last executing test programs: 13.871699264s ago: executing program 0 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@subsystem='hugetlb'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x6, {0x6, 0x24, "c6874085"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="203099000000a9575a2b467fda99f97d303d0b3a0b644a0d854100d4960b8641a016bc969e253437cb2978934417c3373d435d45ceaa657f4b7a589879f64f6fb00fea8a55403754fe6d19fdbbff679fe460060350980bfbb59ed72c26e96306c89a583fff81a3f99250ccde9cfc86fa877ad979c7e093046b918312532082e4baef667386a3044b2461563ec6571f303c3e5a443ba102000000b514074034"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "c383"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "bcb9ed"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "978f7e"}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 12.434547103s ago: executing program 0 (id=2120): syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d89adcd217184f6ae7131198e5c89000000001c0012800b0001006280050029000200"/51], 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000673000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x1bb}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000280)=[{r6}, {r6, 0x5044}, {r6, 0x6200}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x3) 9.975484577s ago: executing program 0 (id=2125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f00000003c0)=[{0x0, 0xa3, 0x0, 0x4}, {0x0, 0x4, 0x1, 0x3}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='xen_mc_callback\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) r4 = syz_io_uring_setup(0xe24, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 9.498116516s ago: executing program 4 (id=2130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@subsystem='hugetlb'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x6, {0x6, 0x24, "c6874085"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="203099000000a9575a2b467fda99f97d303d0b3a0b644a0d854100d4960b8641a016bc969e253437cb2978934417c3373d435d45ceaa657f4b7a589879f64f6fb00fea8a55403754fe6d19fdbbff679fe460060350980bfbb59ed72c26e96306c89a583fff81a3f99250ccde9cfc86fa877ad979c7e093046b918312532082e4baef667386a3044b2461563ec6571f303c3e5a443ba102000000b514074034"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "c383"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "bcb9ed"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "978f7e"}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 7.503462327s ago: executing program 4 (id=2136): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x70bd28, 0x8, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x84000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='vegas\x00', 0x6) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) 6.636177845s ago: executing program 2 (id=2141): socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000380)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x7}, 0x21) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) close(r1) 5.504357108s ago: executing program 1 (id=2144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x123}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d516", 0x103}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.368348789s ago: executing program 2 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@subsystem='hugetlb'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x6, {0x6, 0x24, "c6874085"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="203099000000a9575a2b467fda99f97d303d0b3a0b644a0d854100d4960b8641a016bc969e253437cb2978934417c3373d435d45ceaa657f4b7a589879f64f6fb00fea8a55403754fe6d19fdbbff679fe460060350980bfbb59ed72c26e96306c89a583fff81a3f99250ccde9cfc86fa877ad979c7e093046b918312532082e4baef667386a3044b2461563ec6571f303c3e5a443ba102000000b514074034"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "c383"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "bcb9ed"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "978f7e"}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 5.19181194s ago: executing program 0 (id=2147): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)=0x2) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0409000000000000000000000000000000000002"], 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r2, 0x4, 0x0) getdents(r2, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r6 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0x0, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) 4.777972677s ago: executing program 1 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 4.777222174s ago: executing program 3 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@getlink={0x24, 0x12, 0x221, 0x0, 0x0, {0x7}, [@IFLA_XDP={0x4}]}, 0x24}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080), 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000089c0)={0x1d, 0x0, 0x2}, 0x18) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ee37d176", @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a320000000044000400200001000a00000000000000ff02000000000000000000000000000100000000200002000a00000000000000ff02000000000000000000000000000100000000"], 0x6c}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffeff, 0x9, 0x2, 0x7c3cf4d0, 0xb, 0x0, 0x2, 0x9b}, &(0x7f0000000100)={0x8, 0x9, 0x5, 0x4, 0xffffffffffff36a1, 0x2, 0x0, 0x8000000000000000}, &(0x7f0000000140)={0x3, 0x100000000, 0x6, 0xc0f9, 0xdd, 0x2, 0x7}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0xfff]}, 0x8}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0d32818e", 0x8}]) 4.627698115s ago: executing program 4 (id=2150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500", 0xd5}], 0x1}, 0x0) 4.473852149s ago: executing program 1 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)='\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f18591bb90dd1e0464d31ff30a7e5b227e08a2ee0643e735c3cd21b6e743176c8eefd41693bc94e6a200080000d61840a5f275333bb1afbbd50014000000020a0900000340000000000000000000"], 0xfc}}, 0x0) 4.357748662s ago: executing program 4 (id=2152): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)="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", 0x105}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}, {&(0x7f0000000380)="b7e4c84c12f2ec398a7c6a1f6be9de130578cdbffd74752b2f6133071864bac0717147af20e6e13af7b7100d1a6736a8e03334b7cdd90757248589134b71c162fc7e17fbcffa8487caa0469ea6ad8ab919c383554859e254c4046f", 0x5b}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c13bcfae9beeb8d", 0x5c}, {&(0x7f0000000800)="8434335f698d", 0x6}], 0x4}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.283779999s ago: executing program 3 (id=2153): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}], 0x3, 0x40000121, 0x0) 3.320396609s ago: executing program 2 (id=2154): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'lo\x00'}}, 0x1e) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3.318931547s ago: executing program 1 (id=2155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) 3.301075912s ago: executing program 0 (id=2156): socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000380)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x7}, 0x21) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/28, 0x1c}, 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) close(r1) 3.207962278s ago: executing program 3 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c000480"], 0x54}}, 0x0) 3.170431951s ago: executing program 1 (id=2158): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="9d", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x228}}], 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 3.013734636s ago: executing program 4 (id=2159): creat(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getpid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=""/192, &(0x7f0000000140)=0xc0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}}) 2.896348522s ago: executing program 3 (id=2160): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x5aa) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 2.895537372s ago: executing program 1 (id=2161): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 2.272241259s ago: executing program 2 (id=2162): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45000000", 0xd7}], 0x1}, 0x0) 1.723746093s ago: executing program 4 (id=2163): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d4827"], 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) poll(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2f, 0x1, 0x0, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xd1b0, 0xf], [], [0x0, 0x8000000000000001, 0x0, 0x81]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xf, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000340)="01e70f017900660f3814908700ea8a007b00db1e000066b9630a000066b8a472cf2b66ba2d4a2a170f30aff30f098fc9e8011b660f38027d00", 0x39}], 0x1, 0x3b, &(0x7f00000003c0), 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000001400078008000100", @ANYRESHEX, @ANYBLOB, @ANYRES32, @ANYBLOB="0c0002000000000000000000"], 0x34}}, 0x0) prlimit64(0x0, 0xb6712b7fd41fa6ae, 0x0, 0x0) 1.645498337s ago: executing program 3 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@subsystem='hugetlb'}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x6, {0x6, 0x24, "c6874085"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="203099000000a9575a2b467fda99f97d303d0b3a0b644a0d854100d4960b8641a016bc969e253437cb2978934417c3373d435d45ceaa657f4b7a589879f64f6fb00fea8a55403754fe6d19fdbbff679fe460060350980bfbb59ed72c26e96306c89a583fff81a3f99250ccde9cfc86fa877ad979c7e093046b918312532082e4baef667386a3044b2461563ec6571f303c3e5a443ba102000000b514074034"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "c383"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "bcb9ed"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "978f7e"}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 1.622922387s ago: executing program 2 (id=2165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280), 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 610.007428ms ago: executing program 2 (id=2166): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)=0x2) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0409000000000000000000000000000000000002"], 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r2, 0x4, 0x0) getdents(r2, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0x0, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) 609.469958ms ago: executing program 0 (id=2167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x4b47, 0x0) 0s ago: executing program 3 (id=2168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) kernel console output (not intermixed with test programs): 315.541875][ T5175] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 315.749982][ T5175] usb 5-1: Using ep0 maxpacket: 16 [ 315.757623][ T5175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 315.789714][ T5175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 315.823413][ T5175] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 315.842222][ T5175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.871664][ T5175] usb 5-1: config 0 descriptor?? [ 315.902099][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 316.130059][ T5088] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 316.180107][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 316.263405][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 316.273214][ T8746] nbd: must specify a size in bytes for the device [ 316.311700][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.346643][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.384477][ T8] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 316.385743][ T5175] hid (null): bogus close delimiter [ 316.399608][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.422295][ T8] usb 2-1: config 0 descriptor?? [ 316.441080][ T8] usb 2-1: selecting invalid altsetting 3 [ 316.447052][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 316.451059][ T5175] hid (null): invalid report_count 58028 [ 316.462165][ T8] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 316.491133][ T8] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 316.505425][ T5175] hid (null): unknown global tag 0xd [ 316.546465][ T5175] hid-generic 0003:0158:0100.0018: unknown main item tag 0x0 [ 316.597689][ T5175] hid-generic 0003:0158:0100.0018: unknown main item tag 0x0 [ 316.633375][ T5175] hid-generic 0003:0158:0100.0018: bogus close delimiter [ 316.648645][ T5175] hid-generic 0003:0158:0100.0018: item 0 0 2 10 parsing failed [ 316.688727][ T5175] hid-generic 0003:0158:0100.0018: probe with driver hid-generic failed with error -22 [ 316.713561][ T8] usb 2-1: USB disconnect, device number 13 [ 316.847850][ T5175] usb 5-1: USB disconnect, device number 17 [ 317.011971][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 317.048602][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 317.600364][ T8777] sctp: [Deprecated]: syz.3.1159 (pid 8777) Use of int in max_burst socket option deprecated. [ 317.600364][ T8777] Use struct sctp_assoc_value instead [ 317.655678][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 317.656679][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.669819][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.883879][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 317.895529][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 317.895575][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.895598][ T8] usb 5-1: Product: syz [ 317.895615][ T8] usb 5-1: Manufacturer: syz [ 317.895631][ T8] usb 5-1: SerialNumber: syz [ 317.901170][ T8] usb 5-1: config 0 descriptor?? [ 317.906332][ T8] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 318.203434][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 318.203590][ T8] gspca_sn9c2028: read1 error -32 [ 318.204390][ T8] gspca_sn9c2028: read1 error -32 [ 318.216260][ T8] gspca_sn9c2028: read1 error 0 [ 318.216515][ T8] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -5 [ 318.216997][ T8] usb 5-1: Found UVC 0.00 device syz (0458:7005) [ 319.150248][ T8] usb 5-1: No valid video chain found. [ 319.315631][ T5088] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 319.328410][ T5172] usb 5-1: USB disconnect, device number 18 [ 319.477624][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 319.488691][ T8802] nbd: must specify a size in bytes for the device [ 319.704160][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 320.560357][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 320.740167][ T25] usb 5-1: device descriptor read/64, error -71 [ 320.771659][ T5173] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.468883][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 321.475131][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.483518][ T5173] usb 3-1: Using ep0 maxpacket: 16 [ 321.805408][ T5173] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 321.814800][ T5173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.823897][ T5173] usb 3-1: Product: syz [ 321.828218][ T5173] usb 3-1: Manufacturer: syz [ 321.833174][ T5173] usb 3-1: SerialNumber: syz [ 321.850025][ T25] usb 5-1: device descriptor read/64, error -71 [ 321.883372][ T5173] usb 3-1: config 0 descriptor?? [ 322.561866][ T25] usb usb5-port1: attempt power cycle [ 322.582238][ T5173] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 322.834406][ T5173] gspca_sn9c2028: read1 error -32 [ 322.857629][ T5088] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 322.858490][ T5173] gspca_sn9c2028: read1 error -32 [ 322.891674][ T5173] gspca_sn9c2028: read1 error 0 [ 322.904467][ T5173] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -5 [ 322.934449][ T5173] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 322.967080][ T5173] usb 3-1: No valid video chain found. [ 323.017698][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 323.027230][ T8849] nbd: must specify a size in bytes for the device [ 323.140137][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 323.200967][ T25] usb 5-1: device descriptor read/8, error -71 [ 323.896800][ T930] usb 3-1: USB disconnect, device number 17 [ 324.413921][ T8860] sctp: [Deprecated]: syz.1.1184 (pid 8860) Use of int in max_burst socket option deprecated. [ 324.413921][ T8860] Use struct sctp_assoc_value instead [ 324.900051][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 324.920631][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 325.137787][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 325.164124][ T25] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 325.180566][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.190071][ T25] usb 2-1: can't read configurations, error -61 [ 325.446165][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 325.520571][ T5088] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 325.886214][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 326.430105][ T25] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 326.461622][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 326.479654][ T25] usb 2-1: can't read configurations, error -61 [ 326.493211][ T25] usb usb2-port1: attempt power cycle [ 326.653505][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 326.653916][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 326.679758][ T8892] nbd: must specify a size in bytes for the device [ 326.920085][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 326.980858][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 327.002906][ T25] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 327.034820][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 327.059595][ T25] usb 2-1: can't read configurations, error -61 [ 327.243440][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 327.410026][ T5175] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 327.580091][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 327.671075][ T25] usb 2-1: device not accepting address 17, error -71 [ 327.683551][ T25] usb usb2-port1: unable to enumerate USB device [ 328.651710][ T5175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.663857][ T5175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.690017][ T5175] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.699163][ T5175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.709186][ T5175] usb 3-1: Product: చ [ 328.721559][ T5175] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 328.774647][ T5175] usb 3-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 329.032196][ T5175] usb 3-1: 0:2 : does not exist [ 329.078152][ T5175] usb 3-1: USB disconnect, device number 18 [ 329.287938][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 329.303212][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1207'. [ 329.381652][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.387347][ T5088] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 329.603819][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 329.651211][ T8939] nbd: must specify a size in bytes for the device [ 331.400050][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 332.465106][ T930] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 332.673533][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 332.747385][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 332.757142][ T930] usb 5-1: device descriptor read/all, error -71 [ 333.067232][ T8983] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 333.396675][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 333.436986][ T8979] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 333.501848][ T8979] bond2 (unregistering): Released all slaves [ 333.521573][ T5138] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 334.593757][ T9001] vlan2: entered promiscuous mode [ 334.634289][ T9001] bridge0: entered promiscuous mode [ 334.669024][ T9001] vlan2: entered allmulticast mode [ 334.701285][ T9001] bridge0: entered allmulticast mode [ 334.769810][ T9001] bridge0: left allmulticast mode [ 334.775211][ T9001] bridge0: left promiscuous mode [ 334.837934][ T5138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.854134][ T5138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.885869][ T5138] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.897760][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.908721][ T5138] usb 1-1: Product: చ [ 334.918344][ T5138] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 334.945911][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 334.972572][ T5138] usb 1-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 335.089206][ T9004] ip6gretap0: entered promiscuous mode [ 335.129315][ T9004] macvtap6: entered promiscuous mode [ 335.139614][ T9004] macvtap6: entered allmulticast mode [ 335.171639][ T9004] ip6gretap0: entered allmulticast mode [ 335.211840][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 335.276529][ T9017] Cannot find add_set index 0 as target [ 335.276759][ T9006] ip6gretap0: left allmulticast mode [ 335.343773][ T9006] ip6gretap0: left promiscuous mode [ 335.395169][ T9006] macvtap6: left promiscuous mode [ 335.406361][ T9006] macvtap6: left allmulticast mode [ 335.466795][ T5138] usb 1-1: 0:2 : does not exist [ 335.602786][ T5138] usb 1-1: USB disconnect, device number 22 [ 335.882632][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.446612][ T9038] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 336.459364][ T9038] cramfs: wrong magic [ 339.820207][ T9068] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 339.899111][ T9071] Cannot find add_set index 0 as target [ 340.174742][ T5088] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 341.311814][ T9081] vlan2: entered promiscuous mode [ 341.324716][ T9081] vlan2: entered allmulticast mode [ 343.894493][ T25] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 344.102166][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 344.138722][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.182909][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.209661][ T5088] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 344.220310][ T5088] Bluetooth: hci3: Injecting HCI hardware error event [ 344.230054][ T5093] Bluetooth: hci3: hardware error 0x00 [ 344.256839][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.266086][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.274874][ T25] usb 5-1: SerialNumber: syz [ 344.296316][ T9114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 344.306004][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 345.054155][ T5175] usb 5-1: USB disconnect, device number 25 [ 345.063616][ T9145] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 346.280032][ T5093] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 347.093979][ T9163] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1276'. [ 347.953122][ T9194] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1288'. [ 348.430152][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 348.519698][ T9206] syz_tun: entered promiscuous mode [ 348.558793][ T9206] macvtap2: entered promiscuous mode [ 348.588158][ T9206] macvtap2: entered allmulticast mode [ 348.624536][ T9206] syz_tun: entered allmulticast mode [ 348.660737][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 348.783006][ T9209] syz_tun: left allmulticast mode [ 348.821047][ T9209] syz_tun: left promiscuous mode [ 348.900714][ T9209] macvtap2: left promiscuous mode [ 348.908061][ T9209] macvtap2: left allmulticast mode [ 350.580233][ T9244] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1301'. [ 351.424876][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 351.797268][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 351.859202][ T9273] syz_tun: entered promiscuous mode [ 351.893591][ T9273] macvtap2: entered promiscuous mode [ 351.927324][ T9273] macvtap2: entered allmulticast mode [ 351.943832][ T9273] syz_tun: entered allmulticast mode [ 351.996514][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 352.220712][ T9275] syz_tun: left allmulticast mode [ 352.230482][ T9275] syz_tun: left promiscuous mode [ 352.274486][ T9275] macvtap2: left promiscuous mode [ 352.279599][ T9275] macvtap2: left allmulticast mode [ 353.276323][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1320'. [ 353.459350][ T9297] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1320'. [ 353.490396][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 353.490572][ T5175] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 353.703539][ T5175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 353.750220][ T5175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 353.800147][ T5175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.092760][ T5175] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.116444][ T5175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.151335][ T5175] usb 2-1: config 0 descriptor?? [ 354.182207][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 354.315873][ T9313] syz_tun: entered promiscuous mode [ 354.357884][ T9313] macvtap3: entered promiscuous mode [ 354.421032][ T9313] macvtap3: entered allmulticast mode [ 354.462974][ T9313] syz_tun: entered allmulticast mode [ 354.590228][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 354.617721][ T9319] syz_tun: left allmulticast mode [ 354.643892][ T9319] syz_tun: left promiscuous mode [ 354.741652][ T9319] macvtap3: left promiscuous mode [ 354.766226][ T9319] macvtap3: left allmulticast mode [ 354.831040][ T5175] usb 2-1: can't set config #0, error -71 [ 354.840939][ T5175] usb 2-1: USB disconnect, device number 18 [ 360.700091][ T5175] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 360.905780][ T5175] usb 2-1: Using ep0 maxpacket: 16 [ 361.181832][ T5175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 361.202153][ T5175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 361.503088][ T5175] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 361.512365][ T5175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.534372][ T5175] usb 2-1: config 0 descriptor?? [ 362.012599][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.033667][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.159965][ T5175] hid (null): bogus close delimiter [ 362.178488][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'. [ 362.224268][ T5175] hid-generic 0003:0158:0100.0019: unknown main item tag 0x0 [ 362.234558][ T5175] hid-generic 0003:0158:0100.0019: unknown main item tag 0x0 [ 362.260065][ T5175] hid-generic 0003:0158:0100.0019: bogus close delimiter [ 362.394191][ T5175] hid-generic 0003:0158:0100.0019: item 0 0 2 10 parsing failed [ 362.418335][ T5175] hid-generic 0003:0158:0100.0019: probe with driver hid-generic failed with error -22 [ 363.029345][ T5175] usb 2-1: USB disconnect, device number 19 [ 365.543075][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1381'. [ 365.594171][ T9506] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1383'. [ 366.740192][ T5172] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 366.950126][ T5172] usb 3-1: Using ep0 maxpacket: 16 [ 366.969661][ T5172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 367.009109][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 367.018903][ T5172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 367.032411][ T5172] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 367.054772][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.082919][ T5172] usb 3-1: config 0 descriptor?? [ 367.103315][ T9536] bridge2: entered promiscuous mode [ 367.344121][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 367.582733][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.600846][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.715519][ T5172] hid (null): bogus close delimiter [ 367.760080][ T5172] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 367.771674][ T5172] hid-generic 0003:0158:0100.001A: unknown main item tag 0x0 [ 367.782674][ T5172] hid-generic 0003:0158:0100.001A: bogus close delimiter [ 367.793840][ T5172] hid-generic 0003:0158:0100.001A: item 0 0 2 10 parsing failed [ 367.809793][ T5172] hid-generic 0003:0158:0100.001A: probe with driver hid-generic failed with error -22 [ 368.152471][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 368.225848][ T5172] usb 3-1: USB disconnect, device number 19 [ 369.531100][ T5173] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 369.770021][ T5173] usb 1-1: Using ep0 maxpacket: 16 [ 369.796794][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 369.868381][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 369.920105][ T5173] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 369.938601][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.978806][ T5173] usb 1-1: config 0 descriptor?? [ 370.428423][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.480464][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.520832][ T5173] hid (null): bogus close delimiter [ 370.537677][ T5173] hid (null): invalid report_count 58028 [ 370.555627][ T5173] hid (null): unknown global tag 0xd [ 370.625768][ T5173] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 370.788409][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'. [ 370.881787][ T5173] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 370.898578][ T5173] hid-generic 0003:0158:0100.001B: bogus close delimiter [ 370.907792][ T5173] hid-generic 0003:0158:0100.001B: item 0 0 2 10 parsing failed [ 370.916693][ T5173] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 371.770761][ T5173] usb 1-1: USB disconnect, device number 23 [ 372.550333][ T5173] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 372.610085][ T5139] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 372.762465][ T5173] usb 3-1: Using ep0 maxpacket: 16 [ 372.787429][ T5173] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 372.829052][ T5173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.833122][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 372.852015][ T5173] usb 3-1: Product: syz [ 372.856256][ T5173] usb 3-1: Manufacturer: syz [ 372.870176][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 372.879254][ T5173] usb 3-1: SerialNumber: syz [ 372.888840][ T5173] usb 3-1: config 0 descriptor?? [ 372.898620][ T5173] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 372.928672][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 372.957412][ T5139] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 372.992638][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.043767][ T5139] usb 1-1: config 0 descriptor?? [ 373.117648][ T5173] gspca_sn9c2028: read1 error -32 [ 373.142290][ T5173] gspca_sn9c2028: read1 error -32 [ 373.150707][ T5173] gspca_sn9c2028: read1 error 0 [ 373.156878][ T5173] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -5 [ 373.183027][ T5173] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 373.231889][ T5173] usb 3-1: No valid video chain found. [ 373.300199][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 373.441235][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 373.473406][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.490779][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.551722][ T5139] hid (null): bogus close delimiter [ 373.581538][ T5139] hid (null): invalid report_count 58028 [ 373.587267][ T5139] hid (null): unknown global tag 0xd [ 373.633486][ T5139] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 373.674127][ T5139] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 373.700534][ T5139] hid-generic 0003:0158:0100.001C: bogus close delimiter [ 373.708287][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1426'. [ 373.726312][ T5139] hid-generic 0003:0158:0100.001C: item 0 0 2 10 parsing failed [ 373.901289][ T5139] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22 [ 373.926023][ T5173] usb 3-1: USB disconnect, device number 20 [ 374.488509][ T5139] usb 1-1: USB disconnect, device number 24 [ 374.558423][ T9645] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1428'. [ 375.637712][ T9667] bridge_slave_1: left allmulticast mode [ 375.659976][ T9667] bridge_slave_1: left promiscuous mode [ 375.665961][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.101838][ T5138] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 376.180374][ T5126] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 376.307627][ T5138] usb 5-1: Using ep0 maxpacket: 16 [ 376.342933][ T5138] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 376.359720][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.419933][ T5126] usb 3-1: Using ep0 maxpacket: 16 [ 376.420451][ T5138] usb 5-1: Product: syz [ 376.440607][ T5138] usb 5-1: Manufacturer: syz [ 376.455652][ T5138] usb 5-1: SerialNumber: syz [ 376.466677][ T5138] usb 5-1: config 0 descriptor?? [ 376.489680][ T5138] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 376.519700][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 376.568709][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 376.586827][ T5126] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 376.599005][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.618918][ T5126] usb 3-1: config 0 descriptor?? [ 376.718222][ T5138] gspca_sn9c2028: read1 error -32 [ 376.747481][ T5138] gspca_sn9c2028: read1 error -32 [ 376.763755][ T5138] gspca_sn9c2028: read1 error 0 [ 376.773624][ T5138] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -5 [ 376.802456][ T5138] usb 5-1: Found UVC 0.00 device syz (0458:7005) [ 376.824907][ T5138] usb 5-1: No valid video chain found. [ 377.054059][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.085253][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.121815][ T5126] hid (null): bogus close delimiter [ 377.137297][ T5126] hid (null): invalid report_count 58028 [ 377.154244][ T5126] hid (null): unknown global tag 0xd [ 377.171680][ T5126] hid-generic 0003:0158:0100.001D: unknown main item tag 0x0 [ 377.180146][ T5126] hid-generic 0003:0158:0100.001D: unknown main item tag 0x0 [ 377.188758][ T5126] hid-generic 0003:0158:0100.001D: bogus close delimiter [ 377.197695][ T5126] hid-generic 0003:0158:0100.001D: item 0 0 2 10 parsing failed [ 377.208877][ T5126] hid-generic 0003:0158:0100.001D: probe with driver hid-generic failed with error -22 [ 377.357219][ T5126] usb 3-1: USB disconnect, device number 21 [ 377.398516][ T9694] capability: warning: `syz.3.1446' uses 32-bit capabilities (legacy support in use) [ 377.470429][ T9693] 9pnet_fd: Insufficient options for proto=fd [ 377.819764][ T5126] usb 5-1: USB disconnect, device number 26 [ 379.181838][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.188503][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.126227][ T9729] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1457'. [ 380.404034][ T9727] sctp: [Deprecated]: syz.4.1456 (pid 9727) Use of int in max_burst socket option deprecated. [ 380.404034][ T9727] Use struct sctp_assoc_value instead [ 381.917903][ T9747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1461'. [ 381.950287][ T5126] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 382.259973][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 382.274595][ T5126] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 382.288957][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.313306][ T5126] usb 4-1: Product: syz [ 382.317734][ T5126] usb 4-1: Manufacturer: syz [ 382.324404][ T5126] usb 4-1: SerialNumber: syz [ 382.481214][ T5126] usb 4-1: config 0 descriptor?? [ 382.534583][ T5126] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 382.702488][ T5126] gspca_sn9c2028: read1 error -32 [ 382.716932][ T5126] gspca_sn9c2028: read1 error -32 [ 382.724912][ T5126] gspca_sn9c2028: read1 error 0 [ 382.731648][ T5126] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 382.745166][ T5126] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 382.754055][ T5126] usb 4-1: No valid video chain found. [ 382.940120][ T5172] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 383.140035][ T5172] usb 3-1: Using ep0 maxpacket: 16 [ 383.152067][ T5172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 383.166925][ T5172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 383.179591][ T5172] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 383.193107][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.240743][ T5172] usb 3-1: config 0 descriptor?? [ 383.591245][ T9764] program syz.0.1468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.656541][ T5175] usb 4-1: USB disconnect, device number 21 [ 383.669157][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.685211][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.734061][ T5172] hid (null): bogus close delimiter [ 383.748954][ T5172] hid (null): invalid report_count 58028 [ 383.764057][ T5172] hid (null): unknown global tag 0xd [ 383.781785][ T5172] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 383.802814][ T5172] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 383.817583][ T5172] hid-generic 0003:0158:0100.001E: bogus close delimiter [ 383.831864][ T5172] hid-generic 0003:0158:0100.001E: item 0 0 2 10 parsing failed [ 383.848425][ T5172] hid-generic 0003:0158:0100.001E: probe with driver hid-generic failed with error -22 [ 383.945949][ T5172] usb 3-1: USB disconnect, device number 22 [ 385.140991][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1472'. [ 385.700433][ T5093] Bluetooth: hci0: unexpected event for opcode 0x200c [ 385.783844][ T9790] sctp: [Deprecated]: syz.3.1474 (pid 9790) Use of int in max_burst socket option deprecated. [ 385.783844][ T9790] Use struct sctp_assoc_value instead [ 386.789714][ T5093] Bluetooth: hci0: unexpected event for opcode 0x200c [ 386.820258][ T9807] 9pnet_fd: Insufficient options for proto=fd [ 386.870965][ T5126] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 387.063460][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 387.101447][ T5126] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 387.118539][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.127719][ T5126] usb 1-1: Product: syz [ 387.147053][ T5126] usb 1-1: Manufacturer: syz [ 387.154036][ T5126] usb 1-1: SerialNumber: syz [ 387.216367][ T5126] usb 1-1: config 0 descriptor?? [ 387.259177][ T5126] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 387.454052][ T5126] gspca_sn9c2028: read1 error -32 [ 387.477387][ T5126] gspca_sn9c2028: read1 error -32 [ 387.495357][ T5126] gspca_sn9c2028: read1 error 0 [ 387.504225][ T5126] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -5 [ 387.513410][ T5126] usb 1-1: Found UVC 0.00 device syz (0458:7005) [ 387.520791][ T5126] usb 1-1: No valid video chain found. [ 387.652433][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 388.340129][ T5126] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 388.530540][ T5126] usb 3-1: Using ep0 maxpacket: 8 [ 388.542322][ T5126] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 388.559656][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.583456][ T5126] usb 3-1: config 0 descriptor?? [ 388.608444][ T5172] usb 1-1: USB disconnect, device number 25 [ 389.766656][ T5126] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 389.782312][ T5126] asix 3-1:0.0: probe with driver asix failed with error -71 [ 389.800822][ T5126] usb 3-1: USB disconnect, device number 23 [ 391.996651][ T9864] sctp: [Deprecated]: syz.1.1500 (pid 9864) Use of int in max_burst socket option deprecated. [ 391.996651][ T9864] Use struct sctp_assoc_value instead [ 392.811263][ T5093] Bluetooth: hci1: unexpected event for opcode 0x200c [ 392.849013][ T9879] 9pnet_fd: Insufficient options for proto=fd [ 395.095352][ T9908] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.246265][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 396.290235][ T9926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1521'. [ 398.570712][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 398.901182][ T5175] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 399.120014][ T5175] usb 1-1: Using ep0 maxpacket: 16 [ 399.129542][ T5175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 399.164838][ T5175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 399.211491][ T5175] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 399.222175][ T5175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.275843][ T5175] usb 1-1: config 0 descriptor?? [ 399.700714][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.720307][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.918801][ T5175] hid (null): bogus close delimiter [ 399.941158][ T5175] hid (null): invalid report_count 58028 [ 399.949156][ T5175] hid (null): unknown global tag 0xd [ 399.980848][ T5175] hid-generic 0003:0158:0100.001F: unknown main item tag 0x0 [ 399.999974][ T5175] hid-generic 0003:0158:0100.001F: unknown main item tag 0x0 [ 400.009375][ T5175] hid-generic 0003:0158:0100.001F: bogus close delimiter [ 400.027946][ T5175] hid-generic 0003:0158:0100.001F: item 0 0 2 10 parsing failed [ 400.044140][ T5175] hid-generic 0003:0158:0100.001F: probe with driver hid-generic failed with error -22 [ 400.178529][ T5175] usb 1-1: USB disconnect, device number 26 [ 400.529220][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.549469][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.570491][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.587073][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.601211][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.610933][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.944180][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.222615][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.331223][ T9986] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 401.342097][ T9986] cramfs: wrong magic [ 402.114039][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.802113][ T5088] Bluetooth: hci3: command tx timeout [ 402.867439][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.970549][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 403.631573][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 403.661320][ T11] bridge_slave_1: left allmulticast mode [ 403.697927][ T11] bridge_slave_1: left promiscuous mode [ 403.710207][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.784205][ T11] bridge_slave_0: left allmulticast mode [ 403.829698][ T11] bridge_slave_0: left promiscuous mode [ 403.847239][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.900537][ T5172] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 404.178028][ T5172] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 404.201797][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.228804][ T5172] usb 1-1: config 0 descriptor?? [ 404.231363][ T930] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 404.283811][ T5172] usb 1-1: selecting invalid altsetting 3 [ 404.289681][ T5172] comedi comedi0: could not set alternate setting 3 in high speed [ 404.330029][ T5172] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 404.395857][ T5172] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 404.470053][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 404.490868][ T930] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 404.537687][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.552367][ T930] usb 5-1: Product: syz [ 404.556693][ T930] usb 5-1: Manufacturer: syz [ 404.582080][ T930] usb 5-1: SerialNumber: syz [ 404.591024][ T930] usb 5-1: config 0 descriptor?? [ 404.619675][ T930] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 404.829748][ T930] gspca_sn9c2028: read1 error -32 [ 404.838853][ T930] gspca_sn9c2028: read1 error -32 [ 404.847940][ T930] gspca_sn9c2028: read1 error 0 [ 404.853268][ T930] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -5 [ 404.861951][ T5088] Bluetooth: hci3: command tx timeout [ 404.868908][ T930] usb 5-1: Found UVC 0.00 device syz (0458:7005) [ 404.875880][ T930] usb 5-1: No valid video chain found. [ 405.952907][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.987295][ T5087] usb 5-1: USB disconnect, device number 27 [ 406.001237][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.026841][ T11] bond0 (unregistering): Released all slaves [ 406.059276][ T11] bond1 (unregistering): Released all slaves [ 406.177311][ T5139] usb 1-1: USB disconnect, device number 27 [ 406.519346][T10048] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 406.696355][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.731350][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.764166][ T9973] bridge_slave_0: entered allmulticast mode [ 406.793855][ T9973] bridge_slave_0: entered promiscuous mode [ 406.920136][ T5088] Bluetooth: hci3: command tx timeout [ 406.955337][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.973941][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.988391][ T9973] bridge_slave_1: entered allmulticast mode [ 407.003269][ T9973] bridge_slave_1: entered promiscuous mode [ 407.380759][T10069] bridge_slave_1: left allmulticast mode [ 407.386527][T10069] bridge_slave_1: left promiscuous mode [ 407.410245][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.453428][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.515179][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.689444][ T11] hsr_slave_0: left promiscuous mode [ 407.715419][ T11] hsr_slave_1: left promiscuous mode [ 407.731727][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.761238][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.788561][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.821809][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.930199][ T11] veth1_macvtap: left promiscuous mode [ 407.936470][ T11] veth0_macvtap: left promiscuous mode [ 407.942348][ T11] veth1_vlan: left promiscuous mode [ 407.948298][ T11] veth0_vlan: left promiscuous mode [ 409.000623][ T5088] Bluetooth: hci3: command tx timeout [ 409.050011][ T5172] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 409.159458][T10091] syz.0.1564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 409.177031][T10091] CPU: 0 PID: 10091 Comm: syz.0.1564 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 409.177063][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 409.177084][T10091] Call Trace: [ 409.177096][T10091] [ 409.177108][T10091] dump_stack_lvl+0x241/0x360 [ 409.177168][T10091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.177207][T10091] ? __pfx__printk+0x10/0x10 [ 409.177250][T10091] ? __rcu_read_unlock+0xa1/0x110 [ 409.177289][T10091] warn_alloc+0x278/0x410 [ 409.177319][T10091] ? stack_depot_save_flags+0x29/0x830 [ 409.177363][T10091] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 409.177399][T10091] ? __pfx_warn_alloc+0x10/0x10 [ 409.177430][T10091] ? kasan_save_track+0x3f/0x80 [ 409.177462][T10091] ? __kasan_kmalloc+0x98/0xb0 [ 409.177498][T10091] ? xsk_setsockopt+0x598/0x950 [ 409.177528][T10091] ? do_sock_setsockopt+0x3af/0x720 [ 409.177557][T10091] ? __sys_setsockopt+0x1ae/0x250 [ 409.177584][T10091] ? __x64_sys_setsockopt+0xb5/0xd0 [ 409.177613][T10091] ? do_syscall_64+0xf3/0x230 [ 409.177646][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.177690][T10091] __vmalloc_node_range_noprof+0x130/0x1460 [ 409.177760][T10091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.177801][T10091] ? __kasan_kmalloc+0x98/0xb0 [ 409.177836][T10091] ? xskq_create+0x54/0x170 [ 409.177873][T10091] vmalloc_user_noprof+0x74/0x80 [ 409.177908][T10091] ? xskq_create+0xb6/0x170 [ 409.177939][T10091] xskq_create+0xb6/0x170 [ 409.177975][T10091] xsk_init_queue+0xa1/0x100 [ 409.178011][T10091] xsk_setsockopt+0x598/0x950 [ 409.178047][T10091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 409.178084][T10091] ? __pfx_lock_acquire+0x10/0x10 [ 409.178111][T10091] ? __fget_files+0x29/0x470 [ 409.178137][T10091] ? __pfx_lock_release+0x10/0x10 [ 409.178161][T10091] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 409.178184][T10091] ? security_socket_setsockopt+0x87/0xb0 [ 409.178224][T10091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 409.178254][T10091] do_sock_setsockopt+0x3af/0x720 [ 409.178293][T10091] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 409.178322][T10091] ? __fget_files+0x29/0x470 [ 409.178357][T10091] ? __fget_files+0x3f6/0x470 [ 409.178397][T10091] __sys_setsockopt+0x1ae/0x250 [ 409.178435][T10091] __x64_sys_setsockopt+0xb5/0xd0 [ 409.178470][T10091] do_syscall_64+0xf3/0x230 [ 409.178506][T10091] ? clear_bhb_loop+0x35/0x90 [ 409.178546][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.178580][T10091] RIP: 0033:0x7fd580575bd9 [ 409.178616][T10091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.178640][T10091] RSP: 002b:00007fd5813a7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.178668][T10091] RAX: ffffffffffffffda RBX: 00007fd580704038 RCX: 00007fd580575bd9 [ 409.178688][T10091] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 409.178705][T10091] RBP: 00007fd5805e4aa1 R08: 0000000000000020 R09: 0000000000000000 [ 409.178722][T10091] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 409.178739][T10091] R13: 000000000000006e R14: 00007fd580704038 R15: 00007fff48ec3758 [ 409.178777][T10091] [ 409.178788][T10091] Mem-Info: [ 409.178806][T10091] active_anon:2285 inactive_anon:6589 isolated_anon:0 [ 409.178806][T10091] active_file:10303 inactive_file:38109 isolated_file:0 [ 409.178806][T10091] unevictable:768 dirty:427 writeback:0 [ 409.178806][T10091] slab_reclaimable:9516 slab_unreclaimable:97992 [ 409.178806][T10091] mapped:16607 shmem:5919 pagetables:729 [ 409.178806][T10091] sec_pagetables:0 bounce:0 [ 409.178806][T10091] kernel_misc_reclaimable:0 [ 409.178806][T10091] free:1389814 free_pcp:3048 free_cma:0 [ 409.178874][T10091] Node 0 active_anon:9140kB inactive_anon:26456kB active_file:40908kB inactive_file:152436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:66256kB dirty:1656kB writeback:0kB shmem:22140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10124kB pagetables:2916kB sec_pagetables:0kB all_unreclaimable? no [ 409.178940][T10091] Node 1 active_anon:0kB inactive_anon:0kB active_file:304kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:52kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 409.179003][T10091] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.179073][T10091] lowmem_reserve[]: 0 2571 2571 0 0 [ 409.179128][T10091] Node 0 DMA32 free:1601480kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:9136kB inactive_anon:26424kB active_file:40636kB inactive_file:152384kB unevictable:1536kB writepending:1652kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:5092kB local_pcp:3740kB free_cma:0kB [ 409.179201][T10091] lowmem_reserve[]: 0 0 0 0 0 [ 409.179253][T10091] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:272kB inactive_file:52kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.179321][T10091] lowmem_reserve[]: 0 0 0 0 0 [ 409.179381][T10091] Node 1 Normal free:3942416kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:304kB inactive_file:0kB unevictable:1536kB writepending:52kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:7088kB local_pcp:6840kB free_cma:0kB [ 409.179451][T10091] lowmem_reserve[]: 0 0 0 0 0 [ 409.179510][T10091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.179755][T10091] Node 0 DMA32: 64*4kB (UE) 29*8kB (UE) 336*16kB [ 409.292490][ T5172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.292527][ T5172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.295208][ T5172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.303290][T10091] (UME) [ 409.314632][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.317524][T10091] 198*32kB [ 409.353344][ T5172] usb 2-1: Product: చ [ 409.387600][T10091] (UME) [ 409.466004][ T5172] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 409.502708][T10091] 99*64kB [ 409.573266][ T5172] usb 2-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 409.657995][T10091] (UME) 50*128kB (UM) 36*256kB (UME) 13*512kB (UM) 10*1024kB (UME) 1*2048kB (U) 378*4096kB (UM) = 1601384kB [ 409.879662][T10091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.885686][T10091] Node 1 Normal: 12*4kB (M) 8*8kB (UM) 8*16kB (UM) 13*32kB (UM) 12*64kB (UM) 7*128kB (UM) 1*256kB (U) 1*512kB (U) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942416kB [ 409.885982][T10091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.886005][T10091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.886136][T10091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.886159][T10091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.886181][T10091] 52581 total pagecache pages [ 409.886193][T10091] 0 pages in swap cache [ 409.886204][T10091] Free swap = 124396kB [ 409.886241][T10091] Total swap = 124996kB [ 409.886254][T10091] 2097051 pages RAM [ 409.886264][T10091] 0 pages HighMem/MovableOnly [ 409.886274][T10091] 400873 pages reserved [ 409.886285][T10091] 0 pages cma reserved [ 409.992112][ T5175] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 410.260043][ T5175] usb 3-1: Using ep0 maxpacket: 16 [ 410.268849][ T5175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.303462][ T5175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.314492][ T5175] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 410.327385][ T5175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.346976][ T5175] usb 3-1: config 0 descriptor?? [ 410.681889][ T11] team0 (unregistering): Port device team_slave_1 removed [ 410.777319][ T5175] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 410.785086][ T5175] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 410.799444][ T5175] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 410.811764][ T5175] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 410.819701][ T11] team0 (unregistering): Port device team_slave_0 removed [ 410.828307][ T5175] savu 0003:1E7D:2D5A.0020: unknown main item tag 0x0 [ 410.863848][ T5175] savu 0003:1E7D:2D5A.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 411.793532][ T9973] team0: Port device team_slave_0 added [ 411.805946][ T9973] team0: Port device team_slave_1 added [ 411.927961][ T5172] usb 2-1: 0:2 : does not exist [ 412.024147][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 412.220144][ T5172] usb 2-1: USB disconnect, device number 20 [ 412.811355][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.847435][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.900189][ T930] usb 3-1: USB disconnect, device number 24 [ 412.952353][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.978594][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.004774][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.026951][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.099904][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.959277][T10134] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1576'. [ 414.010443][T10134] bridge_slave_1: left allmulticast mode [ 414.049983][T10134] bridge_slave_1: left promiscuous mode [ 414.087914][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.191921][T10134] bridge_slave_0: left allmulticast mode [ 414.234007][T10134] bridge_slave_0: left promiscuous mode [ 414.260072][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.280836][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'. [ 414.439122][ T9973] hsr_slave_0: entered promiscuous mode [ 414.456727][ T9973] hsr_slave_1: entered promiscuous mode [ 414.486480][ T9973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.496519][ T9973] Cannot create hsr debugfs directory [ 414.888269][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 415.050423][ T5172] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 415.113781][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 415.190267][T10168] team0: entered promiscuous mode [ 415.205686][T10168] team_slave_0: entered promiscuous mode [ 415.223520][T10168] team_slave_1: entered promiscuous mode [ 415.239764][T10168] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 415.292872][ T5172] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.317929][ T5172] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.338437][T10167] team0: left promiscuous mode [ 415.355078][T10167] team_slave_0: left promiscuous mode [ 415.355182][ T5172] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.355217][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.355242][ T5172] usb 1-1: Product: చ [ 415.355259][ T5172] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 415.380422][T10167] team_slave_1: left promiscuous mode [ 415.411582][ T5172] usb 1-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 415.454298][T10167] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 415.710360][ T5172] usb 1-1: 0:2 : does not exist [ 415.757638][ T5172] usb 1-1: USB disconnect, device number 28 [ 416.042005][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.746534][ T9973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.783453][ T9973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.842507][ T9973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.877667][ T9973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.275442][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 417.296807][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 417.353462][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.377758][T10204] team0: entered promiscuous mode [ 417.393576][T10204] team_slave_0: entered promiscuous mode [ 417.421623][T10204] team_slave_1: entered promiscuous mode [ 417.439176][T10204] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 417.492651][T10201] team0: left promiscuous mode [ 417.518534][T10201] team_slave_0: left promiscuous mode [ 417.555993][T10201] team_slave_1: left promiscuous mode [ 417.580152][T10201] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 417.648263][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.701677][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.710280][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.804290][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.811925][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.675525][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.187404][ T9973] veth0_vlan: entered promiscuous mode [ 420.239527][ T9973] veth1_vlan: entered promiscuous mode [ 420.274770][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 420.467047][ T9973] veth0_macvtap: entered promiscuous mode [ 420.503849][ T9973] veth1_macvtap: entered promiscuous mode [ 420.566138][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.717673][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.744641][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.785805][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.849416][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.922505][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.542665][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.579971][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.613077][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.687854][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.748309][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.780274][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.844887][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.865496][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.888828][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.917128][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.938395][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.982091][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.043203][ T9973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.086633][ T9973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.113802][ T5175] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 422.114380][ T9973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.161827][ T9973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.312923][ T5175] usb 3-1: Using ep0 maxpacket: 16 [ 422.350472][ T5175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.409956][ T5175] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 422.470023][ T5175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.560921][ T5175] usb 3-1: config 0 descriptor?? [ 422.647930][ T5175] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 422.673243][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.702275][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.705653][ T5088] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 422.834113][ T4521] bcm5974 3-1:0.0: could not read from device [ 422.920411][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.928344][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.940491][ T5175] usb 3-1: USB disconnect, device number 25 [ 422.944892][T10293] bcm5974 3-1:0.0: could not read from device [ 423.275250][T10316] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 423.287561][T10316] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 423.588231][T10324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1537'. [ 424.568810][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 424.760142][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 425.009972][ T9970] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 425.295117][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.300007][ T9970] usb 2-1: Using ep0 maxpacket: 16 [ 425.310312][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.339219][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.351509][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.364442][ T5093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 425.380189][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.400677][ T9970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 425.531968][ T9970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 425.625822][ T9970] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 425.667510][ T9970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.737355][ T9970] usb 2-1: config 0 descriptor?? [ 426.310929][T10336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.403012][T10336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.486275][ T9970] hid (null): bogus close delimiter [ 426.504831][T10366] syz.2.1626: attempt to access beyond end of device [ 426.504831][T10366] nbd2: rw=0, sector=16, nr_sectors = 8 limit=0 [ 426.530930][ T9970] hid (null): invalid report_count 58028 [ 426.570480][ T9970] hid (null): unknown global tag 0xd [ 426.623749][ T9970] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 426.660902][T10366] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 2, size 4096) [ 426.689544][ T9970] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 426.724908][T10366] syz.2.1626: attempt to access beyond end of device [ 426.724908][T10366] nbd2: rw=0, sector=128, nr_sectors = 8 limit=0 [ 426.761764][ T9970] hid-generic 0003:0158:0100.0021: bogus close delimiter [ 426.784862][ T9970] hid-generic 0003:0158:0100.0021: item 0 0 2 10 parsing failed [ 426.805588][T10366] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 16, size 4096) [ 426.830773][ T9970] hid-generic 0003:0158:0100.0021: probe with driver hid-generic failed with error -22 [ 426.868219][ T9970] usb 2-1: USB disconnect, device number 21 [ 426.967447][T10366] REISERFS warning (device nbd2): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd2 [ 427.465686][T10349] chnl_net:caif_netlink_parms(): no params data found [ 427.480217][ T5093] Bluetooth: hci5: command tx timeout [ 427.746394][ T29] audit: type=1326 audit(1720233511.972:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 427.851091][ T29] audit: type=1326 audit(1720233511.972:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd580574610 code=0x7ffc0000 [ 427.902939][ T29] audit: type=1326 audit(1720233511.972:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd580577367 code=0x7ffc0000 [ 427.973280][ T29] audit: type=1326 audit(1720233511.972:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 428.110857][ T29] audit: type=1326 audit(1720233511.972:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd580577367 code=0x7ffc0000 [ 428.167661][ T29] audit: type=1326 audit(1720233511.972:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd58057490a code=0x7ffc0000 [ 428.250934][T10401] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 428.262203][T10401] cramfs: wrong magic [ 428.638023][ T29] audit: type=1326 audit(1720233511.972:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 428.777612][ T29] audit: type=1326 audit(1720233511.972:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 428.862940][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'. [ 428.933697][ T29] audit: type=1326 audit(1720233511.972:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 429.089631][ T29] audit: type=1326 audit(1720233511.972:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd580574610 code=0x7ffc0000 [ 429.113505][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.138775][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.217147][T10349] bridge_slave_0: entered allmulticast mode [ 429.269395][T10349] bridge_slave_0: entered promiscuous mode [ 429.301132][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.336549][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.374392][T10349] bridge_slave_1: entered allmulticast mode [ 429.413791][T10349] bridge_slave_1: entered promiscuous mode [ 429.563034][ T5093] Bluetooth: hci5: command tx timeout [ 429.727128][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.783853][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.024291][T10349] team0: Port device team_slave_0 added [ 430.074114][T10349] team0: Port device team_slave_1 added [ 430.557428][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.582933][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.745760][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.795897][T10438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 430.828263][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.870168][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.939959][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.390872][T10448] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 431.402252][T10448] cramfs: wrong magic [ 431.640403][ T5093] Bluetooth: hci5: command tx timeout [ 431.654114][T10349] hsr_slave_0: entered promiscuous mode [ 431.835186][T10349] hsr_slave_1: entered promiscuous mode [ 431.908844][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.950024][T10349] Cannot create hsr debugfs directory [ 432.196024][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 433.224225][ T2778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.544761][ T2778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.720052][ T5093] Bluetooth: hci5: command tx timeout [ 434.068283][ T2778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.311094][ T2778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.330141][ T5139] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 435.533216][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 435.561715][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 435.602037][ T5139] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.635280][ T5139] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.652302][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.751232][ T5139] usb 1-1: config 0 descriptor?? [ 435.923262][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 435.923282][ T29] audit: type=1326 audit(1720233520.222:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 435.956111][ T29] audit: type=1326 audit(1720233520.222:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 436.079965][ T29] audit: type=1326 audit(1720233520.252:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc488574610 code=0x7ffc0000 [ 436.105964][ T29] audit: type=1326 audit(1720233520.252:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc488577367 code=0x7ffc0000 [ 436.133926][ T29] audit: type=1326 audit(1720233520.252:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 436.156059][ T29] audit: type=1326 audit(1720233520.252:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc488577367 code=0x7ffc0000 [ 436.181360][ T29] audit: type=1326 audit(1720233520.252:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc48857490a code=0x7ffc0000 [ 436.203860][ T29] audit: type=1326 audit(1720233520.252:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 436.206658][ T5139] usbhid 1-1:0.0: can't add hid device: -71 [ 436.226470][ T29] audit: type=1326 audit(1720233520.252:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 436.226528][ T29] audit: type=1326 audit(1720233520.282:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc488575bd9 code=0x7ffc0000 [ 436.238851][T10515] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1663'. [ 436.258701][ T5139] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 436.301268][ T5172] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 436.328739][ T5139] usb 1-1: USB disconnect, device number 29 [ 436.590116][ T5172] usb 4-1: Using ep0 maxpacket: 16 [ 436.601209][ T5172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 436.619371][ T5172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 436.630936][ T5172] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 436.641827][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.667684][ T5172] usb 4-1: config 0 descriptor?? [ 436.890867][ T2778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.913849][ T2778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.942987][ T2778] bond0 (unregistering): Released all slaves [ 437.139429][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.188753][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.223089][ T5172] hid (null): bogus close delimiter [ 437.229488][ T5172] hid (null): invalid report_count 58028 [ 437.270009][ T5172] hid (null): unknown global tag 0xd [ 437.288375][ T5172] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 437.308688][ T5172] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 437.337936][ T5172] hid-generic 0003:0158:0100.0022: bogus close delimiter [ 437.365913][ T5172] hid-generic 0003:0158:0100.0022: item 0 0 2 10 parsing failed [ 437.390994][ T5172] hid-generic 0003:0158:0100.0022: probe with driver hid-generic failed with error -22 [ 437.479306][ T5139] usb 4-1: USB disconnect, device number 22 [ 437.771445][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1670'. [ 437.826020][T10539] nbd: must specify a size in bytes for the device [ 437.840001][ T930] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 438.030097][ T930] usb 3-1: Using ep0 maxpacket: 16 [ 438.040779][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 438.089932][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 438.137849][ T930] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 438.173057][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.302619][ T930] usb 3-1: config 0 descriptor?? [ 438.569926][ T9970] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 438.778139][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.823406][ T9970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 439.006379][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.015593][ T9970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 439.030167][ T930] hid (null): bogus close delimiter [ 439.036512][ T930] hid (null): invalid report_count 58028 [ 439.042451][ T9970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.055520][ T930] hid (null): unknown global tag 0xd [ 439.061268][ T9970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.075139][ T930] hid-generic 0003:0158:0100.0023: unknown main item tag 0x0 [ 439.082814][ T9970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.091145][ T930] hid-generic 0003:0158:0100.0023: unknown main item tag 0x0 [ 439.112314][ T9970] usb 4-1: config 0 descriptor?? [ 439.119308][ T930] hid-generic 0003:0158:0100.0023: bogus close delimiter [ 439.140504][ T930] hid-generic 0003:0158:0100.0023: item 0 0 2 10 parsing failed [ 439.149197][ T930] hid-generic 0003:0158:0100.0023: probe with driver hid-generic failed with error -22 [ 439.246845][T10564] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1675'. [ 439.263129][ T930] usb 3-1: USB disconnect, device number 26 [ 439.295685][ T2778] hsr_slave_0: left promiscuous mode [ 439.329440][ T2778] hsr_slave_1: left promiscuous mode [ 439.355655][ T2778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.369901][ T2778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.378231][ T2778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.399955][ T2778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.438016][ T2778] veth1_macvtap: left promiscuous mode [ 439.443768][ T2778] veth0_macvtap: left promiscuous mode [ 439.449541][ T2778] veth1_vlan: left promiscuous mode [ 439.455386][ T2778] veth0_vlan: left promiscuous mode [ 439.544696][ T9970] usbhid 4-1:0.0: can't add hid device: -71 [ 439.555630][ T9970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 439.570334][ T9970] usb 4-1: USB disconnect, device number 23 [ 440.534630][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.541989][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.745953][ T2778] team0 (unregistering): Port device team_slave_1 removed [ 440.895674][ T2778] team0 (unregistering): Port device team_slave_0 removed [ 441.565307][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 441.612858][T10349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.734508][T10349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.773700][T10349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.942970][T10349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.307992][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 442.338209][T10625] veth0_to_hsr: entered promiscuous mode [ 442.372938][T10625] veth0_to_hsr: entered allmulticast mode [ 442.394559][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 442.590638][T10636] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1697'. [ 442.612930][T10629] veth0_to_hsr: left promiscuous mode [ 442.626779][T10629] veth0_to_hsr: left allmulticast mode [ 442.808571][T10349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.968843][T10349] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.006529][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 443.048959][T10641] nbd: must specify a size in bytes for the device [ 443.054665][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.062785][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.124924][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 443.224709][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.231917][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.799191][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 443.845342][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 444.174115][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.290793][T10678] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1709'. [ 444.580004][ T9970] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 444.678259][T10349] veth0_vlan: entered promiscuous mode [ 444.704009][T10349] veth1_vlan: entered promiscuous mode [ 444.753670][T10349] veth0_macvtap: entered promiscuous mode [ 444.770938][ T9970] usb 1-1: Using ep0 maxpacket: 16 [ 444.778691][T10349] veth1_macvtap: entered promiscuous mode [ 444.804063][ T9970] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 444.822105][ T9970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.856807][ T9970] usb 1-1: Product: syz [ 444.874746][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.890539][ T9970] usb 1-1: Manufacturer: syz [ 444.899347][ T9970] usb 1-1: SerialNumber: syz [ 444.914809][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.935231][ T9970] usb 1-1: config 0 descriptor?? [ 444.951332][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.955081][ T9970] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 444.973981][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.985217][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.997054][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.007523][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.019989][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.038016][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.064655][ T5138] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 445.093377][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.128606][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.142345][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.153296][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.155860][ T9970] gspca_sn9c2028: read1 error -32 [ 445.170498][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.181538][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.191763][T10349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.203213][ T9970] gspca_sn9c2028: read1 error -32 [ 445.203907][T10349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.209250][ T9970] gspca_sn9c2028: read1 error 0 [ 445.224743][ T9970] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -5 [ 445.239542][ T9970] usb 1-1: Found UVC 0.00 device syz (0458:7005) [ 445.247046][ T9970] usb 1-1: No valid video chain found. [ 445.259952][ T5138] usb 3-1: Using ep0 maxpacket: 16 [ 445.266219][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.270881][ T5138] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 445.308316][T10349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.311940][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.325227][T10349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.325270][T10349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.325303][T10349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.372015][ T5138] usb 3-1: Product: syz [ 445.376456][ T5138] usb 3-1: Manufacturer: syz [ 445.391612][ T5138] usb 3-1: SerialNumber: syz [ 445.404979][ T5138] usb 3-1: config 0 descriptor?? [ 445.417754][ T5138] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 445.458394][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 445.469743][T10714] macvlan0: entered promiscuous mode [ 445.476286][T10714] macvlan0: entered allmulticast mode [ 445.484091][T10714] veth1_vlan: entered allmulticast mode [ 445.509969][T10715] veth1_vlan: left allmulticast mode [ 445.517028][T10715] macvlan0: left promiscuous mode [ 445.529706][T10715] macvlan0: left allmulticast mode [ 445.598380][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.643647][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.696905][ T5138] gspca_sn9c2028: read1 error -32 [ 445.717267][ T5138] gspca_sn9c2028: read1 error -32 [ 445.730802][ T5138] gspca_sn9c2028: read1 error 0 [ 445.735860][ T5138] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -5 [ 445.768301][ T5138] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 445.795386][ T2806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.795996][ T5138] usb 3-1: No valid video chain found. [ 445.808353][ T25] usb 1-1: USB disconnect, device number 30 [ 445.905019][ T2806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.782111][ T5126] usb 3-1: USB disconnect, device number 27 [ 447.650235][ T5138] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 447.850149][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 448.134785][ T5138] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 448.177650][T10768] __nla_validate_parse: 1 callbacks suppressed [ 448.177713][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'. [ 448.303189][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.343464][ T5138] usb 2-1: Product: syz [ 448.374070][ T5138] usb 2-1: Manufacturer: syz [ 448.410008][ T5138] usb 2-1: SerialNumber: syz [ 448.465917][ T5138] usb 2-1: config 0 descriptor?? [ 448.508082][ T5138] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 448.546204][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 448.704079][ T5138] gspca_sn9c2028: read1 error -32 [ 448.715586][ T5138] gspca_sn9c2028: read1 error -32 [ 448.736763][ T5138] gspca_sn9c2028: read1 error 0 [ 448.750333][ T5138] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -5 [ 448.778698][ T5138] usb 2-1: Found UVC 0.00 device syz (0458:7005) [ 448.795719][ T5138] usb 2-1: No valid video chain found. [ 449.035167][ T930] usb 2-1: USB disconnect, device number 22 [ 449.422949][ T5126] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 450.512871][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 450.547314][ T5126] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 450.573946][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.593013][ T5126] usb 4-1: Product: syz [ 450.597712][ T5126] usb 4-1: Manufacturer: syz [ 450.618970][ T5126] usb 4-1: SerialNumber: syz [ 450.648542][ T5126] usb 4-1: config 0 descriptor?? [ 450.664628][ T5126] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 450.735942][T10821] fuse: Bad value for 'fd' [ 450.878804][ T5126] gspca_sn9c2028: read1 error -32 [ 450.910017][ T5126] gspca_sn9c2028: read1 error -32 [ 450.923294][ T5126] gspca_sn9c2028: read1 error 0 [ 450.940522][ T5126] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -5 [ 450.960730][ T5126] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 450.967164][ T5126] usb 4-1: No valid video chain found. [ 451.238065][ T930] usb 4-1: USB disconnect, device number 24 [ 451.260879][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1759'. [ 451.593283][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 452.847741][T10856] fuse: Bad value for 'fd' [ 453.130282][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 454.188968][T10895] fuse: Bad value for 'fd' [ 454.394865][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 455.000248][ T5126] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 455.022317][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 455.060000][ T930] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 455.191735][ T5126] usb 3-1: Using ep0 maxpacket: 16 [ 455.216885][ T5126] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 455.233916][ T5126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.252404][ T930] usb 4-1: Using ep0 maxpacket: 8 [ 455.254573][ T5126] usb 3-1: Product: syz [ 455.269403][ T5126] usb 3-1: Manufacturer: syz [ 455.276532][ T5126] usb 3-1: SerialNumber: syz [ 455.280612][ T930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 455.295953][ T5126] usb 3-1: config 0 descriptor?? [ 455.314540][ T930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 455.320581][ T5126] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 455.356253][ T930] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.388289][ T930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 455.410016][ T930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 455.432054][ T930] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.447798][ T930] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 455.457558][ T930] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 455.487174][ T930] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.525724][ T930] usb 4-1: string descriptor 0 read error: -22 [ 455.529661][ T5126] gspca_sn9c2028: read1 error -32 [ 455.532571][ T930] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 455.540673][ T5126] gspca_sn9c2028: read1 error -32 [ 455.549545][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.570554][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 455.602504][ T930] adutux 4-1:168.0: interrupt endpoints not found [ 455.616937][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 455.716644][T10959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1809'. [ 455.730374][T10959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1809'. [ 455.826112][ T930] usb 4-1: USB disconnect, device number 25 [ 455.870359][ T5138] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 456.063723][ T5138] usb 5-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 456.081950][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.100151][ T5126] gspca_sn9c2028: read1 error -110 [ 456.105536][ T5126] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 456.109221][ T5138] usb 5-1: config 0 descriptor?? [ 456.130580][ T5126] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 456.137628][ T5126] usb 3-1: No valid video chain found. [ 456.161228][T10971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1814'. [ 456.168054][ T5138] usb 5-1: selecting invalid altsetting 3 [ 456.183020][ T5138] comedi comedi0: could not set alternate setting 3 in high speed [ 456.196772][ T5138] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 456.211690][ T5138] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 456.435267][ T5138] usb 5-1: USB disconnect, device number 28 [ 456.519496][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 456.617474][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 456.685360][ T5139] usb 3-1: USB disconnect, device number 28 [ 457.060273][ T5138] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 457.213773][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1827'. [ 457.262837][ T5138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.285894][ T5138] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.310302][ T5138] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.319530][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.371607][ T5138] usb 4-1: Product: చ [ 457.376925][ T5138] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 457.440243][ T5138] usb 4-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 457.707736][ T5138] usb 4-1: 0:2 : does not exist [ 457.770395][ T5138] usb 4-1: USB disconnect, device number 26 [ 457.817977][ T6796] udevd[6796]: setting owner of /dev/bus/usb/004/026 to uid=0, gid=0 failed: No such file or directory [ 458.150074][ T5139] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 458.440568][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.620156][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 458.921216][ T5139] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 458.950008][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.958773][ T5139] usb 1-1: Product: syz [ 458.982819][ T5139] usb 1-1: Manufacturer: syz [ 458.993468][ T5139] usb 1-1: SerialNumber: syz [ 459.013313][ T5139] usb 1-1: config 0 descriptor?? [ 459.034705][ T5139] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 459.253615][ T5139] gspca_sn9c2028: read1 error -32 [ 459.269415][ T5139] gspca_sn9c2028: read1 error -32 [ 459.276462][ T5139] gspca_sn9c2028: read1 error 0 [ 459.284969][ T5139] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -5 [ 459.300440][ T5139] usb 1-1: Found UVC 0.00 device syz (0458:7005) [ 459.309978][ T5087] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 459.327557][ T5139] usb 1-1: No valid video chain found. [ 459.402240][ T5093] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 459.445036][T11056] __nla_validate_parse: 3 callbacks suppressed [ 459.445061][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 459.517205][ T5087] usb 2-1: Using ep0 maxpacket: 16 [ 459.554009][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 459.594994][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 459.598831][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 459.622585][T11057] nbd: must specify a size in bytes for the device [ 459.670956][ T5087] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 459.694947][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.761248][ T5087] usb 2-1: config 0 descriptor?? [ 460.122638][ T5126] usb 1-1: USB disconnect, device number 31 [ 460.214169][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.290418][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.378029][ T5087] hid (null): bogus close delimiter [ 460.397225][ T5087] hid (null): invalid report_count 58028 [ 460.404846][ T5087] hid (null): unknown global tag 0xd [ 460.437691][ T5087] hid-generic 0003:0158:0100.0024: unknown main item tag 0x0 [ 460.461135][ T5087] hid-generic 0003:0158:0100.0024: unknown main item tag 0x0 [ 460.489017][ T5087] hid-generic 0003:0158:0100.0024: bogus close delimiter [ 460.534170][ T5087] hid-generic 0003:0158:0100.0024: item 0 0 2 10 parsing failed [ 460.543627][ T5087] hid-generic 0003:0158:0100.0024: probe with driver hid-generic failed with error -22 [ 460.574277][ T5087] usb 2-1: USB disconnect, device number 23 [ 460.707294][T11067] syz.3.1852 (11067) used greatest stack depth: 17968 bytes left [ 461.047266][ T5093] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 461.132074][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 461.194355][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 461.269534][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'. [ 461.284164][T11091] nbd: must specify a size in bytes for the device [ 461.300504][T11095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1865'. [ 461.352219][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.361439][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.480103][ T5093] Bluetooth: hci1: command 0x0406 tx timeout [ 462.406796][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 462.406819][ T29] audit: type=1326 audit(1720233546.692:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 462.523627][ T29] audit: type=1326 audit(1720233546.692:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 462.548425][ T29] audit: type=1326 audit(1720233546.692:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd580574610 code=0x7ffc0000 [ 462.570085][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.588124][ T29] audit: type=1326 audit(1720233546.692:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd580577367 code=0x7ffc0000 [ 462.627820][ T29] audit: type=1326 audit(1720233546.692:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 462.639939][ T5139] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 462.649398][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.705643][ T29] audit: type=1326 audit(1720233546.692:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd580577367 code=0x7ffc0000 [ 462.757462][ T29] audit: type=1326 audit(1720233546.702:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd58057490a code=0x7ffc0000 [ 462.817478][ T29] audit: type=1326 audit(1720233546.702:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 462.910226][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 462.943609][ T5139] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 462.998713][ T29] audit: type=1326 audit(1720233546.702:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 463.029398][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.100588][ T5139] usb 4-1: Product: syz [ 463.106793][ T29] audit: type=1326 audit(1720233546.702:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11116 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd580575bd9 code=0x7ffc0000 [ 463.127587][ T5139] usb 4-1: Manufacturer: syz [ 463.145204][ T5139] usb 4-1: SerialNumber: syz [ 463.203827][ T5139] usb 4-1: config 0 descriptor?? [ 463.266556][ T5139] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 463.440994][ T5139] gspca_sn9c2028: read1 error -32 [ 463.549036][ T5139] gspca_sn9c2028: read1 error 0 [ 463.573145][ T5093] Bluetooth: hci1: command 0x0406 tx timeout [ 464.272951][ T5139] gspca_sn9c2028: read1 error -110 [ 464.300486][ T5139] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -110 [ 464.327818][ T5139] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 464.334906][ T5139] usb 4-1: No valid video chain found. [ 464.368324][ T5139] usb 4-1: USB disconnect, device number 27 [ 464.934341][ T5093] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 465.139958][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 465.156387][T11154] nbd: must specify a size in bytes for the device [ 465.305134][T11159] Cannot find add_set index 0 as target [ 466.718518][ T5172] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 467.000557][ T5093] Bluetooth: hci5: command tx timeout [ 467.576209][ T5093] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 467.592135][ T5172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.654621][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.696579][ T5172] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.706917][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.718548][ T5172] usb 5-1: Product: చ [ 467.725066][ T5172] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 467.751385][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.784906][ T5172] usb 5-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 467.804176][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 467.823817][T11196] nbd: must specify a size in bytes for the device [ 467.829967][ T5087] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 468.012095][T11203] Cannot find add_set index 0 as target [ 468.051386][ T5087] usb 3-1: Using ep0 maxpacket: 16 [ 468.062186][ T5172] usb 5-1: 0:2 : does not exist [ 468.067887][ T5087] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 468.090826][ T5087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.117733][ T5087] usb 3-1: Product: syz [ 468.132933][ T5087] usb 3-1: Manufacturer: syz [ 468.153756][ T5087] usb 3-1: SerialNumber: syz [ 468.167394][ T5172] usb 5-1: USB disconnect, device number 29 [ 468.199315][ T5087] usb 3-1: config 0 descriptor?? [ 468.244529][ T5087] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 468.424556][ T5087] gspca_sn9c2028: read1 error -32 [ 468.442425][ T5087] gspca_sn9c2028: read1 error 0 [ 468.455441][ T6796] udevd[6796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.774654][ T5087] gspca_sn9c2028: read1 error -71 [ 468.797215][ T5087] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 468.838177][ T5087] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 468.858541][ T5087] usb 3-1: No valid video chain found. [ 468.878775][ T5087] usb 3-1: USB disconnect, device number 29 [ 469.131690][T11224] syz.4.1910: attempt to access beyond end of device [ 469.131690][T11224] nbd4: rw=0, sector=16, nr_sectors = 8 limit=0 [ 469.150162][T11224] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 2, size 4096) [ 469.238129][T11224] syz.4.1910: attempt to access beyond end of device [ 469.238129][T11224] nbd4: rw=0, sector=128, nr_sectors = 8 limit=0 [ 469.260461][T11224] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 16, size 4096) [ 469.260943][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 469.279126][T11224] REISERFS warning (device nbd4): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd4 [ 469.315767][T11227] bridge0: entered promiscuous mode [ 469.329204][T11227] macvtap1: entered promiscuous mode [ 469.335086][T11227] macvtap1: entered allmulticast mode [ 469.340947][T11227] bridge0: entered allmulticast mode [ 469.643836][ T5093] Bluetooth: hci3: command tx timeout [ 469.664862][T11248] usb usb8: usbfs: process 11248 (syz.0.1920) did not claim interface 0 before use [ 469.697704][T11249] 9pnet_fd: Insufficient options for proto=fd [ 469.743242][T11252] Cannot find add_set index 0 as target [ 471.425449][T11289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1935'. [ 471.442159][T11285] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1936'. [ 471.559990][ T5139] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 471.721178][ T5139] usb 4-1: device descriptor read/64, error -71 [ 471.990064][ T5139] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 472.012156][T11307] usb usb8: usbfs: process 11307 (syz.1.1943) did not claim interface 0 before use [ 472.200066][ T5139] usb 4-1: device descriptor read/64, error -71 [ 472.348296][ T5139] usb usb4-port1: attempt power cycle [ 472.670762][T11320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1948'. [ 472.792535][ T5139] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 472.840805][ T5139] usb 4-1: device descriptor read/8, error -71 [ 473.130787][ T5139] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 473.307703][ T5139] usb 4-1: device descriptor read/8, error -71 [ 473.543176][ T5139] usb usb4-port1: unable to enumerate USB device [ 473.736724][T11337] usb usb8: usbfs: process 11337 (syz.1.1955) did not claim interface 0 before use [ 474.193775][T11350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1961'. [ 474.260225][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 474.359582][T11348] bridge0: entered promiscuous mode [ 474.416718][T11348] macvtap7: entered promiscuous mode [ 474.462692][T11348] macvtap7: entered allmulticast mode [ 474.471720][T11348] bridge0: entered allmulticast mode [ 474.759409][T11372] usb usb8: usbfs: process 11372 (syz.3.1967) did not claim interface 0 before use [ 475.480284][T11379] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 475.488067][T11379] cramfs: wrong magic [ 476.110205][T11392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1973'. [ 477.347785][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 477.398431][T11413] usb usb8: usbfs: process 11413 (syz.1.1979) did not claim interface 0 before use [ 477.411846][T11409] bridge0: entered promiscuous mode [ 477.425011][T11409] macvtap4: entered promiscuous mode [ 477.443639][T11409] macvtap4: entered allmulticast mode [ 477.460092][T11409] bridge0: entered allmulticast mode [ 479.205290][T11430] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1986'. [ 479.421426][T11441] vlan2: entered promiscuous mode [ 479.452174][T11441] syz_tun: entered promiscuous mode [ 479.483371][T11441] vlan2: entered allmulticast mode [ 479.494272][T11446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.515368][T11441] syz_tun: entered allmulticast mode [ 479.603603][T11453] usb usb8: usbfs: process 11453 (syz.2.1991) did not claim interface 0 before use [ 479.650619][ T9970] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 480.276176][ T9970] usb 2-1: device descriptor read/64, error -71 [ 480.970138][ T9970] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 481.160121][ T9970] usb 2-1: device descriptor read/64, error -71 [ 481.310482][ T9970] usb usb2-port1: attempt power cycle [ 481.402846][ T5126] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 481.600044][ T5126] usb 1-1: Using ep0 maxpacket: 16 [ 481.608407][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 481.629903][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 481.650011][ T5126] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 481.671120][ T5126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.702410][ T5126] usb 1-1: config 0 descriptor?? [ 481.730665][ T9970] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 481.781935][ T9970] usb 2-1: device descriptor read/8, error -71 [ 481.855754][T11483] usb usb8: usbfs: process 11483 (syz.3.2003) did not claim interface 0 before use [ 482.061706][ T9970] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 482.110663][ T9970] usb 2-1: device descriptor read/8, error -71 [ 482.158900][T11469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.178663][T11469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.226106][ T5126] hid (null): bogus close delimiter [ 482.238818][ T5126] hid (null): invalid report_count 58028 [ 482.250527][ T9970] usb usb2-port1: unable to enumerate USB device [ 482.257298][ T5126] hid (null): unknown global tag 0xd [ 482.276698][ T5126] hid-generic 0003:0158:0100.0025: unknown main item tag 0x0 [ 482.319901][ T5126] hid-generic 0003:0158:0100.0025: unknown main item tag 0x0 [ 482.327438][ T5126] hid-generic 0003:0158:0100.0025: bogus close delimiter [ 482.364968][ T5126] hid-generic 0003:0158:0100.0025: item 0 0 2 10 parsing failed [ 482.386578][ T5126] hid-generic 0003:0158:0100.0025: probe with driver hid-generic failed with error -22 [ 482.453410][ T5126] usb 1-1: USB disconnect, device number 32 [ 482.479688][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2013'. [ 482.506050][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.524378][T11504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.644351][T11510] usb usb8: usbfs: process 11510 (syz.3.2014) did not claim interface 0 before use [ 482.680143][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 482.902206][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 482.934510][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 482.966888][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.005125][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.053110][T11519] sctp: [Deprecated]: syz.1.2016 (pid 11519) Use of int in max_burst socket option deprecated. [ 483.053110][T11519] Use struct sctp_assoc_value instead [ 483.070248][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.119167][ T25] usb 5-1: config 0 descriptor?? [ 483.560385][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 483.579419][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.601378][T11517] syz.2.2011 (11517) used greatest stack depth: 17904 bytes left [ 483.620265][ T25] usb 5-1: USB disconnect, device number 30 [ 483.630110][ T9970] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 483.794503][T11538] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2025'. [ 483.806490][T11538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.820114][ T9970] usb 2-1: Using ep0 maxpacket: 32 [ 483.839286][ T9970] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 483.869636][ T9970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 483.900042][ T9970] usb 2-1: can't read configurations, error -61 [ 483.980397][ T5126] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 484.059988][ T9970] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 484.140045][ T5126] usb 4-1: device descriptor read/64, error -71 [ 484.179255][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 484.212291][T11554] bridge0: entered promiscuous mode [ 484.217760][T11554] macvtap1: entered promiscuous mode [ 484.226421][T11554] macvtap1: entered allmulticast mode [ 484.233251][T11554] bridge0: entered allmulticast mode [ 484.245886][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 484.256019][ T9970] usb 2-1: Using ep0 maxpacket: 32 [ 484.268214][ T9970] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 484.281991][ T9970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 484.300393][ T9970] usb 2-1: can't read configurations, error -61 [ 484.307701][ T9970] usb usb2-port1: attempt power cycle [ 484.430086][ T5126] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 484.720075][ T9970] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 485.430641][ T5126] usb 4-1: device descriptor read/64, error -71 [ 485.472865][ T9970] usb 2-1: Using ep0 maxpacket: 32 [ 485.643633][ T5126] usb usb4-port1: attempt power cycle [ 485.698284][ T9970] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 486.743379][ T9970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 486.756163][ T9970] usb 2-1: can't read configurations, error -61 [ 486.816444][T11575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2036'. [ 486.831441][ T5126] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 486.858404][T11575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.921440][ T9970] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 486.980631][ T9970] usb 2-1: Using ep0 maxpacket: 32 [ 487.008768][ T9970] usb 2-1: too many configurations: 146, using maximum allowed: 8 [ 487.074255][ T9970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 487.091985][ T9970] usb 2-1: can't read configurations, error -61 [ 487.101363][ T5126] usb 4-1: device not accepting address 34, error -71 [ 487.111812][ T9970] usb usb2-port1: unable to enumerate USB device [ 489.407626][ T5139] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 489.450049][ T9970] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 489.565469][T11617] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2053'. [ 489.574829][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.611346][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 489.640211][ T9970] usb 2-1: Using ep0 maxpacket: 8 [ 489.652890][ T9970] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 489.664530][ T5139] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 489.673833][ T9970] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 489.684610][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.693851][ T5139] usb 4-1: Product: syz [ 489.698070][ T5139] usb 4-1: Manufacturer: syz [ 489.703772][ T5139] usb 4-1: SerialNumber: syz [ 489.710680][ T9970] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 489.721630][ T9970] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 489.735831][ T5139] usb 4-1: config 0 descriptor?? [ 489.756249][ T5139] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 489.771258][ T9970] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 489.787420][ T9970] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 489.826862][ T9970] usb 2-1: string descriptor 0 read error: -22 [ 489.833370][ T9970] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.842642][ T9970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.863223][ T9970] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 489.879206][ T9970] usb 2-1: no configuration chosen from 3 choices [ 489.953860][ T5139] gspca_sn9c2028: read1 error -32 [ 489.965251][ T5139] gspca_sn9c2028: read1 error 0 [ 490.670108][ T5139] gspca_sn9c2028: read1 error -110 [ 490.675405][ T5139] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -110 [ 490.684292][ T5139] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 490.691454][ T5139] usb 4-1: No valid video chain found. [ 490.881081][ T5126] usb 4-1: USB disconnect, device number 36 [ 492.180913][ T45] usb 2-1: USB disconnect, device number 32 [ 492.468570][T11640] sctp: [Deprecated]: syz.1.2058 (pid 11640) Use of int in max_burst socket option deprecated. [ 492.468570][T11640] Use struct sctp_assoc_value instead [ 494.372272][ T5093] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 495.548021][T11674] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 495.568397][T11674] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 495.604041][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 495.621224][ T5139] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 495.711727][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 495.851290][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 495.870892][ T5139] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 495.896226][ T5139] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 495.924091][ T5139] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 495.955367][ T5139] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 496.026086][ T5139] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 496.066335][ T5139] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 496.114350][ T5139] usb 1-1: string descriptor 0 read error: -22 [ 496.136564][ T5139] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 496.152155][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.211974][ T5139] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 496.269166][ T5139] usb 1-1: no configuration chosen from 3 choices [ 496.459085][ T5093] Bluetooth: hci5: command tx timeout [ 497.169271][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 497.331148][ T5139] usb 1-1: USB disconnect, device number 33 [ 497.369922][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 497.395122][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 497.445753][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 497.458847][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 497.468335][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.478688][ T5093] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 497.492633][ T25] usb 2-1: config 0 descriptor?? [ 497.505473][T11714] sctp: [Deprecated]: syz.3.2084 (pid 11714) Use of int in max_burst socket option deprecated. [ 497.505473][T11714] Use struct sctp_assoc_value instead [ 497.544458][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 497.572695][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 497.641803][T11721] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 497.653456][T11721] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 497.828418][ T4521] bcm5974 2-1:0.0: could not read from device [ 497.854762][T11701] bcm5974 2-1:0.0: could not read from device [ 497.879297][ T25] usb 2-1: USB disconnect, device number 33 [ 497.887547][ T4521] bcm5974 2-1:0.0: could not read from device [ 497.907149][ T4521] bcm5974 2-1:0.0: could not read from device [ 497.918578][ T4521] bcm5974 2-1:0.0: could not read from device [ 498.696926][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 498.871482][ T5139] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 499.333734][ T5093] Bluetooth: hci5: unexpected event 0x09 length: 17 > 3 [ 499.390130][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 499.459490][T11765] 9pnet_fd: Insufficient options for proto=fd [ 499.501944][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 499.515109][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 499.533496][ T5139] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 499.545666][T11764] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 499.555648][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.565789][ T5093] Bluetooth: hci1: command 0x0406 tx timeout [ 499.572439][T11764] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 499.598584][ T5139] usb 3-1: config 0 descriptor?? [ 500.753763][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2102'. [ 500.782988][T11744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.794688][T11744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.814750][ T5139] hid (null): bogus close delimiter [ 500.857314][ T5139] hid (null): invalid report_count 58028 [ 500.902242][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'. [ 500.912240][ T5139] hid (null): unknown global tag 0xd [ 500.942231][ T5139] hid-generic 0003:0158:0100.0026: unknown main item tag 0x0 [ 501.401815][ T5093] Bluetooth: hci5: command tx timeout [ 501.408253][ T5139] hid-generic 0003:0158:0100.0026: unknown main item tag 0x0 [ 501.575628][ T5139] hid-generic 0003:0158:0100.0026: bogus close delimiter [ 501.642299][ T5139] hid-generic 0003:0158:0100.0026: item 0 0 2 10 parsing failed [ 501.675920][ T5139] hid-generic 0003:0158:0100.0026: probe with driver hid-generic failed with error -22 [ 501.753408][ T5139] usb 3-1: USB disconnect, device number 30 [ 501.853748][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 501.882833][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 501.958560][T11800] 9pnet_fd: Insufficient options for proto=fd [ 501.965159][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.965228][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.060271][ T5087] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 502.419479][ T5093] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 502.679859][ T5087] usb 2-1: Using ep0 maxpacket: 16 [ 502.988869][ T5087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 503.015298][ T5087] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 503.029306][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.039384][T11819] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 503.982043][T11819] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 503.995715][ T5087] usb 2-1: config 0 descriptor?? [ 504.015084][ T5087] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 504.061272][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 504.727489][ T5093] Bluetooth: hci1: command 0x0406 tx timeout [ 504.817326][ T4521] bcm5974 2-1:0.0: could not read from device [ 505.932516][ T4521] bcm5974 2-1:0.0: could not read from device [ 505.981563][ T4521] bcm5974 2-1:0.0: could not read from device [ 506.000261][ T5087] usb 2-1: USB disconnect, device number 34 [ 506.047364][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 506.047387][ T29] audit: type=1326 audit(1720233590.342:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11841 comm="syz.0.2125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd580575bd9 code=0x0 [ 506.118063][ T4521] bcm5974 2-1:0.0: could not read from device [ 506.266823][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 506.292072][ T5139] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 506.330683][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 506.980992][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 507.003414][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 507.670488][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 507.769021][ T5139] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 507.802911][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.832661][ T5139] usb 4-1: config 0 descriptor?? [ 507.933295][ T5093] Bluetooth: hci0: unexpected event 0x09 length: 17 > 3 [ 508.110372][T11877] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 508.138484][T11877] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 508.175704][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2135'. [ 508.680402][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.861816][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.901947][ T5139] hid (null): bogus close delimiter [ 508.938793][ T5139] hid (null): invalid report_count 58028 [ 508.969863][ T5139] hid (null): unknown global tag 0xd [ 509.005277][ T5139] hid-generic 0003:0158:0100.0027: unknown main item tag 0x0 [ 509.019874][ T5139] hid-generic 0003:0158:0100.0027: unknown main item tag 0x0 [ 509.027412][ T5139] hid-generic 0003:0158:0100.0027: bogus close delimiter [ 509.066125][ T5139] hid-generic 0003:0158:0100.0027: item 0 0 2 10 parsing failed [ 509.080679][ T5139] hid-generic 0003:0158:0100.0027: probe with driver hid-generic failed with error -22 [ 509.130612][ T5139] usb 4-1: USB disconnect, device number 37 [ 509.960133][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 510.877957][ T5093] Bluetooth: hci4: unexpected event 0x09 length: 17 > 3 [ 511.483257][T11915] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 511.504503][T11915] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 512.919984][ T5093] Bluetooth: hci4: command 0x0406 tx timeout [ 514.417603][ T5093] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 515.222598][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 515.329144][T11964] nbd: must specify a size in bytes for the device [ 515.351651][ T5093] Bluetooth: hci1: unexpected event 0x09 length: 17 > 3 [ 620.469785][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 620.483754][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11963/1:b..l [ 620.492379][ C1] rcu: (detected by 1, t=10502 jiffies, g=53961, q=293 ncpus=2) [ 620.500176][ C1] task:syz.4.2163 state:R running task stack:24672 pid:11963 tgid:11963 ppid:10349 flags:0x00004000 [ 620.513602][ C1] Call Trace: [ 620.516923][ C1] [ 620.519888][ C1] __schedule+0x1796/0x49d0 [ 620.524454][ C1] ? __pfx_validate_chain+0x10/0x10 [ 620.529703][ C1] ? __pfx___schedule+0x10/0x10 [ 620.534627][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.540680][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 620.546015][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 620.551270][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 620.557051][ C1] irqentry_exit+0x5e/0x90 [ 620.561510][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.567535][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 620.572858][ C1] Code: 2b 00 74 08 4c 89 f7 e8 ba 29 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 620.592626][ C1] RSP: 0018:ffffc9000988f400 EFLAGS: 00000206 [ 620.598770][ C1] RAX: 0000000000000001 RBX: 1ffff92001311e8c RCX: 0000000000000001 [ 620.606786][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f1600 [ 620.614794][ C1] RBP: ffffc9000988f548 R08: ffffffff92f71587 R09: 1ffffffff25ee2b0 [ 620.622794][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 1ffff92001311e88 [ 620.630828][ C1] R13: dffffc0000000000 R14: ffffc9000988f460 R15: 0000000000000246 [ 620.638877][ C1] ? __pfx_validate_chain+0x10/0x10 [ 620.644145][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 620.649206][ C1] ? deref_stack_reg+0x1c7/0x260 [ 620.654234][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 620.659734][ C1] ? deref_stack_reg+0x1c7/0x260 [ 620.664717][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.671087][ C1] is_bpf_text_address+0x46/0x2a0 [ 620.676144][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 620.681438][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 620.686664][ C1] ? is_module_text_address+0x128/0x190 [ 620.692266][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.698465][ C1] kernel_text_address+0xa7/0xe0 [ 620.703530][ C1] __kernel_text_address+0xd/0x40 [ 620.708591][ C1] unwind_get_return_address+0x5d/0xc0 [ 620.714091][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.720203][ C1] arch_stack_walk+0x125/0x1b0 [ 620.725024][ C1] stack_trace_save+0x118/0x1d0 [ 620.729921][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 620.735367][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.741387][ C1] kasan_save_track+0x3f/0x80 [ 620.746133][ C1] ? kasan_save_track+0x3f/0x80 [ 620.751133][ C1] ? kasan_save_free_info+0x40/0x50 [ 620.756479][ C1] ? poison_slab_object+0xe0/0x150 [ 620.761648][ C1] ? __kasan_slab_free+0x37/0x60 [ 620.766668][ C1] ? kmem_cache_free+0x145/0x350 [ 620.771652][ C1] ? __vm_area_free+0xe0/0x110 [ 620.776455][ C1] ? exit_mmap+0x645/0xc80 [ 620.780908][ C1] ? __mmput+0x115/0x3c0 [ 620.785179][ C1] ? exit_mm+0x220/0x310 [ 620.789453][ C1] ? do_exit+0x9aa/0x27e0 [ 620.793826][ C1] ? do_group_exit+0x207/0x2c0 [ 620.798651][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 620.803924][ C1] ? do_syscall_64+0xf3/0x230 [ 620.808958][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.815300][ C1] ? __memcg_slab_free_hook+0xa7/0x310 [ 620.820837][ C1] ? __vm_area_free+0xe0/0x110 [ 620.825667][ C1] kasan_save_free_info+0x40/0x50 [ 620.830885][ C1] poison_slab_object+0xe0/0x150 [ 620.835879][ C1] ? __vm_area_free+0xe0/0x110 [ 620.840695][ C1] __kasan_slab_free+0x37/0x60 [ 620.845671][ C1] kmem_cache_free+0x145/0x350 [ 620.850505][ C1] __vm_area_free+0xe0/0x110 [ 620.855163][ C1] exit_mmap+0x645/0xc80 [ 620.859486][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 620.864325][ C1] ? __asan_memset+0x23/0x50 [ 620.869182][ C1] ? uprobe_clear_state+0x277/0x290 [ 620.874435][ C1] ? mm_update_next_owner+0x559/0x6b0 [ 620.879866][ C1] __mmput+0x115/0x3c0 [ 620.883977][ C1] exit_mm+0x220/0x310 [ 620.888091][ C1] ? __pfx_exit_mm+0x10/0x10 [ 620.892725][ C1] ? taskstats_exit+0x348/0xa70 [ 620.898164][ C1] ? tty_audit_exit+0x155/0x200 [ 620.903215][ C1] do_exit+0x9aa/0x27e0 [ 620.907455][ C1] ? preempt_schedule_common+0x84/0xd0 [ 620.913119][ C1] ? __pfx_do_exit+0x10/0x10 [ 620.917961][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 620.924534][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 620.931051][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 620.936868][ C1] do_group_exit+0x207/0x2c0 [ 620.941658][ C1] __x64_sys_exit_group+0x3f/0x40 [ 620.946727][ C1] do_syscall_64+0xf3/0x230 [ 620.951546][ C1] ? clear_bhb_loop+0x35/0x90 [ 620.956301][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.962257][ C1] RIP: 0033:0x7fee2f975bd9 [ 620.966755][ C1] RSP: 002b:00007fff83386508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 620.975318][ C1] RAX: ffffffffffffffda RBX: 00007fff83386600 RCX: 00007fee2f975bd9 [ 620.983424][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.991432][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 620.999432][ C1] R10: 00000000003ff9f0 R11: 0000000000000246 R12: 0000000000000001 [ 621.007461][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.015511][ C1] [ 621.018562][ C1] rcu: rcu_preempt kthread starved for 10258 jiffies! g53961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 621.030059][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 621.040167][ C1] rcu: RCU grace-period kthread stack dump: [ 621.046076][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 621.058047][ C1] Call Trace: [ 621.061368][ C1] [ 621.064344][ C1] __schedule+0x1796/0x49d0 [ 621.068907][ C1] ? __pfx___schedule+0x10/0x10 [ 621.073789][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.078840][ C1] ? __asan_memset+0x23/0x50 [ 621.083480][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 621.089325][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.095690][ C1] ? schedule+0x90/0x320 [ 621.099971][ C1] schedule+0x14b/0x320 [ 621.104262][ C1] schedule_timeout+0x1be/0x310 [ 621.109240][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 621.114652][ C1] ? __pfx_process_timeout+0x10/0x10 [ 621.119980][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 621.125578][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 621.130501][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 621.136624][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 621.141947][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.148021][ C1] ? finish_swait+0xd4/0x1e0 [ 621.152662][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 621.157323][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.162585][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.168718][ C1] ? __kthread_parkme+0x169/0x1d0 [ 621.173961][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.179197][ C1] kthread+0x2f0/0x390 [ 621.183306][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 621.188559][ C1] ? __pfx_kthread+0x10/0x10 [ 621.193183][ C1] ret_from_fork+0x4b/0x80 [ 621.197636][ C1] ? __pfx_kthread+0x10/0x10 [ 621.202263][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.207195][ C1] [ 621.210248][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 621.216600][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 621.226364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 621.236469][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 621.241816][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 55 37 ab 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 621.261647][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 621.267771][ C1] RAX: ffff8880176e0000 RBX: ffff88823bc20064 RCX: 0000000000865469 [ 621.275795][ C1] RDX: 0000000000000001 RSI: ffff88823bc20000 RDI: ffff88823bc20064 [ 621.283815][ C1] RBP: 000000000003a538 R08: ffff8880b9537ccb R09: 1ffff110172a6f99 [ 621.291927][ C1] R10: dffffc0000000000 R11: ffffffff8b7d68c0 R12: ffff88801a7ee800 [ 621.300046][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eabb740 [ 621.308069][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 621.317134][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.323787][ C1] CR2: 00007f49ef1f5866 CR3: 000000007d1ae000 CR4: 00000000003506f0 [ 621.331909][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.339913][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.347935][ C1] Call Trace: [ 621.351252][ C1] [ 621.354599][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 621.361427][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 621.367703][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 621.373590][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.378730][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 621.385048][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 621.390581][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 621.396297][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 621.401585][ C1] ? update_process_times+0x1ce/0x230 [ 621.407007][ C1] ? tick_nohz_handler+0x37c/0x500 [ 621.412381][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 621.418051][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 621.423535][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 621.429769][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 621.435563][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 621.441685][ C1] ? hrtimer_interrupt+0x396/0x990 [ 621.446905][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 621.453234][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 621.459467][ C1] [ 621.462781][ C1] [ 621.465940][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.472640][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 621.478345][ C1] ? acpi_safe_halt+0x21/0x30 [ 621.483700][ C1] acpi_idle_enter+0xe4/0x140 [ 621.488428][ C1] cpuidle_enter_state+0x112/0x480 [ 621.493589][ C1] ? __pfx_menu_select+0x10/0x10 [ 621.498574][ C1] cpuidle_enter+0x5d/0xa0 [ 621.503160][ C1] do_idle+0x375/0x5d0 [ 621.507422][ C1] ? __pfx_do_idle+0x10/0x10 [ 621.512353][ C1] cpu_startup_entry+0x42/0x60 [ 621.517282][ C1] start_secondary+0x100/0x100 [ 621.522105][ C1] common_startup_64+0x13e/0x147 [ 621.527119][ C1] [ 622.031642][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.038661][ T1248] ieee802154 phy1 wpan1: encryption failed: -22