last executing test programs: 13.430411894s ago: executing program 1 (id=2150): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 11.681652879s ago: executing program 1 (id=2159): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r2, 0x5501) fsmount(r1, 0x1, 0x2) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013102000100"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x38011, r1, 0x49057000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000280)={&(0x7f0000000180)=""/208, 0xd0}) sendmsg$nl_route_sched(r5, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) 11.390105947s ago: executing program 1 (id=2162): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032dbd7000fda600000b0000", @ANYRES64=r4], 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004810) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x0, 0x22, 0x3c, {0x3c, 0x4, "37a15ea1fbdc08cba9b32a1788811bdd7604d28a9403617365cb8990b1a01e5bee59d4462bfbc4abc34ba27e2f04749057de70ba046ba97afdaf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000300)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xd}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf00, 0x3, [0x0, 0xc0c0, 0x3f00, 0xc0]}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x0, 0x6, 0x35, "69a56cbe", "33b48082"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x5, 0x2, 0x5, 0x5, 0x441}}}, &(0x7f0000000980)={0x44, &(0x7f0000000580)={0x20, 0xc, 0xbc, "e0f8442f51ff6257e939a8eb992db83079b1623ddaea7f457241fbcec9c7fa31327bc8f6f3f363a63520ddfd049ef5a9b5a5946a2ead934ef2414738ad7f507394cd5f07bc1ec91cb15da9e66720aa9ce8bcc4041a4245a42e8deacc61c9a404241639a2947c663fd0a60d5230b6b06f0eb364623e2c658c6d4f3e8b7a3e64d7454040bb37e5959c0c0f19482fac75ca35a3b239e3f381dab71973f8194777c1ddf4398cd54c35926d5b0026f64dea42406a1174cfc79ce7b00746f3"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x8, 0x8, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a10e"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfe}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="01039f114eb2"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "a49c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xa3}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) 10.053583363s ago: executing program 2 (id=2169): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 8.530577701s ago: executing program 2 (id=2171): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fstat(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001e0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x22, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x80000005}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ffd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x84, &(0x7f0000001380)=""/132, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x9, 0xffffffff, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x3, 0x1, 0x8, 0x4}, {0x5, 0x4}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x100, @void, @value}, 0x94) 8.305821982s ago: executing program 0 (id=2172): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r2, 0x5501) fsmount(r1, 0x1, 0x2) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013102000100"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x38011, r1, 0x49057000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000280)={&(0x7f0000000180)=""/208, 0xd0}) sendmsg$nl_route_sched(r5, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) 8.154318666s ago: executing program 0 (id=2173): syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03"], 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1096, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x14, 0x0, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x7fffffff]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x18, 0x4}, @note={0x81, 0x0, 0x0, 0x0, 0x8000000}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdf}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e00010d000000000000000007000000190785da8f03b2225824bf6c589e85637ff091a63f4852eb02566bc577de345dd636bffccc7e019e5189f4609dcfd70cdba34a831483abeaf5ba2266cc9693193f1693f0b02d287064a501455e22eba29ccc3fc40f63cb376a5c80bce27a9b7f4f81f37cd27e7edbc7372ab56b1e80ecfe36d80e13773e7a92c695ce5002ccb7fb780dd9582fe34aa930885130037252e80a", @ANYRES32=0x0, @ANYBLOB="01a0000001500400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.529619288s ago: executing program 3 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000000000080003400001000005000100"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) 7.419454606s ago: executing program 1 (id=2178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x1440, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x2a020400) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x6, 0x24e500) r1 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000c40)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x300) 7.323734129s ago: executing program 3 (id=2179): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e00000004000280", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.04326438s ago: executing program 3 (id=2181): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 6.659619686s ago: executing program 1 (id=2182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x7, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xb84, 0x0, 0x111, 0x4b4, 0x1d0, 0xd4feffff, 0xabc, 0x20a, 0x278, 0xabc, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6}, 0x7a, 0x1ac, 0x1d0, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x0, 0x1, [0x6, 0xf001, 0x8, 0x80, 0x7, 0x0, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x7, 0x97, 0xdf5, 0x4d, 0x1], 0x3}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x884, 0x8ec, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {}, {[], [{}, {}, {0x0, 0x3}, {0xa3c}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {0x0, 0x2}]}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xbe0) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000c40), 0x109000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x40045402, &(0x7f0000000c80)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0xec, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}}, 0xec}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) dup2(0xffffffffffffffff, r7) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005d00)=ANY=[@ANYRESDEC], 0x5a1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x80) unshare(0x22020600) 6.574649151s ago: executing program 0 (id=2183): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x2e, 0x2, 0x7, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r2, 0x5501) fsmount(r1, 0x1, 0x2) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013102000100"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x38011, r1, 0x49057000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000280)={&(0x7f0000000180)=""/208, 0xd0}) sendmsg$nl_route_sched(r4, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) 6.263094811s ago: executing program 0 (id=2184): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 4.754251641s ago: executing program 3 (id=2185): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000d", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2200) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073597a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e4df8fe00ae552379562d0c61235e76f870800014000000003080002401c791e7108000240423930ce08000140000000030900"], 0x122}}, 0x4008090) r4 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xfff8, 0x8, 0x1, {0x22, 0x1a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x0, 0x0, 0x4, 0xff, 0x6}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "dca2d3a315f9a86aa61775ccdbf6ec9e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb2, 0xfa, 0x5, 0x101, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x8}]}, 0x9, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "41246e3d5f52bf72b1869bcd314f4dd42968c4119d657b2874e82cb0d6528ada2e80a0217e4c1ecb01d21fc4c6062931bac80c5180388591016debbeacdb8931d0b786f3198efa17ae4f8a66f5effd78c4c29f3cea8932433c19eec044e9c5af987391fd95b47326893708f2404a2f0ffb9434d0fac0251189adccc1"}}, {0xc5, &(0x7f0000000600)=@string={0xc5, 0x3, "9990e618ef1b6755f49f56e1fc7db4b4211bf03c5ea6d6c20d0c3540b874ae29d4eed081ea4f12aed7132ebe70188a0013881e3c68c2d7882ff4bb08aa54d0ca52f151aa1479af3bdad836ace733af5b4d410796f525b5ca339011b3bb97599ce403d7fa0f1183d7f1b07f95c5c146ffa3a9c59d8dc1a4d8eeaf6ae0f8e1bedde957b41447f473466e435188d80e5e1e494d39629cc2bea3cd31de597307378f9b9ba8a0fbc1cc634288ae329a2ba7c6de2aa177a6e12f2f7be10908b12b342cc6e757"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xe090}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0xfa, &(0x7f0000000780)=@string={0xfa, 0x3, "f0ae54cb4a2dbc2a12e68899570ae5072a99e34c7391be3c9a86b938801073ce633a0b321772d9f227dd7f852e676c9f7ca241a3aff4ffcd737846dd2720998c00703bc2511e9c38f4d96370341b50a60b88b7bf1964570679a7c21e01b4cda4899a10d04549ff5e06dd794a81437c579231e6e1747a787fc9872dabded827d5a170daa1e97aeb668f6c561080338cb973800b6cd1ba0458dc6a7b6d4fba00999683caf915dea127d9ea193d5e095d9aefef739d4005e7032e3da8297a12226bfde25acbf9d544d579541860dba780fdb5311058bef608af48b47efde9682b11500d554a24ddd2f067858f64625704bdc7ef5852ab9c4664"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x14, &(0x7f0000000a00)={0x40, 0x2, 0xd1, {0xd1, 0xd, "5fe4ac87d13cc271f82c33eba21de83d7ffe98ae7d0fe2a1ee9990645a27926b839e684b933a2b42d28f58f0f29aaab87cd821c6788601c03271f12cdc6ae772820dd6c9c8aa4a2739975e7b7fafc07038d73531726c7eb46c9d715d58ef5aebb904d5a7e290ed83b84eaeec5e449a772ad0ea3fbdbf2a1dbf90ce50dd4378aa4c78043633a9db84aaa583d3c213705ac0030ed29755de580ab3843a3eaad079e448b5dded46b3164d270de46b07a061b785324e0d750bc264cc13343ca5abdd9ac55a3f55664b99fe8118c37834f8"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "43c2f8b06f5d96b1a4bffcf0859b7a2508d5563fc019487026a4"}}, &(0x7f0000000b40)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x9, 'H'}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x5e1}}}}, &(0x7f0000000e40)={0x18, &(0x7f0000000c00)={0x40, 0x6, 0xd6, "c9ca3e81c9806fd371cf2e7edae373f4d48e43e2118e27200bad9e82484c371b0ef44e775d06723296bdcf011e394f6b765eae64c9153fbcaa3d24c3a6031f8b275e88e745d9480fd35ce66a1bfc09c86ed923e7a52d85e114b44af2dc95b8295aaeff9b10c153b538d39ecb44987ae78d3b4cd6453b6777d373aec387d8e32bfd3c2592c5bee5689d902a222e83089c9a195251779a7ac635ac3cbcc595dc8ce15470cb73089388983152ddb2cc52a3999ffdaf9b62b5b292000392fd88f5f2d036333c8fde0fce2528c574a50eff98e122e3774220"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d80)={0x20, 0x1, 0x54, "b3f26cea58049d5b9538bd505b2a3dd5b736249eced9c3746c9ee5bd35c80778ba342614be85a3df5ee3dde94d9abdf9fdf46535e0c270c0e9435813a6dd23e6e0be074c095dc27312fdefc36a131abb0f288073"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x40}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getdents64(r6, &(0x7f0000001f80)=""/4108, 0x100c) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000000000000040000000000000010000000000000002000000000000000a7cffd0c80de59d616e27f750b0000692f184857624f69a46acdc1ff0a3a1496799a7771c5812a95d5c2ea44212ccc0ad4e78337205f299513db1dabda603ae81b8b431eddc1d54515560e2466e9e05d0a7deae3915125d25f0a767edcdb16546df380047516fa434fde1c6cf764a273c2cd737c5a16c9fd45df"], 0x24, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.475210198s ago: executing program 2 (id=2186): syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) 4.318868022s ago: executing program 2 (id=2187): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1096, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x0, 0x4}, @note={0x81, 0x0, 0x0, 0x0, 0x8000000}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xbb, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result={0x1f}}], 0x1c) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.182364144s ago: executing program 2 (id=2188): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="31032dbd7000fda600000b0000", @ANYRES64=r4], 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004810) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000140)={0x0, 0x22, 0x3c, {0x3c, 0x4, "37a15ea1fbdc08cba9b32a1788811bdd7604d28a9403617365cb8990b1a01e5bee59d4462bfbc4abc34ba27e2f04749057de70ba046ba97afdaf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000300)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xd}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf00, 0x3, [0x0, 0xc0c0, 0x3f00, 0xc0]}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x0, 0x6, 0x35, "69a56cbe", "33b48082"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x5, 0x2, 0x5, 0x5, 0x441}}}, &(0x7f0000000980)={0x44, &(0x7f0000000580)={0x20, 0xc, 0xbc, "e0f8442f51ff6257e939a8eb992db83079b1623ddaea7f457241fbcec9c7fa31327bc8f6f3f363a63520ddfd049ef5a9b5a5946a2ead934ef2414738ad7f507394cd5f07bc1ec91cb15da9e66720aa9ce8bcc4041a4245a42e8deacc61c9a404241639a2947c663fd0a60d5230b6b06f0eb364623e2c658c6d4f3e8b7a3e64d7454040bb37e5959c0c0f19482fac75ca35a3b239e3f381dab71973f8194777c1ddf4398cd54c35926d5b0026f64dea42406a1174cfc79ce7b00746f3"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x8, 0x8, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a10e"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0xfe}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="01039f114eb2"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "a49c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xfffa}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xa3}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) 3.807551267s ago: executing program 4 (id=2192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x1440, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) 3.624524685s ago: executing program 3 (id=2193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x1440, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x2a020400) r1 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000c40)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x300) 3.624154284s ago: executing program 4 (id=2194): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x2e, 0x2, 0x7, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r2, 0x5501) fsmount(r1, 0x1, 0x2) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013102000100"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x38011, r1, 0x49057000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000280)={&(0x7f0000000180)=""/208, 0xd0}) sendmsg$nl_route_sched(r4, &(0x7f000000c7c0)={0x0, 0x0, &(0x7f000000c780)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) 3.44019075s ago: executing program 4 (id=2195): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x14080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4) close(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect(0x3, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240456"], 0x0) 3.406492527s ago: executing program 3 (id=2196): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffff9c, &(0x7f0000001740), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) fstat(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00001e0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x22, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x80000005}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ffd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x84, &(0x7f0000001380)=""/132, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x9, 0xffffffff, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001640)=[{0x3, 0x1, 0x8, 0x4}, {0x5, 0x4}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x100, @void, @value}, 0x94) 3.386934502s ago: executing program 1 (id=2197): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) write(0xffffffffffffffff, &(0x7f0000000040)="1c00000021002551071c0165ff00", 0xe) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8100081002200884867eec83c00442f00fc000000000000000000000000000001fc0100000000000000000000000000010c21880b0000000304000800080086dd080088be00000001140ffd920100f0ffffff000b080022eb00000004290f530e02000000000000080006010e080065580000000480"], 0x0) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc08171cf5d036543}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000300)=[{0x8, 0x81, 0x3a, 0xa}, {0x4, 0x8, 0x8}, {0x1, 0x9, 0x9, 0x8}, {0x3, 0x7, 0x9, 0x2}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000100)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40810) socket$inet_dccp(0x2, 0x6, 0x0) 2.954518367s ago: executing program 0 (id=2198): syz_emit_ethernet(0xd2, 0x0, 0x0) 2.565741951s ago: executing program 0 (id=2199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x9eb9, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x82, 0x1, 0x7}}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000"], 0x44}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x25a982b1) ioctl$MON_IOCX_GETX(r8, 0x80089203, 0x0) 386.354809ms ago: executing program 4 (id=2200): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000000000080003400001000005000100"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) 237.468619ms ago: executing program 4 (id=2201): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x8000f, 0x5) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002840)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f01b, 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x40) 38.402541ms ago: executing program 2 (id=2202): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) socket(0x848000000015, 0x805, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 4 (id=2203): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000d", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2200) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073597a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e4df8fe00ae552379562d0c61235e76f870800014000000003080002401c791e7108000240423930ce08000140000000030900"], 0x122}}, 0x4008090) r4 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0xfff8, 0x8, 0x1, {0x22, 0x1a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x6, 0x1}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x0, 0x0, 0x4, 0xff, 0x6}, 0x2b, &(0x7f00000003c0)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "dca2d3a315f9a86aa61775ccdbf6ec9e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb2, 0xfa, 0x5, 0x101, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x8}]}, 0x9, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "41246e3d5f52bf72b1869bcd314f4dd42968c4119d657b2874e82cb0d6528ada2e80a0217e4c1ecb01d21fc4c6062931bac80c5180388591016debbeacdb8931d0b786f3198efa17ae4f8a66f5effd78c4c29f3cea8932433c19eec044e9c5af987391fd95b47326893708f2404a2f0ffb9434d0fac0251189adccc1"}}, {0xc5, &(0x7f0000000600)=@string={0xc5, 0x3, "9990e618ef1b6755f49f56e1fc7db4b4211bf03c5ea6d6c20d0c3540b874ae29d4eed081ea4f12aed7132ebe70188a0013881e3c68c2d7882ff4bb08aa54d0ca52f151aa1479af3bdad836ace733af5b4d410796f525b5ca339011b3bb97599ce403d7fa0f1183d7f1b07f95c5c146ffa3a9c59d8dc1a4d8eeaf6ae0f8e1bedde957b41447f473466e435188d80e5e1e494d39629cc2bea3cd31de597307378f9b9ba8a0fbc1cc634288ae329a2ba7c6de2aa177a6e12f2f7be10908b12b342cc6e757"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xe090}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0xfa, &(0x7f0000000780)=@string={0xfa, 0x3, "f0ae54cb4a2dbc2a12e68899570ae5072a99e34c7391be3c9a86b938801073ce633a0b321772d9f227dd7f852e676c9f7ca241a3aff4ffcd737846dd2720998c00703bc2511e9c38f4d96370341b50a60b88b7bf1964570679a7c21e01b4cda4899a10d04549ff5e06dd794a81437c579231e6e1747a787fc9872dabded827d5a170daa1e97aeb668f6c561080338cb973800b6cd1ba0458dc6a7b6d4fba00999683caf915dea127d9ea193d5e095d9aefef739d4005e7032e3da8297a12226bfde25acbf9d544d579541860dba780fdb5311058bef608af48b47efde9682b11500d554a24ddd2f067858f64625704bdc7ef5852ab9c4664"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x14, &(0x7f0000000a00)={0x40, 0x2, 0xd1, {0xd1, 0xd, "5fe4ac87d13cc271f82c33eba21de83d7ffe98ae7d0fe2a1ee9990645a27926b839e684b933a2b42d28f58f0f29aaab87cd821c6788601c03271f12cdc6ae772820dd6c9c8aa4a2739975e7b7fafc07038d73531726c7eb46c9d715d58ef5aebb904d5a7e290ed83b84eaeec5e449a772ad0ea3fbdbf2a1dbf90ce50dd4378aa4c78043633a9db84aaa583d3c213705ac0030ed29755de580ab3843a3eaad079e448b5dded46b3164d270de46b07a061b785324e0d750bc264cc13343ca5abdd9ac55a3f55664b99fe8118c37834f8"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "43c2f8b06f5d96b1a4bffcf0859b7a2508d5563fc019487026a4"}}, &(0x7f0000000b40)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x9, 'H'}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x5e1}}}}, &(0x7f0000000e40)={0x18, &(0x7f0000000c00)={0x40, 0x6, 0xd6, "c9ca3e81c9806fd371cf2e7edae373f4d48e43e2118e27200bad9e82484c371b0ef44e775d06723296bdcf011e394f6b765eae64c9153fbcaa3d24c3a6031f8b275e88e745d9480fd35ce66a1bfc09c86ed923e7a52d85e114b44af2dc95b8295aaeff9b10c153b538d39ecb44987ae78d3b4cd6453b6777d373aec387d8e32bfd3c2592c5bee5689d902a222e83089c9a195251779a7ac635ac3cbcc595dc8ce15470cb73089388983152ddb2cc52a3999ffdaf9b62b5b292000392fd88f5f2d036333c8fde0fce2528c574a50eff98e122e3774220"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d80)={0x20, 0x1, 0x54, "b3f26cea58049d5b9538bd505b2a3dd5b736249eced9c3746c9ee5bd35c80778ba342614be85a3df5ee3dde94d9abdf9fdf46535e0c270c0e9435813a6dd23e6e0be074c095dc27312fdefc36a131abb0f288073"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0x40}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getdents64(r6, &(0x7f0000001f80)=""/4108, 0x100c) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000000000000040000000000000010000000000000002000000000000000a7cffd0c80de59d616e27f750b0000692f184857624f69a46acdc1ff0a3a1496799a7771c5812a95d5c2ea44212ccc0ad4e78337205f299513db1dabda603ae81b8b431eddc1d54515560e2466e9e05d0a7deae3915125d25f0a767edcdb16546df380047516fa434fde1c6cf764a273c2cd737c5a16c9fd45df"], 0x24, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): 253] udevd[8253]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.530137][ T5888] usbhid 5-1:1.0: can't add hid device: -71 [ 585.539284][ T5888] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 585.563367][ T5888] usb 5-1: USB disconnect, device number 80 [ 585.726201][ T5885] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 585.915036][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 586.025696][ T5888] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 586.063755][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.102277][ T5885] usb 1-1: config 0 has no interfaces? [ 586.109242][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 586.121290][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.143779][ T5885] usb 1-1: config 0 descriptor?? [ 586.205236][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 586.223368][ T5888] usb 5-1: config 0 has no interfaces? [ 586.243511][ T5888] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 586.260606][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.279883][ T5888] usb 5-1: Product: syz [ 586.291421][ T5888] usb 5-1: Manufacturer: syz [ 586.299538][T11439] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 586.307402][ T5888] usb 5-1: SerialNumber: syz [ 586.326561][ T5888] usb 5-1: config 0 descriptor?? [ 586.434256][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.447315][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.572699][T11097] usb 5-1: USB disconnect, device number 81 [ 587.660365][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 587.905064][T11097] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 588.046628][T11097] usb 3-1: device descriptor read/64, error -71 [ 588.077017][ T5893] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 588.185161][ T5885] usb 4-1: USB disconnect, device number 72 [ 588.265030][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 588.288260][ T5893] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.303500][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 588.354933][T11097] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 588.370229][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 588.378324][ T5893] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 588.401850][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.535043][T11097] usb 3-1: device descriptor read/64, error -71 [ 588.638902][T11470] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 588.815135][T11097] usb usb3-port1: attempt power cycle [ 588.883765][ T47] usb 1-1: USB disconnect, device number 77 [ 588.943368][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 589.175131][T11097] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 589.290393][T11097] usb 3-1: device descriptor read/8, error -71 [ 589.425999][T11482] program syz.0.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.535001][T11097] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 589.555902][T11097] usb 3-1: device descriptor read/8, error -71 [ 589.695203][T11097] usb usb3-port1: unable to enumerate USB device [ 590.198079][T11492] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 591.486146][ T5893] usbhid 2-1:1.0: can't add hid device: -71 [ 591.492153][ T5893] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 591.529546][ T5893] usb 2-1: USB disconnect, device number 86 [ 591.642957][T11097] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 591.940907][T11097] usb 3-1: Using ep0 maxpacket: 16 [ 591.964748][T11097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.076277][T11097] usb 3-1: config 0 has no interfaces? [ 592.081806][T11097] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 592.091086][ T47] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 592.225278][T11097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.242998][T11097] usb 3-1: config 0 descriptor?? [ 592.350226][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.390762][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 592.411074][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.447833][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 592.536564][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.603761][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.615818][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.660143][ T47] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.773681][ T47] usb 1-1: Manufacturer: syz [ 592.823666][ T47] usb 1-1: config 0 descriptor?? [ 593.032128][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 593.155668][T11530] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 593.354982][ T47] rc_core: IR keymap rc-hauppauge not found [ 593.361138][ T47] Registered IR keymap rc-empty [ 593.367149][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.407601][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.451420][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 593.468611][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 593.497110][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.515017][T11097] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 593.539202][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.579775][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.607268][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.637834][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.665139][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.675075][T11097] usb 4-1: Using ep0 maxpacket: 8 [ 593.684824][T11097] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 593.693531][T11097] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.712778][T11097] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 593.723209][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.764960][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.775195][T11097] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 593.824422][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.848335][T11097] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 593.861767][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.915060][ T47] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.987035][ T47] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 594.016940][T11097] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.027738][ T47] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 594.060988][T11097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.170892][ T5885] usb 3-1: USB disconnect, device number 86 [ 594.330798][T11097] usb 4-1: usb_control_msg returned -32 [ 594.343523][T11097] usbtmc 4-1:16.0: can't read capabilities [ 594.401334][T11544] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 594.775093][T11097] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 595.015152][ T47] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 595.042239][ T5893] usb 4-1: USB disconnect, device number 73 [ 595.066276][T11097] usb 3-1: Using ep0 maxpacket: 16 [ 595.128931][T11097] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.215645][ T5885] usb 1-1: USB disconnect, device number 78 [ 595.244708][ T47] usb 2-1: config 0 has no interfaces? [ 595.259163][T11097] usb 3-1: config 1 interface 0 has no altsetting 0 [ 595.269250][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 595.282288][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.291450][ T47] usb 2-1: Product: syz [ 595.299918][ T47] usb 2-1: Manufacturer: syz [ 595.304685][ T47] usb 2-1: SerialNumber: syz [ 595.321265][ T47] usb 2-1: config 0 descriptor?? [ 595.423583][T11097] usb 3-1: string descriptor 0 read error: -22 [ 595.432803][T11097] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 595.442474][T11097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.735109][ T5885] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 596.885229][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 596.895028][ T5885] usb 4-1: config 64 has an invalid interface number: 110 but max is 0 [ 596.906989][ T5885] usb 4-1: config 64 has no interface number 0 [ 596.913464][ T5885] usb 4-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.925451][ T5885] usb 4-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 596.944180][ T5885] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 596.982102][ T5885] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 597.009153][ T5885] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 597.041521][ T5885] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 597.073777][ T5885] usb 4-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 597.150058][ T5885] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 597.167039][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.187589][ T5885] usb 4-1: Product: syz [ 597.221604][ T5885] usb 4-1: Manufacturer: syz [ 597.232682][ T5885] usb 4-1: SerialNumber: syz [ 597.272075][T11567] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 597.285814][ T5885] spcp8x5 4-1:64.110: SPCP8x5 converter detected [ 597.469538][ T5885] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 597.484413][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.499629][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.527711][ T5885] usb 4-1: USB disconnect, device number 74 [ 597.540698][ T5885] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 597.548901][ T5888] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 597.561170][ T5885] spcp8x5 4-1:64.110: device disconnected [ 597.724936][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 597.737540][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.749473][ T5888] usb 1-1: config 0 has no interfaces? [ 597.757338][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 597.767132][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.783888][ T5888] usb 1-1: config 0 descriptor?? [ 598.099267][T11578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.116526][T11578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.471738][ T47] usb 2-1: USB disconnect, device number 87 [ 598.716027][T11097] usbhid 3-1:1.0: can't add hid device: -71 [ 598.781384][T11097] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 598.830069][T11097] usb 3-1: USB disconnect, device number 87 [ 598.869047][T11596] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 599.005185][ T5888] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 599.012939][ T5885] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 599.175394][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 599.180770][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 599.192006][ T5888] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 599.224317][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 599.234302][ T5888] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 599.261400][ T5885] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 599.274931][T11097] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 599.287343][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.300173][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.311283][ T5885] usb 4-1: Product: syz [ 599.332479][ T5885] usb 4-1: Manufacturer: syz [ 599.340622][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.353008][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.361425][ T5885] usb 4-1: SerialNumber: syz [ 599.369732][ T5888] usb 5-1: Product: syz [ 599.428241][ T5888] usb 5-1: Manufacturer: syz [ 599.434125][ T5885] usb 4-1: config 0 descriptor?? [ 599.444995][T11097] usb 3-1: Using ep0 maxpacket: 8 [ 599.455023][ T5888] usb 5-1: SerialNumber: syz [ 599.463629][T11097] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 599.526329][T11097] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.542073][T11097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.559136][T11097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.572087][T11097] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.585356][T11097] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 599.595224][T11097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.673182][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.695354][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.707780][ T5885] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 599.774369][ T5885] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 599.800271][ T5885] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 599.812934][T11097] usb 3-1: usb_control_msg returned -32 [ 599.823277][T11097] usbtmc 3-1:16.0: can't read capabilities [ 599.860529][ T5885] usb 4-1: USB disconnect, device number 75 [ 600.383582][ T5886] usb 3-1: USB disconnect, device number 88 [ 600.580675][T11097] usb 1-1: USB disconnect, device number 79 [ 600.616057][ T5885] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 600.829589][ T5885] usb 4-1: config 0 has no interfaces? [ 600.851202][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 600.873354][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.882662][ T5885] usb 4-1: Product: syz [ 600.891983][ T5885] usb 4-1: Manufacturer: syz [ 600.896984][ T5885] usb 4-1: SerialNumber: syz [ 600.908650][ T5885] usb 4-1: config 0 descriptor?? [ 600.944977][ T47] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 601.045847][T11097] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 601.124901][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 601.135519][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 601.152681][ T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.375475][ T47] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 601.385672][T11097] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.416341][T11097] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.430919][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.443512][T11097] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 601.456998][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.465261][T11097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.474038][ T47] usb 2-1: Product: syz [ 601.547875][ T5888] usb 5-1: 0:2 : does not exist [ 601.555398][ T47] usb 2-1: Manufacturer: syz [ 601.573255][T11097] usb 1-1: config 0 descriptor?? [ 601.584674][ T47] usb 2-1: SerialNumber: syz [ 601.632659][ T47] cdc_ncm 2-1:1.0: skipping garbage [ 601.663873][ T47] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 601.692212][ T47] cdc_ncm 2-1:1.0: bind() failure [ 601.704159][ T5888] usb 5-1: USB disconnect, device number 82 [ 601.743815][ T47] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 601.754599][ T47] cdc_ncm 2-1:1.1: bind() failure [ 601.812564][T11637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1782'. [ 601.822669][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1782'. [ 602.068827][ T9287] udevd[9287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.215068][ T47] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 603.374970][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 603.389249][ T47] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 603.403779][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.421024][ T47] usb 3-1: Product: syz [ 603.431856][ T47] usb 3-1: Manufacturer: syz [ 603.437713][ T47] usb 3-1: SerialNumber: syz [ 603.452024][ T47] r8152-cfgselector 3-1: Unknown version 0x0000 [ 603.461566][ T47] r8152-cfgselector 3-1: config 0 descriptor?? [ 603.485015][T11097] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 603.665073][T11097] usb 5-1: Using ep0 maxpacket: 16 [ 603.683152][ T47] r8152-cfgselector 3-1: Needed 2 retries to read version [ 603.694553][ T47] r8152-cfgselector 3-1: Unknown version 0x0000 [ 603.704050][T11097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.714579][T11097] usb 5-1: config 0 has no interfaces? [ 603.720878][T11097] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 603.730091][ T47] r8152-cfgselector 3-1: bad CDC descriptors [ 603.760061][T11097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.790992][T11097] usb 5-1: config 0 descriptor?? [ 603.948608][ T5885] r8152-cfgselector 3-1: USB disconnect, device number 89 [ 604.049136][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.060040][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.076929][T11658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.090452][T11658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.207045][ T5885] usb 4-1: USB disconnect, device number 76 [ 604.489021][ T5885] usb 2-1: USB disconnect, device number 88 [ 604.559903][T11667] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 604.593479][T11669] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 604.599607][T11671] FAULT_INJECTION: forcing a failure. [ 604.599607][T11671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.617182][T11671] CPU: 1 UID: 0 PID: 11671 Comm: syz.1.1800 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 604.617206][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 604.617219][T11671] Call Trace: [ 604.617227][T11671] [ 604.617234][T11671] dump_stack_lvl+0x241/0x360 [ 604.617267][T11671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.617293][T11671] ? __pfx__printk+0x10/0x10 [ 604.617328][T11671] should_fail_ex+0x424/0x570 [ 604.617370][T11671] _copy_to_user+0x31/0xb0 [ 604.617399][T11671] snd_seq_ioctl+0x338/0x480 [ 604.617430][T11671] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 604.617475][T11671] ? __fget_files+0x2a/0x420 [ 604.617497][T11671] ? snd_seq_ioctl_compat+0x258/0x440 [ 604.617526][T11671] __se_compat_sys_ioctl+0x50e/0xc30 [ 604.617553][T11671] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 604.617577][T11671] ? __fget_files+0x2a/0x420 [ 604.617600][T11671] ? fput+0x9b/0xd0 [ 604.617617][T11671] ? ksys_write+0x275/0x2d0 [ 604.617647][T11671] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 604.617671][T11671] ? lockdep_hardirqs_on+0x9d/0x150 [ 604.617696][T11671] __do_fast_syscall_32+0xb4/0x110 [ 604.617720][T11671] ? exc_page_fault+0x5f8/0x920 [ 604.617748][T11671] do_fast_syscall_32+0x34/0x80 [ 604.617772][T11671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.617796][T11671] RIP: 0023:0xf7f94579 [ 604.617812][T11671] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.617829][T11671] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 604.617849][T11671] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c08c5335 [ 604.617862][T11671] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.617873][T11671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.617884][T11671] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.617895][T11671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.617921][T11671] [ 604.884429][ T47] usb 1-1: USB disconnect, device number 80 [ 604.968185][T11675] dlm: plock device version mismatch: kernel (1.2.0), user (1.131072.0) [ 605.099374][T11097] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 605.254883][T11097] usb 4-1: Using ep0 maxpacket: 8 [ 605.262851][T11097] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 605.273214][T11097] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.290166][T11097] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.303370][T11097] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.317166][T11097] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.319870][T11683] netlink: 'syz.0.1793': attribute type 2 has an invalid length. [ 605.332711][T11097] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 605.348163][T11097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.608302][T11097] usb 4-1: usb_control_msg returned -32 [ 605.636146][T11097] usbtmc 4-1:16.0: can't read capabilities [ 606.183887][T11097] usb 5-1: USB disconnect, device number 83 [ 606.194303][ T5885] usb 4-1: USB disconnect, device number 77 [ 606.762931][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 607.215206][T11707] netlink: 'syz.0.1803': attribute type 4 has an invalid length. [ 607.234893][ T5885] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 607.289519][T11719] input: syz0 as /devices/virtual/input/input61 [ 607.405863][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.467037][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.499451][ T5885] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 607.514995][ T5888] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 607.754910][T11097] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 607.772328][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.797106][ T5885] usb 4-1: config 0 descriptor?? [ 607.904111][T11734] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 607.937914][ T5888] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 607.958051][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.996730][T11736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1813'. [ 608.015299][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 608.025987][T11097] usb 5-1: Using ep0 maxpacket: 16 [ 608.058745][T11097] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.073170][T11097] usb 5-1: config 1 interface 0 has no altsetting 0 [ 608.074966][ T5888] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 608.114730][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.122922][T11097] usb 5-1: string descriptor 0 read error: -22 [ 608.129608][T11097] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 608.144399][T11097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.158106][ T47] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 608.188002][ T5888] usb 1-1: Product: syz [ 608.198698][ T5888] usb 1-1: Manufacturer: syz [ 608.203920][T11738] netlink: 'syz.1.1814': attribute type 21 has an invalid length. [ 608.212093][ T5888] usb 1-1: SerialNumber: syz [ 608.212706][T11738] netlink: 'syz.1.1814': attribute type 22 has an invalid length. [ 608.226221][ T5888] usb 1-1: config 0 descriptor?? [ 608.230213][T11738] netlink: 14378 bytes leftover after parsing attributes in process `syz.1.1814'. [ 608.245161][ T5888] usb-storage 1-1:0.0: USB Mass Storage device detected [ 608.267082][ T5888] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 608.314925][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 608.323142][ T47] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 608.337447][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.348896][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.379401][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.402586][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.416966][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.431740][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.474172][ T5893] usb 1-1: USB disconnect, device number 81 [ 608.613744][T11745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1815'. [ 608.623293][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1815'. [ 608.636475][T11746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1815'. [ 608.716469][ T47] usb 3-1: usb_control_msg returned -32 [ 608.722184][ T47] usbtmc 3-1:16.0: can't read capabilities [ 609.183827][T11763] input: syz0 as /devices/virtual/input/input62 [ 609.285708][ T5893] usb 3-1: USB disconnect, device number 90 [ 609.525126][ T47] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 609.684975][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 609.705121][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.721714][ T47] usb 2-1: config 0 has no interfaces? [ 609.728969][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 609.738515][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.754603][ T47] usb 2-1: config 0 descriptor?? [ 609.760008][ T5896] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 609.894986][ T5896] usb 1-1: device descriptor read/64, error -71 [ 610.165224][T11765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.174984][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.194274][ T5896] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 610.245637][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.260328][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.344923][ T5896] usb 1-1: device descriptor read/64, error -71 [ 610.455597][ T5896] usb usb1-port1: attempt power cycle [ 610.612343][T11097] usbhid 5-1:1.0: can't add hid device: -71 [ 610.618566][T11097] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 610.639015][T11097] usb 5-1: USB disconnect, device number 84 [ 610.714947][ T5886] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 610.807231][ T5896] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 610.856210][ T5896] usb 1-1: device descriptor read/8, error -71 [ 610.909473][ T5886] usb 3-1: config 0 has no interfaces? [ 610.923083][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 610.935758][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.944309][ T5886] usb 3-1: Product: syz [ 610.950582][ T5886] usb 3-1: Manufacturer: syz [ 610.959641][ T5886] usb 3-1: SerialNumber: syz [ 610.971280][ T5886] usb 3-1: config 0 descriptor?? [ 611.094886][ T5896] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 611.128006][ T5896] usb 1-1: device descriptor read/8, error -71 [ 611.182221][T11097] usb 4-1: USB disconnect, device number 78 [ 611.288088][ T5896] usb usb1-port1: unable to enumerate USB device [ 612.281074][ T5886] usb 2-1: USB disconnect, device number 89 [ 612.772347][T11795] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 613.142540][T11796] netlink: 'syz.0.1830': attribute type 4 has an invalid length. [ 613.347669][ T5888] usb 3-1: USB disconnect, device number 91 [ 613.425070][T11799] input: syz0 as /devices/virtual/input/input63 [ 613.441205][T11799] : renamed from bond_slave_0 (while UP) [ 613.484898][ T5886] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 613.666762][ T5886] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 613.681879][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.692142][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 613.712592][ T5886] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 613.733276][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.742128][ T5886] usb 1-1: Product: syz [ 613.747772][ T5886] usb 1-1: Manufacturer: syz [ 613.752527][ T5886] usb 1-1: SerialNumber: syz [ 613.775322][ T5886] usb 1-1: config 0 descriptor?? [ 613.784979][T11097] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 613.792246][ T5886] usb-storage 1-1:0.0: USB Mass Storage device detected [ 613.820370][ T5886] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 613.945503][T11097] usb 3-1: Using ep0 maxpacket: 8 [ 613.959175][T11097] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 613.970697][T11097] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.983323][T11097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.998268][T11097] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.998988][ T5886] usb 1-1: USB disconnect, device number 86 [ 614.015038][T11097] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.060113][T11097] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.088882][T11097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.319735][T11097] usb 3-1: usb_control_msg returned -32 [ 614.329547][T11097] usbtmc 3-1:16.0: can't read capabilities [ 614.605100][ T5888] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 614.789460][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.821856][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.853266][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 614.979730][ T5886] usb 3-1: USB disconnect, device number 92 [ 614.991352][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.049418][ T5888] usb 5-1: config 0 descriptor?? [ 615.174994][T11097] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 615.434958][T11097] usb 1-1: Using ep0 maxpacket: 16 [ 615.456124][T11097] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.479475][T11097] usb 1-1: config 1 interface 0 has no altsetting 0 [ 615.503007][T11097] usb 1-1: string descriptor 0 read error: -22 [ 615.513349][T11097] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 615.523695][T11097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.633188][T11835] input: syz0 as /devices/virtual/input/input64 [ 617.250532][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 617.260290][T11836] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 617.503669][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.512550][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.565034][ T5896] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 617.717128][T11855] FAULT_INJECTION: forcing a failure. [ 617.717128][T11855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.734231][T11855] CPU: 0 UID: 0 PID: 11855 Comm: syz.1.1847 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 617.734260][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 617.734272][T11855] Call Trace: [ 617.734281][T11855] [ 617.734290][T11855] dump_stack_lvl+0x241/0x360 [ 617.734333][T11855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.734362][T11855] ? __pfx__printk+0x10/0x10 [ 617.734400][T11855] should_fail_ex+0x424/0x570 [ 617.734426][T11855] prepare_alloc_pages+0x220/0x610 [ 617.734456][T11855] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 617.734483][T11855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 617.734503][T11855] ? __lock_acquire+0xad5/0xd80 [ 617.734537][T11855] ? __lock_acquire+0xad5/0xd80 [ 617.734561][T11855] alloc_pages_mpol+0x339/0x690 [ 617.734594][T11855] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 617.734632][T11855] alloc_pages_noprof+0x121/0x190 [ 617.734661][T11855] pte_alloc_one+0x1e/0x160 [ 617.734704][T11855] __pte_alloc+0x7b/0x240 [ 617.734736][T11855] ? __pfx___pte_alloc+0x10/0x10 [ 617.734768][T11855] ? mfill_atomic_zeropage+0xb66/0x1420 [ 617.734803][T11855] mfill_atomic_zeropage+0xd27/0x1420 [ 617.734855][T11855] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 617.734913][T11855] userfaultfd_ioctl+0x3c18/0x6a80 [ 617.734959][T11855] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 617.734988][T11855] ? stack_trace_save+0x11a/0x1d0 [ 617.735021][T11855] ? __pfx_stack_trace_save+0x10/0x10 [ 617.735055][T11855] ? stack_depot_save_flags+0x44/0x940 [ 617.735086][T11855] ? kasan_save_track+0x51/0x80 [ 617.735107][T11855] ? kasan_save_track+0x3f/0x80 [ 617.735128][T11855] ? kasan_save_free_info+0x40/0x50 [ 617.735146][T11855] ? __kasan_slab_free+0x59/0x70 [ 617.735168][T11855] ? kfree+0x198/0x430 [ 617.735193][T11855] ? tomoyo_path_number_perm+0x5fd/0x790 [ 617.735218][T11855] ? security_file_ioctl_compat+0xc6/0x2a0 [ 617.735241][T11855] ? __se_compat_sys_ioctl+0xd8/0xc30 [ 617.735268][T11855] ? do_vfs_ioctl+0xef8/0x2750 [ 617.735299][T11855] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 617.735362][T11855] ? kasan_quarantine_put+0xdc/0x230 [ 617.735384][T11855] ? lockdep_hardirqs_on+0x9d/0x150 [ 617.735417][T11855] ? tomoyo_path_number_perm+0x215/0x790 [ 617.735449][T11855] ? tomoyo_path_number_perm+0x684/0x790 [ 617.735474][T11855] ? __lock_acquire+0xad5/0xd80 [ 617.735499][T11855] ? tomoyo_path_number_perm+0x215/0x790 [ 617.735527][T11855] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.735593][T11855] ? __fget_files+0x2a/0x420 [ 617.735611][T11855] ? __fget_files+0x2a/0x420 [ 617.735633][T11855] ? __fget_files+0x2a/0x420 [ 617.735663][T11855] __se_compat_sys_ioctl+0x50e/0xc30 [ 617.735691][T11855] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 617.735717][T11855] ? __fget_files+0x2a/0x420 [ 617.735742][T11855] ? fput+0x9b/0xd0 [ 617.735761][T11855] ? ksys_write+0x275/0x2d0 [ 617.735794][T11855] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 617.735819][T11855] ? lockdep_hardirqs_on+0x9d/0x150 [ 617.735846][T11855] __do_fast_syscall_32+0xb4/0x110 [ 617.735872][T11855] ? exc_page_fault+0x5f8/0x920 [ 617.735902][T11855] do_fast_syscall_32+0x34/0x80 [ 617.735929][T11855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.735953][T11855] RIP: 0023:0xf7f94579 [ 617.735972][T11855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 617.735988][T11855] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 617.736010][T11855] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 617.736023][T11855] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.736035][T11855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.736047][T11855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 617.736060][T11855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.736090][T11855] [ 617.838950][T11097] usbhid 1-1:1.0: can't add hid device: -71 [ 618.145590][T11097] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 618.153502][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.174922][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.219302][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 618.231829][T11097] usb 1-1: USB disconnect, device number 87 [ 618.244838][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.253351][ T5896] usb 4-1: SerialNumber: syz [ 618.336375][ T47] usb 5-1: USB disconnect, device number 85 [ 618.359400][ T5896] usb 4-1: 0:2 : does not exist [ 618.375065][ T5886] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 618.493087][T11859] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 618.544924][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 618.556357][ T5886] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 618.564733][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.588828][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 618.629802][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.657244][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.670514][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 618.680587][T11869] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 618.706292][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.770242][ T5896] usb 4-1: USB disconnect, device number 79 [ 618.775148][ T5888] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 618.923767][ T5886] usb 3-1: usb_control_msg returned -32 [ 618.946949][ T5888] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 618.965037][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 618.995088][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.075666][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 619.121666][ T5888] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 619.134618][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.173826][ T5888] usb 1-1: Product: syz [ 619.224056][ T5888] usb 1-1: Manufacturer: syz [ 619.260222][ T5888] usb 1-1: SerialNumber: syz [ 619.291194][ T5888] usb 1-1: config 0 descriptor?? [ 619.318447][ T5888] usb-storage 1-1:0.0: USB Mass Storage device detected [ 619.364750][ T5888] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 619.451841][T11877] input: syz0 as /devices/virtual/input/input65 [ 619.488421][ T5896] usb 3-1: USB disconnect, device number 93 [ 619.521878][ T5888] usb 1-1: USB disconnect, device number 88 [ 620.085010][ T5896] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 620.292767][ T30] audit: type=1326 audit(1744570054.503:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.1.1858" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0 [ 620.397243][ T5896] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 620.405731][ T5896] usb 4-1: config 0 has no interface number 0 [ 620.414352][ T5896] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 620.429444][ T5896] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 620.443749][ T5896] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 620.472314][ T5896] usb 4-1: config 0 interface 200 has no altsetting 0 [ 620.538075][ T5888] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 620.560515][ T5896] usb 4-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 620.570996][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.582802][ T5896] usb 4-1: Product: syz [ 620.587266][ T5896] usb 4-1: Manufacturer: syz [ 620.591858][ T5896] usb 4-1: SerialNumber: syz [ 620.618365][ T5896] usb 4-1: config 0 descriptor?? [ 620.706938][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 620.723411][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 620.754202][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 620.774981][ T47] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 620.799980][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.851314][T11886] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.905775][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 620.937349][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 621.069766][ T5888] usb 3-1: USB disconnect, device number 94 [ 621.630165][ T8253] udevd[8253]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.700798][T11902] trusted_key: encrypted_key: insufficient parameters specified [ 622.331388][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 622.340532][T11903] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 622.885279][ T5886] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 623.109715][T11912] misc userio: Invalid payload size [ 623.120418][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.131024][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.165089][ T5896] usb 4-1: USB disconnect, device number 80 [ 623.194083][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 623.265066][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.291704][ T5886] usb 3-1: config 0 descriptor?? [ 623.517467][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 623.535897][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 623.584563][ T47] usb 2-1: can't read configurations, error -71 [ 623.692474][T11916] input: syz0 as /devices/virtual/input/input67 [ 623.859163][T11924] usb usb8: usbfs: process 11924 (syz.3.1863) did not claim interface 0 before use [ 624.280859][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.287473][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.736451][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 624.766346][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 625.301757][T11936] netlink: 'syz.0.1869': attribute type 4 has an invalid length. [ 625.577989][ T5888] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 625.675056][ T5886] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 625.701506][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.713525][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.781048][ T5888] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 625.801012][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.816111][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 625.855233][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 625.909259][ T5888] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 625.930380][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.953287][ T5888] usb 1-1: Product: syz [ 625.957679][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.989776][ T5886] usb 5-1: config 0 has no interfaces? [ 626.010105][ T5888] usb 1-1: Manufacturer: syz [ 626.014738][ T5888] usb 1-1: SerialNumber: syz [ 626.039756][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 626.068172][ T5888] usb 1-1: config 0 descriptor?? [ 626.079592][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.092377][ T5888] usb-storage 1-1:0.0: USB Mass Storage device detected [ 626.182666][T11961] FAULT_INJECTION: forcing a failure. [ 626.182666][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 626.198794][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.1.1875 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 626.198825][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 626.198839][T11961] Call Trace: [ 626.198848][T11961] [ 626.198857][T11961] dump_stack_lvl+0x241/0x360 [ 626.198895][T11961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.198926][T11961] ? __pfx__printk+0x10/0x10 [ 626.198960][T11961] ? __pfx___might_resched+0x10/0x10 [ 626.198990][T11961] should_fail_ex+0x424/0x570 [ 626.199019][T11961] should_failslab+0xac/0x100 [ 626.199050][T11961] __kvmalloc_node_noprof+0x170/0x5a0 [ 626.199081][T11961] ? traverse+0xd6/0x550 [ 626.199112][T11961] traverse+0xd6/0x550 [ 626.199150][T11961] seq_read_iter+0xc7f/0xda0 [ 626.199173][T11961] ? aa_file_perm+0x139/0xf60 [ 626.199205][T11961] ? aa_file_perm+0x3f1/0xf60 [ 626.199252][T11961] seq_read+0x3ab/0x4f0 [ 626.199284][T11961] ? __pfx_seq_read+0x10/0x10 [ 626.199334][T11961] ? __pfx_seq_read+0x10/0x10 [ 626.199356][T11961] proc_reg_read+0x201/0x2f0 [ 626.199388][T11961] vfs_readv+0x6be/0xa80 [ 626.199430][T11961] ? __pfx_proc_reg_read+0x10/0x10 [ 626.199465][T11961] ? __pfx_vfs_readv+0x10/0x10 [ 626.199514][T11961] ? __fget_files+0x2a/0x420 [ 626.199535][T11961] ? __fget_files+0x39d/0x420 [ 626.199552][T11961] ? __fget_files+0x2a/0x420 [ 626.199582][T11961] __se_compat_sys_preadv+0x169/0x280 [ 626.199614][T11961] ? __pfx___se_compat_sys_preadv+0x10/0x10 [ 626.199647][T11961] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 626.199673][T11961] ? lockdep_hardirqs_on+0x9d/0x150 [ 626.199696][T11961] ? __ia32_compat_sys_preadv+0x20/0xc0 [ 626.199726][T11961] __do_fast_syscall_32+0xb4/0x110 [ 626.199746][T11961] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 626.199761][T11961] ? lockdep_hardirqs_on+0x9d/0x150 [ 626.199781][T11961] do_fast_syscall_32+0x34/0x80 [ 626.199800][T11961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.199817][T11961] RIP: 0023:0xf7f94579 [ 626.199830][T11961] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 626.199843][T11961] RSP: 002b:00000000f507455c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 626.199859][T11961] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000780 [ 626.199870][T11961] RDX: 0000000000000001 RSI: 0000000000000091 RDI: 0000000000000000 [ 626.199879][T11961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.199888][T11961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 626.199897][T11961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.199917][T11961] [ 626.207775][ T5886] usb 5-1: config 0 descriptor?? [ 626.478036][ T5888] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 626.529588][ T5888] usb 1-1: USB disconnect, device number 89 [ 626.654095][ T47] usb 3-1: USB disconnect, device number 95 [ 626.750615][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.760665][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.374886][ T47] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 628.593675][T11981] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 628.624910][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 628.650419][ T47] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.874711][ T47] usb 2-1: config 1 interface 0 has no altsetting 0 [ 628.894099][ T5896] usb 5-1: USB disconnect, device number 86 [ 628.958469][ T47] usb 2-1: string descriptor 0 read error: -22 [ 628.964971][ T47] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 628.974040][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.144392][T11988] input: syz0 as /devices/virtual/input/input68 [ 629.795110][ T5896] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 629.811050][T12002] netlink: 'syz.3.1887': attribute type 4 has an invalid length. [ 629.960931][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.991809][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 630.002632][ T5896] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 630.041149][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.053722][ T5896] usb 5-1: config 0 descriptor?? [ 630.064906][ T5888] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 630.228833][ T5888] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 630.252542][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.294973][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 630.332743][ T5888] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 630.343379][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.365678][ T5888] usb 4-1: Product: syz [ 630.373114][ T5888] usb 4-1: Manufacturer: syz [ 630.384131][ T5888] usb 4-1: SerialNumber: syz [ 630.414179][ T5888] usb 4-1: config 0 descriptor?? [ 630.598168][ T5888] usb-storage 4-1:0.0: USB Mass Storage device detected [ 630.623372][ T5888] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 631.012597][ T5888] usb 4-1: USB disconnect, device number 81 [ 631.232072][ T47] usbhid 2-1:1.0: can't add hid device: -71 [ 631.247715][ T47] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 631.291648][ T47] usb 2-1: USB disconnect, device number 92 [ 631.395668][T12028] input: syz0 as /devices/virtual/input/input69 [ 631.815846][T12038] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 631.834890][ T47] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 632.084850][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 632.102913][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.114241][ T47] usb 2-1: config 0 has no interfaces? [ 632.119902][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 632.144368][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.228964][ T47] usb 2-1: config 0 descriptor?? [ 632.489659][T12050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.526582][T12050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.652157][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.663115][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.350786][ T5888] usb 5-1: USB disconnect, device number 87 [ 633.465081][ T47] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 633.478020][T12065] input: syz0 as /devices/virtual/input/input70 [ 633.721031][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 633.952145][ T47] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.965983][ T47] usb 3-1: config 1 interface 0 has no altsetting 0 [ 633.996557][ T47] usb 3-1: string descriptor 0 read error: -22 [ 634.003028][ T47] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 634.013452][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.487893][T12074] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 634.794991][ T5888] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 635.076049][ T5896] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 635.096362][ T5888] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 635.150964][ T5886] usb 2-1: USB disconnect, device number 93 [ 635.167074][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.194858][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 635.224442][ T5888] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 635.234158][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.234909][ T5896] usb 4-1: device descriptor read/64, error -71 [ 635.242597][ T5888] usb 5-1: Product: syz [ 635.253425][ T5888] usb 5-1: Manufacturer: syz [ 635.258458][ T5888] usb 5-1: SerialNumber: syz [ 635.268103][ T5888] usb 5-1: config 0 descriptor?? [ 635.279717][ T5888] usb-storage 5-1:0.0: USB Mass Storage device detected [ 635.299025][ T5888] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 635.495670][T11097] usb 5-1: USB disconnect, device number 88 [ 635.525443][ T5896] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 635.695494][ T5896] usb 4-1: device descriptor read/64, error -71 [ 635.807366][ T5896] usb usb4-port1: attempt power cycle [ 635.992629][T12102] input: syz0 as /devices/virtual/input/input71 [ 636.157238][T11097] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 636.176905][ T5896] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 636.228104][ T5896] usb 4-1: device descriptor read/8, error -71 [ 636.340568][T11097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.365753][T11097] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 636.387179][T11097] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 636.415848][T11097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.448776][T11097] usb 2-1: config 0 descriptor?? [ 636.475363][ T5896] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 636.495804][ T5896] usb 4-1: device descriptor read/8, error -71 [ 636.605423][ T5896] usb usb4-port1: unable to enumerate USB device [ 636.722595][T12115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 637.031333][ T47] usbhid 3-1:1.0: can't add hid device: -71 [ 637.039532][ T47] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 637.088460][ T47] usb 3-1: USB disconnect, device number 96 [ 637.515761][ T5888] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 637.735105][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 637.763183][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.784354][ T5888] usb 1-1: config 0 has no interfaces? [ 637.795942][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 637.815029][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.850446][ T5888] usb 1-1: config 0 descriptor?? [ 638.036342][T12137] netlink: 'syz.4.1931': attribute type 4 has an invalid length. [ 638.144128][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.160028][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.295037][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 638.447490][ T5888] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 638.546379][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.605265][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 638.648403][ T5888] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 638.684896][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.720846][ T5888] usb 5-1: Product: syz [ 638.739294][ T5888] usb 5-1: Manufacturer: syz [ 638.759513][ T5888] usb 5-1: SerialNumber: syz [ 638.784953][ T5886] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 638.854277][ T5888] usb 5-1: config 0 descriptor?? [ 638.926453][ T5888] usb-storage 5-1:0.0: USB Mass Storage device detected [ 638.964894][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 638.978888][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.992878][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.039810][ T5886] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 639.054118][ T5888] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 639.074991][ T5886] usb 4-1: config 1 interface 0 has no altsetting 0 [ 639.183414][ T5888] usb 5-1: USB disconnect, device number 89 [ 639.696204][ T5886] usb 4-1: string descriptor 0 read error: -22 [ 639.703380][ T5886] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 639.772789][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.950621][ T47] usb 2-1: USB disconnect, device number 94 [ 640.455001][ T5888] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 640.553079][ T47] usb 1-1: USB disconnect, device number 90 [ 640.618522][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.635638][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.776280][ T5888] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 640.802781][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.847804][ T5888] usb 2-1: config 0 descriptor?? [ 641.080904][T12174] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 641.574944][ T5888] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 641.704866][ T5888] usb 1-1: device descriptor read/64, error -71 [ 641.954955][ T5888] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 641.973559][T12191] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 642.001034][ T5886] usbhid 4-1:1.0: can't add hid device: -71 [ 642.007188][ T5886] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 642.039071][ T5886] usb 4-1: USB disconnect, device number 86 [ 642.105290][ T5888] usb 1-1: device descriptor read/64, error -71 [ 642.215303][ T5888] usb usb1-port1: attempt power cycle [ 642.224987][T11097] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 642.397142][T11097] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 642.415085][T11097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.425791][T11097] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 642.449176][T11097] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 642.474928][T11097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.483232][T11097] usb 5-1: Product: syz [ 642.487589][T11097] usb 5-1: Manufacturer: syz [ 642.492424][T11097] usb 5-1: SerialNumber: syz [ 642.499922][T11097] usb 5-1: config 0 descriptor?? [ 642.515225][T11097] usb-storage 5-1:0.0: USB Mass Storage device detected [ 642.541190][T11097] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 642.575006][ T5888] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 642.605624][ T5888] usb 1-1: device descriptor read/8, error -71 [ 642.723535][ T5886] usb 5-1: USB disconnect, device number 90 [ 642.874945][ T5888] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 642.898758][ T5888] usb 1-1: device descriptor read/8, error -71 [ 642.964991][T11097] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 643.035274][ T5888] usb usb1-port1: unable to enumerate USB device [ 643.141034][T11097] usb 3-1: Using ep0 maxpacket: 16 [ 643.289564][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.326441][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.351979][T11097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.370293][T11097] usb 3-1: config 0 has no interfaces? [ 643.380881][T11097] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 643.393013][T11097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.420772][T11097] usb 3-1: config 0 descriptor?? [ 644.173653][ T5888] usb 2-1: USB disconnect, device number 95 [ 644.480201][T12228] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 644.995008][T11097] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 645.174964][T11097] usb 5-1: Using ep0 maxpacket: 16 [ 645.258128][T11097] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.271451][T11097] usb 5-1: config 1 interface 0 has no altsetting 0 [ 645.337821][T11097] usb 5-1: string descriptor 0 read error: -22 [ 645.344360][T11097] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 645.361478][T11097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.544745][T12240] netlink: 'syz.3.1961': attribute type 4 has an invalid length. [ 645.605036][ T47] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 645.666416][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 645.759918][ T5888] usb 3-1: USB disconnect, device number 97 [ 645.767556][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.782680][ T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.792209][ T47] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 645.806237][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.815098][ T5896] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 645.859756][ T47] usb 1-1: config 0 descriptor?? [ 645.988416][ T5896] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 646.010513][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.038589][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 646.056014][ T5896] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 646.067279][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.075541][ T5896] usb 4-1: Product: syz [ 646.089994][ T5896] usb 4-1: Manufacturer: syz [ 646.099334][ T5896] usb 4-1: SerialNumber: syz [ 646.121745][ T5896] usb 4-1: config 0 descriptor?? [ 646.146449][ T5896] usb-storage 4-1:0.0: USB Mass Storage device detected [ 646.285310][ T5896] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 646.354930][ T5896] usb 4-1: USB disconnect, device number 87 [ 646.375026][ T5888] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 646.525184][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 646.542454][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.553053][ T5888] usb 2-1: config 0 has no interfaces? [ 646.559202][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 646.585501][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.604523][ T5888] usb 2-1: config 0 descriptor?? [ 646.894075][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.904612][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.444907][ T5896] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 647.517037][T12269] input: syz0 as /devices/virtual/input/input75 [ 647.605557][ T5896] usb 4-1: device descriptor read/64, error -71 [ 647.635470][T11097] usbhid 5-1:1.0: can't add hid device: -71 [ 647.670908][T11097] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 647.709458][T11097] usb 5-1: USB disconnect, device number 91 [ 647.865301][ T5896] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 647.994874][ T5896] usb 4-1: device descriptor read/64, error -71 [ 648.115240][ T5896] usb usb4-port1: attempt power cycle [ 648.120914][T12281] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 648.399140][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.409381][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.494928][ T5896] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 648.527389][ T5896] usb 4-1: device descriptor read/8, error -71 [ 648.765415][ T5896] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 648.807381][ T5896] usb 4-1: device descriptor read/8, error -71 [ 648.928606][ T5896] usb usb4-port1: unable to enumerate USB device [ 649.165105][ T5888] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 649.233610][ T5896] usb 1-1: USB disconnect, device number 95 [ 649.324868][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 649.381959][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.432696][ T5888] usb 3-1: config 0 has no interfaces? [ 649.459584][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 649.479932][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.513088][ T5888] usb 3-1: config 0 descriptor?? [ 649.601286][ T5896] usb 2-1: USB disconnect, device number 96 [ 649.942645][T12299] netlink: 'syz.4.1978': attribute type 4 has an invalid length. [ 650.074873][ T5896] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 650.195055][T11097] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 650.245007][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 650.359208][ T5896] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.374893][T11097] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 650.400400][ T5896] usb 2-1: config 1 interface 0 has no altsetting 0 [ 650.417392][T11097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.602088][T11097] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 650.838494][ T5896] usb 2-1: string descriptor 0 read error: -22 [ 650.845125][ T5896] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 650.924283][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.947151][T11097] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 650.979086][T11097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.046765][T11097] usb 5-1: Product: syz [ 651.079934][T11097] usb 5-1: Manufacturer: syz [ 651.123223][T11097] usb 5-1: SerialNumber: syz [ 651.169605][T11097] usb 5-1: config 0 descriptor?? [ 651.215301][T12319] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 651.239402][T11097] usb-storage 5-1:0.0: USB Mass Storage device detected [ 651.303293][T11097] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 651.376754][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 651.430811][ T5888] usb 5-1: USB disconnect, device number 92 [ 651.764852][ T5886] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 651.946970][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.958389][ T5886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 651.971043][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.981152][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.993703][ T5886] usb 4-1: config 0 descriptor?? [ 652.157734][ T5886] usb 3-1: USB disconnect, device number 98 [ 652.624865][ T5886] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 652.765526][ T5886] usb 3-1: device descriptor read/64, error -71 [ 652.823181][ T5896] usbhid 2-1:1.0: can't add hid device: -71 [ 652.830659][ T5896] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 652.858763][ T5896] usb 2-1: USB disconnect, device number 97 [ 652.898466][T12343] input: syz0 as /devices/virtual/input/input76 [ 653.005342][ T5886] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 653.226195][ T5886] usb 3-1: device descriptor read/64, error -71 [ 653.292519][T12355] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 653.345281][ T5886] usb usb3-port1: attempt power cycle [ 653.744982][ T5886] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 653.778174][ T5886] usb 3-1: device descriptor read/8, error -71 [ 653.783853][T12361] netlink: 'syz.0.2000': attribute type 2 has an invalid length. [ 653.819922][T12358] netlink: 'syz.4.1999': attribute type 4 has an invalid length. [ 654.025188][ T5886] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 654.064982][ T5896] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 654.065519][ T5886] usb 3-1: device descriptor read/8, error -71 [ 654.211410][ T5886] usb usb3-port1: unable to enumerate USB device [ 654.377633][ T5896] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 654.393153][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.412257][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 654.413681][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.435409][ T5888] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 654.455237][ T5896] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 654.468276][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.469171][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.488208][ T5896] usb 5-1: Product: syz [ 654.492504][ T5896] usb 5-1: Manufacturer: syz [ 654.498396][ T5896] usb 5-1: SerialNumber: syz [ 654.514528][ T5896] usb 5-1: config 0 descriptor?? [ 654.532358][ T5896] usb-storage 5-1:0.0: USB Mass Storage device detected [ 654.560685][ T5896] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 654.665637][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 654.675447][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.693194][ T5888] usb 2-1: config 0 has no interfaces? [ 654.702281][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 654.718057][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.754242][ T5888] usb 2-1: config 0 descriptor?? [ 654.789318][ T5886] usb 5-1: USB disconnect, device number 93 [ 655.289251][ T5886] usb 4-1: USB disconnect, device number 92 [ 655.424957][ T5896] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 655.587068][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 655.602535][ T5896] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.616421][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 655.639244][ T5896] usb 1-1: string descriptor 0 read error: -22 [ 655.646039][ T5896] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 655.656916][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.052322][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2004'. [ 657.064093][ T5886] usb 2-1: USB disconnect, device number 98 [ 657.252796][T12406] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 657.450183][T12410] netlink: 'syz.1.2015': attribute type 2 has an invalid length. [ 657.994890][T11097] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 658.167364][T11097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.266455][T11097] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 658.312593][T11097] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.372964][T11097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.453714][T11097] usb 5-1: config 0 descriptor?? [ 658.864896][T11097] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 658.920373][ T5896] usbhid 1-1:1.0: can't add hid device: -71 [ 658.937283][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 658.956825][ T5896] usb 1-1: USB disconnect, device number 96 [ 659.006498][T11097] usb 4-1: device descriptor read/64, error -71 [ 659.201005][T12419] netlink: 'syz.0.2018': attribute type 4 has an invalid length. [ 659.265255][T11097] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 659.405019][T11097] usb 4-1: device descriptor read/64, error -71 [ 659.444952][ T5896] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 659.517850][T11097] usb usb4-port1: attempt power cycle [ 659.604498][ T5896] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 659.620544][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.631225][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 659.648053][ T5896] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 659.658528][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.667020][ T5896] usb 1-1: Product: syz [ 659.671515][ T5896] usb 1-1: Manufacturer: syz [ 659.676599][ T5896] usb 1-1: SerialNumber: syz [ 659.705344][ T5896] usb 1-1: config 0 descriptor?? [ 659.716135][ T5896] usb-storage 1-1:0.0: USB Mass Storage device detected [ 659.742409][ T5896] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 659.767687][ T47] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 659.895346][T11097] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 659.921715][ T5896] usb 1-1: USB disconnect, device number 97 [ 659.942636][T11097] usb 4-1: device descriptor read/8, error -71 [ 659.954895][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 659.987698][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.029045][ T47] usb 2-1: config 0 has no interfaces? [ 660.044916][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 660.084426][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.177654][ T47] usb 2-1: config 0 descriptor?? [ 660.265015][T11097] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 660.295989][T11097] usb 4-1: device descriptor read/8, error -71 [ 660.431964][T11097] usb usb4-port1: unable to enumerate USB device [ 660.887744][T12451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.901103][T12451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.515025][T11097] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 661.694910][T11097] usb 3-1: Using ep0 maxpacket: 16 [ 661.804979][T11097] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.825163][T11097] usb 3-1: config 1 interface 0 has no altsetting 0 [ 661.852431][T11097] usb 3-1: string descriptor 0 read error: -22 [ 661.862186][T11097] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 661.889665][ T5886] usb 5-1: USB disconnect, device number 94 [ 661.897321][T11097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.985799][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2031'. [ 662.084405][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'. [ 662.252149][T12468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2028'. [ 662.447052][T12475] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 662.885420][ T5886] usb 2-1: USB disconnect, device number 99 [ 663.964263][T12482] netlink: 'syz.0.2037': attribute type 4 has an invalid length. [ 664.254982][ T47] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 664.425002][ T5886] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 664.437293][ T47] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 664.483864][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.561333][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 664.584897][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 664.599355][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.610570][ T5886] usb 2-1: config 0 has no interfaces? [ 664.619065][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 664.629083][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.664550][ T5886] usb 2-1: config 0 descriptor?? [ 664.710270][ T47] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 664.769468][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.820338][ T47] usb 1-1: Product: syz [ 664.842301][ T47] usb 1-1: Manufacturer: syz [ 664.862987][ T47] usb 1-1: SerialNumber: syz [ 664.909786][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.919909][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.038766][T11097] usbhid 3-1:1.0: can't add hid device: -71 [ 665.045951][ T47] usb 1-1: config 0 descriptor?? [ 665.055531][T11097] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 665.067601][ T47] usb-storage 1-1:0.0: USB Mass Storage device detected [ 665.079048][T11097] usb 3-1: USB disconnect, device number 103 [ 665.106058][ T47] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 665.282953][ T47] usb 1-1: USB disconnect, device number 98 [ 665.426810][T12493] input: syz0 as /devices/virtual/input/input77 [ 665.455138][T11097] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 665.615095][T11097] usb 3-1: device descriptor read/64, error -71 [ 665.703084][T12499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 665.724909][ T5888] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 665.844458][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 665.854964][T11097] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 665.878766][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.905614][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.941376][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 665.973016][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.994831][T11097] usb 3-1: device descriptor read/64, error -71 [ 666.014197][ T5888] usb 5-1: config 0 descriptor?? [ 666.126769][T11097] usb usb3-port1: attempt power cycle [ 666.356303][T12509] netlink: 'syz.0.2048': attribute type 2 has an invalid length. [ 666.609368][T11097] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 666.670389][T11097] usb 3-1: device descriptor read/8, error -71 [ 666.775048][ T5888] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 666.914888][T11097] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 666.954964][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 666.955741][T11097] usb 3-1: device descriptor read/8, error -71 [ 666.990889][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.004684][ T5888] usb 4-1: config 0 has no interfaces? [ 667.013172][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 667.023723][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.060344][ T5888] usb 4-1: config 0 descriptor?? [ 667.081286][T11097] usb usb3-port1: unable to enumerate USB device [ 668.012924][ T5886] usb 2-1: USB disconnect, device number 100 [ 668.175026][ T5888] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 668.375212][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 668.433267][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.462999][T12530] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 668.475250][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.545175][ T5888] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.561211][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 668.684994][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 668.750922][ T5888] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 668.768407][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.205642][T12533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2050'. [ 669.365367][T11097] usb 5-1: USB disconnect, device number 95 [ 669.528325][ T5886] usb 4-1: USB disconnect, device number 97 [ 669.707372][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2054'. [ 669.772588][T12539] input: syz0 as /devices/virtual/input/input78 [ 670.282313][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 670.374527][T12542] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 670.655205][ T5886] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 670.901590][ T5888] usbhid 1-1:1.0: can't add hid device: -71 [ 670.907668][ T5886] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 670.930197][ T5888] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 670.940397][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.968565][ T5888] usb 1-1: USB disconnect, device number 99 [ 670.985389][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 671.076333][ T5886] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 671.107960][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.204675][ T5886] usb 4-1: Product: syz [ 671.259301][ T5886] usb 4-1: Manufacturer: syz [ 671.270768][ T5886] usb 4-1: SerialNumber: syz [ 671.303760][ T5886] usb 4-1: config 0 descriptor?? [ 671.524097][ T5886] usb-storage 4-1:0.0: USB Mass Storage device detected [ 671.661092][ T5886] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 671.793844][ T5886] usb 4-1: USB disconnect, device number 98 [ 672.106443][T11097] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 672.115147][ T47] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 672.137003][T12568] input: syz0 as /devices/virtual/input/input79 [ 672.395245][T11097] usb 3-1: Using ep0 maxpacket: 8 [ 672.405761][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.447265][T11097] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 672.475213][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 672.484465][T11097] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 672.495111][ T47] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 672.504179][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.521037][T11097] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.565498][T11097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.595732][ T47] usb 2-1: config 0 descriptor?? [ 672.612464][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2066'. [ 672.624872][ T5896] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 672.794901][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 672.822724][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.840171][ T5896] usb 5-1: config 0 has no interfaces? [ 672.851160][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 672.860548][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 672.880662][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.900588][ T5896] usb 5-1: config 0 descriptor?? [ 673.275087][ T5896] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 673.345534][T11097] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 673.425293][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 673.438457][ T5896] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.449242][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.465854][ T5896] usb 4-1: Product: syz [ 673.473353][ T5896] usb 4-1: Manufacturer: syz [ 673.485519][ T5896] usb 4-1: SerialNumber: syz [ 673.506989][ T5896] r8152-cfgselector 4-1: Unknown version 0x0000 [ 673.513308][ T5896] r8152-cfgselector 4-1: config 0 descriptor?? [ 673.519726][T11097] usb 1-1: Using ep0 maxpacket: 16 [ 673.627620][T11097] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.640738][T11097] usb 1-1: config 1 interface 0 has no altsetting 0 [ 673.662133][T11097] usb 1-1: string descriptor 0 read error: -22 [ 673.671763][T11097] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 673.682244][T11097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.775227][ T5896] r8152-cfgselector 4-1: Needed 2 retries to read version [ 673.783747][ T5896] r8152-cfgselector 4-1: Unknown version 0x0000 [ 673.793688][ T5896] r8152-cfgselector 4-1: bad CDC descriptors [ 674.046528][ T5886] r8152-cfgselector 4-1: USB disconnect, device number 99 [ 674.208512][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'. [ 674.826911][ T5896] usb 3-1: USB disconnect, device number 108 [ 675.055701][ T5888] usb 5-1: USB disconnect, device number 96 [ 675.062951][ T5886] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 675.086943][T12602] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 675.132965][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.198752][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.254971][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 675.274925][ T5886] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.297277][ T5886] usb 4-1: config 1 interface 0 has no altsetting 0 [ 675.341675][ T5886] usb 4-1: string descriptor 0 read error: -22 [ 675.353595][ T5886] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 675.378487][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.105468][T11097] usbhid 1-1:1.0: can't add hid device: -71 [ 676.111921][T11097] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 676.301134][T11097] usb 1-1: USB disconnect, device number 100 [ 676.354139][ T5888] usb 2-1: USB disconnect, device number 101 [ 677.310116][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2078'. [ 677.587592][T12621] input: syz0 as /devices/virtual/input/input80 [ 677.595438][T12617] netlink: 'syz.0.2077': attribute type 4 has an invalid length. [ 677.812764][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 677.844903][ T5888] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 677.996433][ T5888] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 678.033646][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.080433][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 678.147647][ T5888] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 678.157420][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.172645][ T5888] usb 1-1: Product: syz [ 678.181085][ T5888] usb 1-1: Manufacturer: syz [ 678.217176][ T5888] usb 1-1: SerialNumber: syz [ 678.232126][ T5886] usbhid 4-1:1.0: can't add hid device: -71 [ 678.285138][ T5885] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 678.310097][ T5886] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 678.319735][ T5888] usb 1-1: config 0 descriptor?? [ 678.330673][ T5888] usb-storage 1-1:0.0: USB Mass Storage device detected [ 678.353341][ T5886] usb 4-1: USB disconnect, device number 100 [ 678.403720][ T5888] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 678.466145][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 678.478759][ T5885] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 678.500676][ T5885] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 678.581998][T11097] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 678.714325][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 678.745537][ T5888] usb 1-1: USB disconnect, device number 101 [ 678.755366][ T5886] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 678.774414][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.824942][T11097] usb 2-1: Using ep0 maxpacket: 16 [ 678.839284][T11097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.862098][T11097] usb 2-1: config 0 has no interfaces? [ 678.877890][T11097] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 678.897603][T11097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.920265][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.967568][ T5886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.981127][T11097] usb 2-1: config 0 descriptor?? [ 678.996870][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 679.005373][ T5896] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 679.017730][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.037696][ T5886] usb 4-1: config 0 descriptor?? [ 679.164863][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 679.327814][ T5896] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.459723][ T5896] usb 5-1: config 1 interface 0 has no altsetting 0 [ 679.519119][ T5896] usb 5-1: string descriptor 0 read error: -22 [ 679.528543][ T5896] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 679.549465][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.873737][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2084'. [ 680.334695][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 680.549160][T12660] input: syz0 as /devices/virtual/input/input81 [ 680.669500][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 680.839912][T12667] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 681.051086][ T5888] usb 3-1: USB disconnect, device number 109 [ 681.180599][ T5886] usb 2-1: USB disconnect, device number 102 [ 681.465362][T12677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.498372][T12677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.792605][T12676] netlink: 'syz.2.2096': attribute type 4 has an invalid length. [ 681.900170][ T5896] usbhid 5-1:1.0: can't add hid device: -71 [ 681.911119][ T5896] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 681.945482][ T5896] usb 5-1: USB disconnect, device number 97 [ 682.084919][T11097] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 682.151335][T12685] netlink: 'syz.4.2099': attribute type 2 has an invalid length. [ 682.260974][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 682.285208][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 682.307364][T11097] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 682.337579][T11097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.362750][ T5886] usb 4-1: USB disconnect, device number 101 [ 682.367993][T11097] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 682.419494][T11097] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 682.480811][T11097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.527236][T11097] usb 3-1: Product: syz [ 682.538613][T11097] usb 3-1: Manufacturer: syz [ 682.546494][T11097] usb 3-1: SerialNumber: syz [ 682.554641][T12694] input: syz0 as /devices/virtual/input/input82 [ 682.562105][T11097] usb 3-1: config 0 descriptor?? [ 682.578681][T11097] usb-storage 3-1:0.0: USB Mass Storage device detected [ 682.598595][T11097] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 682.791868][ T5888] usb 3-1: USB disconnect, device number 110 [ 682.944874][ T5886] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 683.104923][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 683.120088][ T5886] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 683.147053][ T5886] usb 4-1: config 1 interface 0 has no altsetting 0 [ 683.160903][ T5885] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 683.180859][ T5886] usb 4-1: string descriptor 0 read error: -22 [ 683.188796][ T5886] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 683.208516][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.330845][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 683.347055][ T5885] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 683.372980][ T5885] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 683.410505][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.420012][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.075567][T11097] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 684.335330][T11097] usb 3-1: device descriptor read/64, error -71 [ 684.634922][T11097] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 684.814922][ T5885] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 684.824899][T11097] usb 3-1: device descriptor read/64, error -71 [ 684.945148][T11097] usb usb3-port1: attempt power cycle [ 684.976737][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 684.988938][ T5885] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.011000][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 685.034512][ T5885] usb 1-1: string descriptor 0 read error: -22 [ 685.040930][ T5885] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 685.050727][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.307505][T11097] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 685.346270][T11097] usb 3-1: device descriptor read/8, error -71 [ 685.370053][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2109'. [ 685.637735][T11097] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 685.721070][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.728629][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.742099][ T5886] usbhid 4-1:1.0: can't add hid device: -71 [ 685.752283][ T5886] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 685.785807][T11097] usb 3-1: device descriptor read/8, error -71 [ 685.897624][T11097] usb usb3-port1: unable to enumerate USB device [ 685.907681][ T5886] usb 4-1: USB disconnect, device number 102 [ 685.985053][T11097] usb 2-1: USB disconnect, device number 103 [ 686.212726][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 686.232777][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 686.465675][T11097] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 686.700596][T11097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.742281][T11097] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.784279][T11097] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 686.824948][T11097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.879452][T11097] usb 2-1: config 0 descriptor?? [ 687.211860][T12739] netlink: 'syz.3.2114': attribute type 4 has an invalid length. [ 687.493867][ T5885] usbhid 1-1:1.0: can't add hid device: -71 [ 687.500482][ T5886] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 687.521084][ T5885] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 687.541493][T12750] netlink: 'syz.4.2118': attribute type 2 has an invalid length. [ 687.556614][ T5885] usb 1-1: USB disconnect, device number 102 [ 687.662741][T12756] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 687.698192][ T5886] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 687.719809][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.730757][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 687.750217][ T5886] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 687.761676][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.769868][ T5886] usb 4-1: Product: syz [ 687.776848][ T5886] usb 4-1: Manufacturer: syz [ 687.782321][ T5886] usb 4-1: SerialNumber: syz [ 687.793375][ T5886] usb 4-1: config 0 descriptor?? [ 687.806900][ T5886] usb-storage 4-1:0.0: USB Mass Storage device detected [ 687.838209][ T5886] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 688.009230][T11097] usb 4-1: USB disconnect, device number 103 [ 688.055298][ T5885] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 688.215131][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 688.223445][ T5885] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 688.232095][ T5885] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 688.247329][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.261285][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 688.271513][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.288630][ T5885] usbtmc 1-1:16.0: bulk endpoints not found [ 688.665066][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'. [ 688.674159][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'. [ 688.935387][ T5885] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 689.094969][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 689.311768][ T5885] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.343090][ T5885] usb 5-1: config 1 interface 0 has no altsetting 0 [ 689.361813][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.376246][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.425329][ T5885] usb 5-1: string descriptor 0 read error: -22 [ 689.433772][ T5885] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 689.443976][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.514850][T11097] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 689.674817][T11097] usb 4-1: Using ep0 maxpacket: 16 [ 689.693830][T11097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.741771][T11097] usb 4-1: config 0 has no interfaces? [ 689.758783][T11097] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 689.777901][T11097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.809696][T11097] usb 4-1: config 0 descriptor?? [ 690.254345][ T5886] usb 2-1: USB disconnect, device number 104 [ 690.865370][T11097] usb 1-1: USB disconnect, device number 103 [ 691.434886][T11097] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 691.615042][T11097] usb 2-1: Using ep0 maxpacket: 16 [ 691.647236][T11097] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 691.667972][T11097] usb 2-1: config 1 interface 0 has no altsetting 0 [ 691.696034][T11097] usb 2-1: string descriptor 0 read error: -22 [ 691.708476][T11097] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 691.727124][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 691.736190][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 691.750375][T11097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.843255][T12807] netlink: 'syz.2.2133': attribute type 4 has an invalid length. [ 692.090463][ T5896] usb 4-1: USB disconnect, device number 104 [ 692.105090][ T5886] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 692.123289][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 692.472440][ T5886] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 692.489760][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.502809][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 692.529442][ T5886] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 692.540681][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.550403][ T5886] usb 3-1: Product: syz [ 692.555281][ T5886] usb 3-1: Manufacturer: syz [ 692.560145][ T5886] usb 3-1: SerialNumber: syz [ 692.569590][T12823] netlink: 'syz.0.2138': attribute type 2 has an invalid length. [ 692.585007][ T5896] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 692.610518][ T5886] usb 3-1: config 0 descriptor?? [ 692.699824][ T5885] usbhid 5-1:1.0: can't add hid device: -71 [ 692.715144][ T5885] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 692.734273][ T5886] usb-storage 3-1:0.0: USB Mass Storage device detected [ 692.764386][ T5885] usb 5-1: USB disconnect, device number 98 [ 692.787852][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.798700][ T5896] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.809001][ T5886] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 692.834998][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.904973][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.918935][ T5896] usb 4-1: config 0 descriptor?? [ 692.940078][ T5886] usb 3-1: USB disconnect, device number 115 [ 692.958813][T12828] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 693.934952][ T5896] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 694.091693][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 694.102782][ T5896] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 694.114192][ T5896] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 694.125822][ T5896] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.139430][ T5896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 694.148650][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.168364][ T5896] usbtmc 3-1:16.0: bulk endpoints not found [ 694.392231][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 694.403636][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 694.870145][T11097] usbhid 2-1:1.0: can't add hid device: -71 [ 694.905089][T11097] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 694.982567][ T5886] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 694.997794][T11097] usb 2-1: USB disconnect, device number 105 [ 695.165318][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 695.186109][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.211515][ T5886] usb 1-1: config 0 has no interfaces? [ 695.217255][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 695.226802][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.262628][ T5886] usb 1-1: config 0 descriptor?? [ 695.370414][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.392771][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.835610][T12864] netlink: 'syz.1.2150': attribute type 4 has an invalid length. [ 696.094886][ T5896] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 696.176267][ T5886] usb 4-1: USB disconnect, device number 105 [ 696.257989][ T5896] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 696.270726][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.281217][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 696.302932][ T5896] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 696.331627][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.355034][ T5896] usb 2-1: Product: syz [ 696.359334][ T5896] usb 2-1: Manufacturer: syz [ 696.364447][ T5896] usb 2-1: SerialNumber: syz [ 696.392922][ T5896] usb 2-1: config 0 descriptor?? [ 696.422443][ T5896] usb-storage 2-1:0.0: USB Mass Storage device detected [ 696.458003][ T5896] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 696.470036][T12877] netlink: 'syz.3.2153': attribute type 2 has an invalid length. [ 696.623182][ T5896] usb 2-1: USB disconnect, device number 106 [ 696.763700][T11097] usb 3-1: USB disconnect, device number 116 [ 696.990666][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2156'. [ 697.005129][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 697.144071][T12889] syzkaller1: entered promiscuous mode [ 697.166055][T12889] syzkaller1: entered allmulticast mode [ 697.289061][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 697.323816][T12889] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 697.455572][T11097] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 697.545084][ T5886] usb 1-1: USB disconnect, device number 104 [ 697.704997][T11097] usb 5-1: Using ep0 maxpacket: 16 [ 697.747289][T11097] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.767794][T11097] usb 5-1: config 1 interface 0 has no altsetting 0 [ 697.788030][T12901] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 697.833126][T11097] usb 5-1: string descriptor 0 read error: -22 [ 697.839637][T11097] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 697.854432][T11097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.066351][ T5896] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 698.178074][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'. [ 698.267291][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.277693][ T5896] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.287345][ T5896] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 698.311951][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.341491][ T5896] usb 2-1: config 0 descriptor?? [ 698.515659][ T5886] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 698.729603][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 698.788669][ T5886] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 698.800304][ T5886] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 698.817389][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.832913][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 698.848428][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.866152][ T5886] usbtmc 4-1:16.0: bulk endpoints not found [ 698.964833][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 699.267565][T12922] netlink: 'syz.2.2169': attribute type 4 has an invalid length. [ 699.514864][ T5886] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 699.669804][ T5886] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 699.682516][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.693290][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 699.709028][ T5886] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 699.718408][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.726674][ T5886] usb 3-1: Product: syz [ 699.731010][ T5886] usb 3-1: Manufacturer: syz [ 699.735734][ T5886] usb 3-1: SerialNumber: syz [ 699.743375][ T5886] usb 3-1: config 0 descriptor?? [ 699.752681][ T5886] usb-storage 3-1:0.0: USB Mass Storage device detected [ 699.774909][ T5886] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 699.964305][ T5896] usb 3-1: USB disconnect, device number 117 [ 700.222909][T11097] usbhid 5-1:1.0: can't add hid device: -71 [ 700.242327][T11097] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 700.261777][T11097] usb 5-1: USB disconnect, device number 99 [ 700.724376][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.738010][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.925029][ T5886] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 701.075329][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 701.083637][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.094677][ T5886] usb 3-1: config 0 has no interfaces? [ 701.111485][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 701.141125][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.151789][ T5888] usb 4-1: USB disconnect, device number 106 [ 701.196846][ T5885] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 701.273703][ T5886] usb 3-1: config 0 descriptor?? [ 701.434831][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 701.503361][ T5885] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 701.548285][ T5885] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 701.578496][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.601976][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 701.633636][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.662755][T11097] usb 2-1: USB disconnect, device number 107 [ 701.693071][ T5885] usbtmc 1-1:16.0: bulk endpoints not found [ 701.909667][ T5885] usb 1-1: USB disconnect, device number 105 [ 701.914343][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 702.354623][ T5888] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 702.519238][T12967] input: syz0 as /devices/virtual/input/input86 [ 702.545801][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 702.618559][ T5888] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.623648][T12971] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 702.647223][T12969] netlink: 'syz.3.2181': attribute type 4 has an invalid length. [ 702.697769][ T5888] usb 5-1: config 1 interface 0 has no altsetting 0 [ 702.729417][ T5888] usb 5-1: string descriptor 0 read error: -22 [ 702.735821][ T5888] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 702.746583][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.915019][ T5886] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 703.067535][ T5886] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 703.084072][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.102486][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 703.181226][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 703.215641][ T5886] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 703.225145][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.240658][ T5886] usb 4-1: Product: syz [ 703.247085][ T5886] usb 4-1: Manufacturer: syz [ 703.260328][ T5886] usb 4-1: SerialNumber: syz [ 703.283840][ T5886] usb 4-1: config 0 descriptor?? [ 703.314857][T11097] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 703.423965][ T5886] usb-storage 4-1:0.0: USB Mass Storage device detected [ 703.465353][ T5886] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 703.534920][T11097] usb 1-1: Using ep0 maxpacket: 8 [ 703.550484][T11097] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 703.564152][T11097] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 703.575476][T11097] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 703.590521][T11097] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 703.601026][T11097] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 703.621134][T11097] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 703.633252][T11097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.654227][T11097] usbtmc 1-1:16.0: bulk endpoints not found [ 703.704652][ T5886] usb 4-1: USB disconnect, device number 107 [ 704.355551][T12982] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 704.551900][T11097] usb 3-1: USB disconnect, device number 118 [ 705.035427][ T5888] usbhid 5-1:1.0: can't add hid device: -71 [ 705.043372][ T5888] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 705.058329][ T5888] usb 5-1: USB disconnect, device number 100 [ 705.125038][ T5896] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 705.222968][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 705.291028][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.306503][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.329385][ T5896] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 705.357596][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.384024][ T5896] usb 3-1: config 0 descriptor?? [ 705.490625][T13002] input: syz0 as /devices/virtual/input/input87 [ 706.026827][T13008] netlink: 'syz.4.2195': attribute type 4 has an invalid length. [ 706.055297][ T5896] usb 1-1: USB disconnect, device number 106 [ 706.254881][ T5888] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 706.484996][ T5886] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 706.571702][T11097] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 706.607477][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 706.705814][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.727474][ T5888] usb 4-1: config 0 has no interfaces? [ 706.739934][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 706.765272][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.800226][ T5888] usb 4-1: config 0 descriptor?? [ 706.852471][T11097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.866786][ T5886] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 86 [ 706.869168][T11097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 707.032383][T11097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.044471][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.133370][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 707.150161][ T5886] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 707.159507][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.172813][ T5886] usb 5-1: Product: syz [ 707.177678][ T5886] usb 5-1: Manufacturer: syz [ 707.184954][ T5886] usb 5-1: SerialNumber: syz [ 707.185003][ T5896] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 707.207474][T11097] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 707.236467][ T5886] usb 5-1: config 0 descriptor?? [ 707.247522][ T5886] usb-storage 5-1:0.0: USB Mass Storage device detected [ 707.271313][ T5886] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 707.422723][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 707.449171][ T5896] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.454723][ T5886] usb 5-1: USB disconnect, device number 101 [ 707.557491][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 707.608757][T11097] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.641831][ T5896] usb 1-1: string descriptor 0 read error: -22 [ 707.652544][T11097] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 707.789036][ T5896] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 707.798375][T11097] usb 2-1: Manufacturer: syz [ 707.804983][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.814521][T11097] usb 2-1: config 0 descriptor?? [ 708.149493][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.162510][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.213635][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 708.634924][T11097] rc_core: IR keymap rc-hauppauge not found [ 708.657297][T11097] Registered IR keymap rc-empty [ 708.692198][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.802843][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.874926][T11097] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 708.926515][T11097] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input88 [ 709.015979][ T5886] usb 3-1: USB disconnect, device number 119 [ 709.127907][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 709.236500][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 709.245955][T13047] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 709.270469][T13046] netlink: 'syz.2.2202': attribute type 16 has an invalid length. [ 709.287889][T13046] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 709.288005][ T5893] usb 4-1: USB disconnect, device number 108 [ 709.299807][T13046] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 709.299834][T13046] CPU: 0 UID: 0 PID: 13046 Comm: syz.2.2202 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 709.299861][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 709.299875][T13046] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 709.342043][T13046] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 9a fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 72 fe 3a f8 45 31 e4 48 83 7d 00 [ 709.361678][T13046] RSP: 0018:ffffc900043bee50 EFLAGS: 00010206 [ 709.367747][T13046] RAX: 0000000000000055 RBX: ffff88805a210008 RCX: 0000000000080000 [ 709.375731][T13046] RDX: ffffc9000c7c2000 RSI: 0000000000002934 RDI: 0000000000002935 [ 709.383710][T13046] RBP: 00000000000002a8 R08: ffffffff89f28f69 R09: 1ffff92000877df6 [ 709.391688][T13046] R10: dffffc0000000000 R11: fffff52000877df7 R12: ffff888024f4b080 [ 709.399662][T13046] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805a210000 [ 709.407640][T13046] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f5106b40 [ 709.416605][T13046] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 709.423234][T13046] CR2: 000000000c42064a CR3: 000000002941e000 CR4: 00000000003526f0 [ 709.431231][T13046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 709.439213][T13046] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 709.447185][T13046] Call Trace: [ 709.450464][T13046] [ 709.453421][T13046] rtnl_newlink_create+0x2f2/0xcb0 [ 709.458555][T13046] ? __mutex_lock+0x380/0x10c0 [ 709.463357][T13046] ? __pfx_aa_get_newest_label+0x10/0x10 [ 709.469033][T13046] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 709.474687][T13046] ? __pfx___mutex_lock+0x10/0x10 [ 709.479742][T13046] ? ns_capable+0x8a/0xf0 [ 709.484099][T13046] rtnl_newlink+0x18b0/0x1fe0 [ 709.488807][T13046] ? stack_depot_save_flags+0x44/0x940 [ 709.494279][T13046] ? __pfx_rtnl_newlink+0x10/0x10 [ 709.499314][T13046] ? __netlink_deliver_tap+0x561/0x7f0 [ 709.504789][T13046] ? netlink_deliver_tap+0x19d/0x1b0 [ 709.510115][T13046] ? netlink_unicast+0x7c6/0x9a0 [ 709.515070][T13046] ? netlink_sendmsg+0x8c3/0xcd0 [ 709.520040][T13046] ? __sock_sendmsg+0x221/0x270 [ 709.524926][T13046] ? ____sys_sendmsg+0x523/0x860 [ 709.529876][T13046] ? __sys_sendmsg+0x271/0x360 [ 709.534671][T13046] ? __do_fast_syscall_32+0xb4/0x110 [ 709.539988][T13046] ? do_fast_syscall_32+0x34/0x80 [ 709.545090][T13046] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.551646][T13046] ? kasan_quarantine_put+0xdc/0x230 [ 709.556954][T13046] ? lockdep_hardirqs_on+0x9d/0x150 [ 709.562206][T13046] ? nlmon_xmit+0xaf/0x100 [ 709.566681][T13046] ? __local_bh_enable_ip+0x168/0x200 [ 709.572095][T13046] ? lockdep_hardirqs_on+0x9d/0x150 [ 709.577333][T13046] ? aa_get_newest_label+0x101/0x6f0 [ 709.582660][T13046] ? __lock_acquire+0xad5/0xd80 [ 709.587535][T13046] ? __pfx_rtnl_newlink+0x10/0x10 [ 709.592603][T13046] rtnetlink_rcv_msg+0x80f/0xd70 [ 709.597576][T13046] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 709.602710][T13046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 709.608194][T13046] ? ref_tracker_free+0x63e/0x7e0 [ 709.613247][T13046] netlink_rcv_skb+0x208/0x480 [ 709.618038][T13046] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 709.623514][T13046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.628831][T13046] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.634069][T13046] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.639315][T13046] netlink_unicast+0x7f8/0x9a0 [ 709.644108][T13046] ? __pfx_netlink_unicast+0x10/0x10 [ 709.649422][T13046] ? __rcu_read_unlock+0xa1/0x110 [ 709.654463][T13046] ? skb_put+0x114/0x1f0 [ 709.658735][T13046] netlink_sendmsg+0x8c3/0xcd0 [ 709.663542][T13046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.668868][T13046] ? __import_iovec+0x585/0x830 [ 709.673833][T13046] ? aa_sock_msg_perm+0x91/0x160 [ 709.678813][T13046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.684137][T13046] __sock_sendmsg+0x221/0x270 [ 709.688837][T13046] ____sys_sendmsg+0x523/0x860 [ 709.693637][T13046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.698942][T13046] __sys_sendmsg+0x271/0x360 [ 709.703552][T13046] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.708709][T13046] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 709.715337][T13046] ? lockdep_hardirqs_on+0x9d/0x150 [ 709.720550][T13046] __do_fast_syscall_32+0xb4/0x110 [ 709.725703][T13046] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.731964][T13046] ? lockdep_hardirqs_on+0x9d/0x150 [ 709.737170][T13046] do_fast_syscall_32+0x34/0x80 [ 709.742042][T13046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.748405][T13046] RIP: 0023:0xf747d579 [ 709.752479][T13046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 709.772141][T13046] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 709.780602][T13046] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 709.788582][T13046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.796568][T13046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.804535][T13046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.812537][T13046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.820551][T13046] [ 709.823595][T13046] Modules linked in: [ 709.828696][T13046] ---[ end trace 0000000000000000 ]--- [ 709.840428][T13046] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 709.885238][T13046] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 9a fe 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 72 fe 3a f8 45 31 e4 48 83 7d 00 [ 709.935025][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 709.963553][T13046] RSP: 0018:ffffc900043bee50 EFLAGS: 00010206 [ 709.974902][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.009974][ T5896] usbhid 1-1:1.0: can't add hid device: -71 [ 710.021748][T13046] RAX: 0000000000000055 RBX: ffff88805a210008 RCX: 0000000000080000 [ 710.026349][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.030164][T13046] RDX: ffffc9000c7c2000 RSI: 0000000000002934 RDI: 0000000000002935 [ 710.044876][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 710.048118][T13046] RBP: 00000000000002a8 R08: ffffffff89f28f69 R09: 1ffff92000877df6 [ 710.087622][ T5896] usb 1-1: USB disconnect, device number 107 [ 710.105017][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.112959][T13046] R10: dffffc0000000000 R11: fffff52000877df7 R12: ffff888024f4b080 [ 710.137226][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.155153][T13046] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805a210000 [ 710.155549][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.166655][T13046] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f5106b40 [ 710.182569][T13046] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 710.190730][T13046] CR2: 00000000f7420994 CR3: 000000002941e000 CR4: 00000000003526f0 [ 710.199140][T13046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 710.204957][T11097] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 710.209538][T13046] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 710.222619][T13046] Kernel panic - not syncing: Fatal exception [ 710.229038][T13046] Kernel Offset: disabled [ 710.233375][T13046] Rebooting in 86400 seconds..