584][T14494] Dev loop7: unable to read RDB block 8 [ 606.310520][T14494] loop7: unable to read partition table [ 606.316680][T14494] loop7: partition table beyond EOD, truncated [ 606.324199][T14494] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 606.674091][ T5086] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 607.027760][ T5086] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.475398][ T5086] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 607.531804][ T5086] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.126116][ T5086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.143554][T14508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.002798][ T785] usb 2-1: USB disconnect, device number 27 [ 612.315847][T14547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 612.425076][T14547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 612.557271][T14558] program syz.3.3069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.743389][T14557] loop7: detected capacity change from 0 to 16384 [ 614.165465][T14573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3072'. [ 616.166002][ T931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 616.684185][ T931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 616.723741][ T931] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 616.763576][ T931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.812203][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.855934][T14585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 617.107828][T14606] loop7: detected capacity change from 0 to 16384 [ 617.342773][T14606] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 617.463813][T14614] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.484388][T14614] Buffer I/O error on dev loop7, logical block 0, async page read [ 618.275874][T14614] ldm_validate_partition_table(): Disk read failed. [ 618.282530][T14614] Dev loop7: unable to read RDB block 0 [ 618.290681][T14614] loop7: unable to read partition table [ 618.296981][T14614] loop7: partition table beyond EOD, truncated [ 618.307186][T14614] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 619.362729][T14642] xt_CT: No such helper "syz0" [ 620.549512][T14653] sch_fq: defrate 4294967292 ignored. [ 620.585058][ T785] usb 4-1: USB disconnect, device number 31 [ 620.893239][T14663] loop7: detected capacity change from 0 to 16384 [ 621.907841][T14663] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 622.204185][T14685] program syz.1.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.533861][ T50] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 624.647439][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.667196][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.774267][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 624.808312][ T50] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 624.822115][ T50] usb 5-1: config 0 has no interface number 0 [ 624.829202][ T50] usb 5-1: config 0 interface 215 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 624.857170][ T50] usb 5-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 624.869945][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.888859][ T50] usb 5-1: Product: syz [ 624.893168][ T50] usb 5-1: Manufacturer: syz [ 624.901463][ T50] usb 5-1: SerialNumber: syz [ 624.929223][ T50] usb 5-1: config 0 descriptor?? [ 625.552878][T14718] program syz.1.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.567026][ T933] usb 5-1: USB disconnect, device number 32 [ 626.652942][T14730] xt_CT: No such helper "syz0" [ 626.813857][T14737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3116'. [ 628.416002][T14763] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 631.700413][T14759] overlayfs: failed to resolve './file1': -2 [ 633.003772][ T931] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 633.213833][ T931] usb 2-1: Using ep0 maxpacket: 16 [ 633.224588][ T931] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 633.238737][ T931] usb 2-1: config 0 has no interface number 0 [ 633.244992][ T931] usb 2-1: config 0 interface 215 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 633.265981][ T931] usb 2-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 633.282118][ T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.290707][ T931] usb 2-1: Product: syz [ 633.301177][ T931] usb 2-1: Manufacturer: syz [ 633.306050][ T931] usb 2-1: SerialNumber: syz [ 633.316792][ T931] usb 2-1: config 0 descriptor?? [ 635.091147][ T5138] usb 2-1: USB disconnect, device number 28 [ 638.021794][ T4481] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 638.065405][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 638.119715][T14875] loop7: detected capacity change from 0 to 16384 [ 638.295954][ T57] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 638.379573][T14884] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.564768][T14884] Buffer I/O error on dev loop7, logical block 0, async page read [ 638.610601][T14884] ldm_validate_partition_table(): Disk read failed. [ 638.618530][T14884] Dev loop7: unable to read RDB block 0 [ 638.628187][T14884] loop7: unable to read partition table [ 638.642875][T14884] loop7: partition table beyond EOD, truncated [ 638.663222][T14884] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 639.057591][T14893] sch_fq: defrate 4294967292 ignored. [ 640.234441][T14914] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 640.645557][T14927] loop7: detected capacity change from 0 to 16384 [ 640.831044][T14934] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.832756][T14927] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 640.860456][T14934] Buffer I/O error on dev loop7, logical block 0, async page read [ 640.881368][T14934] ldm_validate_partition_table(): Disk read failed. [ 640.900876][T14934] Dev loop7: unable to read RDB block 0 [ 640.909784][T14934] loop7: unable to read partition table [ 640.922506][T14934] loop7: partition table beyond EOD, truncated [ 640.959982][T14934] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 641.242823][T14945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.203778][T14963] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 643.370556][T14312] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 643.426509][T14981] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 643.437212][T14981] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 643.958152][T14999] loop7: detected capacity change from 0 to 16384 [ 644.332160][T14999] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 644.333951][T15002] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 644.391489][T15002] Buffer I/O error on dev loop7, logical block 0, async page read [ 644.440813][T15002] ldm_validate_partition_table(): Disk read failed. [ 644.494922][T15002] Dev loop7: unable to read RDB block 0 [ 644.520474][T15002] loop7: unable to read partition table [ 644.561278][T15002] loop7: partition table beyond EOD, truncated [ 644.600827][T15002] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 644.844874][T15020] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 645.053960][T14312] Bluetooth: hci5: command 0x0406 tx timeout [ 645.283776][T14312] Bluetooth: hci0: command 0x0406 tx timeout [ 648.054000][ T50] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 648.269736][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 648.300437][ T50] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 648.322500][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 648.334058][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.360965][ T50] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.390006][ T50] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 648.406198][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.445397][T15053] overlayfs: failed to resolve './file1': -2 [ 648.690022][ T50] usb 2-1: usb_control_msg returned -32 [ 648.696194][ T50] usbtmc 2-1:16.0: can't read capabilities [ 649.017937][T15064] loop7: detected capacity change from 0 to 16384 [ 649.173807][T15070] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 650.583950][ T50] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 650.793745][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 650.815114][ T50] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 650.839454][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.853189][T15067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.872285][ T50] usb 1-1: Product: syz [ 650.886473][ T50] usb 1-1: Manufacturer: syz [ 650.886788][T15067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.891230][ T50] usb 1-1: SerialNumber: syz [ 650.939101][ T50] usb 1-1: config 0 descriptor?? [ 651.163500][ T50] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 035 [ 651.380773][ T50] usb 1-1: USB disconnect, device number 35 [ 651.451283][T15089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.465173][T15089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.599660][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 652.375539][ T785] usb 2-1: USB disconnect, device number 29 [ 652.712978][T15115] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 653.313911][ T931] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 653.544072][ T931] usb 5-1: Using ep0 maxpacket: 32 [ 653.614004][ T931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 653.706369][ T931] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 653.755711][ T931] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 653.793901][ T931] usb 5-1: Product: syz [ 653.816689][ T931] usb 5-1: Manufacturer: syz [ 653.842899][ T931] usb 5-1: SerialNumber: syz [ 653.879790][ T931] usb 5-1: config 0 descriptor?? [ 653.918289][T15125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 655.083810][ T931] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 655.295785][ T931] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 655.318864][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.352055][ T931] usb 3-1: config 0 descriptor?? [ 655.372041][ T931] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 655.390451][ T931] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 655.424079][ T931] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 655.441852][ T931] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 655.532303][ T931] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 655.552251][ T931] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 655.555129][ T50] usb 5-1: USB disconnect, device number 33 [ 655.705217][T14312] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 657.503953][T14312] Bluetooth: hci5: command 0x0406 tx timeout [ 658.297003][ T933] usb 3-1: USB disconnect, device number 33 [ 658.793316][T15195] overlayfs: failed to resolve './file0': -2 [ 660.210855][ T4481] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 662.246571][T15233] program syz.0.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.787454][T14312] Bluetooth: hci2: command 0x0406 tx timeout [ 663.643726][ T931] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 664.533760][ T931] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 664.543204][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.571450][ T931] usb 4-1: config 0 descriptor?? [ 664.578901][ T931] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 664.593091][ T931] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 664.706465][ T931] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 664.714454][ T931] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 664.722279][ T931] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 664.729112][ T931] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 667.683924][ T785] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 667.964284][ T785] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 667.987549][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.044747][ T785] usb 1-1: config 0 descriptor?? [ 668.084926][ T785] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 668.131993][ T785] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 668.164718][ T785] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 668.183190][ T785] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 668.203439][ T785] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 668.233643][ T785] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 668.536173][ T785] usb 4-1: USB disconnect, device number 32 [ 668.909054][T15289] overlayfs: failed to resolve './file1': -2 [ 669.882038][ T25] usb 1-1: USB disconnect, device number 36 [ 672.314166][T15320] program syz.3.3267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 672.486540][T15325] program syz.1.3270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.688130][T15355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'. [ 676.174015][ T29] audit: type=1326 audit(1720204918.487:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15354 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a97b75bd9 code=0x7fc00000 [ 677.140306][ T29] audit: type=1326 audit(1720204918.617:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15354 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7a97b75bd9 code=0x7fc00000 [ 677.207281][ T29] audit: type=1326 audit(1720204918.867:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15354 comm="syz.1.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a97b75bd9 code=0x7fc00000 [ 679.859715][T15438] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3301'. [ 680.060717][T15443] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 683.363205][T15493] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3315'. [ 684.464526][T15500] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3317'. [ 684.743158][ T4481] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 684.755961][T15505] program syz.1.3318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.086987][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.100066][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.882602][T15541] netlink: 'syz.3.3327': attribute type 1 has an invalid length. [ 688.259084][T15549] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3330'. [ 689.087111][ T4481] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 689.424418][T15568] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 689.676705][T15576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3335'. [ 689.710877][T15576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3335'. [ 689.797730][T15578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3336'. [ 690.173229][T15586] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 690.253757][ T933] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 690.433719][ T933] usb 4-1: Using ep0 maxpacket: 32 [ 690.447888][ T933] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.480709][ T933] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.532954][T15594] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3342'. [ 690.690447][ T933] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 690.868437][ T933] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.038052][ T933] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 691.164164][ T933] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 691.201155][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.659121][ T933] ntrig 0003:1B96:000A.0011: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 691.757684][T14312] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 691.864881][ T933] usb 4-1: USB disconnect, device number 33 [ 691.894524][T15613] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 691.922901][T15613] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 692.199556][T15615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3348'. [ 692.284616][T15617] program syz.1.3349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.741168][ T4481] Bluetooth: hci0: command 0x0406 tx timeout [ 693.876783][T15625] netlink: 'syz.2.3351': attribute type 1 has an invalid length. [ 694.061892][T15629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3354'. [ 694.831937][T15638] netlink: 'syz.4.3353': attribute type 4 has an invalid length. [ 694.922334][T15638] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3353'. [ 695.245357][T14312] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 695.263723][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 695.404684][T15653] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 695.416757][T15653] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 695.503788][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.542003][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.570010][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.596883][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 695.627687][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.661944][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 695.816188][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.842663][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.860219][ T25] usb 2-1: Product: syz [ 696.575005][ T25] usb 2-1: Manufacturer: syz [ 696.581266][ T25] usb 2-1: SerialNumber: syz [ 697.203843][ T4481] Bluetooth: hci0: command 0x0406 tx timeout [ 697.705179][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 697.760598][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.808420][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.816450][ T4481] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 698.037192][T15682] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 698.046974][T15682] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 698.176525][ T11] ------------[ cut here ]------------ [ 698.182256][ T11] WARNING: CPU: 1 PID: 11 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.192828][ T11] Modules linked in: [ 698.196856][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 698.206976][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 698.217086][ T11] Workqueue: phy24 ieee80211_color_collision_detection_work [ 698.224435][ T11] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.231042][ T11] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 79 8f c1 f6 90 0f 0b 90 e9 71 fb ff ff e8 6b 8f c1 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 5d 8f c1 f6 c6 05 e6 11 c2 04 01 90 48 [ 698.251200][ T11] RSP: 0018:ffffc90000107aa0 EFLAGS: 00010293 [ 698.257314][ T11] RAX: ffffffff8ad49755 RBX: 0000000000000000 RCX: ffff8880176b3c00 [ 698.265386][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.273371][ T11] RBP: ffffc90000107bb0 R08: ffffffff8ad49282 R09: 1ffffffff1f583bd [ 698.282047][ T11] R10: dffffc0000000000 R11: ffffffff8af01150 R12: 1ffff92000020f5c [ 698.290563][ T11] R13: ffff88804ed24000 R14: ffff88804ed24cb0 R15: dffffc0000000000 [ 698.298620][ T11] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 698.307621][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.314241][ T11] CR2: 0000001b33501ff8 CR3: 000000002b1a6000 CR4: 00000000003526f0 [ 698.322226][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 698.330256][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 698.338283][ T11] Call Trace: [ 698.341585][ T11] [ 698.344588][ T11] ? __warn+0x163/0x4e0 [ 698.348777][ T11] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.354647][ T11] ? report_bug+0x2b3/0x500 [ 698.359165][ T11] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.365109][ T11] ? handle_bug+0x3e/0x70 [ 698.369483][ T11] ? exc_invalid_op+0x1a/0x50 [ 698.374201][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 698.379240][ T11] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 698.387163][ T11] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 698.393344][ T11] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 698.399234][ T11] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.405397][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 698.410523][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 698.416616][ T11] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 698.422965][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 698.429374][ T11] ? process_scheduled_works+0x945/0x1830 [ 698.435157][ T11] process_scheduled_works+0xa2c/0x1830 [ 698.440728][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.446864][ T11] ? assign_work+0x364/0x3d0 [ 698.451514][ T11] worker_thread+0x86d/0xd50 [ 698.456183][ T11] ? __kthread_parkme+0x169/0x1d0 [ 698.461221][ T11] ? __pfx_worker_thread+0x10/0x10 [ 698.466408][ T11] kthread+0x2f0/0x390 [ 698.470499][ T11] ? __pfx_worker_thread+0x10/0x10 [ 698.475785][ T11] ? __pfx_kthread+0x10/0x10 [ 698.480391][ T11] ret_from_fork+0x4b/0x80 [ 698.485714][ T11] ? __pfx_kthread+0x10/0x10 [ 698.490328][ T11] ret_from_fork_asm+0x1a/0x30 [ 698.495139][ T11] [ 698.498196][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 698.505473][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 698.515551][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 698.525596][ T11] Workqueue: phy24 ieee80211_color_collision_detection_work [ 698.532889][ T11] Call Trace: [ 698.536155][ T11] [ 698.539070][ T11] dump_stack_lvl+0x241/0x360 [ 698.543738][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.548921][ T11] ? __pfx__printk+0x10/0x10 [ 698.553522][ T11] ? vscnprintf+0x5d/0x90 [ 698.557841][ T11] panic+0x349/0x860 [ 698.561743][ T11] ? __warn+0x172/0x4e0 [ 698.565885][ T11] ? __pfx_panic+0x10/0x10 [ 698.570290][ T11] ? ret_from_fork_asm+0x1a/0x30 [ 698.575216][ T11] __warn+0x346/0x4e0 [ 698.579187][ T11] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.584979][ T11] report_bug+0x2b3/0x500 [ 698.589295][ T11] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.595086][ T11] handle_bug+0x3e/0x70 [ 698.599250][ T11] exc_invalid_op+0x1a/0x50 [ 698.603748][ T11] asm_exc_invalid_op+0x1a/0x20 [ 698.608607][ T11] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 698.615007][ T11] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 79 8f c1 f6 90 0f 0b 90 e9 71 fb ff ff e8 6b 8f c1 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 5d 8f c1 f6 c6 05 e6 11 c2 04 01 90 48 [ 698.634602][ T11] RSP: 0018:ffffc90000107aa0 EFLAGS: 00010293 [ 698.640654][ T11] RAX: ffffffff8ad49755 RBX: 0000000000000000 RCX: ffff8880176b3c00 [ 698.648613][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.656565][ T11] RBP: ffffc90000107bb0 R08: ffffffff8ad49282 R09: 1ffffffff1f583bd [ 698.664529][ T11] R10: dffffc0000000000 R11: ffffffff8af01150 R12: 1ffff92000020f5c [ 698.672480][ T11] R13: ffff88804ed24000 R14: ffff88804ed24cb0 R15: dffffc0000000000 [ 698.680436][ T11] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 698.687887][ T11] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 698.693676][ T11] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 698.699467][ T11] ? __pfx_lock_acquire+0x10/0x10 [ 698.704476][ T11] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 698.710434][ T11] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 698.716569][ T11] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 698.722883][ T11] ? process_scheduled_works+0x945/0x1830 [ 698.728605][ T11] process_scheduled_works+0xa2c/0x1830 [ 698.734145][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.740108][ T11] ? assign_work+0x364/0x3d0 [ 698.744679][ T11] worker_thread+0x86d/0xd50 [ 698.749256][ T11] ? __kthread_parkme+0x169/0x1d0 [ 698.754264][ T11] ? __pfx_worker_thread+0x10/0x10 [ 698.759358][ T11] kthread+0x2f0/0x390 [ 698.763407][ T11] ? __pfx_worker_thread+0x10/0x10 [ 698.768498][ T11] ? __pfx_kthread+0x10/0x10 [ 698.773087][ T11] ret_from_fork+0x4b/0x80 [ 698.777488][ T11] ? __pfx_kthread+0x10/0x10 [ 698.782058][ T11] ret_from_fork_asm+0x1a/0x30 [ 698.786814][ T11] [ 698.790061][ T11] Kernel Offset: disabled [ 698.794450][ T11] Rebooting in 86400 seconds..