last executing test programs: 8.347923985s ago: executing program 0 (id=8941): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 8.279950696s ago: executing program 0 (id=8943): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) 6.995937883s ago: executing program 0 (id=8949): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r4, 0x40a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x2a, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r5, 0x4, 0x2000) shutdown(r5, 0x1) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f00000002c0)={0xd}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 6.326089583s ago: executing program 2 (id=8951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r5 = fcntl$dupfd(r4, 0x406, r4) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000100)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000100)={0x90, 0x1, 0x3, 0x7, 0x4}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x7a, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.310612997s ago: executing program 3 (id=8958): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.220266208s ago: executing program 0 (id=8959): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d19", 0xab}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x1, 0x0, [{0xc0000000, 0x3, 0x2, 0x5, 0x6, 0x5, 0x3}]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.189890428s ago: executing program 2 (id=8961): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r3, 0x0, 0x4020800) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') read$FUSE(r4, &(0x7f0000002940)={0x2020}, 0x2020) 4.920790492s ago: executing program 3 (id=8962): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1f, 0x4, 0x19, 0x6, 0x0, 0xffff7fff, 0x2, 0xc}) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) 4.747014395s ago: executing program 0 (id=8964): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.617492517s ago: executing program 4 (id=8965): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0)) 4.532890007s ago: executing program 4 (id=8966): io_uring_setup(0x3661, &(0x7f0000000140)={0x0, 0xb175, 0x0, 0x1, 0x280}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x6, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x81}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.248781482s ago: executing program 1 (id=8967): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d00010075"], 0x54}}, 0x0) 4.179205943s ago: executing program 0 (id=8968): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x38, {0x0, 0x10, [@uexit={0x0, 0x18, 0xfacefeed}]}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0x1000000facefeed) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.170215783s ago: executing program 2 (id=8969): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16], 0x3c}}, 0x0) 3.983920255s ago: executing program 1 (id=8970): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) fallocate(r1, 0x3, 0x10003, 0x2d22) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$peek(0x1, r2, &(0x7f0000000240)) 3.795953368s ago: executing program 2 (id=8971): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r3, 0x40a) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x2a, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f00000002c0)={0xd}) 3.276116305s ago: executing program 4 (id=8973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048084) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000e80)={[0xffff, 0x4, 0x2e, 0xa4e, 0xffff, 0xffff, 0x2, 0x7, 0x6, 0x8000, 0x10, 0x5, 0x100, 0xffffffffffffffff, 0xc, 0x4], 0xeeee4001, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x5, 0x0, 0x0, 0x4, 0x9, 0x8, 0x5, 0x10, 0xfe, 0x3, 0x7, 0x0, 0xfffffff7, 0x7, 0xff, 0x9, 0x1, 0x9, '\x00', 0xe9, 0x800}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.232090396s ago: executing program 1 (id=8974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.91638971s ago: executing program 4 (id=8975): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122", 0x7d}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702", 0x96}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x1, 0x0, [{0xc0000000, 0x3, 0x2, 0x5, 0x6, 0x5, 0x3}]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.494390736s ago: executing program 3 (id=8976): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0)) 2.287900638s ago: executing program 3 (id=8977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f00000020c0)=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x97, @empty, 0x1}}, 0x4e) r2 = syz_ublk_setup_io_uring(0x1f, &(0x7f00000000c0)={0x0, 0xa584, 0x100, 0xfffffffe, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r7, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r8, 0x8440}], 0x1, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r7, r8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaa23cfe60c87aaec2ffffffffffff080045000030000000008002"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r11 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r11, &(0x7f0000000100)=""/253, 0xfd, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x13) personality(0xeaffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0xc2482, 0x100) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1.676234627s ago: executing program 4 (id=8978): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r3 = socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r6, 0x5501) lseek(r6, 0x5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.638725898s ago: executing program 1 (id=8979): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) waitid(0x1, 0x0, 0x0, 0x2, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.45491156s ago: executing program 1 (id=8980): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d00010075"], 0x54}}, 0x0) 1.316689192s ago: executing program 2 (id=8981): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r3, 0x0, 0x4020800) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') read$FUSE(r4, &(0x7f0000002940)={0x2020}, 0x2020) 1.163230014s ago: executing program 1 (id=8982): syz_usb_connect$uac2(0x3, 0x8d, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) remap_file_pages(&(0x7f0000e47000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) 579.910462ms ago: executing program 4 (id=8983): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) fallocate(r1, 0x3, 0x10003, 0x2d22) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$peek(0x1, r2, &(0x7f0000000240)) 396.609455ms ago: executing program 3 (id=8984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048084) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000e80)={[0xffff, 0x4, 0x2e, 0xa4e, 0xffff, 0xffff, 0x2, 0x7, 0x6, 0x8000, 0x10, 0x5, 0x100, 0xffffffffffffffff, 0xc, 0x4], 0xeeee4001, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x5, 0x0, 0x0, 0x4, 0x9, 0x8, 0x5, 0x10, 0xfe, 0x3, 0x7, 0x0, 0xfffffff7, 0x7, 0xff, 0x9, 0x1, 0x9, '\x00', 0xe9, 0x800}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 222.548057ms ago: executing program 2 (id=8985): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1f, 0x4, 0x19, 0x6, 0x0, 0xffff7fff, 0x2, 0xc}) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) 0s ago: executing program 3 (id=8986): unshare(0x28000600) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x5d]}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r1, 0x0, 0x0, 0x98ca, 0x108000) lseek(r1, 0x8828, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000180)={0x10, 0x9, {0x55, 0xf, 0x82, {0x0, 0x7f}, {0x2, 0x2}, @period={0x1, 0x9, 0x0, 0x2f5, 0x3, {0x1, 0x100, 0xa, 0x4}, 0x0, 0x0}}, {0x53, 0x7, 0x3, {0x5, 0x7ff}, {0xe0, 0x360c}, @period={0x1, 0x7, 0xd, 0x8, 0x7, {0x4, 0x4, 0x9, 0xc}, 0x0, 0x0}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x400, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x45}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf20) kernel console output (not intermixed with test programs): T4768] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1650.099923][ T4768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1650.110974][ T4768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1650.124153][ T4768] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1650.133560][ T4768] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1650.141631][ T4768] usb 4-1: Product: syz [ 1650.145809][ T4768] usb 4-1: Manufacturer: syz [ 1650.162536][ T4768] cdc_wdm 4-1:1.0: skipping garbage [ 1650.167785][ T4768] cdc_wdm 4-1:1.0: skipping garbage [ 1650.181423][ T4768] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1650.187705][ T4768] cdc_wdm 4-1:1.0: Unknown control protocol [ 1650.216552][T30916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.226782][T30916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.308644][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1650.873049][ T4768] usb 4-1: USB disconnect, device number 119 [ 1651.348535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1651.449810][T30928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.500126][T30928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.906638][T30939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.930751][T30939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.252570][T30951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.264352][T30951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.318573][ T6295] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1652.388612][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1652.489530][T30956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.498187][T30956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.506114][ T6295] usb 4-1: Using ep0 maxpacket: 8 [ 1652.513698][ T6295] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1652.522381][ T6295] usb 4-1: config 0 has no interface number 0 [ 1652.531665][ T6295] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1652.541158][ T6295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.559000][ T6295] usb 4-1: Product: syz [ 1652.563220][ T6295] usb 4-1: Manufacturer: syz [ 1652.567799][ T6295] usb 4-1: SerialNumber: syz [ 1652.587794][ T6295] usb 4-1: config 0 descriptor?? [ 1652.796118][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7962'. [ 1652.856079][ T6295] usb 4-1: USB disconnect, device number 120 [ 1653.071236][T30966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.086632][T30966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.429023][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1654.123637][T30989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.133965][T30989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.389653][ T4768] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1654.471511][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1654.716336][ T4768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1654.734773][ T4768] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1654.744397][ T4768] usb 4-1: can't read configurations, error -71 [ 1655.002098][T30995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.011152][T30995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.123040][T30997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.133882][T30997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.508638][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1655.764033][T31007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.794967][T31007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.801269][T31009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.813643][T31009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1655.833653][T31006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1656.210347][T31024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.229554][T31024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.462325][T31033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.518866][T31033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.548565][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1656.925143][T31036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1656.970497][T31036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.247898][T31038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.363680][T31038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.588565][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1658.055288][T31057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.065854][T31057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.166227][T31061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.175281][T31061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.187781][T31060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1658.356503][T31063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.365318][T31063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.628578][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1658.793658][T31070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.812108][T31070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.861560][T31072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.906791][T31072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.668619][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1659.759498][T31085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.768343][T31085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.135814][T31093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1660.413440][T31097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.474773][T31097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.522364][T31096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1660.537226][T31102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.546638][T31102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.708532][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1660.864379][T31104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.873489][T31104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.105637][T31106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.117061][T31106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.635278][T31123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.650189][T31123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.748582][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1661.947649][T31133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.968891][T31133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.997643][T31132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8029'. [ 1662.258101][T31135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.282617][T31135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.668714][T31140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1662.788516][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1662.822371][T31145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.837138][T31145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.944016][T31147] device syzkaller0 entered promiscuous mode [ 1663.828543][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1664.045059][T31172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.055759][T31172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.269395][T31179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.300526][T31179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.868532][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1665.263175][T31204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.273548][T31204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.283988][T31192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8042'. [ 1665.912381][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1666.225865][T31211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.265669][T31211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.755490][T31217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.765239][T31217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.948555][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1667.087626][T31223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1667.412929][T31231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.435907][T31231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.502344][T31234] device syzkaller0 entered promiscuous mode [ 1667.988522][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1668.439818][T31253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.460927][T31253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.545788][T31247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1668.796700][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.804067][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.028986][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1670.068573][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1670.323998][T31268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.342265][T31268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.447250][T31270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.458374][T31270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.643712][T31278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.652392][T31278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.873103][T31280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1671.108526][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1671.157304][T31287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.168854][T31287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.497011][T31293] device syzkaller0 entered promiscuous mode [ 1672.148868][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1673.188940][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1673.358255][T31323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.378001][T31323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.631834][T31328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.641295][T31328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.650687][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8073'. [ 1674.072256][T31332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.087526][T31332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.234065][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1674.988492][T13780] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1675.096080][T31354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.105141][T31354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.181529][T13780] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1675.190730][T13780] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1675.201623][T13780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1675.211243][T13780] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1675.222683][T13780] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1675.235401][T13780] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1675.244866][T13780] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1675.253022][T13780] usb 4-1: Product: syz [ 1675.257331][T13780] usb 4-1: Manufacturer: syz [ 1675.268599][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1675.270470][T13780] cdc_wdm 4-1:1.0: skipping garbage [ 1675.283248][T13780] cdc_wdm 4-1:1.0: skipping garbage [ 1675.290240][T13780] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1675.296779][T13780] cdc_wdm 4-1:1.0: Unknown control protocol [ 1675.985980][ T4321] usb 4-1: USB disconnect, device number 123 [ 1676.056495][T31371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.079070][T31371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.308511][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1676.908756][T31380] device syzkaller0 entered promiscuous mode [ 1677.205334][T31386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.259077][T31386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.348593][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1677.376057][T31389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.386396][T31389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.388949][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1678.492393][T31417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.512690][T31417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.531635][T31410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8096'. [ 1679.429069][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1679.929552][T31423] syz.3.8098 (31423): drop_caches: 2 [ 1679.954308][T31423] input: syz1 as /devices/virtual/input/input107 [ 1680.065111][T31426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.081870][T31426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.468588][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1680.700265][T31439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.731437][T31439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.017216][T31449] device syzkaller0 entered promiscuous mode [ 1681.508585][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1682.553230][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1683.153771][T31476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.172218][T31476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.183717][T31467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8113'. [ 1683.364794][T31478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.382788][T31478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.588534][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1684.216245][T31494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.257196][T31494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.629992][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1685.016054][T31507] syz.1.8119 (31507): drop_caches: 2 [ 1685.035881][T31504] input: syz1 as /devices/virtual/input/input109 [ 1685.228475][ T4321] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1685.432456][ T4321] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1685.451755][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.481527][ T4321] usb 4-1: Product: syz [ 1685.488167][ T4321] usb 4-1: Manufacturer: syz [ 1685.495894][ T4321] usb 4-1: SerialNumber: syz [ 1685.519580][ T4321] usb 4-1: config 0 descriptor?? [ 1685.668620][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1685.741130][ T4321] usb 4-1: ignoring: probably an ADSL modem [ 1685.868156][T31526] device syzkaller0 entered promiscuous mode [ 1685.954526][ T4321] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1685.977324][ T4321] usb 4-1: USB disconnect, device number 124 [ 1686.708646][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1686.886951][ T4768] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1687.089816][ T4768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.104526][ T4768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.115404][ T4768] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1687.125728][ T4768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.138709][ T4768] usb 4-1: config 0 descriptor?? [ 1687.560948][ T4768] usbhid 4-1:0.0: can't add hid device: -71 [ 1687.568014][ T4768] usbhid: probe of 4-1:0.0 failed with error -71 [ 1687.577120][ T4768] usb 4-1: USB disconnect, device number 125 [ 1687.748591][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1688.788523][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1688.825239][T31562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.854179][T31562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.027046][T31567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.054503][T31567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.093239][T31552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1689.835552][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1690.039727][T31587] syz.2.8137 (31587): drop_caches: 2 [ 1690.090458][T31586] input: syz1 as /devices/virtual/input/input111 [ 1690.344658][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.363946][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.878578][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1691.335536][T31617] device syzkaller0 entered promiscuous mode [ 1691.918535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1692.168501][ T6295] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1692.750813][T31643] syz.1.8150 (31643): drop_caches: 2 [ 1692.898606][T31643] input: syz1 as /devices/virtual/input/input113 [ 1692.958530][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1693.622674][T31661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.637265][T31661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.647212][T31661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8151'. [ 1693.998554][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1694.916607][ T6295] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1694.930183][ T6295] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1694.955893][ T6295] usb 4-1: can't read configurations, error -71 [ 1694.991171][T31672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.000267][T31672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.028604][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1695.176032][T31674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1696.078512][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1696.486127][T31699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.512898][T31699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.603097][T31697] device syzkaller0 entered promiscuous mode [ 1697.118606][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1697.497660][T31705] syz.3.8165 (31705): drop_caches: 2 [ 1698.152593][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1699.193618][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1699.529119][T31729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1699.828641][ T6295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1699.830620][T31741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.846694][T31741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.859010][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8174'. [ 1700.014711][ T6295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.030757][ T6295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.058544][ T6295] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1700.077850][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.094910][ T6295] usb 4-1: config 0 descriptor?? [ 1700.228636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1700.527414][ T6295] usbhid 4-1:0.0: can't add hid device: -71 [ 1700.535103][ T6295] usbhid: probe of 4-1:0.0 failed with error -71 [ 1700.563109][ T6295] usb 4-1: USB disconnect, device number 2 [ 1700.673450][T31751] syz.2.8177 (31751): drop_caches: 2 [ 1701.226756][T31761] device syzkaller0 entered promiscuous mode [ 1701.268612][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1701.657215][T31769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1702.066006][T31778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.082481][T31778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.308723][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1703.028666][T31803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.039621][T31803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.051815][T31795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8187'. [ 1703.354767][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1703.735484][T31807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.759554][T31807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.398605][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1705.216334][T31827] syz.3.8193 (31827): drop_caches: 2 [ 1705.430273][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1706.468805][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1706.736694][T31855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.747766][T31855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.049753][T31858] device syzkaller0 entered promiscuous mode [ 1707.372816][T24443] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1707.508810][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1708.558574][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1708.833441][T31901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.842235][T31901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.598541][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1710.194756][T24443] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1710.225189][T24443] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1710.236512][T24443] usb 4-1: can't read configurations, error -71 [ 1710.350947][T31918] syz.3.8213 (31918): drop_caches: 2 [ 1710.373319][T31918] input: syz1 as /devices/virtual/input/input120 [ 1710.638562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1711.253847][T31925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.265060][T31925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.678772][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1712.075623][T31940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.084891][T31940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.168883][T31943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.208165][T31943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.225774][T31945] device syzkaller0 entered promiscuous mode [ 1712.711289][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1713.142589][T31957] syz.2.8227 (31957): drop_caches: 2 [ 1713.262674][T31958] input: syz1 as /devices/virtual/input/input122 [ 1713.755416][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1713.931997][T31968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.950187][T31968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.967440][T31968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8228'. [ 1714.798585][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1715.074454][T31975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.090239][T31975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.828607][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1715.904398][T32000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.939656][T32000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.535903][T32010] syz.3.8240 (32010): drop_caches: 2 [ 1716.617493][T32010] input: syz1 as /devices/virtual/input/input124 [ 1716.801604][T32016] device syzkaller0 entered promiscuous mode [ 1716.868711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1717.462811][T32023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.473934][T32023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.908642][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1717.935737][T32041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.944791][T32041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.953361][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1719.988536][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1720.317398][T32077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.340709][T32077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.436388][T32080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.446677][T32080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.506364][T32084] syz.3.8254 (32084): drop_caches: 2 [ 1721.028621][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1721.465060][T32096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.488722][T32096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.068524][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1722.174245][T32109] device syzkaller0 entered promiscuous mode [ 1723.048574][T24443] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1723.108562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1724.149322][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1724.665118][T32149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.673903][T32149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.142279][T24443] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1725.158771][T24443] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1725.167147][T24443] usb 4-1: can't read configurations, error -71 [ 1725.188520][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1725.356289][T32162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.376491][T32162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.417722][T32165] syz.0.8272 (32165): drop_caches: 2 [ 1726.218992][T32182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.227823][T32182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.228590][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1726.277733][T32184] device syzkaller0 entered promiscuous mode [ 1727.211029][T32205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.221529][T32205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.276012][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1727.896930][T32208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.911961][T32208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.308603][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1729.068478][T24443] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1729.265679][T24443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.275819][T32238] syz.2.8291 (32238): drop_caches: 2 [ 1729.277555][T24443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.303811][T24443] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1729.316105][T24443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.342635][T24443] usb 4-1: config 0 descriptor?? [ 1729.348566][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1729.765771][T24443] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 1729.781002][T24443] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 1729.795030][T24443] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 1729.807733][T24443] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 1729.844304][T24443] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0 [ 1729.872713][T24443] hid-steam 0003:28DE:1142.0037: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1730.064164][ T4321] usb 4-1: USB disconnect, device number 7 [ 1730.155480][T32256] fido_id[32256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1730.230914][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.238965][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.388718][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1730.614735][T32270] device syzkaller0 entered promiscuous mode [ 1730.714124][T32275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.724477][T32275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.368824][ T4768] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1731.428681][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1731.440679][T32289] syz.0.8303 (32289): drop_caches: 2 [ 1731.458297][T32289] input: syz1 as /devices/virtual/input/input128 [ 1731.599000][ T4768] usb 4-1: Using ep0 maxpacket: 8 [ 1731.615128][ T4768] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1731.638122][ T4768] usb 4-1: config 0 has no interface number 0 [ 1731.671597][ T4768] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1731.682063][ T4768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.696428][ T4768] usb 4-1: Product: syz [ 1731.701955][ T4768] usb 4-1: Manufacturer: syz [ 1731.706701][ T4768] usb 4-1: SerialNumber: syz [ 1731.717116][ T4768] usb 4-1: config 0 descriptor?? [ 1731.886220][T32294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.895676][T32294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.945443][T32282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8301'. [ 1732.468572][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1733.508608][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1733.593515][T32322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.606231][T32322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.882109][ T4768] usb 4-1: USB disconnect, device number 8 [ 1734.316399][T32346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.368670][T32346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.548560][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1734.571442][T32352] syz.1.8317 (32352): drop_caches: 2 [ 1734.685407][T32352] input: syz1 as /devices/virtual/input/input130 [ 1735.303735][T32364] device syzkaller0 entered promiscuous mode [ 1735.588648][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1735.929342][T32379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.953027][T32379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.962930][T32379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8323'. [ 1736.508486][T13780] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1736.619406][T32383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.628037][T32383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.636005][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1736.714904][T13780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.726127][T13780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.736217][T13780] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1736.745636][T13780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.762712][T13780] usb 4-1: config 0 descriptor?? [ 1737.204336][T13780] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 1737.215519][T13780] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 1737.225527][T13780] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 1737.237451][T13780] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 1737.246726][T13780] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0 [ 1737.255876][T13780] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1737.478636][ T4321] usb 4-1: USB disconnect, device number 9 [ 1737.671366][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1738.218685][T32410] syz.4.8330 (32410): drop_caches: 2 [ 1738.226476][T32410] input: syz1 as /devices/virtual/input/input131 [ 1738.602259][ T4321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1738.708606][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1738.788524][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 1738.795142][ T4321] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1738.827838][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.851685][ T4321] usb 4-1: config 0 descriptor?? [ 1739.068965][ T4321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1739.083811][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1739.114144][ T4321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1739.131810][ T4321] usb 4-1: media controller created [ 1739.159692][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1739.312537][ T4321] az6027: usb out operation failed. (-71) [ 1739.322361][ T4321] az6027: usb out operation failed. (-71) [ 1739.331148][ T4321] stb0899_attach: Driver disabled by Kconfig [ 1739.337419][ T4321] az6027: no front-end attached [ 1739.337419][ T4321] [ 1739.345053][ T4321] az6027: usb out operation failed. (-71) [ 1739.351634][ T4321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1739.360877][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input133 [ 1739.373275][ T4321] dvb-usb: schedule remote query interval to 400 msecs. [ 1739.381041][ T4321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1739.391815][ T4321] usb 4-1: USB disconnect, device number 10 [ 1739.436534][ T4321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1739.503313][T32434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.513720][T32434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.725580][T32436] device syzkaller0 entered promiscuous mode [ 1739.748539][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1740.305014][T32459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.326676][T32459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.502454][T32472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.558842][T32472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.788518][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1741.082916][T32495] syz.3.8349 (32495): drop_caches: 2 [ 1741.093383][T32495] input: syz1 as /devices/virtual/input/input134 [ 1741.829383][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1742.817656][T32501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.835004][T32501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.868575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1743.442519][T32511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.452336][T32511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.908629][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1744.154553][T32527] device syzkaller0 entered promiscuous mode [ 1744.156887][T32528] syz.1.8360 (32528): drop_caches: 2 [ 1744.237204][T32531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.262873][T32528] input: syz1 as /devices/virtual/input/input136 [ 1744.285112][T32531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.770134][T32563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.828956][T32563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.870081][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1744.948559][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1745.991671][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1747.028623][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1747.834195][T32591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.866812][T32591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.019130][T32598] syz.4.8374 (32598): drop_caches: 2 [ 1748.041506][T32598] input: syz1 as /devices/virtual/input/input138 [ 1748.068606][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1748.954292][T32615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.964102][T32615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.022954][T32617] program syz.1.8381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1749.108578][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1749.338576][ T4768] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1749.466673][T32629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.479646][T32629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.631345][ T4768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1749.642799][ T4768] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1749.650490][ T4768] usb 4-1: can't read configurations, error -71 [ 1750.148528][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1750.635265][T32645] input: syz1 as /devices/virtual/input/input140 [ 1751.188558][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1751.474348][ T27] audit: type=1326 audit(1782528458.349:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.492175][T32665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.498577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1751.500815][ T27] audit: type=1326 audit(1782528458.349:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.515336][T32665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.537413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1751.555704][ T27] audit: type=1326 audit(1782528458.349:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.589072][ T27] audit: type=1326 audit(1782528458.349:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.620564][ T27] audit: type=1326 audit(1782528458.379:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.651821][ T27] audit: type=1326 audit(1782528458.379:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.681982][ T27] audit: type=1326 audit(1782528458.379:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.712891][ T27] audit: type=1326 audit(1782528458.389:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1751.747508][ T27] audit: type=1326 audit(1782528458.389:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32661 comm="syz.2.8398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9a2739ce59 code=0x7ffc0000 [ 1752.228562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1752.815255][T32697] input: syz1 as /devices/virtual/input/input142 [ 1752.978082][T32702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.992509][T32702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.070150][T32701] Set syz1 is full, maxelem 14 reached [ 1753.268711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1753.507651][T32708] device syzkaller0 entered promiscuous mode [ 1753.532426][T29775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.308675][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1755.348515][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1755.808949][ T6295] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1756.005581][ T6295] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.035251][ T6295] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1756.083774][ T6295] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1756.121648][ T6295] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1756.141511][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.183333][ T6295] usb 4-1: invalid MIDI out EP 0 [ 1756.262785][ T6295] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1756.304633][T25084] udevd[25084]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1756.388614][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1756.430375][ T6295] usb 4-1: USB disconnect, device number 13 [ 1756.799879][ T305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.812799][ T305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.364643][ T323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.428535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1757.460167][ T323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.517024][ T328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.534184][ T328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.468861][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1758.518802][T29776] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1758.718550][T29776] usb 4-1: Using ep0 maxpacket: 32 [ 1758.732582][T29776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1758.754388][T29776] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1758.774365][T29776] usb 4-1: can't read configurations, error -71 [ 1759.508742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1759.908639][T29776] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1760.108795][T29776] usb 4-1: Using ep0 maxpacket: 8 [ 1760.116127][T29776] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1760.125232][T29776] usb 4-1: config 179 has no interface number 0 [ 1760.132018][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1760.146637][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1760.160177][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1760.186191][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1760.198869][T29776] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1760.213411][T29776] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1760.222931][T29776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.240579][ T362] raw-gadget.7 gadget.3: fail, usb_ep_enable returned -22 [ 1760.481257][T24443] usb 4-1: USB disconnect, device number 15 [ 1760.481366][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1760.495915][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1760.548576][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1760.825322][ T398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.840973][ T398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.588538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1761.964936][ T421] input: syz1 as /devices/virtual/input/input146 [ 1762.220253][ T416] netlink: 'syz.0.8474': attribute type 10 has an invalid length. [ 1762.317861][ T416] team0 (unregistering): Port device team_slave_0 removed [ 1762.340843][ T416] team0 (unregistering): Port device team_slave_1 removed [ 1762.628541][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1762.657605][ T433] tipc: Enabling of bearer rejected, already enabled [ 1762.840004][ T440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.862564][ T440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.973663][ T445] device syzkaller0 entered promiscuous mode [ 1762.983569][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.678600][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1763.897237][ T457] input: syz1 as /devices/virtual/input/input147 [ 1764.482520][ T469] tipc: Started in network mode [ 1764.489576][ T469] tipc: Node identity ac1414aa, cluster identity 4711 [ 1764.502883][ T469] tipc: Enabled bearer , priority 10 [ 1764.718532][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1765.003825][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.035178][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.365198][ T498] syz.0.8500 (498): drop_caches: 2 [ 1765.401763][ T498] input: syz1 as /devices/virtual/input/input148 [ 1765.448652][T29776] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1765.610248][ T4768] tipc: Node number set to 2886997162 [ 1765.638908][T29776] usb 4-1: Using ep0 maxpacket: 8 [ 1765.651326][T29776] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1765.677108][T29776] usb 4-1: config 179 has no interface number 0 [ 1765.692461][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1765.704256][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1765.719961][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1765.733630][T29776] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1765.745949][T29776] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1765.768517][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1765.775832][T29776] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1765.801403][T29776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.823209][ T492] raw-gadget.10 gadget.3: fail, usb_ep_enable returned -22 [ 1766.081179][T29776] usb 4-1: USB disconnect, device number 16 [ 1766.081249][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1766.081292][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1766.679429][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.690734][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.788549][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1767.068539][ T4321] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1767.258579][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 1767.265660][ T4321] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1767.274161][ T4321] usb 4-1: config 0 has no interface number 0 [ 1767.283045][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1767.292634][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.300819][ T4321] usb 4-1: Product: syz [ 1767.305089][ T4321] usb 4-1: Manufacturer: syz [ 1767.309762][ T4321] usb 4-1: SerialNumber: syz [ 1767.323478][ T4321] usb 4-1: config 0 descriptor?? [ 1767.334985][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.347415][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.536923][ T530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8510'. [ 1767.565238][ T4321] usb 4-1: USB disconnect, device number 17 [ 1767.828616][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1768.868640][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1769.908538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1769.931483][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.951173][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.003080][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8530'. [ 1770.670826][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8537'. [ 1770.680714][ T612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8537'. [ 1770.948517][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1771.458492][ T6295] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1771.660347][ T6295] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1771.677493][ T6295] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1771.701407][ T6295] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1771.719682][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.738347][ T633] syz.4.8544 (633): drop_caches: 2 [ 1771.746170][ T623] raw-gadget.11 gadget.3: fail, usb_ep_enable returned -22 [ 1771.791708][ T633] input: syz1 as /devices/virtual/input/input149 [ 1771.988539][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1772.025444][ T641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.038720][ T641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.054431][ T640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8547'. [ 1772.063723][ T623] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1772.084292][ T623] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 1772.100754][ T6295] usb 4-1: USB disconnect, device number 18 [ 1773.028635][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1773.058229][ T680] syz.3.8563 (680): drop_caches: 2 [ 1773.069260][ T680] input: syz1 as /devices/virtual/input/input150 [ 1773.199441][ T683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.213332][ T683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.223207][ T682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8564'. [ 1773.235449][ T685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1773.337120][ T688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.347028][ T688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.819399][ T705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8572'. [ 1773.957374][ T713] program syz.0.8576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1774.078535][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1774.363125][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.372100][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.381831][ T728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8582'. [ 1774.798874][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1775.118530][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1775.128606][T29775] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1775.318468][T29775] usb 4-1: Using ep0 maxpacket: 32 [ 1775.326119][T29775] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1775.348344][T29775] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1775.361789][T29775] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1775.370795][T29775] usb 4-1: Product: syz [ 1775.383224][T29775] usb 4-1: Manufacturer: syz [ 1775.391201][T29775] usb 4-1: SerialNumber: syz [ 1775.403649][T29775] usb 4-1: config 0 descriptor?? [ 1775.410297][T29775] hub 4-1:0.0: bad descriptor, ignoring hub [ 1775.417272][T29775] hub: probe of 4-1:0.0 failed with error -5 [ 1776.148525][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1776.338741][ T6295] usb 4-1: USB disconnect, device number 19 [ 1776.848663][ T6295] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1777.038627][ T6295] usb 4-1: Using ep0 maxpacket: 8 [ 1777.052150][ T6295] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1777.081282][ T6295] usb 4-1: config 0 has no interface number 0 [ 1777.094707][ T6295] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1777.106429][ T6295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.121292][ T6295] usb 4-1: Product: syz [ 1777.125998][ T6295] usb 4-1: Manufacturer: syz [ 1777.133531][ T6295] usb 4-1: SerialNumber: syz [ 1777.140449][ T6295] usb 4-1: config 0 descriptor?? [ 1777.188632][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1777.361887][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8598'. [ 1777.397621][ T6295] usb 4-1: USB disconnect, device number 20 [ 1777.645745][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.658182][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.675632][ T792] device syzkaller0 entered promiscuous mode [ 1777.745838][ T795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.758012][ T795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.172472][ T805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1778.228664][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1778.314662][ T805] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1778.331609][ T813] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1778.926216][ T827] syz.4.8618 (827): drop_caches: 2 [ 1778.927225][ T828] input: syz1 as /devices/virtual/input/input152 [ 1779.268515][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1779.322977][ T840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.337757][ T840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.308538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1780.948104][ T874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8636'. [ 1781.040063][ T876] syz.1.8637 (876): drop_caches: 2 [ 1781.093911][ T876] input: syz1 as /devices/virtual/input/input153 [ 1781.118343][ T880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.183993][ T880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.226770][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1781.287528][ T888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1781.358527][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1781.848600][T24443] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1782.040696][T24443] usb 4-1: Using ep0 maxpacket: 8 [ 1782.047298][T24443] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1782.057060][T24443] usb 4-1: config 179 has no interface number 0 [ 1782.067123][T24443] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1782.083291][T24443] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1782.095150][T24443] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1782.106894][T24443] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1782.128672][T24443] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1782.148619][T24443] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1782.168147][T24443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.187478][ T903] raw-gadget.11 gadget.3: fail, usb_ep_enable returned -22 [ 1782.329791][ T921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.345894][ T921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.388518][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1782.567166][T24443] usb 4-1: USB disconnect, device number 21 [ 1782.573218][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1782.573268][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1782.605952][ T930] tipc: Enabled bearer , priority 0 [ 1782.660176][ T930] device syzkaller0 entered promiscuous mode [ 1782.691971][ T930] tipc: Resetting bearer [ 1783.024221][ T4768] usb 2-1: USB disconnect, device number 30 [ 1783.075703][ T4768] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1783.172971][ T937] syz.0.8651 (937): drop_caches: 2 [ 1783.205312][ T937] input: syz1 as /devices/virtual/input/input154 [ 1783.325241][ T942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1783.345655][ T942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1783.355485][ T925] tipc: Resetting bearer [ 1783.361728][ T942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1783.385254][ T942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1783.395295][ T942] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1783.406717][ T942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1783.428586][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1783.460962][ T925] tipc: Disabling bearer [ 1783.726295][ T5684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.757649][ T941] chnl_net:caif_netlink_parms(): no params data found [ 1783.821985][ T5684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.932200][ T5684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.957047][ T941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.964354][ T941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.973406][ T941] device bridge_slave_0 entered promiscuous mode [ 1784.010787][ T5684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.024986][ T941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.032336][ T941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.040772][ T941] device bridge_slave_1 entered promiscuous mode [ 1784.098008][ T941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.124648][ T941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.298350][ T941] team0: Port device team_slave_0 added [ 1784.341979][ T941] team0: Port device team_slave_1 added [ 1784.407374][ T941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1784.458619][ T941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.468595][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1784.537438][ T968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8657'. [ 1784.575398][ T941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.728810][ T941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.755260][ T941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.812567][ T941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.045969][ T941] device hsr_slave_0 entered promiscuous mode [ 1785.072501][ T941] device hsr_slave_1 entered promiscuous mode [ 1785.097788][ T941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1785.116980][ T941] Cannot create hsr debugfs directory [ 1785.428672][T23453] Bluetooth: hci5: command 0x0409 tx timeout [ 1785.508636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1785.747097][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.777702][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.066385][ T1003] syz.4.8664 (1003): drop_caches: 2 [ 1786.112266][ T1003] input: syz1 as /devices/virtual/input/input155 [ 1786.554210][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1786.587019][ T5684] device hsr_slave_0 left promiscuous mode [ 1786.604995][ T5684] device hsr_slave_1 left promiscuous mode [ 1786.623796][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1786.656266][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.695701][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1786.752205][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.786085][ T5684] device bridge_slave_1 left promiscuous mode [ 1786.810733][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.877380][ T5684] device bridge_slave_0 left promiscuous mode [ 1786.912981][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.065386][ T5684] device veth1_macvtap left promiscuous mode [ 1787.104646][ T5684] device veth0_macvtap left promiscuous mode [ 1787.134144][ T5684] device veth1_vlan left promiscuous mode [ 1787.157659][ T5684] device veth0_vlan left promiscuous mode [ 1787.508608][T23453] Bluetooth: hci5: command 0x041b tx timeout [ 1787.531144][ T1047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.558713][ T1047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.597819][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1788.289350][ T5684] team0 (unregistering): Port device team_slave_1 removed [ 1788.333494][ T5684] team0 (unregistering): Port device team_slave_0 removed [ 1788.382425][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.429508][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.632018][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1788.777675][ T5684] bond0 (unregistering): Released all slaves [ 1788.996910][ T941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1789.019368][ T941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1789.066990][ T1068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8674'. [ 1789.067518][ T941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1789.177817][ T941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1789.395715][ T941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.433762][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1789.457099][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1789.484292][ T941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.493127][ T1072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.521777][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1789.540198][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1789.554028][ T1072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.559268][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.568869][T14183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.588551][T23453] Bluetooth: hci5: command 0x040f tx timeout [ 1789.641170][ T1072] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1789.665422][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1789.668518][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1789.711990][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1789.722259][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1789.734701][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.736211][ T1072] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 1789.741893][T14183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1789.748685][ T6295] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1789.775909][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1789.795638][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1789.838306][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1789.864736][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1789.887566][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1789.912640][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1789.937141][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1789.963178][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1789.971410][ T6295] usb 4-1: Using ep0 maxpacket: 8 [ 1789.978743][ T6295] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1789.998338][ T6295] usb 4-1: config 179 has no interface number 0 [ 1790.008480][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1790.025676][ T6295] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1790.050520][ T941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1790.074874][ T6295] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1790.102864][ T6295] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1790.130773][ T6295] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1790.158969][ T6295] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1790.182939][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1790.196920][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1790.209487][ T6295] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1790.238150][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.265683][ T1070] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1790.554151][ T6295] usb 4-1: USB disconnect, device number 22 [ 1790.560476][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1790.560525][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1790.708546][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1790.945494][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1790.965196][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1790.984326][ T941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.013788][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1791.033486][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1791.110961][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1791.125508][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1791.140589][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1791.150521][T14183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1791.164374][ T941] device veth0_vlan entered promiscuous mode [ 1791.182650][ T941] device veth1_vlan entered promiscuous mode [ 1791.271216][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1791.297894][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1791.331528][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1791.370873][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1791.409015][ T941] device veth0_macvtap entered promiscuous mode [ 1791.432995][ T941] device veth1_macvtap entered promiscuous mode [ 1791.503858][ T941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.521146][ T941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.533649][ T941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1791.547313][ T941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.561535][ T941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1791.573811][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1791.587463][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1791.597846][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1791.652800][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1791.670583][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.671419][T23453] Bluetooth: hci5: command 0x0419 tx timeout [ 1791.676929][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.687842][ T941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1791.701670][ T941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.748609][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1791.776858][ T941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1791.814719][ T941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1791.862003][ T941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.892096][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1791.920490][T26139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1791.952841][ T941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.965475][ T941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.985255][ T941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.011805][ T941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.175993][T26139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.195576][T26139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.210077][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1792.253682][ T5684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.262783][ T5684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.274072][ T5876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1792.298364][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8688'. [ 1792.788628][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1792.831475][ T1131] tipc: Enabled bearer , priority 0 [ 1792.872249][ T1131] device syzkaller0 entered promiscuous mode [ 1792.900311][ T1131] tipc: Resetting bearer [ 1793.288601][T29775] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1793.488517][T29775] usb 2-1: Using ep0 maxpacket: 16 [ 1793.503607][ T1133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1793.522928][ T1133] device bridge0 entered promiscuous mode [ 1793.538177][ T1133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1793.557159][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.565245][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.634144][ T1133] device bridge0 left promiscuous mode [ 1793.675621][ T1126] tipc: Resetting bearer [ 1793.696229][T29775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1793.707728][T29775] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1793.716044][T29775] usb 2-1: can't read configurations, error -71 [ 1793.753282][ T1126] tipc: Disabling bearer [ 1793.828674][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1794.733339][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8706'. [ 1794.868618][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1794.927980][ T1178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8710'. [ 1795.172295][ T1187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.237638][ T1187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.384895][ T1187] syz.2.8714: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1795.434573][ T1187] CPU: 1 PID: 1187 Comm: syz.2.8714 Not tainted syzkaller #0 [ 1795.442110][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1795.452215][ T1187] Call Trace: [ 1795.455593][ T1187] [ 1795.458602][ T1187] dump_stack_lvl+0x188/0x24e [ 1795.463388][ T1187] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1795.469975][ T1187] ? show_regs_print_info+0x12/0x12 [ 1795.475183][ T1187] ? load_image+0x410/0x410 [ 1795.479707][ T1187] ? __rcu_read_unlock+0x78/0xd0 [ 1795.484814][ T1187] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1795.491235][ T1187] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1795.497939][ T1187] warn_alloc+0x242/0x330 [ 1795.502368][ T1187] ? zone_watermark_ok_safe+0x270/0x270 [ 1795.507933][ T1187] ? __mutex_trylock_common+0x15c/0x260 [ 1795.513522][ T1187] __vmalloc_node_range+0x11e/0x1380 [ 1795.518819][ T1187] ? rcu_is_watching+0x11/0xa0 [ 1795.523738][ T1187] ? trace_contention_end+0x5f/0x170 [ 1795.529041][ T1187] ? __mutex_lock+0x1ab/0xae0 [ 1795.533783][ T1187] ? __kmem_cache_free+0xb6/0x200 [ 1795.538863][ T1187] ? tomoyo_path_number_perm+0x205/0x650 [ 1795.544559][ T1187] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1795.550195][ T1187] ? dvb_dvr_do_ioctl+0x75/0x220 [ 1795.555205][ T1187] ? tomoyo_path_number_perm+0x205/0x650 [ 1795.560875][ T1187] ? free_vm_area+0x50/0x50 [ 1795.565411][ T1187] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1795.570602][ T1187] vmalloc+0x75/0x80 [ 1795.574548][ T1187] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1795.579585][ T1187] dvb_dvr_do_ioctl+0x12a/0x220 [ 1795.584450][ T1187] dvb_usercopy+0x191/0x2b0 [ 1795.588964][ T1187] ? dvb_dvr_release+0x3d0/0x3d0 [ 1795.593911][ T1187] ? dvb_generic_ioctl+0xb0/0xb0 [ 1795.598958][ T1187] ? dvb_dvr_poll+0x230/0x230 [ 1795.603649][ T1187] dvb_dvr_ioctl+0x25/0x30 [ 1795.608064][ T1187] __se_sys_ioctl+0xfa/0x170 [ 1795.612823][ T1187] do_syscall_64+0x4c/0xa0 [ 1795.617252][ T1187] ? clear_bhb_loop+0x60/0xb0 [ 1795.621980][ T1187] ? clear_bhb_loop+0x60/0xb0 [ 1795.626653][ T1187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.632559][ T1187] RIP: 0033:0x7f9a2739ce59 [ 1795.636991][ T1187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.656663][ T1187] RSP: 002b:00007f9a28205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.665152][ T1187] RAX: ffffffffffffffda RBX: 00007f9a27615fa0 RCX: 00007f9a2739ce59 [ 1795.673149][ T1187] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000008 [ 1795.681139][ T1187] RBP: 00007f9a27432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1795.689119][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.697091][ T1187] R13: 00007f9a27616038 R14: 00007f9a27615fa0 R15: 00007fff40524758 [ 1795.705077][ T1187] [ 1795.722202][ T1187] Mem-Info: [ 1795.725372][ T1187] active_anon:6693 inactive_anon:3 isolated_anon:0 [ 1795.725372][ T1187] active_file:13004 inactive_file:40678 isolated_file:0 [ 1795.725372][ T1187] unevictable:768 dirty:241 writeback:0 [ 1795.725372][ T1187] slab_reclaimable:17385 slab_unreclaimable:94053 [ 1795.725372][ T1187] mapped:31002 shmem:1374 pagetables:871 [ 1795.725372][ T1187] sec_pagetables:0 bounce:0 [ 1795.725372][ T1187] kernel_misc_reclaimable:0 [ 1795.725372][ T1187] free:1316785 free_pcp:9643 free_cma:0 [ 1795.908642][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1796.007912][ T1187] Node 0 active_anon:29292kB inactive_anon:12kB active_file:51900kB inactive_file:162504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123976kB dirty:972kB writeback:0kB shmem:3964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10660kB pagetables:3512kB sec_pagetables:0kB all_unreclaimable? no [ 1796.165392][ T1207] usb usb8: usbfs: process 1207 (syz.2.8714) did not claim interface 0 before use [ 1796.306034][ T1187] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1796.387714][ T1187] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.421961][ T1187] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1796.442152][ T1187] Node 0 DMA32 free:1355300kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:31492kB inactive_anon:12kB active_file:51900kB inactive_file:162504kB unevictable:1536kB writepending:972kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:18592kB local_pcp:13804kB free_cma:0kB [ 1796.606946][ T1187] lowmem_reserve[]: 0 0 1 1 1 [ 1796.630413][ T1187] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1796.748640][ T1187] lowmem_reserve[]: 0 0 0 0 0 [ 1796.776546][ T1187] Node 1 Normal free:3894948kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15696kB local_pcp:10880kB free_cma:0kB [ 1796.839223][ T1187] lowmem_reserve[]: 0 0 0 0 0 [ 1796.844415][ T1187] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1796.857434][ T1187] Node 0 DMA32: 2230*4kB (UME) 944*8kB (UME) 609*16kB (ME) 954*32kB (UME) 536*64kB (UME) 201*128kB (UME) 99*256kB (UME) 75*512kB (UME) 55*1024kB (UME) 4*2048kB (UME) 271*4096kB (UM) = 1355048kB [ 1796.879678][ T1187] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1796.903277][ T1187] Node 1 Normal: 303*4kB (UME) 67*8kB (UME) 57*16kB (UME) 168*32kB (UME) 53*64kB (UME) 30*128kB (UM) 15*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 943*4096kB (M) = 3894948kB [ 1796.948664][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1796.955809][ T1187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.976457][ T1187] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1796.986716][ T1187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.002779][ T1187] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1797.013823][ T1187] 55060 total pagecache pages [ 1797.033373][ T1187] 3 pages in swap cache [ 1797.043769][ T1187] Free swap = 124580kB [ 1797.054174][ T1187] Total swap = 124996kB [ 1797.067094][ T1187] 2097051 pages RAM [ 1797.075658][ T1187] 0 pages HighMem/MovableOnly [ 1797.088206][ T1187] 415207 pages reserved [ 1797.095876][ T1187] 0 pages cma reserved [ 1797.433523][ T1243] device syzkaller0 entered promiscuous mode [ 1797.568745][T29775] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1797.695621][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1797.705642][ T1247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 1797.750848][T29775] usb 2-1: config 0 has an invalid interface number: 85 but max is 1 [ 1797.762634][T29775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.791624][T29775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1797.810871][T29775] usb 2-1: config 0 has no interface number 0 [ 1797.824823][T29775] usb 2-1: too many endpoints for config 0 interface 85 altsetting 12: 211, using maximum allowed: 30 [ 1797.855412][T29775] usb 2-1: config 0 interface 85 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 1797.884192][T29775] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1797.895617][T29775] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1797.906873][T29775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.932817][T29775] usb 2-1: config 0 descriptor?? [ 1797.988557][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1798.222860][T12259] usb 3-1: USB disconnect, device number 40 [ 1798.332862][T12259] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1798.427699][ T1272] device syzkaller0 entered promiscuous mode [ 1798.698485][T29775] usb 2-1: string descriptor 0 read error: -71 [ 1798.715717][T29775] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1798.743203][T29775] dvb-usb: bulk message failed: -22 (3/0) [ 1798.765886][T29775] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1798.783004][T29775] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1798.818508][T29775] usb 2-1: media controller created [ 1798.830533][T29775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1798.834404][T23453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1798.849809][T23453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1798.869726][T23453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1798.879288][T23453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1798.887054][T23453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1798.895787][T29775] dvb-usb: bulk message failed: -22 (6/0) [ 1798.902709][T23453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1798.948192][T29775] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1799.028598][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1799.032588][T29775] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input157 [ 1799.072899][ T1290] syz.3.8751 (1290): drop_caches: 2 [ 1799.102100][T29775] dvb-usb: schedule remote query interval to 150 msecs. [ 1799.134470][T29775] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1799.157609][ T1290] input: syz1 as /devices/virtual/input/input158 [ 1799.162557][T29775] usb 2-1: USB disconnect, device number 33 [ 1799.230617][T29775] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1799.294007][ T5876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.435665][ T5876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.482634][ T1282] chnl_net:caif_netlink_parms(): no params data found [ 1799.553953][ T5876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.649207][ T5876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.665261][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.682175][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.699736][ T1282] device bridge_slave_0 entered promiscuous mode [ 1799.720612][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.727792][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.735817][ T1282] device bridge_slave_1 entered promiscuous mode [ 1799.738487][T29776] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1799.778882][ T1282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.802698][ T1282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.874640][ T1282] team0: Port device team_slave_0 added [ 1799.897323][ T1282] team0: Port device team_slave_1 added [ 1799.938518][T29776] usb 2-1: Using ep0 maxpacket: 8 [ 1799.946493][T29776] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1799.973902][T29776] usb 2-1: config 179 has no interface number 0 [ 1800.008733][T29776] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1800.016165][ T1282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.038014][T29776] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1800.038772][ T1282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.064834][T29776] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1800.075876][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1800.113803][T29776] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1800.138958][T29776] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1800.155408][ T1282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.167161][T29776] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1800.183163][ T1282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.190395][T29776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.198883][ T1282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.235863][ T1304] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1800.293690][ T1282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.369116][ T1316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8758'. [ 1800.410990][ T5876] tipc: Disabling bearer [ 1800.436574][ T5876] tipc: Left network mode [ 1800.507271][ T1282] device hsr_slave_0 entered promiscuous mode [ 1800.525879][ T1282] device hsr_slave_1 entered promiscuous mode [ 1800.546419][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1800.546429][T12259] usb 2-1: USB disconnect, device number 34 [ 1800.561163][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1800.580697][ T1282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1800.598562][ T1282] Cannot create hsr debugfs directory [ 1800.948798][ T942] Bluetooth: hci0: command 0x0409 tx timeout [ 1801.464454][ T1350] syz.1.8765 (1350): drop_caches: 2 [ 1801.505539][ T1355] input: syz1 as /devices/virtual/input/input159 [ 1802.239708][ T5876] device hsr_slave_0 left promiscuous mode [ 1802.247058][ T5876] device hsr_slave_1 left promiscuous mode [ 1802.261702][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.285186][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.302845][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.332002][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.360426][ T5876] device bridge_slave_1 left promiscuous mode [ 1802.380244][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.400644][ T5876] device bridge_slave_0 left promiscuous mode [ 1802.416853][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.492802][ T5876] device veth1_macvtap left promiscuous mode [ 1802.505895][ T5876] device veth0_macvtap left promiscuous mode [ 1802.541446][ T5876] device veth1_vlan left promiscuous mode [ 1802.563689][ T5876] device veth0_vlan left promiscuous mode [ 1803.040068][ T942] Bluetooth: hci0: command 0x041b tx timeout [ 1804.126156][ T5876] team0 (unregistering): Port device team_slave_1 removed [ 1804.177385][ T5876] team0 (unregistering): Port device team_slave_0 removed [ 1804.227978][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.279761][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.640745][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.650187][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.727089][ T5876] bond0 (unregistering): Released all slaves [ 1804.884605][ T1282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1804.899965][ T1282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1804.917440][ T1282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1804.958963][ T1282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1805.118471][ T942] Bluetooth: hci0: command 0x040f tx timeout [ 1805.119084][ T1282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.189675][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.198149][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.229326][ T1282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.254633][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1805.255305][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.255763][T23706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.255833][T23706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.256478][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1805.266153][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.266703][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.267075][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.267136][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.319967][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1805.404971][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1805.414470][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1805.426886][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1805.436176][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1805.446204][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1805.455987][ T1433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.465919][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1805.473946][ T1433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.508849][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1805.517219][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.532848][ T1282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1805.548197][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1805.566575][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1805.577235][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.886104][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1805.894011][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1805.933079][ T1282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.987431][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1805.997807][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1806.028670][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1806.038187][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1806.047101][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1806.056459][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1806.070213][ T1282] device veth0_vlan entered promiscuous mode [ 1806.098674][ T1282] device veth1_vlan entered promiscuous mode [ 1806.136179][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1806.152700][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1806.161692][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1806.171178][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1806.182358][ T1282] device veth0_macvtap entered promiscuous mode [ 1806.205414][ T1282] device veth1_macvtap entered promiscuous mode [ 1806.241617][ T1282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.253615][ T1282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.285242][ T1282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.302014][ T1282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.323474][ T1282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.349427][ T1447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1806.385462][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1806.405876][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1806.416803][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1806.436160][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1806.467834][ T1452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1806.483166][ T1452] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1806.500763][ T1447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1806.544007][ T1447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1806.562234][ T1282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.591287][ T1282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.607920][ T1282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1806.634927][ T1282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.658676][ T1282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.683230][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1806.697628][T23706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1806.719730][ T1282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.732852][ T1282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.745638][ T1282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.759272][ T1282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.889271][ T5839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.906297][ T5839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.923040][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1806.950207][ T5839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.959345][ T5839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.968085][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1807.189597][ T942] Bluetooth: hci0: command 0x0419 tx timeout [ 1808.439833][ T1493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1808.520912][ T1493] bond1 (unregistering): Released all slaves [ 1808.571712][ T1495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1808.600798][ T1497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.637821][ T1497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.695101][ T1497] syz.4.8798: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1808.726624][ T1497] CPU: 1 PID: 1497 Comm: syz.4.8798 Not tainted syzkaller #0 [ 1808.734051][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.744134][ T1497] Call Trace: [ 1808.747437][ T1497] [ 1808.750375][ T1497] dump_stack_lvl+0x188/0x24e [ 1808.755055][ T1497] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1808.761461][ T1497] ? show_regs_print_info+0x12/0x12 [ 1808.766679][ T1497] ? load_image+0x410/0x410 [ 1808.771284][ T1497] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1808.777700][ T1497] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1808.784224][ T1497] warn_alloc+0x242/0x330 [ 1808.788605][ T1497] ? zone_watermark_ok_safe+0x270/0x270 [ 1808.794316][ T1497] ? __mutex_trylock_common+0x15c/0x260 [ 1808.799986][ T1497] __vmalloc_node_range+0x11e/0x1380 [ 1808.805326][ T1497] ? rcu_is_watching+0x11/0xa0 [ 1808.810129][ T1497] ? trace_contention_end+0x5f/0x170 [ 1808.815452][ T1497] ? __mutex_lock+0x1ab/0xae0 [ 1808.820149][ T1497] ? __kmem_cache_free+0xb6/0x200 [ 1808.825171][ T1497] ? tomoyo_path_number_perm+0x205/0x650 [ 1808.830918][ T1497] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1808.836573][ T1497] ? dvb_dvr_do_ioctl+0x75/0x220 [ 1808.841505][ T1497] ? tomoyo_path_number_perm+0x205/0x650 [ 1808.847142][ T1497] ? free_vm_area+0x50/0x50 [ 1808.851640][ T1497] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1808.856742][ T1497] vmalloc+0x75/0x80 [ 1808.860655][ T1497] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1808.865861][ T1497] dvb_dvr_do_ioctl+0x12a/0x220 [ 1808.870844][ T1497] dvb_usercopy+0x191/0x2b0 [ 1808.875353][ T1497] ? dvb_dvr_release+0x3d0/0x3d0 [ 1808.880351][ T1497] ? dvb_generic_ioctl+0xb0/0xb0 [ 1808.885311][ T1497] ? dvb_dvr_poll+0x230/0x230 [ 1808.890010][ T1497] dvb_dvr_ioctl+0x25/0x30 [ 1808.894557][ T1497] __se_sys_ioctl+0xfa/0x170 [ 1808.899158][ T1497] do_syscall_64+0x4c/0xa0 [ 1808.903754][ T1497] ? clear_bhb_loop+0x60/0xb0 [ 1808.908443][ T1497] ? clear_bhb_loop+0x60/0xb0 [ 1808.913132][ T1497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1808.919122][ T1497] RIP: 0033:0x7f22f5d9ce59 [ 1808.923544][ T1497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.943179][ T1497] RSP: 002b:00007f22f6c22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.951689][ T1497] RAX: ffffffffffffffda RBX: 00007f22f6015fa0 RCX: 00007f22f5d9ce59 [ 1808.959927][ T1497] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000008 [ 1808.967899][ T1497] RBP: 00007f22f5e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1808.975864][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1808.984105][ T1497] R13: 00007f22f6016038 R14: 00007f22f6015fa0 R15: 00007ffef0b26998 [ 1808.992086][ T1497] [ 1809.201888][ T1497] Mem-Info: [ 1809.244187][ T1497] active_anon:6218 inactive_anon:3 isolated_anon:0 [ 1809.244187][ T1497] active_file:13004 inactive_file:40686 isolated_file:0 [ 1809.244187][ T1497] unevictable:768 dirty:126 writeback:0 [ 1809.244187][ T1497] slab_reclaimable:17293 slab_unreclaimable:95505 [ 1809.244187][ T1497] mapped:30989 shmem:1369 pagetables:866 [ 1809.244187][ T1497] sec_pagetables:0 bounce:0 [ 1809.244187][ T1497] kernel_misc_reclaimable:0 [ 1809.244187][ T1497] free:1321288 free_pcp:13127 free_cma:0 [ 1809.446495][ T1497] Node 0 active_anon:24872kB inactive_anon:12kB active_file:51900kB inactive_file:162536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123984kB dirty:504kB writeback:0kB shmem:3940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no [ 1809.492071][ T1497] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1809.524308][ T1497] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.552010][ T1497] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1809.557817][ T1497] Node 0 DMA32 free:1374336kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:24972kB inactive_anon:12kB active_file:51900kB inactive_file:162536kB unevictable:1536kB writepending:504kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:36232kB local_pcp:19392kB free_cma:0kB [ 1809.602064][ T1497] lowmem_reserve[]: 0 0 1 1 1 [ 1809.606844][ T1497] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1809.636088][ T1497] lowmem_reserve[]: 0 0 0 0 0 [ 1809.641114][ T1497] Node 1 Normal free:3894948kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15696kB local_pcp:10880kB free_cma:0kB [ 1809.673456][ T1429] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1809.681318][ T1497] lowmem_reserve[]: 0 0 0 0 0 [ 1809.698898][ T1497] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1809.721315][ T1497] Node 0 DMA32: 884*4kB (UME) 150*8kB (UME) 540*16kB (UME) 682*32kB (UME) 608*64kB (UME) 236*128kB (UME) 111*256kB (UME) 81*512kB (UME) 54*1024kB (UME) 10*2048kB (UME) 274*4096kB (UM) = 1372288kB [ 1809.748115][ T1497] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1809.786485][ T1497] Node 1 Normal: 303*4kB (UME) 67*8kB (UME) 57*16kB (UME) 168*32kB (UME) 53*64kB (UME) 30*128kB (UM) 15*256kB (UM) 6*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 943*4096kB (M) = 3894948kB [ 1809.805780][ T1497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.815710][ T1497] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1809.834582][ T1497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.847598][ T1497] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1809.861637][ T1497] 55063 total pagecache pages [ 1809.866535][ T1497] 3 pages in swap cache [ 1809.877751][ T1497] Free swap = 124580kB [ 1809.885332][ T1497] Total swap = 124996kB [ 1809.891452][ T1497] 2097051 pages RAM [ 1809.895467][ T1497] 0 pages HighMem/MovableOnly [ 1809.903351][ T1429] usb 2-1: Using ep0 maxpacket: 8 [ 1809.911305][ T1497] 415207 pages reserved [ 1809.915829][ T1497] 0 pages cma reserved [ 1809.924818][ T1429] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1809.938431][ T1429] usb 2-1: config 179 has no interface number 0 [ 1809.944730][ T1429] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1809.963076][ T1429] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1809.984646][ T1429] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1809.996361][ T1429] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1810.011823][ T1429] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1810.025285][ T1429] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1810.039445][ T1429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.058676][ T1519] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1810.288304][ T129] usb 2-1: USB disconnect, device number 35 [ 1810.288304][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1810.288351][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1810.338636][ T4321] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1810.528504][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 1810.535439][ T4321] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1810.562695][ T4321] usb 3-1: config 0 has no interface number 0 [ 1810.586014][ T4321] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1810.599431][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.607988][ T4321] usb 3-1: Product: syz [ 1810.612367][ T4321] usb 3-1: Manufacturer: syz [ 1810.616976][ T4321] usb 3-1: SerialNumber: syz [ 1810.648907][ T4321] usb 3-1: config 0 descriptor?? [ 1810.856494][ T1537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1810.905817][ T4321] usb 3-1: USB disconnect, device number 41 [ 1813.218583][ T4321] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1813.281931][ T1589] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 0, id = 0 [ 1813.428522][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 1813.435957][ T4321] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1813.458093][ T4321] usb 2-1: config 252 has no interface number 0 [ 1813.473527][ T4321] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 28991, setting to 1024 [ 1813.499966][ T4321] usb 2-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1813.539373][ T4321] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1813.554884][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.577122][ T4321] usb 2-1: Product: syz [ 1813.598286][ T4321] usb 2-1: Manufacturer: syz [ 1813.611609][ T4321] usb 2-1: SerialNumber: syz [ 1813.633299][ T1586] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1813.670848][ T4321] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1813.908631][ T1428] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1813.937145][ T1586] usb usb8: usbfs: process 1586 (syz.1.8825) did not claim interface 0 before use [ 1813.970473][ T4383] usb 2-1: Failed to submit usb control message: -71 [ 1813.977869][ T4321] usb 2-1: USB disconnect, device number 36 [ 1813.992974][ T4383] usb 2-1: unable to send the bmi data to the device: -71 [ 1814.005884][ T4383] usb 2-1: unable to get target info from device [ 1814.014334][ T4383] usb 2-1: could not get target info (-71) [ 1814.029785][ T4383] usb 2-1: could not probe fw (-71) [ 1814.109329][ T1428] usb 3-1: Using ep0 maxpacket: 8 [ 1814.121064][ T1428] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1814.141196][ T1428] usb 3-1: config 0 has no interface number 0 [ 1814.167807][ T1428] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1814.196470][ T1428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.218204][ T1428] usb 3-1: Product: syz [ 1814.233355][ T1428] usb 3-1: Manufacturer: syz [ 1814.246667][ T1428] usb 3-1: SerialNumber: syz [ 1814.264887][ T1428] usb 3-1: config 0 descriptor?? [ 1814.478697][ T1598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1814.525630][ T1428] usb 3-1: USB disconnect, device number 42 [ 1816.659556][ T1661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.702225][ T1661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.750054][ T1661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1818.746924][ T1707] syz.2.8865 (1707): drop_caches: 2 [ 1818.751149][ T1708] tipc: Started in network mode [ 1818.758041][ T1708] tipc: Node identity a27e8d946dc, cluster identity 4711 [ 1818.771001][ T1708] tipc: Enabled bearer , priority 0 [ 1818.789904][ T1704] input: syz1 as /devices/virtual/input/input160 [ 1818.791810][ T1708] tipc: Resetting bearer [ 1819.527864][ T1705] tipc: Disabling bearer [ 1820.601134][ T1746] syz.2.8878 (1746): drop_caches: 2 [ 1820.725823][ T1750] input: syz1 as /devices/virtual/input/input161 [ 1820.786161][T27063] udevd[27063]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 1821.993772][ T1771] tipc: Started in network mode [ 1822.010407][ T1771] tipc: Node identity a2a0aff9e1fa, cluster identity 4711 [ 1822.027122][ T1771] tipc: Enabled bearer , priority 0 [ 1822.055076][ T1771] tipc: Resetting bearer [ 1822.309612][ T4321] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1822.518508][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 1822.525566][ T4321] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1822.553777][ T4321] usb 3-1: config 0 has no interface number 0 [ 1822.576396][ T4321] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1822.596059][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.626399][ T4321] usb 3-1: Product: syz [ 1822.636864][ T4321] usb 3-1: Manufacturer: syz [ 1822.646621][ T4321] usb 3-1: SerialNumber: syz [ 1822.668928][ T4321] usb 3-1: config 0 descriptor?? [ 1822.769203][ T1767] tipc: Disabling bearer [ 1822.879640][ T1772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8886'. [ 1824.465198][ T1816] tipc: Enabled bearer , priority 0 [ 1824.517375][ T1813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1824.879623][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1824.966867][ T4321] usb 3-1: USB disconnect, device number 43 [ 1825.032583][ T1829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1825.055278][ T1829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1825.237311][ T1814] tipc: Disabling bearer [ 1825.253429][ T1834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8907'. [ 1825.612759][ T1845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8910'. [ 1827.415957][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.455060][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.490046][ T1864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8916'. [ 1827.614155][ T1873] tipc: Enabled bearer , priority 0 [ 1827.628498][ T4321] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1827.755476][ T1875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1827.828577][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 1827.836018][ T4321] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1827.860114][ T4321] usb 4-1: config 179 has no interface number 0 [ 1827.873317][ T4321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1827.896777][ T4321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1827.920481][ T4321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1827.944268][ T4321] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1827.969616][ T4321] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1827.996661][ T4321] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1828.006240][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.017176][ T1866] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1828.264965][ T129] usb 4-1: USB disconnect, device number 23 [ 1828.265022][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1828.279567][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1828.377765][ T1871] tipc: Disabling bearer [ 1828.447992][ T1893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1829.207076][ T1903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8928'. [ 1830.618537][ T1613] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1830.818499][ T1613] usb 3-1: Using ep0 maxpacket: 16 [ 1830.827546][ T1613] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1830.867924][ T1613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.892672][ T1613] usb 3-1: Product: syz [ 1830.908550][ T1613] usb 3-1: Manufacturer: syz [ 1830.918702][ T1613] usb 3-1: SerialNumber: syz [ 1830.942873][ T1613] usb 3-1: config 0 descriptor?? [ 1830.961405][ T1613] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1831.098567][T12259] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1831.162603][ T1613] gspca_spca508: reg_read err -32 [ 1831.224172][ T1933] tipc: Enabled bearer , priority 0 [ 1831.308567][T12259] usb 2-1: Using ep0 maxpacket: 8 [ 1831.316130][T12259] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1831.341172][T12259] usb 2-1: config 0 has no interface number 0 [ 1831.366621][T12259] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1831.376561][T12259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.385080][T12259] usb 2-1: Product: syz [ 1831.390036][T12259] usb 2-1: Manufacturer: syz [ 1831.394816][T12259] usb 2-1: SerialNumber: syz [ 1831.411774][T12259] usb 2-1: config 0 descriptor?? [ 1831.622408][ T1925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8935'. [ 1831.644365][T12259] usb 2-1: USB disconnect, device number 37 [ 1831.688750][ T1613] gspca_spca508: reg_read err -110 [ 1831.695196][ T1613] gspca_spca508: reg_read err -32 [ 1831.704580][ T1613] gspca_spca508: reg_read err -32 [ 1831.710502][ T1613] gspca_spca508: reg_read err -32 [ 1831.716022][ T1613] gspca_spca508: reg write: error -32 [ 1831.722947][ T1613] spca508: probe of 3-1:0.0 failed with error -32 [ 1831.964534][ T1931] tipc: Disabling bearer [ 1832.772208][ T1958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8946'. [ 1833.294385][T29775] usb 3-1: USB disconnect, device number 44 [ 1835.016535][ T1997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8957'. [ 1835.028714][T12259] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1835.228492][T12259] usb 2-1: Using ep0 maxpacket: 8 [ 1835.235354][T12259] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1835.250441][T12259] usb 2-1: config 0 has no interface number 0 [ 1835.272332][ T1999] bond2 (unregistering): Released all slaves [ 1835.299599][T12259] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1835.336396][T12259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.359508][T12259] usb 2-1: Product: syz [ 1835.364019][T12259] usb 2-1: Manufacturer: syz [ 1835.378989][T12259] usb 2-1: SerialNumber: syz [ 1835.394667][ T2001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8958'. [ 1835.426071][T12259] usb 2-1: config 0 descriptor?? [ 1835.636928][ T1989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1835.654346][T12259] usb 2-1: USB disconnect, device number 38 [ 1835.742677][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8962'. [ 1836.396294][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8969'. [ 1837.019426][T13780] usb 1-1: USB disconnect, device number 59 [ 1837.142274][T13780] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1837.266822][ T942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1837.277743][ T942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1837.285947][ T942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1837.316023][ T942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1837.330264][ T942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1837.337565][ T942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1838.124192][ T2048] chnl_net:caif_netlink_parms(): no params data found [ 1838.370775][ T2048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.379773][ T2048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.388105][ T2048] device bridge_slave_0 entered promiscuous mode [ 1838.420882][ T2048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.431634][ T2048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.441280][ T2048] device bridge_slave_1 entered promiscuous mode [ 1838.495840][ T2048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.537875][ T2048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.606363][ T2048] team0: Port device team_slave_0 added [ 1838.640098][ T2048] team0: Port device team_slave_1 added [ 1838.658745][ T1613] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1838.751315][ T2048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1838.775077][ T2048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.866695][ T2048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1838.878508][ T1613] usb 4-1: Using ep0 maxpacket: 8 [ 1838.885409][ T1613] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1838.918504][ T1613] usb 4-1: config 0 has no interface number 0 [ 1838.923849][ T2048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1838.944921][ T2077] syz.4.8978 (2077): drop_caches: 2 [ 1838.950294][ T2048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.950324][ T2048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1839.016178][ T5684] tipc: Disabling bearer [ 1839.028746][ T5684] tipc: Left network mode [ 1839.044992][ T1613] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1839.068461][ T1613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.076510][ T1613] usb 4-1: Product: syz [ 1839.112067][ T2048] device hsr_slave_0 entered promiscuous mode [ 1839.121840][ T1613] usb 4-1: Manufacturer: syz [ 1839.126485][ T1613] usb 4-1: SerialNumber: syz [ 1839.133671][ T2048] device hsr_slave_1 entered promiscuous mode [ 1839.147517][ T2048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1839.157814][ T2048] Cannot create hsr debugfs directory [ 1839.164734][ T1613] usb 4-1: config 0 descriptor?? [ 1839.190622][ T2077] input: syz1 as /devices/virtual/input/input164 [ 1839.385582][ T2067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8977'. [ 1839.418927][ T1613] usb 4-1: USB disconnect, device number 24 [ 1839.428585][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 1840.388897][ T2109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8985'. [ 1840.513756][ T2088] [ 1840.516132][ T2088] ====================================================== [ 1840.523164][ T2088] WARNING: possible circular locking dependency detected [ 1840.530192][ T2088] syzkaller #0 Not tainted [ 1840.534597][ T2088] ------------------------------------------------------ [ 1840.541599][ T2088] syz.1.8982/2088 is trying to acquire lock: [ 1840.547582][ T2088] ffff88807357f430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1840.558713][ T2088] [ 1840.558713][ T2088] but task is already holding lock: [ 1840.566075][ T2088] ffff8880182953d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1840.576333][ T2088] [ 1840.576333][ T2088] which lock already depends on the new lock. [ 1840.576333][ T2088] [ 1840.586817][ T2088] [ 1840.586817][ T2088] the existing dependency chain (in reverse order) is: [ 1840.596076][ T2088] [ 1840.596076][ T2088] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1840.603631][ T2088] down_read_killable+0x4c/0x340 [ 1840.609084][ T2088] mmap_read_lock_killable+0x1d/0x60 [ 1840.614889][ T2088] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1840.620602][ T2088] do_user_addr_fault+0x2e8/0xb20 [ 1840.626406][ T2088] exc_page_fault+0x60/0x100 [ 1840.631728][ T2088] asm_exc_page_fault+0x22/0x30 [ 1840.637091][ T2088] fault_in_readable+0x13e/0x1f0 [ 1840.642788][ T2088] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1840.649081][ T2088] generic_perform_write+0x1f1/0x5c0 [ 1840.654930][ T2088] __generic_file_write_iter+0x148/0x2a0 [ 1840.661087][ T2088] generic_file_write_iter+0xab/0x2e0 [ 1840.666974][ T2088] vfs_write+0x482/0x9a0 [ 1840.671870][ T2088] ksys_write+0x14d/0x260 [ 1840.677161][ T2088] do_syscall_64+0x4c/0xa0 [ 1840.682377][ T2088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.689002][ T2088] [ 1840.689002][ T2088] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1840.697967][ T2088] __lock_acquire+0x2c92/0x7bd0 [ 1840.703731][ T2088] lock_acquire+0x1bb/0x4a0 [ 1840.708761][ T2088] down_write+0x36/0x60 [ 1840.713534][ T2088] process_measurement+0x3af/0x1c40 [ 1840.719249][ T2088] ima_file_mmap+0xe9/0x140 [ 1840.724258][ T2088] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1840.730404][ T2088] do_syscall_64+0x4c/0xa0 [ 1840.735595][ T2088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.742020][ T2088] [ 1840.742020][ T2088] other info that might help us debug this: [ 1840.742020][ T2088] [ 1840.752502][ T2088] Possible unsafe locking scenario: [ 1840.752502][ T2088] [ 1840.759946][ T2088] CPU0 CPU1 [ 1840.765324][ T2088] ---- ---- [ 1840.770675][ T2088] lock(&mm->mmap_lock); [ 1840.775090][ T2088] lock(&sb->s_type->i_mutex_key#13); [ 1840.783162][ T2088] lock(&mm->mmap_lock); [ 1840.790039][ T2088] lock(&sb->s_type->i_mutex_key#13); [ 1840.795489][ T2088] [ 1840.795489][ T2088] *** DEADLOCK *** [ 1840.795489][ T2088] [ 1840.803618][ T2088] 1 lock held by syz.1.8982/2088: [ 1840.808646][ T2088] #0: ffff8880182953d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1840.819153][ T2088] [ 1840.819153][ T2088] stack backtrace: [ 1840.825050][ T2088] CPU: 0 PID: 2088 Comm: syz.1.8982 Not tainted syzkaller #0 [ 1840.832412][ T2088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1840.842455][ T2088] Call Trace: [ 1840.845745][ T2088] [ 1840.848669][ T2088] dump_stack_lvl+0x188/0x24e [ 1840.853357][ T2088] ? load_image+0x410/0x410 [ 1840.857855][ T2088] ? show_regs_print_info+0x12/0x12 [ 1840.863047][ T2088] ? print_circular_bug+0x12b/0x1a0 [ 1840.868238][ T2088] check_noncircular+0x296/0x330 [ 1840.873173][ T2088] ? look_up_lock_class+0x75/0x140 [ 1840.878305][ T2088] ? add_chain_block+0x9b0/0x9b0 [ 1840.883240][ T2088] ? lockdep_lock+0xf1/0x1f0 [ 1840.887827][ T2088] ? mark_lock+0x94/0x320 [ 1840.892145][ T2088] ? _find_first_zero_bit+0xd2/0x100 [ 1840.897439][ T2088] __lock_acquire+0x2c92/0x7bd0 [ 1840.902289][ T2088] ? __lock_acquire+0x7bd0/0x7bd0 [ 1840.907306][ T2088] ? verify_lock_unused+0x140/0x140 [ 1840.912499][ T2088] ? ima_match_policy+0x10d/0x21b0 [ 1840.917690][ T2088] ? ima_match_policy+0x211c/0x21b0 [ 1840.922912][ T2088] lock_acquire+0x1bb/0x4a0 [ 1840.927416][ T2088] ? process_measurement+0x3af/0x1c40 [ 1840.933194][ T2088] ? __might_sleep+0xd0/0xd0 [ 1840.937927][ T2088] ? read_lock_is_recursive+0x10/0x10 [ 1840.943337][ T2088] ? ima_get_action+0x71/0xa0 [ 1840.948049][ T2088] down_write+0x36/0x60 [ 1840.952206][ T2088] ? process_measurement+0x3af/0x1c40 [ 1840.957576][ T2088] process_measurement+0x3af/0x1c40 [ 1840.962798][ T2088] ? ima_file_mmap+0x140/0x140 [ 1840.967556][ T2088] ? aa_file_perm+0x112/0xf00 [ 1840.972301][ T2088] ? mtree_load+0x100/0xa70 [ 1840.976922][ T2088] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1840.983715][ T2088] ima_file_mmap+0xe9/0x140 [ 1840.988217][ T2088] ? ima_file_free+0x3e0/0x3e0 [ 1840.993062][ T2088] ? common_file_perm+0x171/0x1c0 [ 1840.998081][ T2088] ? bpf_lsm_mmap_file+0x5/0x10 [ 1841.003094][ T2088] ? security_mmap_file+0x11b/0x180 [ 1841.008440][ T2088] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1841.014098][ T2088] ? lockdep_hardirqs_on+0x94/0x140 [ 1841.019288][ T2088] ? asm_exc_page_fault+0x22/0x30 [ 1841.024331][ T2088] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1841.030047][ T2088] ? __get_user_nocheck_1+0x6/0x10 [ 1841.035151][ T2088] ? syscall_user_dispatch+0x45/0x90 [ 1841.040502][ T2088] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1841.046226][ T2088] do_syscall_64+0x4c/0xa0 [ 1841.050647][ T2088] ? clear_bhb_loop+0x60/0xb0 [ 1841.055410][ T2088] ? clear_bhb_loop+0x60/0xb0 [ 1841.060105][ T2088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.066012][ T2088] RIP: 0033:0x7f651db9ce59 [ 1841.070425][ T2088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.090213][ T2088] RSP: 002b:00007f651e992028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1841.098631][ T2088] RAX: ffffffffffffffda RBX: 00007f651de15fa0 RCX: 00007f651db9ce59 [ 1841.106794][ T2088] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000e47000 [ 1841.114853][ T2088] RBP: 00007f651dc32e6f R08: 0000000000010000 R09: 0000000000000000 [ 1841.122832][ T2088] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1841.131242][ T2088] R13: 00007f651de16038 R14: 00007f651de15fa0 R15: 00007ffd5acc2378 [ 1841.139308][ T2088] [ 1841.315827][ T2048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1841.361510][ T2048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1841.384684][ T5684] device hsr_slave_0 left promiscuous mode [ 1841.393259][ T5684] device hsr_slave_1 left promiscuous mode [ 1841.411467][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1841.432122][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1841.453477][ T5684] device bridge_slave_1 left promiscuous mode [ 1841.466368][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.488659][ T5684] device bridge_slave_0 left promiscuous mode [ 1841.504863][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.518567][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 1841.708217][ T5684] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1841.718267][ T5684] bond2 (unregistering): Released all slaves [ 1841.734901][ T5684] bond1 (unregistering): Released all slaves [ 1842.224565][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1842.270347][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1842.548261][ T5684] bond0 (unregistering): Released all slaves [ 1842.640301][ T2048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1842.650902][ T2048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1842.731882][ T2048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.755016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1842.764748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1842.775343][ T2048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.785706][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1842.796606][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1842.806233][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.813397][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.841266][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1842.849792][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1842.861740][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1842.870360][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.877510][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.888209][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1842.902968][ T5876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1842.934235][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1842.957186][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1842.967934][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1842.980729][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1842.990200][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1843.001929][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1843.016183][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1843.033711][ T2048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1843.047071][ T2048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1843.071630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1843.084876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1843.231309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1843.238948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1843.250582][ T2048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.264462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1843.273968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1843.290727][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1843.299752][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1843.308196][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1843.316446][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1843.326763][ T2048] device veth0_vlan entered promiscuous mode [ 1843.337358][ T2048] device veth1_vlan entered promiscuous mode [ 1843.353757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1843.362346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1843.370543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1843.379388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1843.389691][ T2048] device veth0_macvtap entered promiscuous mode [ 1843.398084][ T2048] device veth1_macvtap entered promiscuous mode [ 1843.410987][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1843.422332][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.432393][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1843.443253][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.453154][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1843.463746][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.474678][ T2048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.482919][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1843.491105][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1843.500264][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1843.508960][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1843.519837][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.530792][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.540793][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.551268][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.561197][ T2048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1843.572146][ T2048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.583776][ T2048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.591135][T23453] Bluetooth: hci3: command 0x040f tx timeout [ 1843.598050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1843.607187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1843.617349][ T2048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.626637][ T2048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.635681][ T2048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.644546][ T2048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.668206][ T2048] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1843.685615][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.686412][ T2048] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1843.701845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.710684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1843.724962][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.732914][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.740969][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1845.668571][ T4290] Bluetooth: hci3: command 0x0419 tx timeout