last executing test programs: 7.182816841s ago: executing program 2 (id=1087): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f00000000c0)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 7.103315508s ago: executing program 2 (id=1088): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}}]}, 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 6.195317055s ago: executing program 4 (id=1089): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=""/89) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="27470ced3d2b92a9bec30dccf995583846e56b4deb1d6209bf006c2bdcb3e4efa81040", 0x23}, {&(0x7f0000000200)="bec5d6888b54de7575a98bed496a83c66fa6424a", 0x14}], 0x2, 0x0, 0x0, 0x20000000}, 0xc000401) fsopen(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001580)=""/4096, 0x1000, 0x0) sendmmsg$alg(r3, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="31ab732abda0ad89281b2f0df75394f09d985dd88bd336d236badceecf9ebad6deec5e01719baf69fd8bc43b57e2f5b16ade367cb54ffcc32e05471802c7950ae6379e85ef52b5ad39fa52ec8baa546d0463d6f353c0df6af4d3adb451aa8e20b3885fc7e5bc06ddb24132ab4db0e7b25ccd34a2a29a400d2c9a7510", 0x7c}, {&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd25f7adabff10c56381424f96521b18ab8e2a5f92b0fc2997ff7102298726aff76f6f46139d32dadd2bf29ffa86c4902dc74bb62d15481c333ccb19d37853c99140df835", 0x85}], 0x2}], 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x745a8712, 0x0, 0xffffffffffffd104}) close_range(r6, 0xffffffffffffffff, 0x0) 6.013817017s ago: executing program 2 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) chdir(0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(0xffffffffffffffff, 0x5432, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 5.966853696s ago: executing program 1 (id=1094): r0 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000800)={0x0, 0x0, 0x2, {0xb, @raw_data="8376f0054016439a7b94bd243aba4c9792e1c85d5ef6e9ab17bffcb8a32c64f39829a71a2f8f50692c2c9530d05520d9b80673f66e5e604d7c3e3fd3a35501cb654ff0d7d8ae4bd57589c7d0b87bceb4db08c9e16ffe2e782acc13846a9b1cf8cb72e5e0c3c61b706b2b4b6f1561407ef2d66817046b109ab09da255c3a51de88a7d094c1fb6d8d26d2e5a00006e8808400123dbdb2c79c7477daa01837921684cbac9a56c9a3c715b6bbc7aa56e131dbb26a0450f1d5b3c659710ef659e3c6d00"}}) 4.758270176s ago: executing program 0 (id=1095): r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x1d0}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.653960965s ago: executing program 2 (id=1097): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x3930) 4.647638025s ago: executing program 1 (id=1098): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) open(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4}) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r1}) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) 4.580594673s ago: executing program 1 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000dc0)="801904460f0836440fc76e0a6766470fc730f083ac9f054900000048b836a6fe72000000000f23d00f21f8352000000e0f23f866baf80cb828bd708bef66bafc0c66ed43dfbf2f000000410f01cac46179294e00", 0x54}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.430295965s ago: executing program 0 (id=1100): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x0, 0x0, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_open_procfs$pagemap(0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x6e6bb9, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x0) getpriority(0x2, r0) socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_procfs(r0, &(0x7f0000000640)='net/ptype\x00') read$FUSE(r7, &(0x7f0000000f80)={0x2020}, 0x2020) 4.395995405s ago: executing program 4 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 3.089725551s ago: executing program 0 (id=1103): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x8, 0x0, "35601c4c12a721ef276834eb68e474de4327a7cb183af205860852654612aa82119ffd885d84aed58546600231148297b87bd547fe1ecde98db59c0cfba8ee"}, 0x60) 3.088463049s ago: executing program 3 (id=1104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) 3.065934992s ago: executing program 2 (id=1105): kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}, {0x0}], 0x0) 2.93049975s ago: executing program 4 (id=1106): sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.709020804s ago: executing program 3 (id=1107): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r3, &(0x7f0000000040)={'#-', 0x20, 0xcd}, 0x2e) 2.708402548s ago: executing program 4 (id=1108): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 2.646453338s ago: executing program 0 (id=1109): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x10000000000001dd) 2.637280854s ago: executing program 1 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) read$FUSE(r4, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="a5ad86773ea3f35185012c14d3c8465dd18a67f734e103057af803e393bb84b4c5f3ae9f05108954a1f6cab83a71ffcebfc4c22cf08eab03b069c11638e8a1cf3e365a4f95ba87d5c4a4986904db9022a74959b4d68bd2d40db0b058862556cf1ded5abe050782ef99f33c352e494407f16160730d9e6fe95e42595c499a11f27d7d6c3ca05c75f7f42e1b74941efd4fb8f90b11d26962b125a3e990f9bf9aeec32a17f1b1a5d624755edc3461379e0bdf0067a4ea52538bcadec95df4d53598def1c6a0b65dde20d8e32517b66a5d0726f4da53b17456e1543d11a3271bcfdd4ca4e640ab56f533a266498540752e615b25d15937df25f6da29ecddb9d32664b20c13acd4c6d03d621ad1ad28065466360869349f19653faf8b13e12030dbc28fffe9c7fa0bee63b03a0859da3cfff249bc14228607eaf030f5023bf7b171686d0b8c0d31d6d3013f3883846ffb0ecc5344784d2ae4ff6d1503fc6159799088b81107f61454c7b7163cdcfcb6a82d7a471a262f3a3f3cfd2fe6c7f58e699429c1a4ac7ca2791497d01ef4ab116e48ba925b668314022b1c27bea368910a46c075d598831c60071b5c8677c3df9d27f9164ca69d1d1dbd0d41330d2d4b12c07c0992087f398ab8fe9b19c7f5c48f4c8c347e18fc93cf6b4389775fb48e243d3264e4afc1ed26ddfca69e81cfd63cd04dbfe2c2d6b8499f2e1fb075c84226bc7a1efb0f19ebb89bfabb3d85374dc758f9591ace38a6fef45cecf3081f5a9ccdf77d0ddede13af89d703c199a7dfbe2aff3d9d3a9d4fcde60aefbb0abb7ae590869d767b84e0dca3b4073115348519d88028afc16240252e5d4472137d25b966b37adabcb6f01e36856f4217cf29a0d662131f093cd8185a41b01a206fb73a5df26df6ba2c3fc393ddf4f99e02678e3853ee83d19d0a4d7dc40191342c93b23e86f1edabfc3e9bd7efc0bf28a744212ced0ace896e0eee3414cc0ddffde9366d44e7700baba4a00d56007d693b778f1ab2de6905161da8731641f476108fd681ca09a1bbb95809c75f72a4ebf3d38c74f62c70f6822b4fd8039f8f2f7b8e712b9378d6d4747b8f6d158cfce5d6ffe1319c7b86a0f96b3f4365d9849a790d836037eb20bb8596851ecd3f110abf89b8a4f4eb576190526a91de141565c0c3af9b76a324dee6f44501897138404b30a847ebac6fd0b26305d27eddf40ecf07ab7e8b8d3b5b962811639077151f3c847a1f9cbce30e5ccf555de6118324370005636662fce70347c67b0a7bb973fbabb62da6af821940342ab3c4d3f73595b3d9f6a65f7b910273dd4ebdfc8416a428a17e92cb693ad6e03e09edf3bc208120d4aae4ff12c59ec3d5a64a51a80995a616b0b45f0ea045ebe09d3c3cc873f8a40cb9db578ae5a78f31404435359f877ed89014267024cfbb8426ee1e150d7dfd194ce9cbc5f312e2336a348917530e18b66a41e01e74f191399cae49992a31e9bf5d3b2e8305d984243ddf7fa0795e08590f94b6041d4f5401c9a7449ec699e4c7eb08d89a184eb63067377d96e53cfd93fd5b5866fa972f9474203ae6018371ed2365e7bb88bc6bff008dbb632c5c9760a5d7a65c7302941d6d4f84803479d952719caa9bc1220b592d60a8aa2b04f62a04a0049d9a36d12ed06ac68674eee13c3cca1d2a07f91dd8debbf5e82bbaae8c5a1e5521ddd128a23a922f10023c5e8e55f96c881f2bf417c3792f0a8c4a22f737bd04084e9db61d1657647118c1d003091eab1a3adf097fbe9136dacada86dd60a75f2827eff50df641d66962323abd5f8202d16c636b9274e7ad46bd519f2a0757b8553401011747364268143c4485fb51b2ecca18919f909d2cb2d4a2c103723ba4349a2381f83a7fd3f6b008358a24193571bd76591b613b4b30929a2558bd1879ce1c449e8e3307c6ac1173ad292775322dda75279ca9001d20bd0064a3899eeb87b5f4fbaf65d91155dc39e0f79891f762e10987b2ebac618f40be327d465cf40c2b148c9d3742760d6beeb391a0a8c4e3838e7cd2b742a306d1a5972827e839eedd6bfeef56bcb004b833662d17e759b1b706e28b32b2a84e4d86b67e2b11dc7ae4ef8151fdd4fc53428c50855e9abaeb0b956332289210d86dc378feaab8a0c45b6f09bc4391886b707db37c83bf22f02a9bcd43caf3c6ec0e8ad4b84f2aec3da84da1758067a4cec8de26490f06697df3f7d7a86299df4bfebb52f43a5a605232b5f92fdccd669fab79ae7adfc9c68adc2a55c13c70b5737d2fe0c69f4a8a5a4178fa7f097f5158ad90b4724288dd6ce1ff7708c3bd1e19ba2a2a186a0894a61f6cafc44bf29a4851a7c0c2deb822f1603918398ee4798bb4e593f08c4e9515b1350b50592f4a282824861d861ff70c5ae244f3d4b4d95b496982b0edf90ebe7bb222f0f3f228a48a4392ba8e0ea4c2aa486afe7d111fdc614f930c04be43cdb34c2450dbb733ddc826d8271bd6ac9d9df049aeb2a57f285738b7542662375422ddc4349dee1885c64effb5c8c8e3a8bd7848e878387ab4261f0a0e9bd8e000c2523d08d6fa03c8296c1929b2bcb30c689c6465eeb0713019ead65e07130eb71baa15eeffc70bf70dcfbe5c13e5759b313b35b8c112a8307931560e213ef1ee7ad2374c0312da17a6b7ec3f48a11cf6bdad0b6f67b7c60eaa4cbabbcafade116ee217bf3f05253356feb0256a1df45fbfb00c3f6278a56eea13aa32fe83edbd15e23253b862da2993e96fb709c2c0528b0b516c8ca560dcc24e7c433500ee1351f97178fb9b61eacff792a9261f27e934a24fccf11012e6a5eee61c597a9559b6a5f7d0d88f67fc1541462b9dfc2024d73bff0ffc3c46739cfaa41f840fe2d7b1298d80f128b3eb160bca57fdea45bbe29eaf7b7640f5ea2a5d77279e02b6c013bc679ea4283d32e78d4c21f5f58a9806a4de70bb7f49504edfea453a8e3697fbe9ee6239eb04b4bd697034f8c1fe1a4d7fdd3d80109f78bb85cd6914b4a9d00a3bf87849497e18ae2dadd9cd442e1c894715023fcaffe8a27a703c6a34dec4445f228bd60b868fedd096cac23378d109468b79581f5124eea9f3ea80ca6f2715b8e0e80cc81750e8988d89fcc50dc9e76ba46ec36dd5585874af0f02941c02ca858b5becdefe0e6c77c1bfcc126ccf13c902343519b41b15f910fdb1bac64655e3679bbf8b59648d65b1c5d57c6bf693cfde85b5511a1be1a931d37a3211d25ae28c593f46656f9722172b3e7b1c3dbaf61d6235ca84fd5498bcb7510ca9c06d058ea26e9fe57f2dbd18053642c460087ebbe4b0c3059e817a9951e039c23de52bf4b928ee5d11772707051be72bd3884498a007b9135cec74be9696301621f711b47a2b989566c6bb3a9631f85c6748522370b1c4fea537b83b49b2ae44f06fc74fecfd42922854bca422f81d404661a9c4103b483c9f79c32f9eddd1ea947c1e348b4064165ef4ac0507d0f565a1634a70a1fab4f891823ea7afc8edb3889b1fb7a7819d857c1045b4f8b01f8bdaafd6f4f213b2eda85a27338bbaaa24dbb22a88413a5b4c0b1ac51f7a1aa61a85f76223c91364fa44773898af48c23981d8c52297e8907aae0551613b953a859dddac4e19fe9f2327be14664c2b2c8f6d362b6e18fd96b554f4e742e2d778f5de63bdd17fb381858a6d14da717fcc9c7b06004e937317bf1bdfc8a6374e015e9979e43af1f66e62f90b1b468b14febfdcfd15c589c9baa42a67b6ccbb81dcebf9bfa78d2abb2082c0c33ee2d899e7b87023b0f1c799eef6e53283da313e3c474b954d380b6c4693e1083f01dfb02fb53c304f0bfdfb40fcfa08eaf72760dceb3813595bb49be0dcd1e4c1161abb7ac570dc5bc2baeb79cca7bf301875f3f6093dd0b122f771808627f780821f2d8fe4cf39d161cbfe9941da79f1f2f5be327c2d213da3e1618b803ab40eaf9f4589cd2f3ed74a2f912ab5e2dd05c19475568c20ed7c34e605bee8d323b56063cfb13c4f2269073bf7fcad909f7fd3325f98fca2363960a432b2b2ca4e04e4f39d9ebe4bc2ca59900b0ce612f01fd9afedebc22f4ae58604e48e33a0c4119b206a60d4b97b063d79385bdefa1c23468506303c79d31b77fb544eb8f8c3236e1ec72b9d58fe4e49fbcaa19fb07edb43191b5e48c1eede95a28b9e8c7860ccd5bb6a007a2c768a0760f9c9570b080f441dc6dc033d81c8ef13b60f9ce96ec6818e5776fde349c7d3874d3146a38c1e58471217e10ec300cc737ee91e045ffa79ca2338e67805209e1f3a04a9dae39ca37a3c6ed64578fde29d133a39bb9da890cfc6a9c6f84c56c9e44577ea74e7b9157f95aa2b3079af7845e38abc372184b48a8228df2840a524b5848a3af818d7ae11835a8bec25175b1aeee4a508b8d20b8ddd8373afccbf7b9aff7fbdcc8f6d7fff9ab723b5ade5936cf505505e4a89cf2272276d9bf56d7c6e945f3c39f2254c305beffdb265ca1f3b195b839c0f826f71b2959e73a54134749209a2ace005054697bd0a0016d0cefc7c4f2b0dc4584dc3e5b7d94ec23d7209b94ab96c41060423bcc99af410b07bfecf5cc262264f9a591b85b901524752b9ce5a3903a03b82036a4270bd8ad6f28fa8d0f209e16ff7f12fcb8805bfb5c8656175ce50873a2cb7066a837cc63d2b0b65cde5b119e47b54aaf1ab069484fadedd103441a694d0f0acb2e1da52a70a64c42248ce36fed3d0fa5b1b078c3b6a63beb0317b6739f9a8808b66afda629c96360ab132799af6dba0672ac4be87e259b430be1efaaac7c9c05ab195ed70a1dc2680ba71db3f0dc48967e6628df8142597abe82d630c1d4479fe475a172953812d7c325fef53891ce2983f201b6c061738c6ec221ce2b5cf0aae38d5ac05e6672644d4f0b1c4f9a3e45509cccb6f61d90962621c2d9e083bafa8e7243348425697edeb7d7ddc276e83908216fa4e2ab35aae56de866dd5a18a58fe8c1cca43a6078653fc270f59492e089b6e0bd4d2bc30488070e52588134f778c77e354575304eeee2e1d5df597b88197f906ce9e24d4bcd9eec05e014130ae2e2dcf8397b1ed7af9a30827222867aa962aa2252f57960ac5d5ed8e46e6e8db69de0858afe84dddb49176e1041de067046bcf7981d69adfe495ce1c15334977aca3c2a125f694edec5bc78a7a8e738753fdebb655e75310f4a22af0bfa26fb4985f11053df8af53e309b218969f6c582787ff3cded70b68754b379d640c776e8465377687f4fcddcfa4f5277093537d5e049527a0e6e6e411645e31c4935a080bb7b15fdc56df5ac1ada5fcc07b621d43dc91afb7d6b5d427dda3ca0d825e8042e7e01a8a430fde4b6561f6df873629cba4ce513fd5b0a83333022d55f1073809b23fdad04e0c5c5644c933e96dcb29c54eb4565d119dbe5a2f352180b1605275a7aa82cc6d81971fff3d5bb81dc7e9af8174213c650c277d9adf8a2b8d6ad768210194b5d7288814a744e58075b170e02893d0be115e1b2e3ccba2980a8864e3cba9fa84e6a47f90fe7a4a70c025f57e4027bd7f0306c92e92f0977a26415462a5a5f61a19099cde2aa0fec1b9fd8abc249b7b69fca9e1cf4b42abc0172bd20801ea9bd215e2bd9aefe52e780573a23342ed1ad03b24bafcc94ebdf131ed05134b753603c666a055eca36bf54efb416a98afc6847402c78824bac3403a79aa775b05e531e453e83416302ce7f01a9da05e54e731c20afb01674816c5e9366efe78a9b4b8661a859ae5f8fbd03a461004d422a0b3dab16f7883e2d26e9915b24df897f7acf5fe893cd80c5c8f0442e2686ff6d536271bd776a56d12fc4275c675cc4bb8c844ec6024a4a939d45a96064674f5d351e51fa8f8facdccf8cfec3de7c47deb24c3ff4c4a4b99c13a518c1f5dea99471f59a27d6d515d7c8ca06e53224dc4bf6e6d7d006d37ba13bfe2d1d77f04cbd44eb124cf71cbb8e6e4a9956769c57d4a64b6d95d73452c46c8a17e303ed77b6b726cf4c753690bfb61c27c1f45f5e3121064281016c353c84b65b94003ff01cb1d57d65a4380dd630d650293a07c9eecbe34c7e5d03a3d5062ad93a1327797e4bd3d4cc9336bb395385e5e9f03d8d5dbdb2da0d9a0f68fb9a919679473939f4a9a9e4a2ce9f816bd8f2a4252c7b634fef79234721c1d7fa34dd1b6598edfa84ecd62c92666dfa219dfed8485c9498a80184505673dd79b4c9a336b416a441e8b8e79ee1f9426d1fe2adb929fb8854ec6225e4175edc22eb73ac3f9b28c9c1adafcc2815a7b7f6c1a729aa301c7086d66b5a0f0c27cabac1599538a1ed5976f01257b95fb9a4cc1e5a12aba39f8809980ac76393977b5b0385c951a7690fd953b5bc3d2079a3ee8c551510562fbe7d2ff5116ec85c5cdb37cbb86b7fa606db26316172e57a3075bceef8dba1be6a8f61ce527f3b584e37f9e1c0befbfb83cf807e86716973013e6fd688e809ba31c1369f99ffbe6b8199a2c9aac0091e2f0f2a51700e89ca2efb381ea971e7bdfe9caa310003f9f198d640c0b8b6badeb767cb972fa5abc97d6e0c0ddc77b2eb494c5da33204afe3c970c8909f98b25e31e30bb42234106ce86ee6136d0a16ab914f8d6f1a9fe88048d22a13871ec9774da2602a0d4cdb9f8d0949c50507547ab2493c7d0fb4bbd3287dcfc1eb57d0c71bddea38dd1786768eabea8580f1900eb214f384511dbb99f4386953f373100aeed54ea66cb1f32344582a90849d3023b0de8bafe5b0f1d5234002216dd70634d942ef158f49359d623493f1d2adada48242d21d193179b8f5e1a1bb0c164391fb17d44cd09f764813dca6347b273598435865dbec1c589dc5d5aaf9fe6bebe721e8785d5ed664e50c414fbef17cc4686c603020a4011ff60f5b7ffe6a4d8217be0b4e8fae75a8220f6f072710e1f0c2a89633aed3adf2af7d427436d7068aea64b7882187fea7d69f02c44e867998efeb8f90ce9e3fce2fc5e3f977a9d6415fe595e92753bd5e8811b4ab2cc7bc3b34ea8d91e95d547ead77873e26e07a90427547361299a21b29dd5a1bbeaa33b4655fb3df7e99238b53f033758dbc351844409acddb2333170e07142b071d2d7ea86fcb37649a7400cf462fcbd6c02fb609e56e8e47c80b58b9dbf4e73bcbadf376cbafae49249b610058238e392a749b071b725529c668eb2e75044bc466bfb5dbab9312abb06436e1a317626f9622803561a71e22091c960c8c423ac00a449b9a5451dd99cc1722c1b0340d082a7122cb3392a19193897b406bbc4a78ca0bfbeca71fd9910ed9cdf669f940d7d61cdd74823914ba203d1103eddd28fd1ed0c0bcab9b572221366a296031cc7f1e9f97b7ef05e110cd27f9ed1b0df2a2f981944ffc9fc6e92b4dbef75e527553d3829af2aca624b18ef92dec1b73851a9ea355d98ec2ea68274985e4aa95faab576c81e6586b7801a2b99073c2d656d297d2e0a983de09d86b0bc36fd02137b215d6a4cc5adfe544a166139dd89ff4d0de249a784321db8dfc73de81279bc6c2839c650f54a5e88b50bb11ffac42a90f2aca834d1c0f06b6478202ef56de684f4776ba94b0fa397f5db3977b39ddb7f70cd6463103fd4703e30ae1b94c8e6398a7007974ed43776cd2f1b494f65435dfa5d815a50e15afbad31d3261321d77569f1dadf6f48b6caa307521d1d3103dcbff0ba520dcf80500d688dad6e988c717690ab7e29523f8a608861b766abff0cdebd2f7f4282f368511dd1df9489b0c6ce07ba9425b4b1f756ed37fce6655799645c4553388d054f86f81989b3e8fba5c21298dba9106f46266cf2014e76ee47124e04c7d75e92a064160d96657bc5df0b8e932c64f6cf55d95c983d5147b4506b6d54b6e670fbf8934752007adabdb434a70f63801c4c3341471bedc1f022311d06544431ed3e7d9da29f95e800a0381e5756cb62f2a6ff85ed3f36e72ddab05a47816b2d02baf92351f0f3bb4cdbe23ba3f469a8745148b8c9bf844021cb8848d605430df2127634f7613ce3bb7757de1de0644e9598a17272d1e7756d4f9458fd3fe8f4106c7fb1a1e1d6c8557291448c16c04a51c4472bdb4cd2b57dbaa67b81b3f1e9e3b86c9b0da0e9d2d89b59303c678ec58405224dc1e5f2cd9e9b7b72d5fa31348d76cad9a853570858678678cc92ce1d62955e82915a8d0e88056b3edf310bca83b7356f9f73e3b5de4745a6f47824d292f56165620ab44b0d22799df21820943b8357eae383bb70c2f0e9a215588a147e5d2a9e16bbeb5ec4841c5ee91dd882e5a203b45b73b4f4fd1d889f4683834fc92a1e1b24535bcbe602b3b340b4c117279fa553d004a16fc4b7d9fd6729cb13b235d7b203192edccec5974f63ddbbba9dbeafd06dd570a33be5f6193b82ae77deb202e2986f816ad9285edbd2954c0e9aa43c39684d0a5e290b2b13c8cba34c054f41eff0d190f25c1d59cbcffd1e579826fbbdf80b681c05e2fd0475de344b3ac41367493e7310e5fa72ce9a2e416d35cdbbedf1c93810ebcf9f5732c5b484415cf71ae710e00577f0f3f7ef5d3e4d47b5d5e9e21abc44753405771d9c618b0c05ab9ec1bc45c34a67f70b74fb33b8f746a758bc5042b031737a12014e5d73cdc989a670db9d4423abeb8f6427f066bd8fcc71c582adedad3b72647138219f5a4435a41872804b5978e268aad516b0b3c0f974f480eb981d2db793aa25c5790cc56b397c6105da21152347521e103b0eaac91e050493099982f93e5ec75ed706d0fff7ec5b9661c66d02fc6e7fb49bb65c50a4812e58820a1147b5329df73eb4992929799e343839d965729434f8a606fe7392e0e48ddccd3f59fdbf38a592a9e1dec57d7d4b89e78d2bd30ab9eb265db1f80ac985222f873dd890afff7dd605d7402dbed83ea5607f289d961abac5f0c00e98fcbdd836780835800eb0a790118ee0b035b5cf39ff1caf872a0e86444478a1b83faa8f1d5ea398347303c1b8be1a94693eaf1de04cace54f0c3382ebea97a331fac8e4f5abaa24b822324553fc1b125dcb529136f2197951967d02a55790b4d417fb275f929f1ed6e0cfa7a9a614265c7ea9ccf9bb96cba9accaba01fd63af4ebc37d2c7cb0bb7389fdd328f993949dfdaf063578db6e1e35c3749447a0a845b6ba04f937e4e0c4980f1ce7dc5d47774f7dcfa3e84bec4876af3b51ede5aecf92d1a0ef9f012d7cd9c5f47abdbddb076ac0fc05ba2658ebdda7af2435059b24c9aee20876fdda66656b831cad9609391794bf0fb57e518ab26fb0d177a4110a87ac93768b08b92f0683a66bf1532b0ff6a8db03554d1d4047d2c073fb60d4cd9bb9ed2d41cfc2025665f5ac00957e0eaf7b2ba7518d1713262b470f6857a07853276bf08b0eb041715c1b7c448e1b28a41dbcd5ce69fa1131660808c08d105f5788796066af89097edf7090eaa022e75915cbe72c689ab93d213889fef4d6de2acc059fd6c35a9cdf80a3d88cb860a202a597cf673b79a1c609043ef1e65aa0e6288dd1092ff1b531b7dd7a488afae9dceebeba90b60b6b71e96a1823ebf486bf5e375176c3c526fad306dc1e44993695b32f5300f135a2aebad9b5656a5fcb67a3f1859de9ba4ed843852f91350509ea7304fe7f472da15e50a54e7262a0514bfd2cdfa0d9e9b4a481d39c2b0a46a8947af02704216fe262461e06cbd88c590e3f86a7d74adce933d23beb02195d2c9560728b96247d02bde5286b8710261a96f19e141b2f1622031df8b75cdc5a8c65e711b2087d8899b31cf86a885577aae471a1146641b20afc3bdf1911be8823bab47c195221a7fbba5733c4d874cbb6d1f207a1d155fbd1e9793cb46ba83b6ab91caa1a5aa5284b5007bf628206eb704e80f4e28a09770bc4fa6e3400b31c37561f3bed0290c51b1d01d232e343d84c698f64b7d492a379786c63f4796651bc715c1dd30ae37e6ff3967326a2593974fa02efac13bc74cfa071d3c348f9f84d7a6dd97a610bf7f0024ce7ccc0398acbb3ef7c3ce3600bb5a07b4881abc9e9ffdf1ba1152b9d225053efe3c181c9d9e98a456a9f28319e39b866b0cbc4a6eff719fa3540ce3026ba90e30660f09d3e16db8778e979709ae27e40f1c5f180594dbf55f153927ca9c881c3ff706b7de6e239095d9ccac1ac8f1d5988e9cda3556e43cf74f651738209ddccbfda79e67c23ed97d1cdd92433fe51a003446a56836b220da9593ef87911fd3078a51c0c209e92151d35291af699a77b83f3e09d2f8f9dfb66b34c842ab861dcf33ec1110273bfcf7fa29c8baa43fa8da2ccd3162b3152357681107f4be09ab0e662f950448c8886ebf49655705df0977f0fdf12fb3c2a81d246e78d6e3ad8a4b0c5b9a39aee65f83ee2aa62b129a7efb72057cb2357aa72aa1cf2eedb8daf0a836c7da040a94e166d17d8f0b41d236abbf2061af06facb9a86b806de43ce4822c2636147247ab1b8fc32a888eff0e260297a605a71899e075e8309711e933138f7428a1e1954adc35a23d8c315e5a65602a8aa2268b5d392061be3aa40ed52b6054c25a0c539dda675c413e6cc5ec19a7c1e3c7131184501377e25636e1e37a0b8a6480611a6cc021b478551a8c3ff5e7d57166888675a3d725a2a1b4a9b69fd60c49683814014f1fcd050e8f26f440e614ed5934bd283be8d1d43477549b3e428b41aeccfd3369e757d70c412559c765520b34cafda9229146a9bea0d055aff9f106ba9349bd2f645c505e89333536e8b188c5eae0fda1e541736f7dce3b7a12aa7430078ce70f2a8eafa66843fa130f0cd2cf6cc1f56be9680b5750a7a3a6816e5b4f9ffa728c65bc28053d84beb84565103e61fca58485e0cf1278814bf5e2d2d120c16b08161d59483c5cc2548ba53b3e1291b0b0ebe1514f5fec853e3e26e1f4549ba0d0c7c858935c646c7595f734fba241165dc31b359c67e90db8e27a985f21edfe98fd498ce88d38a532e5300d1abdde20706e13c431221d9c403f7643436858c19fd340a1e74f30c2033f79a3bf9ec68bd38635714097186ce3a42b600b697d12550a09c2060832c904ae72acd1c509ef0adcb31640402e4e65c26c815e2bc35d12b657ba619058484bd9a3ea9e263a213513e2b0d07b06fb002865a9d29b399ab07d4471cd2da3685bde46f5b09f6169c26d904afdeb86f2f4d085f86d175be548d1608fcd8ba5514f22a65071467bba7c44d34d39863006396f8dff18ab1cd7e4e4672053804c1060f3164a9df4887beda223104813ca0bdce7e812db8ebbefc71e03ca41f36d1ffffa303cfcf4c4385a792358c6779948ee91bc2d497de9fc21dd9635be1b66f723cb8a209e063a87df1ee57a240a667bc8c25968aefc53190ca6005140628077f1a069f0f569f3a5fac034fedc9b5e15ed73843bfdbbf264664ae276afbd6cf4769b660f271e7b01726871fc283cfa16431028d73d42ef76af2c813b6b5acc6e344da7edf7e6b248f0e9dc0a6c164a1ee821e5ed42d64a4b6054e0e7bf5f920b3bf64d52f3175861d6a95f28a644824ea6ae6988948d9c94c3a9b567573f10e0ca6a22913d200", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x2) dup3(r3, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 2.586132727s ago: executing program 4 (id=1111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000380)='5', 0x1) connect$inet(r1, &(0x7f0000000340), 0x10) sendto$inet(r1, &(0x7f00000000c0)="b3f0b720e8cb3a2dcf1c2b469bad708728e8cab2", 0x14, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x3, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000003e43000000000000006797a24bf8aee6123dbd8d5c0d39fd6789ef0d5eea0b60c4bf326410445d4986df8abe079cf3cc315d553109b1e859bacd9ecb48de5249bc0e4f561205a756e73cdb398b1cdee459a0b73cc01c4bf0a0da8d1db1fe0712da5db6ca9ad2419f16e2cc8e9b2958f377f2f18d736fa5a33293cc4a956c4caf55638a68a1bda0cc05"], &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0), 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x482383, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @dev}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, @in6={0xa, 0x4e22, 0x5, @private2, 0x2}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @rand_addr=0x64010100}], 0xa8) r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc8842, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x5421, 0x0) pipe2(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000580)={0x100000000, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000400), {0x40}, &(0x7f0000000440)=""/42, 0x2a, &(0x7f0000000480)=""/156, &(0x7f0000000540)=[0x0, r4, r4], 0x3, {r3}}, 0x58) timer_settime(0x0, 0x0, 0x0, 0x0) sync() socket$nl_generic(0x10, 0x3, 0x10) 556.569787ms ago: executing program 1 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x48, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}}, 0x0) 554.630388ms ago: executing program 3 (id=1113): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='attr\x00') fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 532.739422ms ago: executing program 0 (id=1114): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xc) read(r0, &(0x7f0000000040)=""/49, 0x31) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0xb) 388.517164ms ago: executing program 3 (id=1115): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='0000000000009:0000:2'], 0xfffffdef) 261.553147ms ago: executing program 1 (id=1116): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207611a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x1a0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x4}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}, {{0x3}, {0x0, 0x0, 0x51, 0x0, '.v\x91O\x05\x81\x96\xf5Fl\fZ\xffdp\xbe\x9b\x9e\xce\xe3\xb8\xf4\x84\x87.\x8dUF+Pp\x98x\xdea\xb3\xe9\rek\x82\xd0\xc5Ry}\xae\xe5\x85\xe7\xc7z\xabZ\x99]L\xcf\x13\xfa\xfe\xcf\"\xce\x85\xda\x02\xde\xd19TV\xdft\xe3\x8f*\xe8\x8ei\x88'}}]}, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b0081000000000904000001372434000905df030002"], 0x0) 220.626786ms ago: executing program 0 (id=1117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000004000000228b155e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 195.780609ms ago: executing program 2 (id=1118): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x300, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x25c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x24c, 0x6, [@m_ife={0x1b4, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x148, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2d92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_bpf={0x3c, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x300}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x800}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getpgid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000180)="e5315d0d4247f540c7f68332b3bf358e812f26305b4930a70ec3264a751ddb9538bc57f7b96dc857207af5d90437be", 0x2f, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) futex(&(0x7f000000cffc), 0x5, 0xffffffff, 0x0, &(0x7f0000048000), 0x0) pipe(&(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan0\x00'}) 79.980683ms ago: executing program 3 (id=1119): timer_create(0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11c, 0x1, 0x0, 0x20000000) 8.03978ms ago: executing program 4 (id=1120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) clock_gettime(0x7, &(0x7f0000000140)) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000300)={{0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0), &(0x7f0000bbdffc)) gettid() read(r0, &(0x7f0000000980)=""/273, 0x111) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x7009, &(0x7f0000002ec0)={0x0, 0xccfa, 0x10100, 0x1}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x300}}) 0s ago: executing program 3 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000dc0)="801904460f0836440fc76e0a6766470fc730f083ac9f054900000048b836a6fe72000000000f23d00f21f8352000000e0f23f866baf80cb828bd708bef66bafc0c66ed43dfbf2f000000410f01cac46179294e00", 0x54}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): rrupt endpoint [ 118.201004][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.241175][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.305231][ T9] usb 1-1: USB disconnect, device number 4 [ 119.149065][ T4609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 119.235528][ T6097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.301687][ T6101] netlink: 136 bytes leftover after parsing attributes in process `syz.4.277'. [ 119.321047][ T6101] netlink: 136 bytes leftover after parsing attributes in process `syz.4.277'. [ 119.396788][ T6096] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.548109][ T4609] Bluetooth: hci1: command tx timeout [ 121.499068][ T5266] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.721324][ T5266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.757632][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 121.785975][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.814419][ T5266] usb 1-1: config 0 descriptor?? [ 121.844094][ T5266] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 121.862040][ T5266] usb 1-1: No valid video chain found. [ 122.146386][ T5266] usb 1-1: USB disconnect, device number 5 [ 124.646630][ T6187] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.303'. [ 127.317519][ T29] audit: type=1326 audit(1722741802.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6193 comm="syz.1.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a321779f9 code=0x0 [ 127.847219][ T6213] 9pnet_fd: Insufficient options for proto=fd [ 127.848894][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 129.225560][ T29] audit: type=1326 audit(1722741806.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6231 comm="syz.4.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370cb779f9 code=0x0 [ 129.499042][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.509832][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.522525][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.545718][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.555333][ T5222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.567238][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.904101][ T1297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.978980][ T5265] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.141372][ T1297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.218424][ T5265] usb 2-1: Using ep0 maxpacket: 32 [ 131.240486][ T5265] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=a6.59 [ 131.278185][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.298358][ T5265] usb 2-1: Product: syz [ 131.302675][ T5265] usb 2-1: Manufacturer: syz [ 131.314837][ T5265] usb 2-1: SerialNumber: syz [ 131.329682][ T5265] usb 2-1: config 0 descriptor?? [ 131.338233][ T5265] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 131.372759][ T1297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.701748][ T4609] Bluetooth: hci0: command tx timeout [ 131.855208][ T5265] gspca_topro: reg_w err -110 [ 131.899335][ T5265] gspca_topro: Sensor soi763a [ 133.325600][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.492430][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.788451][ T4609] Bluetooth: hci0: command tx timeout [ 134.465703][ T9] usb 2-1: USB disconnect, device number 6 [ 134.622609][ T1297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.804871][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 136.188353][ T4609] Bluetooth: hci0: command tx timeout [ 136.323678][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.414598][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.423920][ T6243] bridge_slave_0: entered allmulticast mode [ 136.437368][ T6243] bridge_slave_0: entered promiscuous mode [ 136.931758][ T1297] bridge_slave_1: left allmulticast mode [ 137.235604][ T1297] bridge_slave_1: left promiscuous mode [ 137.242887][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.281023][ T1297] bridge_slave_0: left allmulticast mode [ 137.286940][ T1297] bridge_slave_0: left promiscuous mode [ 137.293796][ T1297] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.631492][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.861187][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 137.871442][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 137.884813][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 137.903017][ T9] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 137.914544][ T9] usb 5-1: Product: syz [ 137.932597][ T6328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.934242][ T9] usb 5-1: config 0 descriptor?? [ 137.959515][ T9] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 137.979612][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 137.993712][ T9] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 138.097915][ T1297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.112808][ T1297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.126969][ T1297] bond0 (unregistering): Released all slaves [ 138.173273][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.198327][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.223628][ T6243] bridge_slave_1: entered allmulticast mode [ 138.231978][ T6314] Process accounting resumed [ 138.262319][ T6243] bridge_slave_1: entered promiscuous mode [ 138.269187][ T4609] Bluetooth: hci0: command tx timeout [ 138.376657][ T6328] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 138.580378][ T6326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.913799][ T6340] fuse: Bad value for 'fd' [ 140.191471][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.234994][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.490537][ T6243] team0: Port device team_slave_0 added [ 140.521087][ T6243] team0: Port device team_slave_1 added [ 140.692916][ T1297] hsr_slave_0: left promiscuous mode [ 140.725052][ T9] usb 5-1: USB disconnect, device number 7 [ 140.789368][ T1297] hsr_slave_1: left promiscuous mode [ 140.878185][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.885973][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.979648][ T1297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.987124][ T1297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.143842][ T1297] veth1_macvtap: left promiscuous mode [ 141.165880][ T1297] veth0_macvtap: left promiscuous mode [ 141.174486][ T1297] veth1_vlan: left promiscuous mode [ 141.183561][ T1297] veth0_vlan: left promiscuous mode [ 143.599202][ T6369] xt_cgroup: path and classid specified [ 144.076217][ T1297] team0 (unregistering): Port device team_slave_1 removed [ 144.124287][ T1297] team0 (unregistering): Port device team_slave_0 removed [ 145.344747][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.358186][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.399789][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.414780][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.430742][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.463972][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.531661][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 145.809474][ T6243] hsr_slave_0: entered promiscuous mode [ 145.816311][ T6243] hsr_slave_1: entered promiscuous mode [ 145.887835][ T6387] can: request_module (can-proto-0) failed. [ 146.321577][ T6396] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 146.332886][ T6396] netlink: 9380 bytes leftover after parsing attributes in process `syz.3.362'. [ 146.594236][ T6243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.607119][ T6243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.625811][ T6243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.662133][ T6243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.668994][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.848140][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 146.874418][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.875087][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.903222][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.918902][ T939] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.926120][ T939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.957503][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.964779][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.977338][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.999252][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 147.018541][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.039236][ T46] usb 4-1: config 0 descriptor?? [ 147.372634][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.535105][ T6243] veth0_vlan: entered promiscuous mode [ 147.549152][ T46] logitech 0003:046D:CA04.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 147.592699][ T46] logitech 0003:046D:CA04.0003: no inputs found [ 147.610493][ T6243] veth1_vlan: entered promiscuous mode [ 147.736275][ T6243] veth0_macvtap: entered promiscuous mode [ 148.039412][ T8] usb 4-1: USB disconnect, device number 5 [ 148.187515][ T6243] veth1_macvtap: entered promiscuous mode [ 148.399420][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.418809][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.434380][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.462444][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.489219][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.505863][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.516265][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.527243][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.539454][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.553458][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.564974][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.574911][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.585922][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.597396][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.608349][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.624632][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.637202][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.661402][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.741805][ T6440] fuse: Unknown parameter 'ôd' [ 150.958349][ T6243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.967091][ T6243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.025465][ T6243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.062701][ T6243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.298159][ T5267] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.356971][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.381534][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.518103][ T5267] usb 2-1: Using ep0 maxpacket: 16 [ 151.531901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.534711][ T5267] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 151.554104][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.600822][ T5267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.628663][ T5267] usb 2-1: Product: syz [ 151.632882][ T5267] usb 2-1: Manufacturer: syz [ 151.690847][ T5267] usb 2-1: SerialNumber: syz [ 151.718746][ T4609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.731143][ T4609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.747586][ T4609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.774510][ T4609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.783198][ T5267] usb 2-1: config 0 descriptor?? [ 151.788321][ T4609] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.795693][ T4609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.806155][ T5267] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 152.046850][ T5267] usb 2-1: USB disconnect, device number 7 [ 152.224113][ T2947] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.330940][ T2947] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.504228][ T2947] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.574590][ T6465] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 152.581180][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.623128][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 152.643769][ T2947] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.692243][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.906237][ T2947] bridge_slave_1: left allmulticast mode [ 152.914156][ T2947] bridge_slave_1: left promiscuous mode [ 152.929030][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.958268][ T5321] usb 18-1: SetAddress Request (2) to port 0 [ 152.975173][ T5321] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.986461][ T2947] bridge_slave_0: left allmulticast mode [ 152.997112][ T2947] bridge_slave_0: left promiscuous mode [ 153.006027][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.781914][ T29] audit: type=1326 audit(1722741830.530:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.3.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c547779f9 code=0x0 [ 154.039091][ T5222] Bluetooth: hci3: command tx timeout [ 154.122246][ T6467] vhci_hcd: connection reset by peer [ 154.167315][ T1297] vhci_hcd: stop threads [ 154.172921][ T1297] vhci_hcd: release socket [ 154.177490][ T1297] vhci_hcd: disconnect device [ 154.326258][ T6489] program syz.2.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.356723][ T2947] bridge0: left promiscuous mode [ 154.596177][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.739308][ T2947] team0: Port device vlan2 removed [ 156.070867][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.108161][ T5222] Bluetooth: hci3: command tx timeout [ 156.115514][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.129836][ T2947] bond0 (unregistering): Released all slaves [ 156.158187][ T6477] netlink: 'syz.1.377': attribute type 29 has an invalid length. [ 156.250223][ T6496] bridge0: entered promiscuous mode [ 156.283028][ T6496] bridge0: left promiscuous mode [ 157.439268][ T6514] misc userio: No port type given on /dev/userio [ 157.524012][ T6511] Invalid option length (0) for dns_resolver key [ 157.558442][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 157.571641][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 158.393889][ T5321] usb 18-1: device descriptor read/8, error -110 [ 158.410195][ T5222] Bluetooth: hci3: command tx timeout [ 158.708059][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.775707][ T2947] hsr_slave_0: left promiscuous mode [ 158.785563][ T2947] hsr_slave_1: left promiscuous mode [ 158.794180][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.812241][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.825481][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.833518][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.863492][ T2947] veth1_macvtap: left promiscuous mode [ 158.869317][ T2947] veth0_macvtap: left promiscuous mode [ 158.875298][ T5321] usb usb18-port1: attempt power cycle [ 158.875871][ T2947] veth1_vlan: left promiscuous mode [ 158.887771][ T2947] veth0_vlan: left promiscuous mode [ 158.918620][ T939] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 158.933250][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 158.952182][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.974917][ T8] usb 4-1: config 0 descriptor?? [ 159.000611][ T8] ldusb 4-1:0.0: Interrupt in endpoint not found [ 159.122611][ T939] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 159.132796][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.141635][ T939] usb 2-1: Product: syz [ 159.146088][ T939] usb 2-1: Manufacturer: syz [ 159.151419][ T939] usb 2-1: SerialNumber: syz [ 159.158955][ T939] usb 2-1: config 0 descriptor?? [ 159.229669][ T46] usb 4-1: USB disconnect, device number 6 [ 159.452253][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 159.500705][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 159.521070][ T5321] usb usb18-port1: unable to enumerate USB device [ 159.921887][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.929378][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.936639][ T6446] bridge_slave_0: entered allmulticast mode [ 159.944815][ T6446] bridge_slave_0: entered promiscuous mode [ 159.955488][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.967130][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.974753][ T6446] bridge_slave_1: entered allmulticast mode [ 159.981750][ T6446] bridge_slave_1: entered promiscuous mode [ 160.014333][ T939] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 160.033397][ T939] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 160.046779][ T939] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 160.055219][ T939] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 160.076145][ T6541] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 160.092623][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.107493][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.157286][ T6446] team0: Port device team_slave_0 added [ 160.163842][ T939] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 160.180351][ T6446] team0: Port device team_slave_1 added [ 160.236201][ T939] usb 2-1: USB disconnect, device number 8 [ 160.247649][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.254882][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.282838][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.295759][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.302854][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.328932][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.379199][ T6446] hsr_slave_0: entered promiscuous mode [ 160.386061][ T6446] hsr_slave_1: entered promiscuous mode [ 160.392992][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.401269][ T6446] Cannot create hsr debugfs directory [ 160.428217][ T5222] Bluetooth: hci3: command tx timeout [ 160.741340][ T6446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.755348][ T6446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.775708][ T6446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.798188][ T6446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.853241][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 160.896758][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.074750][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.909631][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959688][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959725][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959752][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959778][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959805][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959831][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959857][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959883][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959909][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959935][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959961][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.959987][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960013][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960039][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960072][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960098][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960124][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960151][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960177][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960203][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960229][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960255][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960281][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960307][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960333][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960359][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960385][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960411][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960435][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960461][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960487][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960513][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960538][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960564][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960590][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960616][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960642][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960668][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960694][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960720][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.960746][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 161.963247][ T6553] overlayfs: conflicting lowerdir path [ 161.966928][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 162.150904][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.607365][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.661341][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.668610][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.788652][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.795829][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.926461][ T6572] bond0: entered promiscuous mode [ 163.958056][ T6572] bond_slave_0: entered promiscuous mode [ 163.963951][ T6572] bond_slave_1: entered promiscuous mode [ 164.015830][ T6576] tipc: Started in network mode [ 164.035216][ T6576] tipc: Node identity ffffffff, cluster identity 4711 [ 164.056052][ T6576] tipc: Node number set to 4294967295 [ 164.316766][ T6571] bond0: left promiscuous mode [ 164.338217][ T6571] bond_slave_0: left promiscuous mode [ 164.344230][ T6571] bond_slave_1: left promiscuous mode [ 164.705798][ T6586] xt_CONNSECMARK: invalid mode: 0 [ 164.991536][ T6574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.315030][ T6598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 165.316105][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.459995][ T6446] veth0_vlan: entered promiscuous mode [ 165.465946][ T6600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.413'. [ 165.507081][ T6446] veth1_vlan: entered promiscuous mode [ 165.548102][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.584752][ T6446] veth0_macvtap: entered promiscuous mode [ 165.613126][ T6446] veth1_macvtap: entered promiscuous mode [ 165.667291][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.687378][ T6611] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 165.703678][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.707845][ T6611] [U] J"—E:ÀÆ" [ 165.722802][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.729871][ T6611] [U] ª‡Ó [ 165.753693][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.775254][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.796908][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.807776][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.817732][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.827810][ T8] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 165.839144][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.855905][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.865333][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.878114][ T8] usb 4-1: config 0 descriptor?? [ 165.893371][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.915337][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.933820][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.983818][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.008014][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.020382][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.032067][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.042320][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.078779][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.105717][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.131853][ T6446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.145764][ T6446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.162515][ T6446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.182203][ T6446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.296115][ T8] hid (null): global environment stack underflow [ 166.339038][ T8] uclogic 0003:5543:0522.0005: global environment stack underflow [ 166.347046][ T8] uclogic 0003:5543:0522.0005: item 0 1 1 11 parsing failed [ 166.357437][ T8] uclogic 0003:5543:0522.0005: parse failed [ 166.365276][ T8] uclogic 0003:5543:0522.0005: probe with driver uclogic failed with error -22 [ 166.449109][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.463963][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.523454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.545996][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.552456][ T5267] usb 4-1: USB disconnect, device number 7 [ 166.998067][ T5344] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.768173][ T5344] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 167.776311][ T5344] usb 1-1: config 0 has no interface number 0 [ 167.854879][ T5344] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.924995][ T5344] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.970795][ T5344] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 167.974305][ T6646] @: renamed from vlan0 (while UP) [ 168.000569][ T5344] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 168.160192][ T5344] usb 1-1: Manufacturer: syz [ 168.198999][ T5344] usb 1-1: config 0 descriptor?? [ 169.101390][ T5344] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0006/input/input5 [ 169.271313][ T5344] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 170.343682][ T6687] netlink: 'syz.1.443': attribute type 4 has an invalid length. [ 170.939824][ T29] audit: type=1326 audit(1722741848.090:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.037448][ T29] audit: type=1326 audit(1722741848.090:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.083357][ T5267] usb 1-1: USB disconnect, device number 6 [ 171.111247][ T29] audit: type=1326 audit(1722741848.090:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.206234][ T29] audit: type=1326 audit(1722741848.140:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.250883][ T29] audit: type=1326 audit(1722741848.140:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.302393][ T6709] netlink: 'syz.2.449': attribute type 29 has an invalid length. [ 171.315753][ T29] audit: type=1326 audit(1722741848.140:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.341029][ T6709] netlink: 'syz.2.449': attribute type 29 has an invalid length. [ 171.349001][ T29] audit: type=1326 audit(1722741848.150:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.394458][ T6709] netlink: 'syz.2.449': attribute type 29 has an invalid length. [ 171.416057][ T29] audit: type=1326 audit(1722741848.150:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x7ffc0000 [ 171.908334][ T5344] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.131655][ T5344] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.170215][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.221888][ T5344] usb 5-1: config 0 descriptor?? [ 172.250187][ T5344] cp210x 5-1:0.0: cp210x converter detected [ 172.720973][ T6730] misc userio: No port type given on /dev/userio [ 172.786289][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 178.489199][ T5344] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -110 [ 178.676401][ T5344] cp210x 5-1:0.0: GPIO initialisation failed: -110 [ 178.783675][ T5344] usb 5-1: cp210x converter now attached to ttyUSB0 [ 178.837546][ T6736] netlink: 172 bytes leftover after parsing attributes in process `syz.3.456'. [ 178.883672][ T5344] usb 5-1: USB disconnect, device number 8 [ 179.380113][ T5344] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.460761][ T5344] cp210x 5-1:0.0: device disconnected [ 180.134689][ T6762] binder: BINDER_SET_CONTEXT_MGR already set [ 180.140784][ T6762] binder: 6748:6762 ioctl 4018620d 20000100 returned -16 [ 180.976612][ T6763] __vm_enough_memory: pid: 6763, comm: syz.3.465, bytes: 549549273088 not enough memory for the allocation [ 181.758432][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.961155][ T8] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 181.974059][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.001661][ T8] usb 4-1: config 0 descriptor?? [ 182.020585][ T8] usb 4-1: Invalid firmware size=18. [ 182.355848][ T6796] tmpfs: Unknown parameter 'ýÿ' [ 185.940847][ T5321] usb 4-1: USB disconnect, device number 8 [ 187.730771][ T4609] Bluetooth: hci1: command 0x0406 tx timeout [ 187.846081][ T6832] fuse: root generation should be zero [ 188.907618][ T6840] fuse: Bad value for 'fd' [ 188.921295][ T5222] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 189.098126][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.364699][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.377826][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 189.412470][ T8] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 189.423252][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.439212][ T8] usb 3-1: config 0 descriptor?? [ 189.518177][ T5268] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.585947][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.645861][ T29] audit: type=1326 audit(1722741866.780:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6845 comm="syz.3.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c547779f9 code=0x0 [ 189.786119][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 189.800523][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 189.854286][ T5268] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 189.885409][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.912493][ T5268] usb 1-1: config 0 descriptor?? [ 190.087410][ T8] Bluetooth: Can't get version to change to load ram patch err [ 190.097562][ T8] Bluetooth: Loading sysconfig file failed [ 190.103510][ T8] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 190.113134][ T8] usb 3-1: USB disconnect, device number 6 [ 190.472928][ T6862] can: request_module (can-proto-0) failed. [ 190.481030][ T6869] Bluetooth: MGMT ver 1.23 [ 190.509159][ T6869] bridge0: port 3(gretap0) entered blocking state [ 190.520347][ T6869] bridge0: port 3(gretap0) entered disabled state [ 190.530682][ T6869] gretap0: entered allmulticast mode [ 190.543156][ T6869] gretap0: entered promiscuous mode [ 190.552125][ T6869] bridge0: port 3(gretap0) entered blocking state [ 190.558791][ T6869] bridge0: port 3(gretap0) entered forwarding state [ 190.575959][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.619017][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.957384][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.009590][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.069373][ T5268] ath6kl: Failed to read usb control message: -71 [ 191.084217][ T5268] ath6kl: Unable to read the bmi data from the device: -71 [ 191.101638][ T5268] ath6kl: Unable to recv target info: -71 [ 191.104728][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 191.138882][ T5268] ath6kl: Failed to init ath6kl core: -71 [ 191.146888][ T5268] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 191.214272][ T5268] usb 1-1: USB disconnect, device number 7 [ 193.317780][ T6924] fuseblk: Unknown parameter 'fK' [ 194.399483][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 194.462386][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.518'. [ 194.513489][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 194.758058][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764421][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.158010][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.301621][ T6962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.444922][ T6963] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 195.452773][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 195.606340][ T6963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.755326][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.311979][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 197.320970][ T6986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.758090][ T5267] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.798402][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.960044][ T5267] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 198.978081][ T5267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.018183][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 199.023513][ T5267] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.059772][ T5267] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 199.085639][ T8] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 199.093417][ T5267] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 199.117651][ T6987] vivid-001: disconnect [ 199.148177][ T5267] usb 2-1: Manufacturer: syz [ 199.163332][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 199.172947][ T6987] vivid-001: reconnect [ 199.182639][ T5267] usb 2-1: config 0 descriptor?? [ 199.185240][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 199.219469][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.255788][ T8] usb 3-1: Product: syz [ 199.268147][ T8] usb 3-1: Manufacturer: syz [ 199.295412][ T8] usb 3-1: SerialNumber: syz [ 200.153711][ T5267] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.779414][ T8] usbhid 3-1:1.0: can't add hid device: -71 [ 200.808732][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 200.817505][ T8] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 200.834416][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 200.880222][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 200.881359][ T8] usb 3-1: USB disconnect, device number 7 [ 200.924810][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 200.971585][ T5267] usb 5-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 201.010463][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.174216][ T5267] usb 5-1: Product: syz [ 201.275510][ T5267] usb 5-1: Manufacturer: syz [ 201.294072][ T5267] usb 5-1: SerialNumber: syz [ 201.323608][ T5267] usb 5-1: config 0 descriptor?? [ 201.581608][ T5321] usb 2-1: USB disconnect, device number 9 [ 201.662906][ T5267] kaweth 5-1:0.0: Firmware present in device. [ 203.010239][ T5267] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 203.035115][ T5267] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 203.073040][ T5267] usb 5-1: USB disconnect, device number 9 [ 203.319041][ T7030] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.546'. [ 203.361048][ T7030] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 203.383618][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 203.715682][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 203.878122][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.916047][ T29] audit: type=1326 audit(1722741881.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7050 comm="syz.4.554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370cb779f9 code=0x0 [ 203.945830][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 204.068377][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 204.075135][ T46] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 204.086286][ T46] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 204.097582][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 204.116857][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 204.144952][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 204.185219][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 204.236295][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.284127][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 204.357118][ T46] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 204.474703][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.504544][ T46] usb 2-1: Product: syz [ 204.512890][ T46] usb 2-1: Manufacturer: syz [ 204.517786][ T46] usb 2-1: SerialNumber: syz [ 204.527795][ T46] usb 2-1: config 0 descriptor?? [ 204.547167][ T46] hub 2-1:0.0: bad descriptor, ignoring hub [ 204.568440][ T46] hub 2-1:0.0: probe with driver hub failed with error -5 [ 204.587755][ T46] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 204.638145][ T29] audit: type=1326 audit(1722741881.780:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.694648][ T29] audit: type=1326 audit(1722741881.780:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.733290][ T29] audit: type=1326 audit(1722741881.780:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.778296][ T29] audit: type=1326 audit(1722741881.790:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.803581][ T7067] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 204.803581][ T7067] The task syz.2.556 (7067) triggered the difference, watch for misbehavior. [ 204.842157][ T29] audit: type=1326 audit(1722741881.790:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.852518][ T5267] usb 2-1: USB disconnect, device number 10 [ 204.898538][ T29] audit: type=1326 audit(1722741881.790:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.959187][ T29] audit: type=1326 audit(1722741881.790:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7ffc0000 [ 204.981519][ T29] audit: type=1326 audit(1722741881.790:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88e579817 code=0x7ffc0000 [ 205.008997][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.034098][ T29] audit: type=1326 audit(1722741881.790:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff88e57978c code=0x7ffc0000 [ 205.208092][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 205.218935][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.246340][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.276358][ T46] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 205.286319][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.319464][ T46] usb 4-1: config 0 descriptor?? [ 205.701748][ T7078] cgroup: fork rejected by pids controller in /syz1 [ 206.742402][ T46] samsung 0003:0419:0001.0007: report_id 0 is invalid [ 206.771469][ T46] samsung 0003:0419:0001.0007: item 0 0 1 8 parsing failed [ 206.815080][ T46] samsung 0003:0419:0001.0007: parse failed [ 206.845387][ T46] samsung 0003:0419:0001.0007: probe with driver samsung failed with error -22 [ 206.891011][ T46] usb 4-1: USB disconnect, device number 9 [ 207.042990][ T7094] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 207.087744][ T7094] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 207.115725][ T7094] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 207.452652][ T1060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.665271][ T7102] netlink: 'syz.2.568': attribute type 7 has an invalid length. [ 207.673508][ T7102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.568'. [ 207.698814][ T7102] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 207.706534][ T7102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.568'. [ 209.376763][ T1060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.404569][ T7111] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 209.590177][ T1060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.791854][ T1060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.991092][ T7126] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 210.277723][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.391243][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.400997][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.412109][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.427654][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.440618][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.827907][ T1060] bridge_slave_1: left allmulticast mode [ 211.864788][ T1060] bridge_slave_1: left promiscuous mode [ 211.900642][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.250574][ T5224] Bluetooth: Frame is too long (len 18, expected len 9) [ 212.271220][ T1060] bridge_slave_0: left allmulticast mode [ 212.282167][ T1060] bridge_slave_0: left promiscuous mode [ 212.282417][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.327856][ T7149] input: syz0 as /devices/virtual/input/input7 [ 212.514597][ T5224] Bluetooth: hci4: command tx timeout [ 212.965330][ T1060] bridge0: left promiscuous mode [ 213.731487][ T1060] team0: Port device vlan2 removed [ 213.940568][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 213.970782][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.982918][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.994956][ T1060] bond0 (unregistering): Released all slaves [ 214.013402][ T7149] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.582'. [ 214.140933][ T46] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.158150][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.174156][ T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.189890][ T46] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.199689][ T7180] mmap: syz.4.590 (7180) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.211914][ T46] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.221509][ T46] usb 1-1: Manufacturer: syz [ 214.233280][ T46] usb 1-1: config 0 descriptor?? [ 214.586279][ T7124] chnl_net:caif_netlink_parms(): no params data found [ 214.588188][ T5224] Bluetooth: hci4: command tx timeout [ 214.893755][ T7192] x_tables: duplicate entry at hook 2 [ 214.957905][ T1060] hsr_slave_0: left promiscuous mode [ 214.964657][ T1060] hsr_slave_1: left promiscuous mode [ 214.969165][ T5267] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.989635][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.018426][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.147293][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.161738][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.213929][ T1060] veth1_macvtap: left promiscuous mode [ 215.226941][ T1060] veth0_macvtap: left promiscuous mode [ 215.235355][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 215.254580][ T1060] veth1_vlan: left promiscuous mode [ 215.269826][ T5267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.278081][ T1060] veth0_vlan: left promiscuous mode [ 215.280341][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 215.302862][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.391427][ T5267] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 215.412124][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 215.421149][ T5267] usb 3-1: Product: syz [ 215.425594][ T5267] usb 3-1: Manufacturer: syz [ 215.432801][ T5267] usb 3-1: SerialNumber: syz [ 215.475765][ T5267] usb 3-1: config 0 descriptor?? [ 215.502063][ T5267] usb 3-1: NFC: intf ffff888049993000 id ffffffff8f0b6ac0 [ 215.739370][ T3162] usb 3-1: USB disconnect, device number 8 [ 216.668473][ T5224] Bluetooth: hci4: command tx timeout [ 217.409425][ T5265] usb 1-1: USB disconnect, device number 8 [ 217.447214][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 217.543676][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 217.563966][ T7206] 9pnet_fd: p9_fd_create_tcp (7206): problem connecting socket to 127.0.0.1 [ 218.659918][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.667510][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.698289][ T7124] bridge_slave_0: entered allmulticast mode [ 218.705802][ T7124] bridge_slave_0: entered promiscuous mode [ 218.739933][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.758162][ T5224] Bluetooth: hci4: command tx timeout [ 218.768389][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.789172][ T5268] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 218.797029][ T7124] bridge_slave_1: entered allmulticast mode [ 218.818160][ T7124] bridge_slave_1: entered promiscuous mode [ 218.989916][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 219.004935][ T5268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.054929][ T5268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.119229][ T5268] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.132939][ T7124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.142736][ T5268] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 219.241614][ T7124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.262808][ T5268] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 219.464954][ T5268] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.628462][ T3162] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 219.666068][ T5268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.753151][ T5268] usb 3-1: SerialNumber: syz [ 219.763562][ T7216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.780227][ T5268] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 219.820746][ T5268] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 219.830774][ T7124] team0: Port device team_slave_0 added [ 219.857688][ T7124] team0: Port device team_slave_1 added [ 219.911005][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.920472][ T3162] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 219.922518][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.947676][ T3162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 220.009391][ T3162] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 220.092295][ T3162] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.109359][ T7124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.230361][ T3162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.358271][ T3162] usb 5-1: SerialNumber: syz [ 220.424227][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.547058][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.581098][ T7230] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 220.592235][ T7124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.647562][ T5265] usb 3-1: USB disconnect, device number 9 [ 220.683578][ T7124] hsr_slave_0: entered promiscuous mode [ 220.691324][ T7124] hsr_slave_1: entered promiscuous mode [ 220.716390][ T7124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.732017][ T7124] Cannot create hsr debugfs directory [ 220.809250][ T7227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.290670][ T5344] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.469065][ T7124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.480838][ T5344] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.491446][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.519767][ T5344] usb 4-1: config 0 descriptor?? [ 221.529960][ T5344] cp210x 4-1:0.0: cp210x converter detected [ 221.562425][ T7124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.606609][ T7124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.702413][ T7124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.768186][ T5268] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.982089][ T5344] usb 4-1: cp210x converter now attached to ttyUSB0 [ 222.021656][ T5268] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 222.073687][ T5268] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.211656][ T5268] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.304600][ T3162] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 222.318977][ T5268] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 222.330820][ T3162] usb 5-1: USB disconnect, device number 10 [ 222.338402][ T5268] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 222.359324][ T5268] usb 3-1: Manufacturer: syz [ 222.369937][ T5268] usb 3-1: config 0 descriptor?? [ 222.398137][ T5265] usb 4-1: USB disconnect, device number 10 [ 222.453449][ T5265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.492362][ T5265] cp210x 4-1:0.0: device disconnected [ 222.501319][ T7124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.591805][ T7124] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.633163][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.640395][ T5344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.814855][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.822051][ T5344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.113341][ T7124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.123842][ T7124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.333846][ T939] usb 3-1: USB disconnect, device number 10 [ 226.340859][ T7124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.908809][ T5344] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 227.180418][ T939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.301601][ T7124] veth0_vlan: entered promiscuous mode [ 227.348620][ T7124] veth1_vlan: entered promiscuous mode [ 227.396337][ T5344] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 227.407363][ T939] usb 3-1: Using ep0 maxpacket: 16 [ 227.440143][ T939] usb 3-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 227.460480][ T5344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.491088][ T939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 227.519050][ T7124] veth0_macvtap: entered promiscuous mode [ 227.524870][ T5344] usb 4-1: Product: syz [ 227.535256][ T7124] veth1_macvtap: entered promiscuous mode [ 227.541867][ T5344] usb 4-1: Manufacturer: syz [ 227.555119][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.562125][ T5344] usb 4-1: SerialNumber: syz [ 227.567937][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.580177][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.583049][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 136, changing to 11 [ 227.590781][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.590807][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.590824][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.590840][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.590852][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.592576][ T7124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.620187][ T5344] usb 4-1: config 0 descriptor?? [ 227.629103][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.678489][ T5265] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 227.684646][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.690377][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 57932, setting to 1024 [ 227.708132][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.729972][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.740886][ T939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 227.749227][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.756113][ T939] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.773177][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.773691][ T939] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.783527][ T7124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.791712][ T939] usb 3-1: Manufacturer: syz [ 227.807645][ T7124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.810293][ T939] usb 3-1: config 0 descriptor?? [ 227.832966][ T7124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.861979][ T7124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.871085][ T7124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.880311][ T7124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.889643][ T7124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.916611][ T5344] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 227.925136][ T5265] usb 1-1: Using ep0 maxpacket: 16 [ 227.933674][ T5265] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.970138][ T5265] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.980092][ T5265] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.980131][ T5265] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 227.980154][ T5265] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 227.986657][ T5265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.016236][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.029521][ T3162] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.031507][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.045536][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.055009][ T5265] usb 1-1: SerialNumber: syz [ 228.064134][ T7293] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 228.078490][ T5265] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 228.087835][ T5265] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 228.115001][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.127853][ T5344] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 228.131330][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.137708][ T5344] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 228.161248][ T46] usb 3-1: USB disconnect, device number 11 [ 228.170125][ T5344] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 228.228335][ T3162] usb 5-1: Using ep0 maxpacket: 8 [ 228.229235][ T5344] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 228.240295][ T3162] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.263044][ T3162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.273308][ T3162] usb 5-1: Product: syz [ 228.281286][ T3162] usb 5-1: Manufacturer: syz [ 228.286039][ T3162] usb 5-1: SerialNumber: syz [ 228.328237][ T5344] usb 1-1: USB disconnect, device number 9 [ 228.412769][ T7285] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 228.444960][ T5265] usb 4-1: USB disconnect, device number 11 [ 228.577632][ T7300] tc_dump_action: action bad kind [ 228.817902][ T3162] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 228.825045][ T5224] Bluetooth: min 3 > max 0 [ 228.834883][ T3162] usb 5-1: unit 1 not found! [ 229.021084][ T3162] usb 5-1: USB disconnect, device number 11 [ 229.206756][ T5344] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.638383][ T5344] usb 2-1: Using ep0 maxpacket: 16 [ 229.649367][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 229.663912][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 229.686200][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 229.699492][ T5344] usb 2-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 229.709583][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.717690][ T5344] usb 2-1: Product: syz [ 229.722533][ T5344] usb 2-1: Manufacturer: syz [ 229.727255][ T5344] usb 2-1: SerialNumber: syz [ 229.736000][ T5344] usb 2-1: config 0 descriptor?? [ 229.984857][ T5344] kaweth 2-1:0.0: Firmware present in device. [ 230.191755][ T5344] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 230.203054][ T5344] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 230.216245][ T5344] usb 2-1: USB disconnect, device number 11 [ 230.908170][ T5224] Bluetooth: hci0: command tx timeout [ 231.629952][ T46] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 231.825931][ T46] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 231.850176][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.283451][ T46] usb 5-1: Product: syz [ 232.287692][ T46] usb 5-1: Manufacturer: syz [ 232.292533][ T46] usb 5-1: SerialNumber: syz [ 232.310611][ T46] usb 5-1: config 0 descriptor?? [ 232.348884][ T3162] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 232.886016][ T7371] __vm_enough_memory: pid: 7371, comm: syz.1.650, bytes: 548958322688 not enough memory for the allocation [ 233.341139][ T3162] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 234.785028][ T3162] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 235.039299][ T3162] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.051121][ T3162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 235.080155][ T46] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 235.093648][ T3162] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 235.113031][ T46] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 235.140391][ T3162] usb 4-1: string descriptor 0 read error: -71 [ 235.148729][ T3162] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 235.158376][ T3162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.185519][ T3162] usb 4-1: config 0 descriptor?? [ 235.191352][ T5268] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 235.206156][ T3162] usb 4-1: can't set config #0, error -71 [ 235.233429][ T3162] usb 4-1: USB disconnect, device number 12 [ 235.288631][ T46] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 235.316528][ T46] usb 5-1: USB disconnect, device number 12 [ 235.379895][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 235.402969][ T5268] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.431844][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.589227][ T5268] usb 3-1: Product: syz [ 235.597558][ T5268] usb 3-1: Manufacturer: syz [ 235.604443][ T5268] usb 3-1: SerialNumber: syz [ 236.543319][ T5268] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 236.571773][ T5268] usb 3-1: unit 1 not found! [ 236.659540][ T5268] usb 3-1: USB disconnect, device number 12 [ 239.745907][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 240.225256][ T5344] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 240.249394][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 240.332307][ T7439] binder: BINDER_SET_CONTEXT_MGR already set [ 240.339038][ T7439] binder: 7433:7439 ioctl 4018620d 20000100 returned -16 [ 240.563308][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 240.608411][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 240.622020][ T5344] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 240.634048][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.649055][ T5344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 240.658196][ T5268] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 240.751945][ T5344] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 240.766885][ T8] usb 4-1: config 0 descriptor?? [ 240.780154][ T5344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.789607][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.797720][ T5344] usb 2-1: SerialNumber: syz [ 240.806514][ T7431] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 240.854840][ T5268] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 240.867291][ T5268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.882583][ T5268] usb 1-1: Product: syz [ 240.886891][ T5268] usb 1-1: Manufacturer: syz [ 240.892967][ T5268] usb 1-1: SerialNumber: syz [ 240.904212][ T5268] usb 1-1: config 0 descriptor?? [ 241.047390][ T7428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.118206][ T5268] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 241.242647][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.251771][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.268142][ T5265] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.310455][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.323742][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.336391][ T8] ath6kl: Failed to read usb control message: -71 [ 241.336758][ T5268] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 241.343188][ T8] ath6kl: Unable to read the bmi data from the device: -71 [ 241.351038][ T5268] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 241.366267][ T5268] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 241.369001][ T8] ath6kl: Unable to recv target info: -71 [ 241.386468][ T8] ath6kl: Failed to init ath6kl core: -71 [ 241.402286][ T8] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 241.416661][ T8] usb 4-1: USB disconnect, device number 13 [ 241.442021][ T5268] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 241.471944][ T5265] usb 5-1: Using ep0 maxpacket: 8 [ 241.487442][ T5265] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.498893][ T5265] usb 5-1: config 1 interface 0 has no altsetting 0 [ 241.508110][ T5265] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.40 [ 241.517253][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.526434][ T5265] usb 5-1: Product: syz [ 241.531011][ T5265] usb 5-1: Manufacturer: syz [ 241.535765][ T5265] usb 5-1: SerialNumber: syz [ 241.594724][ T7436] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 241.620451][ T5268] usb 1-1: USB disconnect, device number 10 [ 242.577243][ T5344] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 242.653041][ T5344] usb 2-1: USB disconnect, device number 12 [ 242.787188][ T5265] usbhid 5-1:1.0: can't add hid device: -71 [ 242.798193][ T5265] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 242.855893][ T5265] usb 5-1: USB disconnect, device number 13 [ 243.833228][ T7463] mkiss: ax0: crc mode is auto. [ 243.928387][ T5344] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.957550][ T7470] tipc: Invalid UDP bearer configuration [ 243.957662][ T7470] tipc: Enabling of bearer rejected, failed to enable media [ 244.141229][ T5344] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 244.161466][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.184202][ T5344] usb 4-1: config 0 descriptor?? [ 244.548271][ T5321] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.607622][ T5344] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 244.738591][ T5321] usb 5-1: Using ep0 maxpacket: 16 [ 244.758729][ T5321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.778141][ T5321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.788867][ T5321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 244.801514][ T5321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 244.820844][ T5344] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 244.828213][ T5321] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 244.847086][ T5321] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.860774][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 244.869339][ T5321] usb 5-1: SerialNumber: syz [ 244.894829][ T7479] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 244.903042][ T5344] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 244.913117][ T5321] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 244.969852][ T5321] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 245.122444][ T5344] usb 4-1: USB disconnect, device number 14 [ 245.667576][ T5321] usb 5-1: USB disconnect, device number 14 [ 246.758224][ T5224] Bluetooth: hci1: unexpected subevent 0x01 length: 25 > 18 [ 246.799307][ T7506] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.858055][ T939] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 247.811670][ T939] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 247.967303][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 247.987308][ T939] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 248.001861][ T939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.108087][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.654086][ T939] usb 1-1: SerialNumber: syz [ 248.701203][ T7505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 248.780809][ T939] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 248.804180][ T939] usb 1-1: USB disconnect, device number 11 [ 248.828255][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 248.950511][ T7519] xt_CONNSECMARK: invalid mode: 0 [ 249.144701][ T7533] netlink: 'syz.4.691': attribute type 7 has an invalid length. [ 249.152760][ T7533] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.691'. [ 249.170889][ T7533] netlink: 'syz.4.691': attribute type 3 has an invalid length. [ 249.178672][ T7533] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.691'. [ 250.035525][ T7532] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 250.410044][ T7529] Bluetooth: MGMT ver 1.23 [ 250.654036][ T7547] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.148185][ T5321] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.203666][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.701'. [ 251.328151][ T5321] usb 2-1: Using ep0 maxpacket: 16 [ 251.339029][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.350322][ T5321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.360710][ T5321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.371552][ T5321] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 251.386332][ T5321] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 251.401613][ T5321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.410908][ T5321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.419118][ T5321] usb 2-1: SerialNumber: syz [ 251.435837][ T7556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.444422][ T5321] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 251.452961][ T5321] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 251.692159][ T5321] usb 2-1: USB disconnect, device number 13 [ 251.769136][ T5224] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 252.868323][ T5265] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 253.148864][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 253.476965][ T5265] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 253.488451][ T5265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 253.526359][ T5265] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 253.696452][ T7590] netlink: 'syz.1.705': attribute type 7 has an invalid length. [ 253.704353][ T7590] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.705'. [ 253.725180][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.725355][ T7590] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 253.742336][ T7590] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.705'. [ 253.776554][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.814681][ T5265] usb 3-1: SerialNumber: syz [ 253.862264][ T7580] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.100807][ T7578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.575869][ T7600] netlink: 'syz.4.710': attribute type 25 has an invalid length. [ 255.718311][ T5265] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 255.848889][ T5265] usb 3-1: USB disconnect, device number 13 [ 256.098468][ T7618] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 256.242903][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.249358][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.087566][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 257.087584][ T29] audit: type=1326 audit(1722741934.223:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.0.720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x0 [ 257.447058][ T7646] netlink: 'syz.3.722': attribute type 7 has an invalid length. [ 257.454926][ T7646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.722'. [ 257.470875][ T7646] netlink: 'syz.3.722': attribute type 3 has an invalid length. [ 257.478872][ T7646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.722'. [ 258.128319][ T7644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 258.750040][ T5265] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.108034][ T5265] usb 5-1: Using ep0 maxpacket: 32 [ 259.191900][ T5265] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.542139][ T5265] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.551505][ T5265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.560959][ T5265] usb 5-1: Product: syz [ 259.565177][ T5265] usb 5-1: Manufacturer: syz [ 259.570434][ T5265] usb 5-1: SerialNumber: syz [ 260.758334][ T5265] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.817118][ T939] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 262.327245][ T5265] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.364136][ T5265] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.380644][ T5265] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.393699][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.424023][ T5268] usb 5-1: USB disconnect, device number 15 [ 262.428956][ T7660] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 262.441536][ T5265] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.481091][ T939] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 262.562438][ T939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 262.612346][ T939] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 262.695601][ T5265] usb 2-1: USB disconnect, device number 14 [ 262.695869][ T939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.758140][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.798386][ T7684] tmpfs: Unknown parameter 'obj_user' [ 262.896536][ T939] usb 4-1: SerialNumber: syz [ 262.911121][ T939] usb 4-1: can't set config #1, error -71 [ 262.965877][ T939] usb 4-1: USB disconnect, device number 15 [ 263.269238][ T7696] netlink: 'syz.1.735': attribute type 20 has an invalid length. [ 263.279290][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 264.900143][ T4609] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 264.908129][ T4609] Bluetooth: hci4: command tx timeout [ 265.265508][ T7718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.744'. [ 265.832810][ T5344] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.878525][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 266.052963][ T5344] usb 4-1: Using ep0 maxpacket: 8 [ 266.098385][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.165232][ T5344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.330203][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.376066][ T5344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.407523][ T5265] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 266.443109][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.472473][ T5344] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 266.508234][ T8] usb 1-1: Product: syz [ 266.512472][ T8] usb 1-1: Manufacturer: syz [ 266.517076][ T8] usb 1-1: SerialNumber: syz [ 266.522050][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.532128][ T5344] usb 4-1: config 0 descriptor?? [ 266.702303][ T5265] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 134, using maximum allowed: 30 [ 266.713501][ T5265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 266.727337][ T5265] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 266.756906][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.766640][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.774923][ T5265] usb 3-1: SerialNumber: syz [ 266.794025][ T7731] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 267.025918][ T7728] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 267.040826][ T5344] logitech 0003:046D:C20E.0008: rdesc size test failed for formula gp [ 267.050044][ T5344] logitech 0003:046D:C20E.0008: unbalanced delimiter at end of report description [ 267.074648][ T5344] logitech 0003:046D:C20E.0008: parse failed [ 267.096155][ T5344] logitech 0003:046D:C20E.0008: probe with driver logitech failed with error -22 [ 267.362282][ T5268] usb 4-1: USB disconnect, device number 16 [ 267.577769][ T8] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 267.596159][ T8] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 267.605085][ T8] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 267.684372][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 267.783029][ T8] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 267.824700][ T8] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 267.868642][ T8] usb 1-1: USB disconnect, device number 12 [ 267.893491][ T8] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 268.106192][ T46] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 268.142499][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.481283][ T46] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.009425][ T46] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 269.093612][ T46] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 269.103447][ T46] usb 5-1: Manufacturer: syz [ 269.104056][ T5265] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 269.121844][ T46] usb 5-1: config 0 descriptor?? [ 269.253605][ T5265] usb 3-1: USB disconnect, device number 14 [ 269.472214][ T7758] loop7: detected capacity change from 0 to 16385 [ 269.549071][ T7758] loop7: detected capacity change from 16385 to 16321 [ 269.618742][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.911256][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.931236][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.033020][ T46] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 270.133766][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.651999][ T46] usb 2-1: config 0 descriptor?? [ 270.910021][ T3162] usb 5-1: USB disconnect, device number 16 [ 271.023467][ T7781] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 271.137572][ T7782] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 271.176115][ T46] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 271.387056][ T46] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 271.432557][ T46] usb 2-1: USB disconnect, device number 15 [ 272.551552][ T7800] fuseblk: Unknown parameter 'fK' [ 273.838128][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 274.022490][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.046953][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 274.082958][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 274.116940][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 274.257564][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.952232][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 274.988300][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.006856][ T9] usb 2-1: Product: syz [ 275.011950][ T9] usb 2-1: Manufacturer: syz [ 275.017398][ T9] usb 2-1: SerialNumber: syz [ 275.038514][ T9] usb 2-1: config 0 descriptor?? [ 275.065245][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 275.099462][ T9] imon 2-1:0.0: unable to initialize intf0, err -90 [ 275.106267][ T9] imon:imon_probe: failed to initialize context! [ 275.199376][ T9] imon 2-1:0.0: unable to register, err -19 [ 275.620365][ T9] usb 2-1: USB disconnect, device number 16 [ 275.924781][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 276.037018][ T29] audit: type=1326 audit(1722741953.183:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7824 comm="syz.0.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9841779f9 code=0x0 [ 276.085957][ T7829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 276.821540][ T7844] netlink: 'syz.0.784': attribute type 16 has an invalid length. [ 276.852331][ T7844] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.563740][ T7846] process 'syz.3.785' launched './file0' with NULL argv: empty string added [ 277.627513][ T7846] usb usb8: usbfs: process 7846 (syz.3.785) did not claim interface 0 before use [ 277.639036][ T7856] @ÿ: renamed from veth0_vlan (while UP) [ 277.756393][ C1] sd 0:0:1:0: [sda] tag#7586 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 277.767092][ C1] sd 0:0:1:0: [sda] tag#7586 CDB: Read(6) 08 00 00 00 85 f0 [ 277.948299][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.181323][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 278.239674][ T46] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 278.255805][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.279233][ T46] usb 2-1: Product: syz [ 278.283478][ T46] usb 2-1: Manufacturer: syz [ 278.315337][ T7878] netlink: 'syz.0.798': attribute type 21 has an invalid length. [ 278.327759][ T46] usb 2-1: SerialNumber: syz [ 278.340521][ T46] usb 2-1: config 0 descriptor?? [ 278.359680][ T46] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 278.521128][ T29] audit: type=1326 audit(1722741955.673:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 278.555225][ T29] audit: type=1326 audit(1722741955.703:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 278.756319][ T5224] Bluetooth: hci3: command 0x0406 tx timeout [ 278.828689][ T3162] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 279.039440][ T3162] usb 4-1: Using ep0 maxpacket: 16 [ 279.054817][ T3162] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.078094][ T3162] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.088378][ T3162] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.107707][ T29] audit: type=1326 audit(1722741956.253:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.110825][ T3162] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.40 [ 279.145404][ T3162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.165139][ T3162] usb 4-1: Product: syz [ 279.169815][ T3162] usb 4-1: Manufacturer: syz [ 279.174493][ T3162] usb 4-1: SerialNumber: syz [ 279.184140][ T29] audit: type=1326 audit(1722741956.253:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.205656][ T29] audit: type=1326 audit(1722741956.253:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.227449][ T29] audit: type=1326 audit(1722741956.253:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.249734][ T29] audit: type=1326 audit(1722741956.253:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.271231][ T29] audit: type=1326 audit(1722741956.253:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.293291][ T29] audit: type=1326 audit(1722741956.253:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7874 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e5779f9 code=0x7fc00000 [ 279.398395][ T3162] usbhid 4-1:1.0: can't add hid device: -22 [ 279.404550][ T3162] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 279.599610][ T46] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 279.610381][ T46] usb 2-1: USB disconnect, device number 17 [ 279.646857][ T3162] usb 4-1: USB disconnect, device number 17 [ 280.542501][ T7896] usb usb8: usbfs: process 7896 (syz.2.803) did not claim interface 0 before use [ 282.648687][ T7947] usb usb8: usbfs: process 7947 (syz.1.819) did not claim interface 0 before use [ 285.307427][ T7967] pim6reg1: entered promiscuous mode [ 285.333522][ T7967] pim6reg1: entered allmulticast mode [ 285.508191][ T7975] Process accounting resumed [ 286.008499][ T7989] binder: 7982:7989 ioctl c0306201 0 returned -14 [ 286.477185][ T8006] netlink: 'syz.1.844': attribute type 2 has an invalid length. [ 287.595655][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 287.596019][ T29] audit: type=1804 audit(1722741964.743:60): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.861" name="/newroot/50/bus/bus" dev="overlay" ino=298 res=1 errno=0 [ 288.670109][ T8067] program syz.2.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.248557][ T3162] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.331134][ T29] audit: type=1804 audit(1722741968.473:61): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.882" name="/newroot/180/file0" dev="fuse" ino=1 res=1 errno=0 [ 291.448105][ T3162] usb 4-1: Using ep0 maxpacket: 16 [ 292.216685][ T3162] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 292.225240][ T3162] usb 4-1: config 0 has no interface number 0 [ 292.231882][ T3162] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.278056][ T3162] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.308066][ T3162] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 292.327472][ T3162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.360599][ T3162] usb 4-1: config 0 descriptor?? [ 292.530385][ T8133] netlink: 'syz.4.890': attribute type 2 has an invalid length. [ 292.580881][ T8133] vxcan2: entered allmulticast mode [ 293.443029][ T3162] uclogic 0003:5543:0781.000A: item fetching failed at offset 2/5 [ 293.451719][ T3162] uclogic 0003:5543:0781.000A: parse failed [ 293.457737][ T3162] uclogic 0003:5543:0781.000A: probe with driver uclogic failed with error -22 [ 293.471262][ T3162] usb 4-1: USB disconnect, device number 18 [ 294.968104][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 297.339033][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 299.308532][ T5321] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 299.758757][ T9] usb 5-1: device descriptor read/all, error -71 [ 300.772329][ T29] audit: type=1326 audit(1722741977.923:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c547779f9 code=0x7ffc0000 [ 300.895149][ T29] audit: type=1326 audit(1722741977.953:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f3c547779f9 code=0x7ffc0000 [ 300.916897][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.943461][ T29] audit: type=1326 audit(1722741977.953:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8218 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c547779f9 code=0x7ffc0000 [ 301.610029][ T8244] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.663485][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 301.889828][ T8254] tmpfs: Unknown parameter 'obj_user' [ 302.102461][ T8258] netlink: 'syz.3.934': attribute type 20 has an invalid length. [ 302.108081][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.114759][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 302.307342][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 302.388094][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 302.417331][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.455778][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.481646][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 302.508891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.540960][ T9] usb 2-1: config 0 descriptor?? [ 302.819051][ T8268] dummy0: entered promiscuous mode [ 302.838744][ T8268] dummy0: left promiscuous mode [ 303.014381][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 303.030573][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 303.049151][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 303.065359][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 303.073442][ T9] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 303.108657][ T9] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 303.376216][ T8276] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 303.384265][ T8276] netlink: 2 bytes leftover after parsing attributes in process `syz.2.943'. [ 303.393828][ T8276] team0: entered promiscuous mode [ 303.399764][ T8276] team_slave_0: entered promiscuous mode [ 303.406807][ T8276] team_slave_1: entered promiscuous mode [ 303.415497][ T8276] bridge0: port 3(team0) entered blocking state [ 303.422455][ T8276] bridge0: port 3(team0) entered disabled state [ 303.429261][ T8276] team0: entered allmulticast mode [ 303.434536][ T8276] team_slave_0: entered allmulticast mode [ 303.440556][ T8276] team_slave_1: entered allmulticast mode [ 303.451847][ T8276] bridge0: port 3(team0) entered blocking state [ 303.458866][ T8276] bridge0: port 3(team0) entered forwarding state [ 303.499253][ T5224] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 303.690561][ T5321] usb 2-1: USB disconnect, device number 18 [ 303.949521][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 304.477470][ T8300] No such timeout policy "syz0" [ 304.561855][ T3162] libceph: connect (1)[c::]:6789 error -101 [ 304.576348][ T3162] libceph: mon0 (1)[c::]:6789 connect error [ 304.634071][ T3162] libceph: connect (1)[c::]:6789 error -101 [ 304.659385][ T3162] libceph: mon0 (1)[c::]:6789 connect error [ 304.766247][ T8297] ceph: No mds server is up or the cluster is laggy [ 306.419187][ T8333] usb usb8: usbfs: process 8333 (syz.0.963) did not claim interface 0 before use [ 306.663097][ T8336] nfs: Bad value for 'source' [ 306.742839][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 306.768320][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 307.103025][ T8343] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 307.103025][ T8343] program syz.3.966 not setting count and/or reply_len properly [ 307.184503][ T8343] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 307.192455][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.966'. [ 308.111662][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 309.007537][ T8360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.062473][ T29] audit: type=1326 audit(1722741986.183:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8345 comm="syz.1.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3219f779f9 code=0x0 [ 309.165740][ T8364] vlan2: entered promiscuous mode [ 309.529999][ T9] libceph: connect (1)[c::]:6789 error -101 [ 309.585803][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 309.675578][ T8376] ceph: No mds server is up or the cluster is laggy [ 310.456881][ T8400] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 310.755837][ T8406] pimreg: entered allmulticast mode [ 311.183668][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 311.329904][ T29] audit: type=1326 audit(1722741988.483:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.4.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370cb779f9 code=0x0 [ 311.698909][ T8434] ipip0: entered promiscuous mode [ 311.708361][ T4609] Bluetooth: hci0: command 0x0406 tx timeout [ 313.195815][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 313.384046][ T8460] ISOFS: Unable to identify CD-ROM format. [ 316.968788][ T5321] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.104167][ T8484] xt_CONNSECMARK: invalid mode: 0 [ 317.636932][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.647497][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.698145][ T5321] usb 3-1: Using ep0 maxpacket: 16 [ 317.706369][ T5321] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3 [ 317.732892][ T5321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.819194][ T5321] usb 3-1: Product: syz [ 317.823377][ T5321] usb 3-1: Manufacturer: syz [ 317.865914][ T5321] usb 3-1: SerialNumber: syz [ 317.895630][ T5321] usb 3-1: config 0 descriptor?? [ 317.929489][ T8493] tipc: Invalid UDP bearer configuration [ 317.929563][ T8493] tipc: Enabling of bearer rejected, failed to enable media [ 318.127010][ T5321] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 318.138037][ T5321] usb 3-1: USB disconnect, device number 15 [ 319.128938][ T4609] Bluetooth: hci5: sending frame failed (-49) [ 319.146163][ T5224] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 319.935404][ T8512] tun0: tun_chr_ioctl cmd 1074025676 [ 319.940911][ T8512] tun0: owner set to 0 [ 320.037312][ T8516] syz.3.1020: attempt to access beyond end of device [ 320.037312][ T8516] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 320.065341][ T8516] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 320.342535][ T4609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.356693][ T4609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.365794][ T4609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.376762][ T4609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.388394][ T4609] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 320.399782][ T4609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.438116][ T5265] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 320.482356][ T8528] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 320.618160][ T5265] usb 2-1: Using ep0 maxpacket: 8 [ 320.632774][ T5265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.649483][ T5265] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 320.660630][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 320.707414][ T5265] usb 2-1: SerialNumber: syz [ 320.746020][ T5265] usb 2-1: config 0 descriptor?? [ 320.777203][ T5265] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 320.815461][ T5265] usb 2-1: Failed to create links for entity 255 [ 320.824009][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 320.838287][ T5265] usb 2-1: Failed to register entities (-22). [ 321.100356][ T5265] usb 2-1: USB disconnect, device number 19 [ 321.191602][ T8548] tipc: Invalid UDP bearer configuration [ 321.191682][ T8548] tipc: Enabling of bearer rejected, failed to enable media [ 321.210282][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.217433][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.295837][ T8522] bridge_slave_0: entered allmulticast mode [ 321.321742][ T8522] bridge_slave_0: entered promiscuous mode [ 321.367740][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.405249][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.453909][ T8522] bridge_slave_1: entered allmulticast mode [ 321.480287][ T8522] bridge_slave_1: entered promiscuous mode [ 321.534394][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.550353][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.622155][ T8522] team0: Port device team_slave_0 added [ 321.633938][ T8522] team0: Port device team_slave_1 added [ 321.751304][ T8552] sp0: Synchronizing with TNC [ 321.759336][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.779299][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.872667][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.054415][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.429505][ T4609] Bluetooth: hci5: command tx timeout [ 322.948213][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.076349][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.242020][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 323.265480][ T8563] netem: unknown loss type 0 [ 323.285559][ T8563] netem: change failed [ 323.436461][ T8522] hsr_slave_0: entered promiscuous mode [ 323.474392][ T8522] hsr_slave_1: entered promiscuous mode [ 323.497582][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.522288][ T8522] Cannot create hsr debugfs directory [ 326.094431][ T4609] Bluetooth: hci5: command tx timeout [ 328.118366][ T5224] Bluetooth: hci5: command tx timeout [ 329.020509][ T8522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.234037][ T8522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.404075][ T8522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.418313][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 329.530267][ T8627] input: syz0 as /devices/virtual/input/input9 [ 329.534295][ T8522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.618078][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 329.718515][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 329.759100][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 329.768560][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.777718][ T9] usb 2-1: Product: syz [ 329.782877][ T9] usb 2-1: Manufacturer: syz [ 329.787642][ T9] usb 2-1: SerialNumber: syz [ 330.188251][ T5224] Bluetooth: hci5: command tx timeout [ 330.238344][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 330.254267][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 330.337366][ T46] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 330.539377][ T9] usb 2-1: config 0 descriptor?? [ 330.562382][ T9] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 330.566179][ T46] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 330.589995][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 330.645024][ T46] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 330.685393][ T46] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 330.706646][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 330.716803][ T46] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 330.759660][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.770990][ T8522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.788156][ T46] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 330.794887][ T9] radio-raremono 2-1:0.0: this is not Thanko's Raremono. [ 330.813005][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 330.822601][ T8522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.838454][ T9] usb 2-1: USB disconnect, device number 20 [ 330.862666][ T8522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.889933][ T8522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.957466][ T5273] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 331.006113][ T46] scsi host1: usb-storage 3-1:1.0 [ 331.039420][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.084428][ T5224] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 331.087735][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.123584][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.130770][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.157002][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.164248][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.178167][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 331.196976][ T5273] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 331.235049][ T5273] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.274303][ T46] usb 3-1: USB disconnect, device number 16 [ 331.276233][ T5273] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.320073][ T5273] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.357888][ T5273] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.370103][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.380401][ T5273] usb 5-1: Product: syz [ 331.384603][ T5273] usb 5-1: Manufacturer: syz [ 331.398467][ T5273] usb 5-1: SerialNumber: syz [ 331.526930][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.679618][ T5273] usb 5-1: USB disconnect, device number 19 [ 331.710748][ T8522] veth0_vlan: entered promiscuous mode [ 331.755107][ T8522] veth1_vlan: entered promiscuous mode [ 331.978305][ T8666] ax25_connect(): syz.1.1063 uses autobind, please contact jreuter@yaina.de [ 332.599062][ T8667] syz.3.1062: attempt to access beyond end of device [ 332.599062][ T8667] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 333.066304][ T8522] veth0_macvtap: entered promiscuous mode [ 333.117725][ T8522] veth1_macvtap: entered promiscuous mode [ 333.555007][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.656446][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.752167][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.942472][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.963039][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.015478][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.027281][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.038674][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.050361][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.061102][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.075158][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.086134][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.096663][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.106870][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.123290][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.152773][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.198021][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.254678][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.378484][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.388582][ T8522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.399378][ T8522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.420683][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.421144][ T3162] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 334.479009][ T3162] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 335.088793][ T8684] ip6t_srh: unknown srh invflags 7D00 [ 335.347006][ T4609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 335.355966][ T4609] Bluetooth: hci1: Injecting HCI hardware error event [ 335.364297][ T4609] Bluetooth: hci4: command 0x0406 tx timeout [ 335.371910][ T4609] Bluetooth: hci1: hardware error 0x00 [ 335.517921][ T3162] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 335.570706][ T8522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.583231][ T8522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.584352][ T8677] usb usb8: usbfs: process 8677 (syz.4.1065) did not claim interface 0 before use [ 335.593418][ T8522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.610818][ T8522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.735292][ T2465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.768937][ T2465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.855408][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.870822][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.908126][ T5265] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 336.109741][ T5265] usb 3-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.131326][ T5265] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 336.187381][ T5265] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 336.297104][ T5265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.353568][ T5265] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 336.363048][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.373667][ T5265] usb 3-1: Product: syz [ 336.379711][ T5265] usb 3-1: Manufacturer: syz [ 336.387188][ T5265] usb 3-1: SerialNumber: syz [ 336.397886][ T5265] usb 3-1: config 0 descriptor?? [ 336.406624][ T8688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.440548][ T5265] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 336.532168][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 337.194086][ T8712] 9pnet_fd: Insufficient options for proto=fd [ 337.818413][ T4609] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 337.923678][ T8715] sctp: [Deprecated]: syz.1.1076 (pid 8715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.923678][ T8715] Use struct sctp_sack_info instead [ 338.060576][ T2947] Bluetooth: hci3: Frame reassembly failed (-84) [ 338.428461][ T3162] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 338.669031][ T3162] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 338.685930][ T3162] usb 5-1: config 0 has no interface number 1 [ 338.697071][ T8730] usb usb8: usbfs: process 8730 (syz.3.1082) did not claim interface 0 before use [ 338.698838][ T3162] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 338.719184][ T3162] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 338.731866][ T3162] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.745028][ T3162] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 338.760847][ T3162] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 338.772273][ T3162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.824894][ T3162] usb 5-1: config 0 descriptor?? [ 339.089659][ T5268] usb 3-1: USB disconnect, device number 17 [ 339.105095][ T3162] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.122030][ T3162] usb 5-1: MIDIStreaming interface descriptor not found [ 339.214337][ T3162] gspca_main: spca561-2.14.0 probing abcd:cdee [ 339.227699][ T3162] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 339.240180][ T3162] usb 5-1: USB disconnect, device number 20 [ 339.581459][ T8744] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 339.581459][ T8744] program syz.2.1083 not setting count and/or reply_len properly [ 339.666914][ T8744] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 339.674902][ T8744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1083'. [ 339.686739][ T8744] bridge0: port 4(gretap0) entered blocking state [ 339.693878][ T8744] bridge0: port 4(gretap0) entered disabled state [ 339.701531][ T8744] gretap0: entered allmulticast mode [ 339.715022][ T8744] gretap0: entered promiscuous mode [ 339.724242][ T8744] bridge0: port 4(gretap0) entered blocking state [ 339.730852][ T8744] bridge0: port 4(gretap0) entered forwarding state [ 340.108665][ T4609] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 340.296967][ T8746] ipip0: entered promiscuous mode [ 341.269033][ T8753] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1088'. [ 341.288153][ T8753] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 342.428926][ T8768] syz.2.1093[8768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.429087][ T8768] syz.2.1093[8768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.176212][ T8836] kexec: Could not allocate control_code_buffer [ 347.277405][ T8867] block device autoloading is deprecated and will be removed. [ 347.307176][ T8867] syz.3.1115: attempt to access beyond end of device [ 347.307176][ T8867] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 347.387933][ T8869] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 347.394490][ T8869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.405764][ T8869] vhci_hcd vhci_hcd.0: Device attached [ 452.638004][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 452.645015][ C1] rcu: 0-...!: (6 ticks this GP) idle=3c5c/1/0x4000000000000000 softirq=23412/23414 fqs=0 [ 452.656523][ C1] rcu: (detected by 1, t=10506 jiffies, g=30685, q=123 ncpus=2) [ 452.664257][ C1] Sending NMI from CPU 1 to CPUs 0: [ 452.669489][ C0] NMI backtrace for cpu 0 [ 452.669511][ C0] CPU: 0 UID: 0 PID: 8886 Comm: syz.4.1120 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 452.669529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 452.669540][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 452.669570][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 20 61 70 7e c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 [ 452.669587][ C0] RSP: 0018:ffffc90000007c28 EFLAGS: 00000002 [ 452.669602][ C0] RAX: ffffffff89b41d44 RBX: ffff8880226bd000 RCX: ffff88801fde1e00 [ 452.669614][ C0] RDX: 0000000080010004 RSI: 0000000000000004 RDI: ffff8880226bd080 [ 452.669625][ C0] RBP: 0000000000000000 R08: ffff8880226bd083 R09: 1ffff110044d7a10 [ 452.669636][ C0] R10: dffffc0000000000 R11: ffffed10044d7a11 R12: 0000000000000000 [ 452.669647][ C0] R13: ffff8880226bd000 R14: ffff8880226bd080 R15: 0000000000000000 [ 452.669658][ C0] FS: 00007f370d95d6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 452.669672][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.669684][ C0] CR2: 0000000020041000 CR3: 00000000500b8000 CR4: 00000000003526f0 [ 452.669697][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 452.669706][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 452.669716][ C0] Call Trace: [ 452.669724][ C0] [ 452.669733][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 452.669752][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 452.669774][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 452.669790][ C0] ? nmi_handle+0x2a/0x5a0 [ 452.669814][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 452.669831][ C0] ? nmi_handle+0x14f/0x5a0 [ 452.669845][ C0] ? nmi_handle+0x2a/0x5a0 [ 452.669861][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 452.669878][ C0] ? default_do_nmi+0x63/0x160 [ 452.669895][ C0] ? exc_nmi+0x123/0x1f0 [ 452.669910][ C0] ? end_repeat_nmi+0xf/0x53 [ 452.669929][ C0] ? taprio_set_budgets+0x244/0x370 [ 452.669946][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 452.669965][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 452.669983][ C0] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 452.670002][ C0] [ 452.670007][ C0] [ 452.670012][ C0] taprio_set_budgets+0x244/0x370 [ 452.670032][ C0] advance_sched+0x98d/0xca0 [ 452.670054][ C0] ? __pfx_advance_sched+0x10/0x10 [ 452.670069][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 452.670086][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 452.670114][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 452.670131][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 452.670152][ C0] hrtimer_interrupt+0x396/0x990 [ 452.670181][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 452.670204][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 452.670222][ C0] [ 452.670227][ C0] [ 452.670233][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.670255][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 452.670273][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 5f 40 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 83 c5 ab f5 65 8b 05 d4 ac 4c 74 85 c0 74 43 48 c7 04 24 0e 36 [ 452.670286][ C0] RSP: 0018:ffffc900091d72a0 EFLAGS: 00000206 [ 452.670299][ C0] RAX: 8e4725dcec854200 RBX: 1ffff9200123ae58 RCX: ffffffff81702daa [ 452.670311][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 452.670322][ C0] RBP: ffffc900091d7330 R08: ffffffff934ec85f R09: 1ffffffff269d90b [ 452.670334][ C0] R10: dffffc0000000000 R11: fffffbfff269d90c R12: dffffc0000000000 [ 452.670345][ C0] R13: 1ffff9200123ae54 R14: ffffc900091d72c0 R15: 0000000000000246 [ 452.670361][ C0] ? mark_lock+0x9a/0x350 [ 452.670383][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 452.670400][ C0] ? rcu_is_watching+0x15/0xb0 [ 452.670419][ C0] ? lru_add_fn+0xbb6/0x1a20 [ 452.670439][ C0] ? folio_memcg+0xe3/0x270 [ 452.670460][ C0] folio_batch_move_lru+0x240/0x4e0 [ 452.670480][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 452.670499][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 452.670521][ C0] ? __lruvec_stat_mod_folio+0x203/0x300 [ 452.670535][ C0] ? folio_batch_add_and_move+0x98/0x2b0 [ 452.670553][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 452.670573][ C0] folio_add_lru+0x39c/0x9e0 [ 452.670590][ C0] ? folio_add_lru+0x27b/0x9e0 [ 452.670610][ C0] handle_pte_fault+0x4ee8/0x6eb0 [ 452.670637][ C0] ? mark_lock+0x9a/0x350 [ 452.670657][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 452.670692][ C0] ? mt_find+0x226/0x850 [ 452.670711][ C0] ? __pfx_lock_release+0x10/0x10 [ 452.670734][ C0] handle_mm_fault+0xf70/0x1880 [ 452.670764][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 452.670788][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 452.670810][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 452.670827][ C0] exc_page_fault+0x2b9/0x8c0 [ 452.670848][ C0] asm_exc_page_fault+0x26/0x30 [ 452.670867][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 452.670883][ C0] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 452.670895][ C0] RSP: 0018:ffffc900091d7ad0 EFLAGS: 00050246 [ 452.670907][ C0] RAX: ffffffff84a7b301 RBX: 0000000020041040 RCX: 0000000000000040 [ 452.670918][ C0] RDX: 0000000000000000 RSI: ffffc900091d7b60 RDI: 0000000020041000 [ 452.670928][ C0] RBP: ffffc900091d7c10 R08: ffffc900091d7b9f R09: 1ffff9200123af73 [ 452.670940][ C0] R10: dffffc0000000000 R11: fffff5200123af74 R12: 0000000000000040 [ 452.670951][ C0] R13: 000000000000d580 R14: 0000000020041000 R15: ffffc900091d7b60 [ 452.670966][ C0] ? _copy_to_user+0x11/0xb0 [ 452.670987][ C0] _copy_to_user+0x86/0xb0 [ 452.671006][ C0] rng_dev_read+0x3be/0x6d0 [ 452.671025][ C0] ? mark_lock+0x9a/0x350 [ 452.671046][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 452.671068][ C0] ? security_file_permission+0x7f/0xa0 [ 452.671087][ C0] ? rw_verify_area+0x52a/0x6b0 [ 452.671109][ C0] vfs_readv+0x6c2/0xa90 [ 452.671132][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 452.671151][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 452.671176][ C0] ? __fget_files+0x29/0x470 [ 452.671202][ C0] __x64_sys_preadv+0x1c7/0x2d0 [ 452.671220][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 452.671236][ C0] ? do_syscall_64+0x100/0x230 [ 452.671257][ C0] ? do_syscall_64+0xb6/0x230 [ 452.671276][ C0] do_syscall_64+0xf3/0x230 [ 452.671295][ C0] ? clear_bhb_loop+0x35/0x90 [ 452.671310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.671330][ C0] RIP: 0033:0x7f370cb779f9 [ 452.671344][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.671356][ C0] RSP: 002b:00007f370d95d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 452.671371][ C0] RAX: ffffffffffffffda RBX: 00007f370cd05f80 RCX: 00007f370cb779f9 [ 452.671383][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 452.671393][ C0] RBP: 00007f370cbe58ee R08: 0000000000000000 R09: 0000000000000000 [ 452.671403][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.671412][ C0] R13: 000000000000000b R14: 00007f370cd05f80 R15: 00007ffe4d1efbe8 [ 452.671431][ C0] [ 452.671475][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g30685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 453.396605][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 453.406575][ C1] rcu: RCU grace-period kthread stack dump: [ 453.412634][ C1] task:rcu_preempt state:R running task stack:25168 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 453.424376][ C1] Call Trace: [ 453.427656][ C1] [ 453.430593][ C1] __schedule+0x17ae/0x4a10 [ 453.435148][ C1] ? __pfx___schedule+0x10/0x10 [ 453.440007][ C1] ? __pfx_lock_release+0x10/0x10 [ 453.445033][ C1] ? __asan_memset+0x23/0x50 [ 453.449631][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 453.455443][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.461778][ C1] ? schedule+0x90/0x320 [ 453.466048][ C1] schedule+0x14b/0x320 [ 453.470238][ C1] schedule_timeout+0x1be/0x310 [ 453.475105][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 453.480488][ C1] ? __pfx_process_timeout+0x10/0x10 [ 453.485789][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 453.491350][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 453.496213][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 453.501424][ C1] ? rcu_gp_init+0x1256/0x1630 [ 453.506201][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 453.511176][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 453.516485][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 453.522399][ C1] ? finish_swait+0xd4/0x1e0 [ 453.527022][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 453.531668][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.536883][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 453.542790][ C1] ? __kthread_parkme+0x169/0x1d0 [ 453.547852][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.553093][ C1] kthread+0x2f0/0x390 [ 453.557190][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 453.562401][ C1] ? __pfx_kthread+0x10/0x10 [ 453.567019][ C1] ret_from_fork+0x4b/0x80 [ 453.571475][ C1] ? __pfx_kthread+0x10/0x10 [ 453.576087][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.580884][ C1] [ 453.583905][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 453.590224][ C1] CPU: 1 UID: 0 PID: 8882 Comm: syz.4.1120 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 453.600898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.610952][ C1] RIP: 0010:kvm_wait+0x250/0x2c0 [ 453.615895][ C1] Code: 3b 45 0f b6 f6 44 89 ff 44 89 f6 e8 2a 0f 53 00 e8 35 73 5a 00 45 38 f7 75 15 66 90 e8 99 0e 53 00 0f 00 2d 82 ca a7 0a fb f4 50 fe ff ff e8 86 0e 53 00 fb e9 45 fe ff ff 89 d9 80 e1 07 38 [ 453.635505][ C1] RSP: 0000:ffffc9000309f580 EFLAGS: 000002d3 [ 453.641579][ C1] RAX: ffffffff81406737 RBX: ffff88801f687ea0 RCX: ffff888029db9e00 [ 453.649551][ C1] RDX: 0000000000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3f8900 [ 453.657524][ C1] RBP: ffffc9000309f650 R08: ffffffff934ec807 R09: 1ffffffff269d900 [ 453.665504][ C1] R10: dffffc0000000000 R11: fffffbfff269d901 R12: 1ffff92000613eb4 [ 453.673479][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000003 [ 453.681453][ C1] FS: 0000555593fac500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 453.690384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.697061][ C1] CR2: 0000000020002ec4 CR3: 00000000500b8000 CR4: 00000000003526f0 [ 453.705038][ C1] Call Trace: [ 453.708322][ C1] [ 453.711169][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 453.717510][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 453.723161][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 453.728981][ C1] ? __pfx_lock_release+0x10/0x10 [ 453.734023][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 453.740272][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 453.745661][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 453.751301][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 453.756505][ C1] ? acct_account_cputime+0xd3/0x210 [ 453.761802][ C1] ? update_process_times+0x1ce/0x230 [ 453.767182][ C1] ? tick_nohz_handler+0x37c/0x500 [ 453.772301][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 453.777768][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 453.783139][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 453.789144][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 453.794865][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 453.800945][ C1] ? hrtimer_interrupt+0x396/0x990 [ 453.806083][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 453.812247][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 453.818059][ C1] [ 453.821003][ C1] [ 453.823937][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.830108][ C1] ? kvm_wait+0x247/0x2c0 [ 453.834445][ C1] ? kvm_wait+0x250/0x2c0 [ 453.838776][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 453.843982][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 453.848680][ C1] __pv_queued_spin_lock_slowpath+0x8d0/0xdc0 [ 453.854769][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 453.861386][ C1] queued_spin_lock_slowpath+0x42/0x50 [ 453.866850][ C1] do_raw_spin_lock+0x272/0x370 [ 453.871711][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 453.877087][ C1] ? blk_cgroup_congested+0x1b/0x200 [ 453.882387][ C1] __pte_offset_map_lock+0x1ba/0x300 [ 453.887687][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 453.893495][ C1] ? blk_cgroup_congested+0x1b/0x200 [ 453.898785][ C1] ? blk_cgroup_congested+0x1f0/0x200 [ 453.904165][ C1] ? __folio_throttle_swaprate+0xc7/0x1d0 [ 453.909896][ C1] handle_pte_fault+0x47e7/0x6eb0 [ 453.914943][ C1] ? mark_lock+0x9a/0x350 [ 453.919283][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 453.924676][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 453.930050][ C1] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 453.935267][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 453.940997][ C1] handle_mm_fault+0xf70/0x1880 [ 453.945876][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 453.951170][ C1] ? lock_vma_under_rcu+0x592/0x6e0 [ 453.956395][ C1] ? exc_page_fault+0x113/0x8c0 [ 453.961258][ C1] exc_page_fault+0x459/0x8c0 [ 453.965948][ C1] asm_exc_page_fault+0x26/0x30 [ 453.970806][ C1] RIP: 0033:0x7f370ca3ef91 [ 453.975228][ C1] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 453.994919][ C1] RSP: 002b:00007ffe4d1efd10 EFLAGS: 00010246 [ 454.000993][ C1] RAX: 0000000020002ec4 RBX: 0000000000000004 RCX: 0000000000000000 [ 454.008964][ C1] RDX: 000000000000ccfa RSI: 0000000000000000 RDI: 0000555593fac3c8 [ 454.016935][ C1] RBP: 00007ffe4d1efe20 R08: 0000000000000000 R09: 0000000000000000 [ 454.024907][ C1] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000032 [ 454.032880][ C1] R13: 00007ffe4d1efe40 R14: 00007ffe4d1efe60 R15: fffffffffffffffe [ 454.041069][ C1]