last executing test programs: 16.359221747s ago: executing program 0 (id=2058): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_io_uring_setup(0x7eff, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x6) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {0x0}], 0x4, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x60, &(0x7f0000000300)=@string={0x60, 0x3, "ac4a6420e2017d519023e8b80840575ea056a1791ccef20df4cfc007a7c019b99ff8c7357e674d9b6175a6e74df0b0eab28dc87fe4c73a6c27157915f1308cf2fbc20b8ed95cd9473f021c8dae4f9b6dad587e34b99f54afae170a6ef996"}}]}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x8, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 14.547498332s ago: executing program 4 (id=2062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.236566967s ago: executing program 0 (id=2067): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xc0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0x2}, {0x0, 0x8}}}, 0xc0}}, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000de0000/0x2000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r7, 0x0, r7) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 12.472768319s ago: executing program 2 (id=2068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xc0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0x2}, {0x0, 0x8}}}, 0xc0}}, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000de0000/0x2000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r7, 0x0, r7) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 11.935577778s ago: executing program 0 (id=2069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.515698496s ago: executing program 4 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.326336886s ago: executing program 2 (id=2071): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x81}}}, 0x6) readahead(0xffffffffffffffff, 0xee, 0x8000000000000001) shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x0) 11.246073014s ago: executing program 2 (id=2072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.44500168s ago: executing program 3 (id=2076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) close_range(r0, r0, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, 0x0, &(0x7f00000001c0)=0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300), 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r10, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4087, 0xff7}], 0x1, 0x800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup=r9, 0xffffffffffffffff, 0x1, 0x8, r7, @void, @value=r10, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r4, r4, 0x30, 0x4, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) syz_io_uring_submit(0x0, r6, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) recvmsg(r11, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 9.9113907s ago: executing program 3 (id=2077): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_io_uring_setup(0x7eff, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x6) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {0x0}], 0x4, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x60, &(0x7f0000000300)=@string={0x60, 0x3, "ac4a6420e2017d519023e8b80840575ea056a1791ccef20df4cfc007a7c019b99ff8c7357e674d9b6175a6e74df0b0eab28dc87fe4c73a6c27157915f1308cf2fbc20b8ed95cd9473f021c8dae4f9b6dad587e34b99f54afae170a6ef996"}}]}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x8, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.831631928s ago: executing program 0 (id=2078): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x5, "f07d6043"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, 'p1'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "49ba"}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_usb_disconnect(r0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0x200) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) syz_io_uring_setup(0x27f3, 0x0, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x8000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r4) 8.44239798s ago: executing program 4 (id=2079): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.153061126s ago: executing program 2 (id=2080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.989276471s ago: executing program 1 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xb, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16], 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xe, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x37a, @void, @value}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0xd, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 6.916242842s ago: executing program 1 (id=2085): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = dup(r0) close_range(r0, r0, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4087, 0xff7}], 0x1, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) syz_io_uring_submit(0x0, r5, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 6.826277471s ago: executing program 3 (id=2086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.252337374s ago: executing program 1 (id=2087): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.751908332s ago: executing program 0 (id=2088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.397889407s ago: executing program 4 (id=2089): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xc0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0x2}, {0x0, 0x8}}}, 0xc0}}, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000de0000/0x2000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r7, 0x0, r7) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 5.128493433s ago: executing program 2 (id=2090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.425027485s ago: executing program 4 (id=2091): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/97, 0x61) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 3.753359221s ago: executing program 3 (id=2092): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0xe}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.186197318s ago: executing program 1 (id=2093): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000480)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) 3.064855831s ago: executing program 1 (id=2094): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/97, 0x61) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x0, 0x1}, {0x10, 0x9f}, 0xfffffffc}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.783731479s ago: executing program 3 (id=2095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xb, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16], 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050008020000000002000020d3"]) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xe, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x37a, @void, @value}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0xd, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 2.703534848s ago: executing program 0 (id=2096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.675140048s ago: executing program 3 (id=2097): close(0xffffffffffffffff) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9d, 0xaf, 0x49, 0x20, 0x10cf, 0x8067, 0x2c27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc3, 0x58, 0xf5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_pts(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) r2 = syz_io_uring_setup(0xd7d, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0x4) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) userfaultfd(0x801) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2.071353737s ago: executing program 2 (id=2098): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000b40)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.423353678s ago: executing program 4 (id=2099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f0000000140)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(r4, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.502293][ T29] audit: type=1326 audit(1728990016.381:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.524835][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.549184][T12946] veth1_vlan: entered promiscuous mode [ 806.588479][ T29] audit: type=1326 audit(1728990016.381:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.610924][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.685520][ T29] audit: type=1326 audit(1728990016.381:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.707906][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.721880][T12946] veth0_macvtap: entered promiscuous mode [ 806.725805][ T29] audit: type=1326 audit(1728990016.381:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.758304][ T29] audit: type=1326 audit(1728990016.381:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.784859][T12946] veth1_macvtap: entered promiscuous mode [ 806.804892][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.822558][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.836027][ T29] audit: type=1326 audit(1728990016.381:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6b97dff9 code=0x7ffc0000 [ 806.858449][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.878412][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.914198][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.956148][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.009730][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.046531][T13212] netlink: 176956 bytes leftover after parsing attributes in process `syz.4.1617'. [ 807.056084][T13212] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 807.114065][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.156346][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.193488][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.228578][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.266770][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.346733][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.410316][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.465702][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.545753][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.655069][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.749250][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.770295][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.789730][ T5280] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 807.811665][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.852518][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.891120][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.937856][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.972199][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 808.037073][T12946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.046264][ T5280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 808.090175][T12946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.105930][T12946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.116048][T12946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.132828][ T5280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 808.149113][T13016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.186316][ T5280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.231786][T13016] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.242840][ T5280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 808.274962][ T5280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 808.284111][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.293309][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.319958][ T5280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.347082][ T5280] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 808.367537][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.374740][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.379958][ T5280] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 808.393489][T13242] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 808.434170][T13241] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1621'. [ 808.489406][ T5280] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.571396][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.575845][ T5280] usb 5-1: string descriptor 0 read error: -22 [ 808.595869][ T5280] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 808.614091][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.628415][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.684991][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.685989][ T5280] adutux 5-1:168.0: interrupt endpoints not found [ 808.731800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.772623][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.905851][T13016] veth0_vlan: entered promiscuous mode [ 808.928530][T13016] veth1_vlan: entered promiscuous mode [ 808.964662][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.971190][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.058378][T13016] veth0_macvtap: entered promiscuous mode [ 809.113115][T13016] veth1_macvtap: entered promiscuous mode [ 809.155970][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.212901][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.231897][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.261854][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.272000][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.282708][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.292785][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.303389][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.313271][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.325505][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.335437][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.346524][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.356717][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.365332][T13270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 809.367280][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.387665][T13271] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 809.417948][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.446145][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.467427][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.501417][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.524289][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.564016][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.586075][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.609938][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.625883][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.651091][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.691956][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.701935][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.712850][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.751890][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.766875][ T5280] usb 5-1: USB disconnect, device number 63 [ 809.829439][T13016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.850720][T13016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.926793][T13016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.976286][T13016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.237751][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.245696][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.338221][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.349402][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.460064][T13302] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 810.699656][ T8549] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 810.874948][T13320] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 810.961707][ T8549] usb 2-1: Using ep0 maxpacket: 8 [ 811.002030][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 811.033401][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 811.103644][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.195930][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 811.241603][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 811.294238][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 811.304576][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 811.323701][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.337661][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 811.351377][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 811.499698][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 811.507164][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 811.518607][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.530356][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 811.541488][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 811.562206][ T8549] usb 2-1: string descriptor 0 read error: -22 [ 811.568497][ T8549] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 811.578432][ T8549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.602147][ T8549] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 811.862498][T13300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.948637][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'. [ 812.080883][T13300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.127423][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 812.262968][ T5293] usb 2-1: USB disconnect, device number 74 [ 812.285171][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 812.285191][ T29] audit: type=1326 audit(1728990022.311:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.355733][ T29] audit: type=1326 audit(1728990022.321:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.378174][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.395245][ T29] audit: type=1326 audit(1728990022.321:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.608576][ T29] audit: type=1326 audit(1728990022.321:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.634501][ T29] audit: type=1326 audit(1728990022.321:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.658103][ T29] audit: type=1326 audit(1728990022.321:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.681029][ T29] audit: type=1326 audit(1728990022.321:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.704293][ T29] audit: type=1326 audit(1728990022.321:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.727697][ T29] audit: type=1326 audit(1728990022.321:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.750569][ T29] audit: type=1326 audit(1728990022.321:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 812.832449][T13350] netlink: 176956 bytes leftover after parsing attributes in process `syz.3.1635'. [ 812.892257][T13350] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 813.075155][T13366] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 813.309496][ T5279] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 813.459647][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 813.491487][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.529380][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 813.557916][T13380] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 813.659795][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.844612][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.910285][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.968738][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.976560][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.028330][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.063715][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.075057][ T5288] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 814.111556][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.129842][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.147805][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.183890][ T5279] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.199022][T13390] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1642'. [ 814.218458][T13390] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 814.229172][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.240635][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.252170][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 814.338845][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 814.347519][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.372269][ T5279] usb 3-1: string descriptor 0 read error: -22 [ 814.378553][ T5279] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 814.409605][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.422201][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.436397][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.464905][ T5279] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 814.476487][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.515818][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 814.530151][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.553506][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.569627][ T5294] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 814.579341][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.607789][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.630589][ T5288] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 814.638262][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.695477][ T5288] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.739438][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 814.746133][ T5294] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 814.757246][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.757725][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.773972][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.813677][T13419] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 814.844233][ T5294] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 814.859908][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.878349][ T5288] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.897322][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.910362][ T5288] usb 5-1: string descriptor 0 read error: -22 [ 814.911132][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.917248][ T5288] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 814.997984][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.078450][ T5294] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 815.089894][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 815.102688][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.116098][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.134351][ T5294] usb 2-1: string descriptor 0 read error: -22 [ 815.189138][ T5288] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 815.208208][ T5294] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 815.217580][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.242238][ T5294] adutux 2-1:168.0: interrupt endpoints not found [ 815.548862][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.558221][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.575396][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.655992][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.791399][ T5288] usb 2-1: USB disconnect, device number 75 [ 815.905337][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 816.195793][ T5279] usb 5-1: USB disconnect, device number 64 [ 816.283135][ T5288] usb 3-1: USB disconnect, device number 67 [ 816.631904][T13448] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1652'. [ 816.769884][T13448] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 818.469371][ T5294] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 818.520204][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 818.619652][ T5294] usb 1-1: Using ep0 maxpacket: 8 [ 818.626241][ T5294] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 818.634059][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 818.645674][ T5294] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 818.746034][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 818.787828][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 818.835534][ T5294] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 818.859788][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 818.907527][ T5294] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 818.909605][T13495] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 818.935519][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 818.972005][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 818.995844][ T5294] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 819.006151][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 819.019058][ T5294] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 819.032289][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 819.047014][ T5294] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 819.068114][ T5294] usb 1-1: string descriptor 0 read error: -22 [ 819.087957][ T5294] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 819.111624][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.164255][ T5294] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 819.569613][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.672432][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.022294][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 820.022310][ T29] audit: type=1326 audit(1728990030.051:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.100169][ T29] audit: type=1326 audit(1728990030.081:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.184604][ T29] audit: type=1326 audit(1728990030.091:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.217382][ T29] audit: type=1326 audit(1728990030.091:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.268519][ T29] audit: type=1326 audit(1728990030.091:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.368527][ T29] audit: type=1326 audit(1728990030.091:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.468032][ T29] audit: type=1326 audit(1728990030.091:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.490538][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.535515][ T29] audit: type=1326 audit(1728990030.091:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.572108][ T29] audit: type=1326 audit(1728990030.091:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.579408][ T5294] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 820.640356][ T29] audit: type=1326 audit(1728990030.091:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.3.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcfb7dff9 code=0x7ffc0000 [ 820.819413][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 820.833027][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 820.833928][T13507] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1664'. [ 820.869974][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 820.882444][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.895792][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.901747][T13507] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 820.915481][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 820.929704][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 820.937556][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 820.949987][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.962380][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.980109][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 821.037808][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 821.049129][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 821.060685][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 821.073154][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 821.086060][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 821.102634][ T5294] usb 5-1: string descriptor 0 read error: -22 [ 821.110945][ T5294] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 821.120622][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.133999][ T5294] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 821.211180][ T9] usb 1-1: USB disconnect, device number 74 [ 821.392573][T13512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.407963][T13512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.515123][ T5294] usb 5-1: USB disconnect, device number 65 [ 821.741735][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 821.857407][T13527] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 821.969449][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 821.980561][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 822.007931][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 822.082466][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.248981][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.288617][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.353567][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 822.399386][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 822.435794][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.480283][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.539483][ T5279] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 822.547120][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.623556][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 822.637708][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 822.653199][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.678271][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.690836][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.706399][ T9] usb 4-1: string descriptor 0 read error: -22 [ 822.724154][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 822.741286][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 822.795928][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 822.836408][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.859105][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 822.895914][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 822.961701][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.029897][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.065933][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.106838][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 823.154108][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 823.238153][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.284680][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.322886][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.345388][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.372545][ T5279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 823.385228][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.409542][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 823.479641][ T5279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.640782][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.666643][ T5279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.760204][ T5279] usb 5-1: string descriptor 0 read error: -22 [ 823.825780][ T5279] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 823.835125][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.853219][ T5279] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 824.178200][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.236550][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.504675][ T5279] usb 5-1: USB disconnect, device number 66 [ 824.767067][T13552] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1676'. [ 824.767451][ T5279] usb 4-1: USB disconnect, device number 61 [ 824.799392][T13552] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 825.097611][T13562] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1678'. [ 825.269440][ T5294] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 825.479415][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 825.495018][ T5294] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 825.505309][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.525616][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.548793][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.573377][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.605432][ T5294] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 825.615269][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.670402][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.714507][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.746116][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.770295][ T5294] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 825.779300][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.798695][ T5294] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.819030][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.876838][ T5294] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.929763][ T5279] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 825.942308][ T5294] usb 2-1: string descriptor 0 read error: -22 [ 825.950965][ T5294] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 825.969688][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.016764][ T5294] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 826.134458][T13574] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 826.172296][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 826.227289][ T5279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 826.273062][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.328482][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.345586][ T5279] usb 3-1: Product: syz [ 826.396740][ T5279] usb 3-1: Manufacturer: syz [ 826.401477][ T5279] usb 3-1: SerialNumber: syz [ 826.402138][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.408145][ T5279] usb 3-1: config 0 descriptor?? [ 826.635164][ T5279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 826.966537][T13582] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1683'. [ 828.146581][ T5281] usb 2-1: USB disconnect, device number 76 [ 828.381352][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 828.668532][T13608] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 829.095861][ T5279] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 829.139381][ T5279] usb 3-1: USB disconnect, device number 68 [ 829.577281][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 830.052474][T13627] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 831.035483][ T5293] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 831.269424][ T5293] usb 2-1: Using ep0 maxpacket: 8 [ 831.318920][ T5293] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 831.339821][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.386068][ T5293] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.420216][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.445076][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.467715][ T5293] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 831.486824][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.517042][ T5293] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.534693][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.546139][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.565563][ T5293] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 831.590188][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.608961][ T5293] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.645079][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.664293][ T5293] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.695037][ T5293] usb 2-1: string descriptor 0 read error: -22 [ 831.711723][ T5293] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 831.740025][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.754032][ T5294] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 831.794892][ T5293] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 831.869441][ T5280] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 831.909468][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 831.916918][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 831.929605][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.950150][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.974869][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.987947][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.013235][ T8549] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 832.027637][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 832.039565][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 832.047862][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 832.059501][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.077671][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.096275][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.107434][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.122340][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.142529][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.158216][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.174631][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.186550][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.198054][ T8549] usb 1-1: Using ep0 maxpacket: 8 [ 832.210511][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.214131][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 832.226012][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 832.242398][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.257287][ T8549] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 832.267817][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.284302][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.296889][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.318556][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.330407][ T8549] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.350306][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.368249][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.380657][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.408449][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.425254][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.437009][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.466700][ T5294] usb 3-1: string descriptor 0 read error: -22 [ 832.479760][ T5280] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 832.490077][ T8549] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 832.497779][ T5294] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 832.512272][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.528802][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.549686][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.558937][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.580226][ T8549] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.610979][ T5294] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 832.647119][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.693609][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 832.803867][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.829527][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 832.863433][ T5280] usb 4-1: string descriptor 0 read error: -22 [ 832.875123][ T5280] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 832.900094][ T8549] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 832.921549][T13635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.932797][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.944645][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.959838][ T8549] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.980719][ T5280] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 832.999793][T13635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.022866][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.042665][ T8549] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.060892][ T8549] usb 1-1: string descriptor 0 read error: -22 [ 833.067394][ T8549] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 833.076794][ T8549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.101625][ T8549] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux3 [ 833.166198][T13647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1700'. [ 833.200844][ T5279] usb 3-1: USB disconnect, device number 69 [ 833.225124][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.258849][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.358736][ T5281] usb 4-1: USB disconnect, device number 62 [ 833.417214][T13640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.436227][T13640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.558843][ T8549] usb 1-1: USB disconnect, device number 75 [ 833.808125][ T8549] usb 2-1: USB disconnect, device number 77 [ 833.875161][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 833.875181][ T29] audit: type=1326 audit(1728990043.901:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 833.908770][ T29] audit: type=1326 audit(1728990043.901:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 833.934318][ T29] audit: type=1326 audit(1728990043.901:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 833.957812][ T29] audit: type=1326 audit(1728990043.901:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.005605][ T29] audit: type=1326 audit(1728990043.901:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.028598][ T29] audit: type=1326 audit(1728990043.911:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.051399][ T29] audit: type=1326 audit(1728990043.911:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.073958][ T29] audit: type=1326 audit(1728990043.911:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.096492][ T29] audit: type=1326 audit(1728990043.911:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.119022][ T29] audit: type=1326 audit(1728990043.911:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 834.158421][ T5281] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 834.182074][T13657] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1702'. [ 834.191762][T13657] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 834.240272][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 834.319492][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 834.326068][ T5281] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 834.334366][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.346360][ T5281] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.358141][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.369359][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.382675][ T5281] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 834.389665][ T8549] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 834.390190][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.408942][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 834.414471][ T5281] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.426739][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.439201][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.439568][ T5279] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 834.459120][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 834.466621][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.479171][ T5281] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 834.486798][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.498158][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.509919][ T5281] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.519543][ T5294] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 834.521637][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.541802][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.553438][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.564994][ T5281] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.578798][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 834.579581][ T8549] usb 2-1: Using ep0 maxpacket: 8 [ 834.586523][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.602578][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.606499][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 834.614317][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.614349][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.616533][ T5281] usb 5-1: string descriptor 0 read error: -22 [ 834.630402][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.633315][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 834.654749][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.662848][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 834.673623][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.680337][ T5281] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 834.687201][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 834.698240][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.723914][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.733436][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 834.735496][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.742773][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.764720][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.764768][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 834.781160][ T5281] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 834.784783][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.793496][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.810559][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 834.822224][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.831821][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.841289][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.855291][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.869578][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.881489][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.881670][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.900217][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.905128][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 834.927488][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.927665][ T9] usb 4-1: string descriptor 0 read error: -22 [ 834.944085][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 834.959433][ T8549] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 834.959476][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 834.966884][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 834.988311][ T8549] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.001424][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.006766][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 835.012640][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 835.028023][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 835.041842][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.042771][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.062337][ T8549] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.072721][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 835.073670][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.098302][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 835.112356][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.119654][ T8549] usb 2-1: string descriptor 0 read error: -22 [ 835.129161][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.131614][ T8549] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 835.143416][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.158973][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.166202][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 835.175766][ T8549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.195071][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 835.198136][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 835.215895][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 835.227353][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.228719][T13665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.248923][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.259373][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.275485][ T8549] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 835.284269][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.288923][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 835.309090][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.324747][T13665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.359043][ T5279] usb 1-1: string descriptor 0 read error: -22 [ 835.360575][ T5294] usb 3-1: string descriptor 0 read error: -22 [ 835.371817][ T5294] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 835.383379][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.393731][ T5279] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 835.423029][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.428071][ T5294] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux3 [ 835.487120][ T5279] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux4 [ 835.516139][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.554227][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.635313][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.675046][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.753855][ T5294] usb 4-1: USB disconnect, device number 63 [ 835.804814][ T5280] usb 2-1: USB disconnect, device number 78 [ 835.827268][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.855736][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.856638][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.895717][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.941448][ T5279] usb 3-1: USB disconnect, device number 70 [ 836.057443][ T5294] usb 1-1: USB disconnect, device number 76 [ 836.897779][ T5294] usb 5-1: USB disconnect, device number 67 [ 837.141507][T13692] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1712'. [ 837.225225][T13682] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1709'. [ 837.317343][T13682] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 838.147239][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'. [ 838.479471][ T5294] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 838.749777][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 838.772098][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 838.848196][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 838.919437][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.969467][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.004913][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.058252][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 839.066336][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.094156][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.118631][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.139410][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.161925][ T5294] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 839.181756][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.201176][ T5294] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.224261][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.238955][ T8549] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 839.249199][ T5294] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.289577][ T5294] usb 5-1: string descriptor 0 read error: -22 [ 839.313601][ T5294] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 839.329393][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.371821][ T5294] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 839.439482][ T8549] usb 3-1: Using ep0 maxpacket: 8 [ 839.449395][ T5281] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 839.450947][ T8549] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 839.484194][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.496140][ T8549] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.500575][T13716] syzkaller0: entered promiscuous mode [ 839.515537][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.527640][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.546959][T13716] syzkaller0: entered allmulticast mode [ 839.572915][ T8549] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 839.592165][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.632089][ T8549] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.648635][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.670370][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 839.677231][ T5281] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 839.691604][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.697071][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.706799][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.735809][ T5281] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.758474][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.759844][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.795406][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.821272][ T5281] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 839.827547][ T8549] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 839.848904][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.850553][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.872553][ T5281] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.884316][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.895427][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 839.920057][ T5281] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 839.928581][ T8549] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.940234][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 839.948815][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.962911][ T5281] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 839.975517][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 839.987796][ T5281] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 840.006311][ T5281] usb 1-1: string descriptor 0 read error: -22 [ 840.013360][ T8549] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 840.048533][ T8549] usb 3-1: string descriptor 0 read error: -22 [ 840.055652][ T8549] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 840.066383][ T5281] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 840.101424][ T8549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.137024][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.158883][ T8549] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 840.246419][ T5281] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 840.542456][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.558707][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.643603][ T5279] usb 3-1: USB disconnect, device number 71 [ 840.727123][ T5281] usb 1-1: USB disconnect, device number 77 [ 841.241586][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 841.241605][ T29] audit: type=1326 audit(1728990051.271:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.313816][ T29] audit: type=1326 audit(1728990051.301:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.343197][ T29] audit: type=1326 audit(1728990051.311:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.367897][ T29] audit: type=1326 audit(1728990051.311:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.397581][ T29] audit: type=1326 audit(1728990051.311:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.424358][ T29] audit: type=1326 audit(1728990051.311:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.452632][ T29] audit: type=1326 audit(1728990051.311:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.505483][ T29] audit: type=1326 audit(1728990051.311:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.565502][ T29] audit: type=1326 audit(1728990051.311:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.632638][ T29] audit: type=1326 audit(1728990051.311:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 841.704771][T13730] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1723'. [ 841.730728][T13730] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 844.362792][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 844.449005][T13759] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1731'. [ 844.458510][T13759] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 844.489415][ T5294] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 844.509831][ T5281] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 844.640705][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 844.648007][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 844.662334][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.677390][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.689366][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 844.693954][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.710114][ T5281] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 844.717787][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.718737][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.741177][ T5281] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.753916][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.765941][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.782525][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 844.793357][ T5281] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 844.801513][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.813272][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.836605][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.848595][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.850494][ T5281] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.877233][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.889656][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.904700][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.926695][ T5294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 844.935227][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 844.947140][ T5294] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.964755][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.968247][ T5281] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 844.979345][ T5294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 844.995625][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 845.007369][ T5281] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.033621][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 845.039726][ T5294] usb 3-1: string descriptor 0 read error: -22 [ 845.058908][ T5294] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 845.078663][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.087213][ T5281] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 845.104574][ T5281] usb 2-1: string descriptor 0 read error: -22 [ 845.130595][ T5281] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 845.142869][ T5294] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 845.176656][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.260226][ T5281] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 845.444553][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.460892][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.480391][T13766] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1733'. [ 845.504135][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 845.509453][T13766] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 845.588380][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.606081][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.910006][ T5294] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 846.099479][ T5294] usb 4-1: Using ep0 maxpacket: 8 [ 846.111966][ T5294] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 846.124381][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 846.136069][ T5294] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 846.148644][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 846.161765][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 846.174576][ T5294] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 846.182305][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 846.193933][ T5294] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 846.206266][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 846.218095][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 846.238140][ T5294] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 846.245884][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 846.262437][ T5294] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 846.296711][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 846.308125][ T5294] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 846.324155][ T5294] usb 4-1: string descriptor 0 read error: -22 [ 846.330910][ T5294] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 846.341629][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.436584][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 846.618103][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.627965][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.182016][ T5281] usb 3-1: USB disconnect, device number 72 [ 847.258642][ T5294] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux3 [ 847.316829][ T9] usb 2-1: USB disconnect, device number 79 [ 848.537219][T13794] syzkaller0: entered promiscuous mode [ 848.596387][T13794] syzkaller0: entered allmulticast mode [ 848.759798][ T5280] usb 4-1: USB disconnect, device number 64 [ 848.856826][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 848.868022][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 848.889431][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 848.901678][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 848.919442][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 848.926859][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.019724][ T5231] Bluetooth: hci1: command tx timeout [ 851.353727][ T6422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.455110][ T6422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.539213][ T6422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.557361][T13799] chnl_net:caif_netlink_parms(): no params data found [ 851.617609][ T6422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.649865][ T5239] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 851.658941][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.672982][T13799] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.682752][T13799] bridge_slave_0: entered allmulticast mode [ 851.689984][T13799] bridge_slave_0: entered promiscuous mode [ 851.710430][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.718857][T13799] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.730705][T13799] bridge_slave_1: entered allmulticast mode [ 851.737697][T13799] bridge_slave_1: entered promiscuous mode [ 851.792512][T13799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.810764][ T5239] usb 1-1: Using ep0 maxpacket: 8 [ 851.831183][ T5239] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 851.847052][T13799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.849119][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.874285][ T6422] bridge_slave_1: left allmulticast mode [ 851.891310][ T6422] bridge_slave_1: left promiscuous mode [ 851.897960][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.905134][ T5239] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.917616][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.931799][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.940612][ T6422] bridge_slave_0: left allmulticast mode [ 851.951386][ T5239] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 851.959005][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 851.963056][ T6422] bridge_slave_0: left promiscuous mode [ 851.976632][ T5239] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.986326][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.006129][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.040188][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 852.055148][ T5239] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 852.063063][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 852.074810][ T5239] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.088491][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.134526][ T5239] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 852.196888][ T5239] usb 1-1: string descriptor 0 read error: -22 [ 852.220377][ T5239] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 852.237067][ T5239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.253830][ T5239] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 852.720723][T13825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.757635][T13825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.100910][ T5231] Bluetooth: hci1: command tx timeout [ 853.176135][ T6422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.197529][ T6422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.231648][ T6422] bond0 (unregistering): Released all slaves [ 853.558244][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 853.579164][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 853.616125][T13799] team0: Port device team_slave_0 added [ 853.653213][T13799] team0: Port device team_slave_1 added [ 853.750100][T13799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.761800][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.821719][T13799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.897223][ T6422] hsr_slave_0: left promiscuous mode [ 853.952667][ T6422] hsr_slave_1: left promiscuous mode [ 853.971969][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.980047][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.998542][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.027301][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.110996][ T6422] veth1_macvtap: left promiscuous mode [ 854.158340][ T6422] veth0_macvtap: left promiscuous mode [ 854.191321][ T6422] veth1_vlan: left promiscuous mode [ 854.219091][ T6422] veth0_vlan: left promiscuous mode [ 854.535658][ T8549] usb 1-1: USB disconnect, device number 78 [ 855.179416][ T5231] Bluetooth: hci1: command tx timeout [ 855.591803][ T6422] team0 (unregistering): Port device team_slave_1 removed [ 855.696852][ T6422] team0 (unregistering): Port device team_slave_0 removed [ 856.514375][T13799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.524737][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.563756][T13799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.710427][T13868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1755'. [ 856.736158][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 856.736174][ T29] audit: type=1326 audit(1728990066.761:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 856.811680][ T29] audit: type=1326 audit(1728990066.791:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 856.899372][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 856.908480][ T29] audit: type=1326 audit(1728990066.801:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 856.964360][ T29] audit: type=1326 audit(1728990066.801:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.009559][ T29] audit: type=1326 audit(1728990066.801:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.032694][ T29] audit: type=1326 audit(1728990066.801:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.055795][ T29] audit: type=1326 audit(1728990066.801:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.084536][ T29] audit: type=1326 audit(1728990066.801:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.106864][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.185129][ T29] audit: type=1326 audit(1728990066.801:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.247354][ T29] audit: type=1326 audit(1728990066.801:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58e97dff9 code=0x7ffc0000 [ 857.271227][ T5231] Bluetooth: hci1: command tx timeout [ 857.279636][T13799] hsr_slave_0: entered promiscuous mode [ 857.320008][T13799] hsr_slave_1: entered promiscuous mode [ 857.369901][T13873] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1757'. [ 857.413712][T13873] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 858.971351][T13799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.045081][T13799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.084770][T13799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.157848][T13799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 859.612308][T13799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.651737][T13799] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.664590][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.671808][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.719570][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.726731][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.864778][T13799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.948012][T13799] veth0_vlan: entered promiscuous mode [ 859.976585][T13799] veth1_vlan: entered promiscuous mode [ 860.033541][T13799] veth0_macvtap: entered promiscuous mode [ 860.066850][T13799] veth1_macvtap: entered promiscuous mode [ 860.145607][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.165661][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.177033][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.192514][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.210488][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.234553][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.258354][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.279336][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.300155][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.321090][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.331698][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.342886][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.356200][T13799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.386427][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.422723][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.448450][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.468451][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.478885][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.502781][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.534601][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.549430][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.559614][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.573871][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.591921][T13799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.607446][T13799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.622648][T13799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.641702][T13799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.661935][T13799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.694420][T13799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.703598][T13799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.838300][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.876912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.013375][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.083612][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.811095][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 862.811176][ T29] audit: type=1326 audit(1728990072.831:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 862.954039][ T29] audit: type=1326 audit(1728990072.871:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.035912][ T29] audit: type=1326 audit(1728990072.871:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.063947][ T29] audit: type=1326 audit(1728990072.881:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.096036][ T29] audit: type=1326 audit(1728990072.881:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.157011][ T29] audit: type=1326 audit(1728990072.881:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.215252][ T29] audit: type=1326 audit(1728990072.881:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.314305][ T29] audit: type=1326 audit(1728990072.881:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.370340][ T29] audit: type=1326 audit(1728990072.881:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.402950][ T29] audit: type=1326 audit(1728990072.881:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73437dff9 code=0x7ffc0000 [ 863.458678][T13976] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1772'. [ 863.476671][T13976] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 863.593674][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.615460][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.711187][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.723041][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.629182][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.638183][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.708380][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.717385][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.393726][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.400184][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.852792][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.865638][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.949758][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.968866][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.214834][T14048] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1796'. [ 875.271280][T14065] input: syz1 as /devices/virtual/input/input46 [ 875.868781][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 876.279802][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 876.279820][ T29] audit: type=1326 audit(1728990086.311:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.332434][ T29] audit: type=1326 audit(1728990086.341:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.365804][ T29] audit: type=1326 audit(1728990086.341:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.402311][ T29] audit: type=1326 audit(1728990086.341:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.427522][ T29] audit: type=1326 audit(1728990086.341:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.451955][ T29] audit: type=1326 audit(1728990086.341:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.476427][T14081] input: syz1 as /devices/virtual/input/input47 [ 876.496154][ T29] audit: type=1326 audit(1728990086.341:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.539176][ T29] audit: type=1326 audit(1728990086.341:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.570232][ T29] audit: type=1326 audit(1728990086.341:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.594158][ T29] audit: type=1326 audit(1728990086.341:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9fbf7dff9 code=0x7ffc0000 [ 876.748591][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.760283][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.843223][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.878809][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.751380][T14108] input: syz1 as /devices/virtual/input/input48 [ 884.178007][T14137] input: syz1 as /devices/virtual/input/input49 [ 885.495917][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 885.617508][T14149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.627949][T14149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.708288][T14152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.729796][T14152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.302020][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 896.182337][T14222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.216643][T14222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.304545][T14223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.317529][T14223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.074800][T14231] input: syz1 as /devices/virtual/input/input50 [ 897.481430][T14235] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1858'. [ 897.807204][ T5231] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 897.880143][T14241] input: syz1 as /devices/virtual/input/input51 [ 899.254572][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.274320][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.358944][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.386047][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.820519][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1866'. [ 902.409343][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.479145][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.778714][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.928690][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.026250][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.112490][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.127520][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.142465][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.153030][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.163766][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.175970][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 903.187752][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.327191][T14292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.337173][T14292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.345507][ T52] bridge_slave_1: left allmulticast mode [ 903.352661][ T52] bridge_slave_1: left promiscuous mode [ 903.358367][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.367492][ T52] bridge_slave_0: left allmulticast mode [ 903.373517][ T52] bridge_slave_0: left promiscuous mode [ 903.379374][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.732794][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.744458][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.755684][ T52] bond0 (unregistering): (slave team0): Releasing backup interface [ 903.771952][ T52] bond0 (unregistering): Released all slaves [ 903.784612][ T52] bond1 (unregistering): Released all slaves [ 903.804831][T14293] hsr0: entered promiscuous mode [ 903.816480][T14293] hsr0: left promiscuous mode [ 903.902476][ T52] tipc: Disabling bearer [ 903.919932][ T52] tipc: Left network mode [ 904.128525][T14290] chnl_net:caif_netlink_parms(): no params data found [ 904.171913][ T52] hsr_slave_0: left promiscuous mode [ 904.178134][ T52] hsr_slave_1: left promiscuous mode [ 904.185046][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.192835][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.200819][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.208408][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.232383][ T52] veth1_macvtap: left promiscuous mode [ 904.238874][ T52] veth0_macvtap: left promiscuous mode [ 904.249064][ T52] veth1_vlan: left promiscuous mode [ 904.254478][ T52] veth0_vlan: left promiscuous mode [ 904.767118][ T52] team0 (unregistering): Port device team_slave_1 removed [ 904.823990][ T52] team0 (unregistering): Port device team_slave_0 removed [ 905.260207][ T5231] Bluetooth: hci4: command tx timeout [ 905.834007][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.852658][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.863661][T14290] bridge_slave_0: entered allmulticast mode [ 905.894061][T14290] bridge_slave_0: entered promiscuous mode [ 905.979712][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.986842][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.040240][T14290] bridge_slave_1: entered allmulticast mode [ 906.097906][T14290] bridge_slave_1: entered promiscuous mode [ 906.416446][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.792030][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.339502][ T5231] Bluetooth: hci4: command tx timeout [ 907.477020][T14290] team0: Port device team_slave_0 added [ 907.587852][T14290] team0: Port device team_slave_1 added [ 907.703047][T14348] input: syz1 as /devices/virtual/input/input52 [ 908.101757][T14353] input: syz1 as /devices/virtual/input/input53 [ 908.129115][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.137089][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.209429][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.250779][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.258642][T14314] syz.0.1880 (14314) used greatest stack depth: 17616 bytes left [ 908.290582][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.422406][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.533226][T14290] hsr_slave_0: entered promiscuous mode [ 908.550366][T14290] hsr_slave_1: entered promiscuous mode [ 908.574190][T14290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.589552][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.591299][T14290] Cannot create hsr debugfs directory [ 908.619074][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.309040][T14290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 909.348976][T14290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 909.378632][T14290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 909.398085][T14290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 909.419480][ T54] Bluetooth: hci4: command tx timeout [ 909.544658][T14290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.611420][T14290] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.679967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.687118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.703028][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.710183][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.848714][T14290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.918289][T14290] veth0_vlan: entered promiscuous mode [ 909.938396][T14290] veth1_vlan: entered promiscuous mode [ 909.983313][T14290] veth0_macvtap: entered promiscuous mode [ 909.996365][T14290] veth1_macvtap: entered promiscuous mode [ 910.025383][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.038228][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.053534][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.070033][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.083380][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.094546][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.117997][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.136080][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.158431][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.177033][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.188072][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.206428][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.228074][T14290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.254150][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.278565][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.289106][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.300681][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.317331][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.328227][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.338515][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.356849][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.367210][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.391372][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.410265][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.429011][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.448431][T14290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.467576][T14290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.477110][T14290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.486212][T14290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.496875][T14290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.596814][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.616863][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.665568][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.674456][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.509431][ T5231] Bluetooth: hci4: command tx timeout [ 911.655065][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.686581][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.422789][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 914.763469][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.804049][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.051416][T14458] hsr0: entered promiscuous mode [ 915.159838][T14458] hsr0: left promiscuous mode [ 918.404234][ T5231] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 918.476515][T14478] input: syz1 as /devices/virtual/input/input54 [ 918.544426][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 922.688790][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.779750][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.009334][T14549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.020300][T14549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.112116][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.129167][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.338182][T14564] input: syz1 as /devices/virtual/input/input55 [ 927.459729][T13757] udevd[13757]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 927.837755][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.846785][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.157163][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.177914][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.384477][T14593] hsr0: entered promiscuous mode [ 931.399400][T14593] hsr0: left promiscuous mode [ 931.826058][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.834703][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.679146][T14611] fuse: Unknown parameter 'user_id00000000000000000000' [ 934.232934][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.255809][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.285699][T14643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.295705][T14644] fuse: Unknown parameter 'user_id00000000000000000000' [ 937.306340][T14643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.947097][T14667] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1973'. [ 940.518828][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.559579][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.240181][T14684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1977'. [ 943.528189][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.542611][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.870747][T14716] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1989'. [ 946.666495][T14724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.697845][T14724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.838574][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.883665][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.825095][T14743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1998'. [ 950.540795][T14748] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1999'. [ 951.733772][T14760] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2003'. [ 952.489668][T14773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2007'. [ 953.795618][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.805695][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.042551][T14783] hsr0: entered promiscuous mode [ 954.089905][T14783] hsr0: left promiscuous mode [ 957.160477][T14808] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2018'. [ 958.570484][T14815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.627790][T14815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.244833][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.254034][T14826] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2022'. [ 959.274665][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.317301][T14846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2031'. [ 963.445629][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.454485][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.119067][T14864] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2038'. [ 965.008451][T14869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.018363][T14869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.386647][T14875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2042'. [ 965.662802][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.700674][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.801598][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.825958][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.080246][T14891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2046'. [ 967.316013][T14895] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2047'. [ 969.604905][T14910] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2052'. [ 969.762058][T14914] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2053'. [ 970.980613][T14921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.993538][T14921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.013950][T14922] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2054'. [ 972.573934][T14939] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2059'. [ 973.442860][T14944] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2060'. [ 974.082696][T14947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.286306][T14947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.879289][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 975.295154][T14966] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2066'. [ 975.597388][T14971] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2067'. [ 976.344566][T14975] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2068'. [ 977.155495][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.171497][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.428892][T14982] hsr0: entered promiscuous mode [ 977.436146][T14982] hsr0: left promiscuous mode [ 980.208708][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.231407][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.449508][T15008] hsr0: entered promiscuous mode [ 980.488516][T15008] hsr0: left promiscuous mode [ 981.485610][T15017] fuse: Unknown parameter 'fd0x0000000000000004' [ 981.568549][ T51] hid-generic 0000:0000:0000.0015: item fetching failed at offset 0/1 [ 981.581525][ T51] hid-generic 0000:0000:0000.0015: probe with driver hid-generic failed with error -22 [ 983.305318][T15033] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2089'. [ 984.177246][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.186212][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.254974][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.264051][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.482118][T15045] fuse: Unknown parameter 'fd0x0000000000000004' [ 987.221141][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.231096][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.779627][ T30] INFO: task syz.4.1717:13708 blocked for more than 143 seconds. [ 988.796947][ T30] Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 988.806288][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.815204][ T30] task:syz.4.1717 state:D stack:25856 pid:13708 tgid:13707 ppid:11065 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.827085][ T30] Call Trace: [ 988.830785][ T30] [ 988.834000][ T30] __schedule+0x1895/0x4b30 [ 988.839041][ T30] ? __pfx___schedule+0x10/0x10 [ 988.844494][ T30] ? __pfx_lock_release+0x10/0x10 [ 988.850154][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 988.872098][ T30] ? kobject_put+0x446/0x480 [ 988.879530][ T30] ? schedule+0x90/0x320 [ 988.895659][ T30] schedule+0x14b/0x320 [ 988.903562][ T30] usb_kill_urb+0x1c9/0x300 [ 988.951477][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 988.968938][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 988.990510][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 988.996924][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 989.030354][ T30] adu_release+0x23a/0x870 [ 989.034948][ T30] ? __pfx_adu_release+0x10/0x10 [ 989.048860][ T30] ? __pfx_call_rcu+0x10/0x10 [ 989.058192][ T30] ? evm_file_release+0x13d/0x1c0 [ 989.079298][ T30] ? __pfx_adu_release+0x10/0x10 [ 989.084330][ T30] __fput+0x23f/0x880 [ 989.088412][ T30] task_work_run+0x24f/0x310 [ 989.093154][ T30] ? __pfx_task_work_run+0x10/0x10 [ 989.098314][ T30] ? switch_task_namespaces+0xe4/0x110 [ 989.104002][ T30] do_exit+0xa2f/0x28e0 [ 989.108211][ T30] ? __pfx_do_exit+0x10/0x10 [ 989.112891][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 989.118308][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.124408][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 989.130840][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 989.135992][ T30] do_group_exit+0x207/0x2c0 [ 989.140701][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.145940][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 989.151289][ T30] get_signal+0x16a3/0x1740 [ 989.155831][ T30] ? __pfx_get_signal+0x10/0x10 [ 989.161276][ T30] arch_do_signal_or_restart+0x96/0x860 [ 989.167374][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 989.173639][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.179961][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 989.185729][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 989.191419][ T30] do_syscall_64+0x100/0x230 [ 989.196041][ T30] ? clear_bhb_loop+0x35/0x90 [ 989.200909][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.206889][ T30] RIP: 0033:0x7faa6b97dff9 [ 989.211525][ T30] RSP: 002b:00007faa6c7dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 989.220056][ T30] RAX: fffffffffffffffc RBX: 00007faa6bb35f80 RCX: 00007faa6b97dff9 [ 989.228052][ T30] RDX: 0000000000000061 RSI: 0000000020000180 RDI: 0000000000000004 [ 989.236118][ T30] RBP: 00007faa6b9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 989.244177][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.252247][ T30] R13: 0000000000000000 R14: 00007faa6bb35f80 R15: 00007faa6bc5fa28 [ 989.260323][ T30] [ 989.264263][ T30] [ 989.264263][ T30] Showing all locks held in the system: [ 989.272095][ T30] 6 locks held by kworker/0:1/9: [ 989.277072][ T30] #0: ffff888020efb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.288588][ T30] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.300606][ T30] #2: ffff88814471b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 989.309689][ T30] #3: ffff888011e8a190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 989.318981][ T30] #4: ffff8880212bf160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 989.329813][ T30] #5: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 989.339139][ T30] 1 lock held by khungtaskd/30: [ 989.344196][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 989.354287][ T30] 2 locks held by klogd/4674: [ 989.358994][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 989.369629][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 989.381724][ T30] 2 locks held by getty/4982: [ 989.386436][ T30] #0: ffff88814cdf00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 989.396508][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 989.406848][ T30] 6 locks held by kworker/1:5/5280: [ 989.412130][ T30] #0: ffff888020efb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.423697][ T30] #1: ffffc90004187d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.435794][ T30] #2: ffff88802871d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 989.444831][ T30] #3: ffff88805bcfe190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 989.454261][ T30] #4: ffff888064b86160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 989.465112][ T30] #5: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 989.475070][ T30] 6 locks held by kworker/0:4/5281: [ 989.480820][ T30] #0: ffff888020efb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.492289][ T30] #1: ffffc90004197d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.504457][ T30] #2: ffff88814471d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 989.513508][ T30] #3: ffff888061180190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 989.522890][ T30] #4: ffff888058f4c160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 989.533550][ T30] #5: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 989.542964][ T30] 6 locks held by kworker/1:0/8549: [ 989.548201][ T30] #0: ffff888020efb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.559717][ T30] #1: ffffc900032dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.572182][ T30] #2: ffff8881443ef190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 989.581785][ T30] #3: ffff888044a75190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 989.591203][ T30] #4: ffff88802518b160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 989.601882][ T30] #5: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 989.611269][ T30] 1 lock held by syz.4.1717/13708: [ 989.616417][ T30] #0: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 989.625570][ T30] 3 locks held by syz-executor/13799: [ 989.631050][ T30] #0: ffff8880697b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 989.641240][ T30] #1: ffff8880697b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 989.651115][ T30] #2: ffffffff8fe3eda8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 989.661293][ T30] 2 locks held by kworker/0:0/13944: [ 989.666639][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 989.678230][ T30] #1: ffffc900043b7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 989.689299][ T30] 1 lock held by syz.3.2097/15053: [ 989.694454][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 989.705619][ T30] 3 locks held by syz.2.2098/15055: [ 989.710892][ T30] #0: ffff888032b44d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 989.720919][ T30] #1: ffff888032b44078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 989.730717][ T30] #2: ffffffff8fe3eda8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 989.740887][ T30] 2 locks held by syz.4.2099/15057: [ 989.746106][ T30] #0: ffffffff8f5ac0d0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 989.755166][ T30] #1: ffffffff8f685ae8 (adutux_mutex){+.+.}-{3:3}, at: adu_open+0x54/0x7d0 [ 989.764078][ T30] [ 989.766435][ T30] ============================================= [ 989.766435][ T30] [ 989.775643][ T30] NMI backtrace for cpu 1 [ 989.780008][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 989.790537][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 989.800622][ T30] Call Trace: [ 989.803918][ T30] [ 989.806867][ T30] dump_stack_lvl+0x241/0x360 [ 989.811587][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.816788][ T30] ? __pfx__printk+0x10/0x10 [ 989.821446][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 989.826413][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 989.831912][ T30] ? _printk+0xd5/0x120 [ 989.836095][ T30] ? __pfx__printk+0x10/0x10 [ 989.840703][ T30] ? __wake_up_klogd+0xcc/0x110 [ 989.845584][ T30] ? __pfx__printk+0x10/0x10 [ 989.850200][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 989.855249][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 989.861264][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 989.867255][ T30] watchdog+0xff4/0x1040 [ 989.871534][ T30] ? watchdog+0x1ea/0x1040 [ 989.875967][ T30] ? __pfx_watchdog+0x10/0x10 [ 989.880663][ T30] kthread+0x2f0/0x390 [ 989.884757][ T30] ? __pfx_watchdog+0x10/0x10 [ 989.889446][ T30] ? __pfx_kthread+0x10/0x10 [ 989.894060][ T30] ret_from_fork+0x4b/0x80 [ 989.898501][ T30] ? __pfx_kthread+0x10/0x10 [ 989.903110][ T30] ret_from_fork_asm+0x1a/0x30 [ 989.907923][ T30] [ 989.911756][ T30] Sending NMI from CPU 1 to CPUs 0: [ 989.918209][ C0] NMI backtrace for cpu 0 [ 989.918223][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 989.918245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 989.918257][ C0] Workqueue: bat_events batadv_nc_worker [ 989.918371][ C0] RIP: 0010:__lock_acquire+0x5e7/0x2050 [ 989.918401][ C0] Code: 41 8b 1f 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 88 2c 94 be 08 00 00 00 e8 b1 37 8e 00 48 0f a3 1d 69 25 bc 12 <73> 26 48 69 c3 c8 00 00 00 48 8d 98 c0 06 c4 93 48 ba 00 00 00 00 [ 989.918429][ C0] RSP: 0018:ffffc900001178f0 EFLAGS: 00000057 [ 989.918444][ C0] RAX: 0000000000000001 RBX: 0000000000000022 RCX: ffffffff8170628f [ 989.918474][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c8800 [ 989.918487][ C0] RBP: 0000000000000002 R08: ffffffff942c8807 R09: 1ffffffff2859100 [ 989.918500][ C0] R10: dffffc0000000000 R11: fffffbfff2859101 R12: ffff88801befda00 [ 989.918514][ C0] R13: 0000000000000022 R14: 1ffff110037dfcaa R15: ffff88801befe550 [ 989.918528][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 989.918543][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.918556][ C0] CR2: 00005609f28f6220 CR3: 000000000e734000 CR4: 00000000003526f0 [ 989.918573][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 989.918585][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 989.918596][ C0] Call Trace: [ 989.918603][ C0] [ 989.918611][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 989.918633][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 989.918661][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 989.918689][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 989.918714][ C0] ? nmi_handle+0x14f/0x5a0 [ 989.918733][ C0] ? nmi_handle+0x2a/0x5a0 [ 989.918763][ C0] ? __lock_acquire+0x5e7/0x2050 [ 989.918788][ C0] ? default_do_nmi+0x63/0x160 [ 989.918809][ C0] ? exc_nmi+0x123/0x1f0 [ 989.918829][ C0] ? end_repeat_nmi+0xf/0x53 [ 989.918848][ C0] ? __lock_acquire+0x5df/0x2050 [ 989.918873][ C0] ? __lock_acquire+0x5e7/0x2050 [ 989.918897][ C0] ? __lock_acquire+0x5e7/0x2050 [ 989.918923][ C0] ? __lock_acquire+0x5e7/0x2050 [ 989.918947][ C0] [ 989.918953][ C0] [ 989.918965][ C0] lock_acquire+0x1ed/0x550 [ 989.918989][ C0] ? batadv_nc_worker+0xcb/0x610 [ 989.919013][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 989.919038][ C0] ? batadv_nc_worker+0xcb/0x610 [ 989.919059][ C0] ? __pfx_lock_release+0x10/0x10 [ 989.919086][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.919113][ C0] batadv_nc_worker+0xec/0x610 [ 989.919134][ C0] ? batadv_nc_worker+0xcb/0x610 [ 989.919155][ C0] ? batadv_nc_worker+0xcb/0x610 [ 989.919177][ C0] ? process_scheduled_works+0x976/0x1850 [ 989.919227][ C0] process_scheduled_works+0xa63/0x1850 [ 989.919266][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 989.919298][ C0] ? assign_work+0x364/0x3d0 [ 989.919327][ C0] worker_thread+0x870/0xd30 [ 989.919370][ C0] ? __kthread_parkme+0x169/0x1d0 [ 989.919401][ C0] ? __pfx_worker_thread+0x10/0x10 [ 989.919430][ C0] kthread+0x2f0/0x390 [ 989.919451][ C0] ? __pfx_worker_thread+0x10/0x10 [ 989.919479][ C0] ? __pfx_kthread+0x10/0x10 [ 989.919500][ C0] ret_from_fork+0x4b/0x80 [ 989.919529][ C0] ? __pfx_kthread+0x10/0x10 [ 989.919550][ C0] ret_from_fork_asm+0x1a/0x30 [ 989.919585][ C0] [ 989.932189][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 989.932209][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 989.932237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 989.932252][ T30] Call Trace: [ 989.932262][ T30] [ 989.932273][ T30] dump_stack_lvl+0x241/0x360 [ 989.932306][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.932331][ T30] ? __pfx__printk+0x10/0x10 [ 989.932364][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.932409][ T30] ? vscnprintf+0x5d/0x90 [ 989.932441][ T30] panic+0x349/0x880 [ 989.932476][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 989.932508][ T30] ? __pfx_panic+0x10/0x10 [ 989.932539][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 989.932602][ T30] ? __irq_work_queue_local+0x137/0x410 [ 989.932643][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 989.932668][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 989.932698][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 989.932730][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 989.932763][ T30] watchdog+0x1033/0x1040 [ 989.932796][ T30] ? watchdog+0x1ea/0x1040 [ 989.932835][ T30] ? __pfx_watchdog+0x10/0x10 [ 989.932866][ T30] kthread+0x2f0/0x390 [ 989.932889][ T30] ? __pfx_watchdog+0x10/0x10 [ 989.932921][ T30] ? __pfx_kthread+0x10/0x10 [ 989.932945][ T30] ret_from_fork+0x4b/0x80 [ 989.932979][ T30] ? __pfx_kthread+0x10/0x10 [ 989.933003][ T30] ret_from_fork_asm+0x1a/0x30 [ 989.933048][ T30] [ 990.403486][ T30] Kernel Offset: disabled [ 990.407838][ T30] Rebooting in 86400 seconds..