last executing test programs: 11.586682649s ago: executing program 1 (id=1240): pipe(0x0) io_setup(0x3ff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x80000, 0xfffffffe) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000180), &(0x7f0000000300)=0x0, 0x0, {0xe}, 0x0, 0x0, &(0x7f0000000100)=""/54, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 10.512482133s ago: executing program 1 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @mcast1, 0x8000}}}, &(0x7f0000000000)=0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 5.348760857s ago: executing program 1 (id=1251): syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x13, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}]}]}}}}}}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r2, r1) 5.348191047s ago: executing program 4 (id=1252): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10041) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0x5dc, 0x8040, &(0x7f0000000240)={0x2f, 0x8100, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40), 0x0, 0x0) 5.095913512s ago: executing program 1 (id=1254): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="c78867736f73", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x0, @val=0x80}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @request_death], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r5, 0x0, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 4.349406173s ago: executing program 3 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000001b80)=""/4096, 0x1000) 3.785142168s ago: executing program 2 (id=1260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400040000a0002"], 0x34}}, 0x0) 3.739732122s ago: executing program 2 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @mcast1, 0x8000}}}, &(0x7f0000000000)=0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 2.762211736s ago: executing program 2 (id=1262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001dc0)=@newtaction={0x48, 0x1e, 0x109, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0xd, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 2.628188209s ago: executing program 0 (id=1263): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) 2.627602339s ago: executing program 2 (id=1264): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) close(r3) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x1d33) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000021c0)=ANY=[@ANYBLOB="180200000000100061e320899774ed0001000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000caab0000f8e9ffffb702000008000000be03000000200000850000007100000095a9ed651a9f990cb1a28e205c6939c9d27060116e48cd8bd5260ab42c9964b9be4675246011ef"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000022c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="9cd746827bf6f1e3cb64e6db7118b15b06af2c0629c14ecb7b68253951036fb570e6bf1a414aa54632df7b6cc9e95b059e669da8010fd668534329fa02bb3d50", @ANYRES64=0x0], 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) io_uring_setup(0xb3e, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'pim6reg\x00', 0x101}) 2.585366652s ago: executing program 0 (id=1265): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r3 = socket$kcm(0x10, 0x7, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000280)=[r9], &(0x7f00000002c0)}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) 2.538307627s ago: executing program 2 (id=1266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102376, 0x18fe8}], 0x1, 0xfbfffffa, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open_by_handle_at(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000610000000000010000000000030000000000000000000000010000000000000000000900"], 0x70400) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc0000000000000000000000000000000000000000000000020020003c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe9c6d7d4dfdc830a4595daa6fffffffffffffff00"/97], 0xb8}, 0x1, 0x0, 0x0, 0x480cc}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYBLOB="fa8445de3e7dbe85e19e237fb64f7e2db5f0bfa48a74b9c17facebcd26ae7ffd3cf23672a15d78ad762c09a5f46532e67ab50cc386b1a0382ba4f0d08c3977de2e17394fa6bbf7ffdcfee7ccc7514e4ac939a8a0cd090d561376d861b91f97f0e8fe63ec200f6cd66015110db1575234ec790f28b5dd7213d22b4e261de22c8a86426dfce6f6886a2a18b55e4b2534cf082d97876a60a70a04865b0f4c809a01735ca1c6a0f06d3893b959457d60029ba937c5704d251dec7425bc7c247ea35a34ad1af9307380e66054d6fac5d4b2ecbea14e7d6282d4f4de7334ba840545d42c98e29544", @ANYRESOCT], 0xb8}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 2.283122681s ago: executing program 4 (id=1267): socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000080), 0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r3}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r3}, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) ioprio_get$uid(0x2, r5) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 2.118196687s ago: executing program 2 (id=1268): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1}) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x0, r3) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg(r2, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.041791414s ago: executing program 1 (id=1269): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd931d3864d39ddd8) 1.918935196s ago: executing program 1 (id=1270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.35889987s ago: executing program 0 (id=1271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000080)="fe", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @timestamp, @mss, @sack_perm, @timestamp, @sack_perm, @window], 0x2283) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a5", 0x15d, 0x805, 0x0, 0x0) 1.268291669s ago: executing program 3 (id=1272): unshare(0x8000000) semget$private(0x0, 0x3, 0x440) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) 1.267882229s ago: executing program 0 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @mcast1, 0x8000}}}, &(0x7f0000000000)=0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 1.246509821s ago: executing program 4 (id=1274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x401, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/23, &(0x7f0000000240)=0x17) 1.206876235s ago: executing program 4 (id=1275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 1.05219889s ago: executing program 3 (id=1276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 1.044533781s ago: executing program 4 (id=1277): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) close(r3) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x1d33) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000021c0)=ANY=[@ANYBLOB="180200000000100061e320899774ed0001000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000caab0000f8e9ffffb702000008000000be03000000200000850000007100000095a9ed651a9f990cb1a28e205c6939c9d27060116e48cd8bd5260ab42c9964b9be4675246011ef"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000022c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="9cd746827bf6f1e3cb64e6db7118b15b06af2c0629c14ecb7b68253951036fb570e6bf1a414aa54632df7b6cc9e95b059e669da8010fd668534329fa02bb3d50", @ANYRES64=0x0], 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) io_uring_setup(0xb3e, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'pim6reg\x00', 0x101}) 920.808572ms ago: executing program 4 (id=1278): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10041) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40), 0x0, 0x0) 268.647955ms ago: executing program 0 (id=1279): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102376, 0x18fe8}], 0x1, 0xfbfffffa, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open_by_handle_at(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000610000000000010000000000030000000000000000000000010000000000000000000900"], 0x70400) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc0000000000000000000000000000000000000000000000020020003c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe9c6d7d4dfdc830a4595daa6fffffffffffffff00"/97], 0xb8}, 0x1, 0x0, 0x0, 0x480cc}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYBLOB="fa8445de3e7dbe85e19e237fb64f7e2db5f0bfa48a74b9c17facebcd26ae7ffd3cf23672a15d78ad762c09a5f46532e67ab50cc386b1a0382ba4f0d08c3977de2e17394fa6bbf7ffdcfee7ccc7514e4ac939a8a0cd090d561376d861b91f97f0e8fe63ec200f6cd66015110db1575234ec790f28b5dd7213d22b4e261de22c8a86426dfce6f6886a2a18b55e4b2534cf082d97876a60a70a04865b0f4c809a01735ca1c6a0f06d3893b959457d60029ba937c5704d251dec7425bc7c247ea35a34ad1af9307380e66054d6fac5d4b2ecbea14e7d6282d4f4de7334ba840545d42c98e29544", @ANYRESOCT], 0xb8}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000001000731a4300000000009500000200000000e9d56a1d99568f16a33ee022e3236cf28e75bec70147204097e8c556f0c4ddbf85c8277281d262cc2d4f6cdb00740d093709ecad4ebb79a5006be679c42836c78368dab66b2e5a874ebc3e8cf11a83c621dee437b72530d20560720ef9d49e6f27923dcee06f1cfcb7b020ed558168d4303088b7e4e3fde1e374003becb9b6f1c5d342b6a39dbaee37029544b6b2571fd490581384a7ba361d37ab91d31ac182bf11ce990000007d25dbb978936db08138c23fb3fafd73fc7d69cfc33f7d41fd9eb2a765fab2c246f53dc44d4ebd5757ecb1a7cf33453be46e5e284e805a0d9888e85b8dec5f54251dd75bc43e3cc8c734e44eb669dbb5a1"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) 188.230982ms ago: executing program 3 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000002300)) 139.199787ms ago: executing program 3 (id=1281): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1206}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 93.412901ms ago: executing program 3 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000001b80)=""/4096, 0x1000) 0s ago: executing program 0 (id=1283): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) kernel console output (not intermixed with test programs): now disconnected from ttyUSB0 [ 137.443596][ T4776] device bridge_slave_0 entered promiscuous mode [ 137.464468][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.464916][ T7] sierra 4-1:0.79: device disconnected [ 137.481126][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.489690][ T4776] device bridge_slave_1 entered promiscuous mode [ 137.557731][ T7] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 137.576982][ T7] sierra 4-1:0.3: device disconnected [ 137.620453][ T4776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.635016][ T4776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.678443][ T4776] team0: Port device team_slave_0 added [ 137.706861][ T2989] usb 1-1: USB disconnect, device number 11 [ 137.722703][ T4776] team0: Port device team_slave_1 added [ 137.809280][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.826531][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.876155][ T4776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.903495][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.919000][ T4776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.931123][ T3731] pegasus 3-1:0.0: can't locate MII phy, using default [ 137.946961][ T4776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.014082][ T4776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.018679][ T3621] usb 5-1: USB disconnect, device number 9 [ 138.040600][ T3621] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 138.076746][ T3731] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 82:ea:da:b7:32:52 [ 138.111190][ T3731] usb 3-1: USB disconnect, device number 7 [ 139.251654][ T3623] Bluetooth: hci0: command 0x0409 tx timeout [ 141.269250][ T4776] device hsr_slave_0 entered promiscuous mode [ 141.281335][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 141.312314][ T4776] device hsr_slave_1 entered promiscuous mode [ 141.481196][ T4815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 141.709281][ T4776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.767472][ T4776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.824683][ T4776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.827685][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 141.888064][ T4776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.931152][ T3731] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.035792][ T4776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.044344][ T4776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.068800][ T4776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.075119][ T4776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.086554][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 142.186590][ T3731] usb 5-1: Using ep0 maxpacket: 32 [ 142.211342][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.237613][ T4824] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 142.260050][ T4117] bond1: (slave ip6gretap1): Releasing active interface [ 142.302428][ T3731] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 142.310785][ T4776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.319316][ T3731] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.319354][ T3731] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.319381][ T3731] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 142.319407][ T3731] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.319433][ T3731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.377563][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.401371][ T7] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 142.401399][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.401417][ T7] usb 4-1: Product: syz [ 142.401432][ T7] usb 4-1: Manufacturer: syz [ 142.401445][ T7] usb 4-1: SerialNumber: syz [ 142.403182][ T7] usb 4-1: config 0 descriptor?? [ 142.423188][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.481322][ T3731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.481353][ T3731] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.481375][ T3731] usb 5-1: Product: syz [ 142.481390][ T3731] usb 5-1: Manufacturer: syz [ 142.481405][ T3731] usb 5-1: SerialNumber: syz [ 142.482851][ T3731] usb 5-1: config 0 descriptor?? [ 142.489374][ T4776] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.501564][ T4818] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 142.522033][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.522505][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.523449][ T2677] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.523503][ T2677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.523876][ T3731] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.525508][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.526032][ T3731] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.526585][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.527457][ T2677] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.527481][ T2677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.537352][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.537728][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.538219][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.541390][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.543864][ T7] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 142.544408][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.545051][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.569885][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.570445][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.586225][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.586630][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.609697][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.774960][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.787198][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.933529][ T23] usb 5-1: USB disconnect, device number 10 [ 142.936505][ T23] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 143.064468][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.083173][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.110430][ T4776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.161834][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.172609][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.229854][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.244773][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.255463][ T4776] device veth0_vlan entered promiscuous mode [ 143.273688][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.283085][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.308963][ T4776] device veth1_vlan entered promiscuous mode [ 143.354104][ T4117] device hsr_slave_0 left promiscuous mode [ 143.370343][ T4117] device hsr_slave_1 left promiscuous mode [ 143.377272][ T3619] Bluetooth: hci0: command 0x040f tx timeout [ 143.388220][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.396244][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.410074][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.419261][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.433428][ T4843] kvm [4842]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x14df00000000 [ 143.446167][ T4117] device dummy0 left promiscuous mode [ 143.463530][ T4117] bridge0: port 3(dummy0) entered disabled state [ 143.483300][ T4843] kvm [4842]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x180000000000 [ 143.496359][ T4117] device bridge_slave_1 left promiscuous mode [ 143.504578][ T4843] kvm [4842]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x24df00000000 [ 143.526655][ T4843] kvm [4842]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x31ce00000000 [ 143.540279][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.563596][ T4117] device bridge_slave_0 left promiscuous mode [ 143.569778][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.613825][ T4843] kvm [4842]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x6e4500000000 [ 144.049133][ T7] gspca_sunplus: reg_r err -110 [ 145.281154][ T4117] device bond1 left promiscuous mode [ 146.267347][ T3621] Bluetooth: hci0: command 0x0419 tx timeout [ 146.298883][ T4117] device bridge0 left promiscuous mode [ 146.309464][ T4117] device veth1_macvtap left promiscuous mode [ 146.331171][ T4117] device veth0_macvtap left promiscuous mode [ 146.337249][ T4117] device veth1_vlan left promiscuous mode [ 146.426029][ T4117] device veth0_vlan left promiscuous mode [ 146.651311][ T4117] bond1 (unregistering): Released all slaves [ 146.673835][ T4117] team0 (unregistering): Port device vlan2 removed [ 146.748459][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 146.761247][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 146.772308][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.786870][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.845263][ T4117] bond0 (unregistering): Released all slaves [ 146.922347][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.930329][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.950518][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.960508][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.972419][ T4776] device veth0_macvtap entered promiscuous mode [ 146.985845][ T4776] device veth1_macvtap entered promiscuous mode [ 147.008487][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.019551][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.029901][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.040398][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.050211][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.060720][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.070933][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.081958][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.093391][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.101432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.113057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.130100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.138972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.152277][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.166303][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.177177][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.190691][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.201360][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.215613][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.227376][ T4776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.249550][ T4776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.263582][ T4776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.276310][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.277000][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.280637][ T4776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.280669][ T4776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.280694][ T4776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.280718][ T4776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.451789][ T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.451866][ T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.458676][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.462845][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.462895][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.464486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.806876][ T4884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.378'. [ 147.871246][ T7] sunplus: probe of 4-1:0.0 failed with error -110 [ 147.878395][ T7] usb 4-1: USB disconnect, device number 17 [ 149.360310][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.362465][ T3653] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.489640][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 151.548737][ T4907] device bridge_slave_1 left promiscuous mode [ 151.548920][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.579480][ T4907] bridge1: port 1(bridge_slave_1) entered blocking state [ 151.601068][ T3653] usb 3-1: device not accepting address 8, error -71 [ 151.701258][ T4907] bridge1: port 1(bridge_slave_1) entered disabled state [ 151.702237][ T4907] device bridge_slave_1 entered promiscuous mode [ 152.513489][ T7] usb 4-1: device descriptor read/64, error -71 [ 155.309248][ T4942] fuse: Unknown parameter 'B¸Éù"X“ßkëf%½0x0000000000000003' [ 157.417732][ T4969] device vlan2 entered promiscuous mode [ 157.515452][ T4975] fuse: Unknown parameter 'group_i00000000000000000000' [ 158.767393][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.005428][ T3621] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.994975][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 160.168259][ T3621] usb 5-1: Using ep0 maxpacket: 8 [ 162.291422][ T3621] usb 5-1: unable to read config index 0 descriptor/all [ 162.301033][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 162.308608][ T7] usb 2-1: can't read configurations, error -71 [ 162.341197][ T3621] usb 5-1: can't read configurations, error -71 [ 162.851351][ T5028] netlink: 84 bytes leftover after parsing attributes in process `syz.3.425'. [ 164.282279][ T3843] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 165.322103][ T3843] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.504476][ T7] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 166.578825][ T3621] Bluetooth: hci4: command 0x0406 tx timeout [ 168.502510][ T5046] kvm [5040]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 168.529738][ T5046] kvm [5040]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 168.759150][ T5064] syz.1.437 sent an empty control message without MSG_MORE. [ 169.977211][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 170.181076][ T7] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 170.201434][ T5095] tipc: Started in network mode [ 170.230476][ T5095] tipc: Node identity fe80000000000000000000000000001c, cluster identity 4711 [ 170.272697][ T5095] tipc: Enabled bearer , priority 10 [ 170.334278][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.376345][ T5099] bridge0: port 3(dummy0) entered disabled state [ 170.383011][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.390338][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.551179][ T2989] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 170.560574][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 170.571602][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.255749][ T3843] tipc: Node number set to 4269801500 [ 172.272231][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.281198][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 173.281546][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 174.270674][ T7] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 174.302345][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.344600][ T5083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.413699][ T7] hub 1-1:1.0: bad descriptor, ignoring hub [ 174.462689][ T7] hub: probe of 1-1:1.0 failed with error -5 [ 174.476912][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 174.482425][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 174.489651][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 174.500149][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 174.521520][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 174.529127][ T23] usb 3-1: can't read configurations, error -71 [ 175.052506][ T7] usb 1-1: USB disconnect, device number 12 [ 175.138940][ T5133] device macvtap2 entered promiscuous mode [ 175.581133][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.841040][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 177.277700][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 178.303318][ T5161] device bond_slave_0 entered promiscuous mode [ 178.309544][ T5161] device bond_slave_1 entered promiscuous mode [ 178.321800][ T5161] device bond_slave_0 left promiscuous mode [ 178.327755][ T5161] device bond_slave_1 left promiscuous mode [ 178.351382][ T7] usb 2-1: string descriptor 0 read error: -71 [ 178.360495][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.378666][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.407778][ T7] usb 2-1: config 0 descriptor?? [ 178.433845][ T7] usb 2-1: can't set config #0, error -71 [ 178.450394][ T7] usb 2-1: USB disconnect, device number 14 [ 178.708410][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 178.737344][ T5179] input: syz1 as /devices/virtual/input/input9 [ 178.841066][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.111295][ T4660] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 179.212918][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.233733][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.351186][ T3579] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.451350][ T21] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 179.473778][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.511255][ T21] usb 3-1: Product: syz [ 179.536873][ T21] usb 3-1: Manufacturer: syz [ 179.558534][ T21] usb 3-1: SerialNumber: syz [ 179.593159][ T21] usb 3-1: config 0 descriptor?? [ 179.631054][ T3579] usb 5-1: Using ep0 maxpacket: 8 [ 179.651229][ T4660] usb 4-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 179.662068][ T21] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 179.681188][ T4660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.698147][ T21] em28xx 3-1:0.0: Video interface 0 found: bulk [ 179.716442][ T4660] usb 4-1: Product: syz [ 179.733617][ T5193] device syz_tun entered promiscuous mode [ 179.739689][ T5193] device macvtap1 entered promiscuous mode [ 179.755962][ T4660] usb 4-1: Manufacturer: syz [ 179.760717][ T4660] usb 4-1: SerialNumber: syz [ 179.785670][ T4660] usb 4-1: config 0 descriptor?? [ 179.805301][ T5193] device syz_tun left promiscuous mode [ 179.845821][ T4660] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 179.971307][ T3579] usb 5-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=b5.b0 [ 179.996483][ T3579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.037962][ T3579] usb 5-1: Product: syz [ 180.055766][ T3579] usb 5-1: Manufacturer: syz [ 180.070211][ T3579] usb 5-1: SerialNumber: syz [ 180.081158][ T21] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 180.091092][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.112987][ T3579] usb 5-1: config 0 descriptor?? [ 180.351154][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 180.366666][ T3579] usb 5-1: USB disconnect, device number 13 [ 180.431424][ T21] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.445135][ T21] em28xx 3-1:0.0: board has no eeprom [ 180.471227][ T23] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 180.482918][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.513219][ T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 180.541699][ T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 180.567628][ T23] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.581178][ T21] em28xx 3-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 180.591849][ T21] em28xx 3-1:0.0: analog set to bulk mode. [ 180.612876][ T21] usb 3-1: USB disconnect, device number 12 [ 180.628918][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.644295][ T21] em28xx 3-1:0.0: Disconnecting em28xx [ 182.278335][ T3731] em28xx 3-1:0.0: Registering V4L2 extension [ 182.431274][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 182.432957][ T3013] bcm5974 4-1:0.0: could not read from device [ 182.440629][ T23] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 182.474691][ T3731] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 182.515712][ T3731] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 182.524549][ T23] usb 1-1: Product: syz [ 182.528720][ T23] usb 1-1: Manufacturer: syz [ 182.544651][ T3731] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 182.554731][ T5223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.557493][ T23] usb 1-1: SerialNumber: syz [ 182.603708][ T23] usb 1-1: config 0 descriptor?? [ 182.614960][ T3731] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 182.637089][ T3731] DVB: Unable to find symbol xc2028_attach() [ 182.651474][ T5196] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 182.659240][ T4660] usb 4-1: USB disconnect, device number 21 [ 182.666666][ T3731] tuner: 1-0061: Tuner has no way to set tv freq [ 182.674615][ T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.684151][ T5223] usb usb8: usbfs: process 5223 (syz.4.489) did not claim interface 0 before use [ 182.703634][ T3731] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 182.713920][ T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 182.736845][ T3731] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 182.743915][ T26] audit: type=1326 audit(1726606367.622:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 182.796214][ T3731] em28xx 3-1:0.0: No AC97 audio processor [ 182.829928][ T26] audit: type=1326 audit(1726606367.662:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 182.964462][ T3731] tuner: 1-0061: Tuner has no way to set tv freq [ 182.977980][ T5211] usb 1-1: USB disconnect, device number 13 [ 182.987834][ T3731] em28xx 3-1:0.0: Registered radio device as radio32 [ 182.995155][ T3731] usb 3-1: Decoder not found [ 183.000361][ T5211] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 183.004295][ T5231] udevd[5231]: Error opening device "/dev/input/event4": No such file or directory [ 183.007656][ T3731] em28xx 3-1:0.0: failed to create media graph [ 183.080403][ T3731] em28xx 3-1:0.0: V4L2 device radio32 deregistered [ 183.121238][ T3843] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.401266][ T3843] usb 2-1: Using ep0 maxpacket: 8 [ 183.439425][ T3731] em28xx 3-1:0.0: V4L2 device video71 deregistered [ 183.537178][ T3731] em28xx 3-1:0.0: Registering input extension [ 183.597114][ T21] em28xx 3-1:0.0: Closing input extension [ 183.604591][ T3843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.635831][ T5231] udevd[5231]: Unable to EVIOCGABS device "/dev/input/event4" [ 183.646895][ T5231] udevd[5231]: Unable to EVIOCGABS device "/dev/input/event4" [ 183.655182][ T5231] udevd[5231]: Unable to EVIOCGABS device "/dev/input/event4" [ 183.662898][ T5231] udevd[5231]: Unable to EVIOCGABS device "/dev/input/event4" [ 183.718384][ T21] em28xx 3-1:0.0: Freeing device [ 183.738503][ T5241] ipt_REJECT: TCP_RESET invalid for non-tcp [ 183.747679][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 183.756792][ T3843] usb 2-1: config 3 has an invalid interface number: 182 but max is 0 [ 183.771010][ T3843] usb 2-1: config 3 has no interface number 0 [ 183.777115][ T3843] usb 2-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 183.788443][ T4660] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 183.831224][ T3843] usb 2-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 183.862968][ T5251] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 183.863608][ T3843] usb 2-1: config 3 interface 182 has no altsetting 0 [ 183.924802][ T5247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.850822][ T5259] input: syz0 as /devices/virtual/input/input12 [ 184.857458][ T3843] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 184.867497][ T3843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.875618][ T3843] usb 2-1: Product: syz [ 184.881703][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 184.897779][ T3843] usb 2-1: Manufacturer: syz [ 184.911208][ T3843] usb 2-1: SerialNumber: syz [ 185.005708][ T5259] Cannot find set identified by id 0 to match [ 185.123247][ T4660] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.141096][ T4660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.166855][ T4660] usb 4-1: Product: syz [ 185.176857][ T5271] input: syz0 as /devices/virtual/input/input13 [ 185.187931][ T4660] usb 4-1: Manufacturer: syz [ 185.202538][ T4660] usb 4-1: SerialNumber: syz [ 185.223252][ T4660] usb 4-1: config 0 descriptor?? [ 185.255633][ T3843] usbtest 2-1:3.182: couldn't get endpoints, -71 [ 185.281111][ T3843] usbtest: probe of 2-1:3.182 failed with error -71 [ 185.307111][ T3843] usb 2-1: USB disconnect, device number 15 [ 185.481260][ T4660] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.681091][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.823735][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 185.869739][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 185.900007][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'. [ 185.921282][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 186.141311][ T21] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 186.149569][ T21] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.160830][ T21] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.235490][ T21] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 186.247118][ T21] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.260697][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.302130][ T3620] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.422119][ T21] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.441022][ T3843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.455020][ T21] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.507215][ T21] usb 5-1: Product: syz [ 186.740937][ T3843] usb 1-1: Using ep0 maxpacket: 8 [ 186.751518][ T21] usb 5-1: Manufacturer: syz [ 186.756168][ T21] usb 5-1: SerialNumber: syz [ 186.768323][ T21] usb 5-1: config 0 descriptor?? [ 186.791305][ T5276] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.812701][ T21] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.823456][ T21] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.861133][ T3843] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 186.875342][ T3843] usb 1-1: config 0 has no interface number 0 [ 186.883325][ T3843] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 186.911126][ T3843] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 186.927782][ T3843] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.951053][ T3620] usb 2-1: Using ep0 maxpacket: 8 [ 187.492920][ T3843] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 187.506940][ T3843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.516525][ T3621] usb 5-1: USB disconnect, device number 14 [ 187.523764][ T3843] usb 1-1: Product: syz [ 189.264331][ T3620] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.281219][ T3843] usb 1-1: Manufacturer: syz [ 190.273329][ T3843] usb 1-1: SerialNumber: syz [ 190.280719][ T3843] usb 1-1: config 0 descriptor?? [ 190.287753][ T3621] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 190.321364][ T3843] usb 1-1: can't set config #0, error -71 [ 190.337498][ T3843] usb 1-1: USB disconnect, device number 14 [ 190.441377][ T3620] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 190.468449][ T3620] usb 2-1: can't read configurations, error -71 [ 190.521151][ T4660] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 190.557056][ T4660] usb 4-1: USB disconnect, device number 22 [ 190.719869][ T5312] device syz_tun entered promiscuous mode [ 190.741490][ T5312] device macvtap1 entered promiscuous mode [ 190.775913][ T5312] device syz_tun left promiscuous mode [ 193.068120][ T3620] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 193.259285][ T5335] sctp: failed to load transform for md5: -4 [ 193.259292][ T5339] sctp: failed to load transform for md5: -2 [ 193.481028][ T3620] usb 2-1: Using ep0 maxpacket: 8 [ 193.601302][ T3620] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 193.611398][ T3620] usb 2-1: config 0 has no interface number 0 [ 193.617514][ T3620] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 193.659460][ T5372] input: syz0 as /devices/virtual/input/input14 [ 193.681908][ T5375] netlink: 766 bytes leftover after parsing attributes in process `syz.3.531'. [ 193.699438][ T3620] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 193.725573][ T5375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 193.731616][ T3620] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.866581][ T5228] udevd[5228]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 193.971290][ T3620] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 193.992296][ T3620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.025507][ T3620] usb 2-1: Product: syz [ 194.051155][ T3620] usb 2-1: Manufacturer: syz [ 194.077125][ T3620] usb 2-1: SerialNumber: syz [ 194.083040][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083608][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101532][ T5384] device macvtap2 entered promiscuous mode [ 194.166350][ T3620] usb 2-1: config 0 descriptor?? [ 194.236365][ T3620] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 194.347084][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 194.482577][ T3843] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 194.491306][ T3843] Bluetooth: hci4: Injecting HCI hardware error event [ 194.551409][ T3591] Bluetooth: hci4: hardware error 0x00 [ 194.763472][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 194.881042][ T3843] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 194.899086][ T5393] udc-core: couldn't find an available UDC or it's busy [ 194.906492][ T5393] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.430820][ T3843] usb 1-1: no configurations [ 196.446053][ T3843] usb 1-1: can't read configurations, error -22 [ 196.591495][ T4660] usb 2-1: USB disconnect, device number 18 [ 196.711020][ T3843] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.906517][ T3621] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 197.071288][ T3843] usb 1-1: no configurations [ 197.076105][ T3843] usb 1-1: can't read configurations, error -22 [ 197.111267][ T3843] usb usb1-port1: attempt power cycle [ 197.751330][ T3621] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 197.771615][ T3621] usb 3-1: config 7 has no interface number 0 [ 197.805371][ T3621] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 197.831052][ T3621] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 197.850569][ T3621] usb 3-1: config 7 interface 252 has no altsetting 0 [ 197.962179][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 198.025031][ T5433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.549'. [ 198.121055][ T3843] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.238566][ T3621] usb 3-1: string descriptor 0 read error: -22 [ 198.254190][ T3621] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 198.308525][ T3621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.605698][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 199.322744][ T3621] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 199.491085][ T3843] usb 1-1: config 0 has no interfaces? [ 199.496576][ T3843] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 199.519294][ T3843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.561723][ T3843] usb 1-1: config 0 descriptor?? [ 199.586152][ T4660] usb 3-1: USB disconnect, device number 13 [ 199.701273][ T7] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 200.656665][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.660264][ T7] usb 4-1: config 0 descriptor?? [ 201.046697][ T5455] device bridge0 entered promiscuous mode [ 201.046877][ T5455] device vlan2 entered promiscuous mode [ 201.073102][ T5455] device bridge0 left promiscuous mode [ 201.332225][ T2989] usb 1-1: USB disconnect, device number 17 [ 201.419824][ T5465] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 201.441297][ T5465] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 201.502197][ T3843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.751026][ T3843] usb 3-1: Using ep0 maxpacket: 32 [ 202.031235][ T3843] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 202.052061][ T3843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.096828][ T3843] usb 3-1: Product: syz [ 202.115909][ T3843] usb 3-1: Manufacturer: syz [ 202.142235][ T3843] usb 3-1: SerialNumber: syz [ 202.162159][ T3843] usb 3-1: config 0 descriptor?? [ 202.222371][ T3843] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 202.367530][ T5481] binder: 5478:5481 ioctl 4020ae46 20000180 returned -22 [ 203.591112][ T3843] gspca_ov534_9: reg_w failed -110 [ 203.631257][ T7] pegasus 4-1:0.0: setup Pegasus II specific registers [ 203.911214][ T4660] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 203.951323][ T7] pegasus 4-1:0.0: can't locate MII phy, using default [ 203.981132][ T3843] gspca_ov534_9: Unknown sensor 0000 [ 203.981191][ T3843] ov534_9: probe of 3-1:0.0 failed with error -22 [ 204.019272][ T7] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ca:ef:17:78:d3:9d [ 204.241046][ T4660] usb 1-1: Using ep0 maxpacket: 16 [ 204.289962][ T7] usb 4-1: USB disconnect, device number 23 [ 204.512861][ T4660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.575271][ T3843] usb 3-1: USB disconnect, device number 14 [ 204.841117][ T4660] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.863386][ T4660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.891017][ T4660] usb 1-1: Product: syz [ 204.905893][ T4660] usb 1-1: Manufacturer: syz [ 204.910509][ T4660] usb 1-1: SerialNumber: syz [ 204.956788][ T4660] usb 1-1: config 0 descriptor?? [ 205.023698][ T4660] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.043243][ T4660] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 205.226568][ T2989] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 205.271318][ T5211] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.521109][ T5211] usb 3-1: Using ep0 maxpacket: 32 [ 205.543323][ T5567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.611313][ T2989] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 205.611346][ T2989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.623075][ T2989] usb 2-1: config 0 descriptor?? [ 205.641201][ T5211] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 205.681395][ T5211] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.707001][ T5211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.757979][ T5211] usb 3-1: config 0 descriptor?? [ 205.801298][ T5540] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 205.822096][ T5211] hub 3-1:0.0: bad descriptor, ignoring hub [ 205.838880][ T5211] hub: probe of 3-1:0.0 failed with error -5 [ 205.865317][ T5211] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 206.571065][ T4660] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 206.756959][ T4660] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.837887][ T4660] em28xx 1-1:0.0: board has no eeprom [ 207.103325][ T4660] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 207.115040][ T4660] em28xx 1-1:0.0: dvb set to bulk mode. [ 207.136122][ T3620] em28xx 1-1:0.0: Binding DVB extension [ 207.162317][ T4660] usb 1-1: USB disconnect, device number 18 [ 207.177872][ T4660] em28xx 1-1:0.0: Disconnecting em28xx [ 207.273901][ T3620] em28xx 1-1:0.0: Registering input extension [ 207.288830][ T4660] em28xx 1-1:0.0: Closing input extension [ 207.365126][ T4660] em28xx 1-1:0.0: Freeing device [ 208.021130][ T3621] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.071156][ T2989] pegasus 2-1:0.0: setup Pegasus II specific registers [ 208.078271][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 208.111270][ T3579] usb 3-1: USB disconnect, device number 15 [ 208.341194][ T3621] usb 5-1: no configurations [ 208.346213][ T3621] usb 5-1: can't read configurations, error -22 [ 208.371130][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 208.491136][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.507551][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 208.521097][ T3621] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.701208][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.723809][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.745289][ T7] usb 1-1: Product: syz [ 208.764953][ T7] usb 1-1: Manufacturer: syz [ 208.777725][ T7] usb 1-1: SerialNumber: syz [ 208.851408][ T3621] usb 5-1: no configurations [ 208.856663][ T3621] usb 5-1: can't read configurations, error -22 [ 208.876773][ T3621] usb usb5-port1: attempt power cycle [ 208.931256][ T2989] pegasus 2-1:0.0: can't locate MII phy, using default [ 208.971122][ T2989] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, da:91:6b:2f:cb:f5 [ 209.033581][ T2989] usb 2-1: USB disconnect, device number 19 [ 209.108732][ T5630] sctp: [Deprecated]: syz.0.604 (pid 5630) Use of int in max_burst socket option deprecated. [ 209.108732][ T5630] Use struct sctp_assoc_value instead [ 209.351163][ T3621] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 209.519715][ T5670] binder: 5662:5670 ioctl 4020ae46 20000180 returned -22 [ 209.597470][ T3621] usb 5-1: no configurations [ 209.611660][ T3621] usb 5-1: can't read configurations, error -22 [ 209.831468][ T3621] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 210.002257][ T3621] usb 5-1: no configurations [ 210.006916][ T3621] usb 5-1: can't read configurations, error -22 [ 210.024386][ T3621] usb usb5-port1: unable to enumerate USB device [ 210.031115][ T4660] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.411297][ T4660] usb 2-1: config 0 has no interfaces? [ 210.416839][ T4660] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 210.464869][ T4660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.498202][ T4660] usb 2-1: config 0 descriptor?? [ 210.531016][ T3621] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 210.683644][ T2989] usb 1-1: USB disconnect, device number 19 [ 210.753121][ T5680] program syz.1.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.781086][ T3621] usb 3-1: Using ep0 maxpacket: 8 [ 210.806552][ T5719] binder: 5715:5719 ioctl 4020ae46 20000180 returned -22 [ 210.841133][ T4660] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 210.921287][ T3621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 210.939304][ T3621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 210.973432][ T5211] usb 2-1: USB disconnect, device number 20 [ 210.997746][ T3621] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.156518][ T3621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.165768][ T3621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 211.192069][ T3621] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.311218][ T3621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.323480][ T3621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 211.348092][ T4660] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 211.357683][ T4660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.368439][ T4660] usb 4-1: config 0 descriptor?? [ 211.381756][ T3621] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.666892][ T3621] usb 3-1: string descriptor 0 read error: -22 [ 211.673632][ T3621] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 211.692371][ T3621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.742399][ T3621] adutux 3-1:168.0: interrupt endpoints not found [ 211.891057][ T5211] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.946683][ T3621] usb 3-1: USB disconnect, device number 16 [ 212.181234][ T5211] usb 2-1: no configurations [ 212.185956][ T5211] usb 2-1: can't read configurations, error -22 [ 212.341050][ T5211] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 212.461118][ T5754] binder: 5753:5754 ioctl 4020ae46 20000180 returned -22 [ 212.711272][ T5211] usb 2-1: no configurations [ 212.715890][ T5211] usb 2-1: can't read configurations, error -22 [ 212.723012][ T5211] usb usb2-port1: attempt power cycle [ 215.741196][ T4660] pegasus 4-1:0.0: setup Pegasus II specific registers [ 215.764766][ T5777] input: syz1 as /devices/virtual/input/input16 [ 216.055346][ T5799] device vlan2 entered promiscuous mode [ 216.061373][ T4660] pegasus 4-1:0.0: can't locate MII phy, using default [ 216.090926][ T4660] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, b2:2e:01:ee:1d:39 [ 216.110861][ T5800] device macvtap2 entered promiscuous mode [ 216.118479][ T4660] usb 4-1: USB disconnect, device number 24 [ 216.131349][ T5211] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 216.291034][ T5211] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 216.301060][ T3843] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 217.796189][ T3843] usb 5-1: Using ep0 maxpacket: 16 [ 217.875619][ T5211] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 217.899244][ T5211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.921276][ T3843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.938115][ T5211] usb 2-1: config 0 descriptor?? [ 217.945407][ T3843] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 217.954778][ T4660] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 217.963068][ T3843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.993444][ T3843] usb 5-1: config 0 descriptor?? [ 218.033742][ T3843] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 218.331287][ T3013] bcm5974 5-1:0.0: could not read from device [ 218.340341][ T3843] usb 5-1: USB disconnect, device number 19 [ 218.361149][ T5792] bcm5974 5-1:0.0: could not read from device [ 218.401093][ T4660] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.411375][ T4660] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 218.421160][ T4660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.431095][ T4660] usb 4-1: config 0 descriptor?? [ 218.473136][ T4660] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 218.486440][ T4660] command write [95] error -22 [ 218.683169][ T3579] usb 4-1: USB disconnect, device number 25 [ 220.089590][ T5855] bridge0: port 3(vlan0) entered blocking state [ 220.107379][ T5855] bridge0: port 3(vlan0) entered disabled state [ 220.162029][ T5855] device vlan0 entered promiscuous mode [ 220.168205][ T5855] bridge0: port 3(vlan0) entered blocking state [ 220.174600][ T5855] bridge0: port 3(vlan0) entered forwarding state [ 220.240487][ T5855] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 220.317818][ T5859] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 220.427990][ T5211] pegasus 2-1:0.0: setup Pegasus II specific registers [ 220.802590][ T5882] binder: 5878:5882 ioctl 4020ae46 20000180 returned -22 [ 221.182043][ T5211] pegasus 2-1:0.0: can't locate MII phy, using default [ 221.206633][ T5211] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a2:57:03:ca:d2:e7 [ 221.236797][ T5211] usb 2-1: USB disconnect, device number 24 [ 222.782493][ T5905] device vlan2 entered promiscuous mode [ 223.249780][ T5926] device macvtap2 entered promiscuous mode [ 223.711054][ T5211] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 225.781187][ T5211] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 225.800448][ T5211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.829299][ T5211] usb 2-1: config 0 descriptor?? [ 226.297110][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 226.486510][ T5964] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 226.785797][ T5981] device macvtap2 entered promiscuous mode [ 227.841394][ T5211] pegasus: probe of 2-1:0.0 failed with error -110 [ 227.860180][ T5211] usb 2-1: USB disconnect, device number 25 [ 229.853334][ T5998] binder: 5996:5998 ioctl 4020ae46 20000180 returned -22 [ 230.359653][ T6013] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 230.403525][ T6013] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 230.436109][ T6018] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 230.456161][ T6017] netlink: 'syz.2.737': attribute type 10 has an invalid length. [ 230.503042][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.518676][ T6017] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.528030][ T6013] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 230.544230][ T6019] device bond0 entered promiscuous mode [ 230.560633][ T6019] device bond_slave_0 entered promiscuous mode [ 230.569277][ T6019] device bond_slave_1 entered promiscuous mode [ 230.576963][ T6019] device batadv0 entered promiscuous mode [ 230.626306][ T6017] syz.2.737 (6017) used greatest stack depth: 19576 bytes left [ 230.651151][ T2989] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.805849][ T26] audit: type=1326 audit(1726606415.692:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa846692ef9 code=0x0 [ 230.917616][ T2989] usb 4-1: Using ep0 maxpacket: 8 [ 233.703011][ T3620] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.771053][ T2989] usb 4-1: unable to read config index 0 descriptor/all [ 233.778041][ T2989] usb 4-1: can't read configurations, error -71 [ 233.799179][ T6023] delete_channel: no stack [ 236.086594][ T6049] device syz_tun entered promiscuous mode [ 236.173361][ T6049] device macvtap1 entered promiscuous mode [ 236.186733][ T6060] binder: 6055:6060 ioctl 4020ae46 20000180 returned -22 [ 236.209443][ T6049] device syz_tun left promiscuous mode [ 237.691161][ T3843] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 237.789082][ T3620] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 237.993695][ T26] audit: type=1326 audit(1726606422.882:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.015794][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.022245][ T3843] usb 2-1: Using ep0 maxpacket: 8 [ 238.051025][ T26] audit: type=1326 audit(1726606422.922:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.134066][ T26] audit: type=1326 audit(1726606422.922:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.159332][ T26] audit: type=1326 audit(1726606422.922:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.183281][ T26] audit: type=1326 audit(1726606422.922:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.207716][ T26] audit: type=1326 audit(1726606422.922:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.231516][ T26] audit: type=1326 audit(1726606423.022:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.253658][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.287319][ T6099] tipc: Can't bind to reserved service type 0 [ 238.296955][ T26] audit: type=1326 audit(1726606423.022:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7456d7def9 code=0x7ffc0000 [ 238.319030][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.331094][ T3843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 238.342913][ T3843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.351436][ T3843] usb 2-1: Product: syz [ 238.356037][ T3843] usb 2-1: Manufacturer: syz [ 238.360836][ T3843] usb 2-1: SerialNumber: syz [ 238.365729][ T3620] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 238.381249][ T3628] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 238.382415][ T3620] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.402786][ T3843] usb 2-1: config 0 descriptor?? [ 238.521552][ T3620] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 238.536271][ T3620] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 238.544853][ T3620] usb 4-1: Manufacturer: syz [ 238.557496][ T3620] usb 4-1: SerialNumber: syz [ 238.661110][ T3843] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.811789][ T3628] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 238.828291][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.869618][ T3628] usb 5-1: config 0 descriptor?? [ 238.913108][ T3628] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 239.004397][ T3620] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 239.030408][ T3620] usb 4-1: USB disconnect, device number 28 [ 239.114081][ T26] audit: type=1326 audit(1726606424.002:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7456d7dafb code=0x7ffc0000 [ 239.136068][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.181072][ T26] audit: type=1326 audit(1726606424.002:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7456d7dafb code=0x7ffc0000 [ 239.203145][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.657296][ T3628] usb 5-1: USB disconnect, device number 21 [ 239.792238][ T3619] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.405580][ T3619] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.426864][ T3619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.462818][ T3619] usb 3-1: Product: syz [ 240.480470][ T3619] usb 3-1: Manufacturer: syz [ 240.496452][ T3619] usb 3-1: SerialNumber: syz [ 240.572485][ T3619] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 240.591251][ T3843] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 240.611745][ T3843] usb 2-1: USB disconnect, device number 26 [ 241.061065][ T5211] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 241.348498][ T5211] usb 1-1: Using ep0 maxpacket: 32 [ 242.342948][ T3628] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 244.202674][ T3628] usb 3-1: ath9k_htc: USB layer deinitialized [ 244.293769][ T3620] usb 3-1: USB disconnect, device number 17 [ 244.321128][ T5211] usb 1-1: device descriptor read/all, error -71 [ 244.476010][ T6159] device macvtap2 entered promiscuous mode [ 244.731062][ T3731] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 244.926056][ T6171] device vlan3 entered promiscuous mode [ 245.121149][ T3731] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 245.140579][ T3731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.166215][ T3731] usb 2-1: config 0 descriptor?? [ 245.823850][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'. [ 245.877587][ T6184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 245.941773][ T6184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 248.261145][ T3731] pegasus 2-1:0.0: can't reset MAC [ 248.267498][ T3731] pegasus: probe of 2-1:0.0 failed with error -5 [ 248.302811][ T3731] usb 2-1: USB disconnect, device number 27 [ 248.382839][ T6209] device vlan3 entered promiscuous mode [ 248.466163][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 248.704390][ T6217] device syz_tun entered promiscuous mode [ 248.714564][ T6217] device macvtap1 entered promiscuous mode [ 248.778258][ T6217] device syz_tun left promiscuous mode [ 250.191578][ T3628] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 252.185915][ T6247] loop9: detected capacity change from 0 to 7 [ 252.201222][ T6242] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 252.223142][ T6246] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 252.224642][ T6247] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 252.261081][ T6247] loop9: partition table partially beyond EOD, truncated [ 252.428612][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 252.446725][ T6269] device vlan2 entered promiscuous mode [ 252.466805][ T6247] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 252.551111][ T3628] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 252.576753][ T3628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.635507][ T3628] usb 1-1: config 0 descriptor?? [ 252.721111][ T3628] usb 1-1: can't set config #0, error -71 [ 252.740753][ T3628] usb 1-1: USB disconnect, device number 22 [ 252.969584][ T6284] device syz_tun entered promiscuous mode [ 252.975688][ T6284] device macvtap1 entered promiscuous mode [ 253.081732][ T6284] device syz_tun left promiscuous mode [ 253.201060][ T3628] Bluetooth: hci1: command 0x0406 tx timeout [ 253.289179][ T6292] device bond_slave_0 entered promiscuous mode [ 253.295428][ T6292] device bond_slave_1 entered promiscuous mode [ 253.327766][ T6292] device bond_slave_0 left promiscuous mode [ 253.333802][ T6292] device bond_slave_1 left promiscuous mode [ 254.498021][ T3628] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 254.772690][ T6312] binder: 6307:6312 ioctl 4020ae46 20000180 returned -22 [ 254.959824][ T3628] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 255.612513][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.618974][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.356532][ T3628] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 257.388164][ T3628] usb 1-1: can't read configurations, error -71 [ 257.440992][ T3620] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 257.451009][ T5211] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 257.458889][ T3620] Bluetooth: hci1: Injecting HCI hardware error event [ 257.493331][ T3591] Bluetooth: hci1: hardware error 0x00 [ 257.771052][ T5211] usb 4-1: Using ep0 maxpacket: 16 [ 257.810984][ T3628] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 257.891175][ T5211] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.909586][ T5211] usb 4-1: config 0 has no interface number 0 [ 258.081147][ T3628] usb 1-1: Using ep0 maxpacket: 32 [ 258.081281][ T5211] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 258.125464][ T5211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.156546][ T5211] usb 4-1: Product: syz [ 258.160733][ T5211] usb 4-1: Manufacturer: syz [ 258.192439][ T5211] usb 4-1: SerialNumber: syz [ 258.211254][ T3628] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 258.218119][ T5211] usb 4-1: config 0 descriptor?? [ 258.227517][ T3628] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 258.275134][ T3628] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 258.300602][ T5211] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 258.321176][ T3628] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 258.365598][ T3628] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 258.408644][ T3628] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.596838][ T3628] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 258.606164][ T3628] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 258.620575][ T3628] usb 1-1: Product: syz [ 258.625550][ T3628] usb 1-1: Manufacturer: syz [ 258.630206][ T3628] usb 1-1: SerialNumber: syz [ 258.643219][ T3628] usb 1-1: config 0 descriptor?? [ 258.671597][ T6328] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.692661][ T3628] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 258.722141][ T3628] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 260.261691][ T5211] gspca_spca1528: reg_w err -110 [ 260.471047][ T5211] spca1528: probe of 4-1:0.1 failed with error -110 [ 260.498154][ T5211] usb 4-1: USB disconnect, device number 29 [ 260.612586][ T6346] device syz_tun entered promiscuous mode [ 262.190354][ T6346] device macvtap1 entered promiscuous mode [ 262.226637][ T6346] device syz_tun left promiscuous mode [ 262.247899][ T4660] usb 1-1: USB disconnect, device number 24 [ 262.287933][ T4660] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 262.445776][ T6348] device bond_slave_0 entered promiscuous mode [ 262.452011][ T6348] device bond_slave_1 entered promiscuous mode [ 262.721417][ T3628] Bluetooth: hci0: command 0x0406 tx timeout [ 263.190551][ T6348] device bond_slave_0 left promiscuous mode [ 263.196558][ T6348] device bond_slave_1 left promiscuous mode [ 265.279145][ T3843] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 268.830547][ T2989] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 269.049458][ T6395] device syz_tun entered promiscuous mode [ 269.069553][ T6395] device macvtap1 entered promiscuous mode [ 269.161003][ T2989] usb 1-1: Using ep0 maxpacket: 32 [ 269.167627][ T6395] device syz_tun left promiscuous mode [ 269.341119][ T2989] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 269.349753][ T2989] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 269.384528][ T2989] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 269.425953][ T2989] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 269.457299][ T2989] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 269.493853][ T2989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.571055][ T2989] usb 1-1: string descriptor 0 read error: -71 [ 269.577515][ T2989] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 269.604358][ T2989] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 269.653078][ T2989] usb 1-1: config 0 descriptor?? [ 269.730411][ T2989] usb 1-1: can't set config #0, error -71 [ 269.750646][ T2989] usb 1-1: USB disconnect, device number 25 [ 270.716576][ T6396] chnl_net:caif_netlink_parms(): no params data found [ 271.287410][ T2989] Bluetooth: hci3: command 0x0409 tx timeout [ 273.249330][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.257351][ T7] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 273.291680][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.336736][ T6396] device bridge_slave_0 entered promiscuous mode [ 273.355863][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.369140][ T2989] Bluetooth: hci3: command 0x041b tx timeout [ 273.392606][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.427823][ T6396] device bridge_slave_1 entered promiscuous mode [ 273.513087][ T6396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.552467][ T6396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.645404][ T6396] team0: Port device team_slave_0 added [ 273.661128][ T7] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 273.677189][ T6396] team0: Port device team_slave_1 added [ 273.683609][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.728059][ T7] usb 1-1: config 0 descriptor?? [ 273.808443][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.851006][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.959762][ T6396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.009127][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.047090][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.134763][ T6396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.175081][ T7] pegasus: probe of 1-1:0.0 failed with error -32 [ 276.170776][ T2989] Bluetooth: hci3: command 0x040f tx timeout [ 276.258231][ T2989] Bluetooth: hci4: command 0x0409 tx timeout [ 276.354908][ T6396] device hsr_slave_0 entered promiscuous mode [ 276.371984][ T6396] device hsr_slave_1 entered promiscuous mode [ 276.391161][ T6396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.402219][ T6396] Cannot create hsr debugfs directory [ 276.560318][ T7] usb 1-1: USB disconnect, device number 26 [ 276.729759][ T6396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.809636][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 276.839001][ T6396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.944060][ T6396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.065316][ T6461] device syz_tun entered promiscuous mode [ 277.081463][ T6461] device macvtap1 entered promiscuous mode [ 277.095887][ T6461] device syz_tun left promiscuous mode [ 277.142092][ T6396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.234082][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.263056][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.310213][ T6436] device bridge_slave_0 entered promiscuous mode [ 277.338325][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.347962][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.359160][ T6436] device bridge_slave_1 entered promiscuous mode [ 277.426715][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.449403][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.536671][ T6436] team0: Port device team_slave_0 added [ 277.570140][ T6436] team0: Port device team_slave_1 added [ 277.660009][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.673634][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.710160][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.737191][ T6396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.771302][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.780846][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.806772][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.832610][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.878012][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.898678][ T6396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.925440][ T6396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.989424][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.031512][ T6396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.048533][ T6436] device hsr_slave_0 entered promiscuous mode [ 278.065088][ T6436] device hsr_slave_1 entered promiscuous mode [ 278.095627][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.273174][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 279.191967][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 280.234271][ T6436] Cannot create hsr debugfs directory [ 280.287832][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.216993][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.255588][ T2989] Bluetooth: hci4: command 0x040f tx timeout [ 282.527749][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.566322][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.594040][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.634537][ T6396] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.661290][ T2989] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 282.796511][ T144] tipc: Disabling bearer [ 282.811910][ T144] tipc: Left network mode [ 282.811984][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.812596][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.899900][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.907032][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.933914][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.948269][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.960786][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.975606][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.982735][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.000797][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.033140][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.041654][ T2989] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 283.058556][ T2989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.073542][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.094370][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.109217][ T2989] usb 1-1: config 0 descriptor?? [ 283.138374][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.155936][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.177337][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.213573][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.226979][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.330221][ T6396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.350397][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.358728][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.378162][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.640193][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.658027][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.705721][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.767111][ T6436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.814792][ T6436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.824911][ T6436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.845556][ T6436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.942622][ T6526] device macvtap2 entered promiscuous mode [ 284.183425][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.203927][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.265496][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.321502][ T3619] Bluetooth: hci4: command 0x0419 tx timeout [ 284.345264][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.357441][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.368198][ T6396] device veth0_vlan entered promiscuous mode [ 284.395170][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.405337][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.448852][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.457853][ T6396] device veth1_vlan entered promiscuous mode [ 284.467386][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.476743][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.504851][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.515009][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.529606][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.536707][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.551895][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.560888][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.575068][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.582164][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.595043][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.618618][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.629097][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.638834][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.654824][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.682528][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.703059][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.728489][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.738110][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.750445][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.767460][ T6396] device veth0_macvtap entered promiscuous mode [ 284.787625][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.809199][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.820696][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.836180][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.850837][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.872697][ T6396] device veth1_macvtap entered promiscuous mode [ 286.186353][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.195244][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.163830][ T2989] pegasus 1-1:0.0: setup Pegasus II specific registers [ 287.172895][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.229703][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.257405][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.270705][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.282833][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.293907][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.306337][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.317093][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.328470][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.340275][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.351632][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.368950][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.443556][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.458744][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.521980][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.563262][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.687410][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.698169][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.701106][ T2989] pegasus 1-1:0.0: can't locate MII phy, using default [ 287.708527][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.726788][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.736808][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.749843][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.761789][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.792628][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.831423][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.873399][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.882936][ T2989] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ae:6b:25:3f:b3:8f [ 287.914184][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.965939][ T2989] usb 1-1: USB disconnect, device number 27 [ 288.045978][ T6396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.062522][ T6396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.085142][ T6396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.109498][ T6396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.187061][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.207191][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.261964][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.347033][ T144] device hsr_slave_0 left promiscuous mode [ 288.365811][ T144] device hsr_slave_1 left promiscuous mode [ 288.398939][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.449470][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.498012][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.517345][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.535994][ T144] device dummy0 left promiscuous mode [ 288.543463][ T144] bridge0: port 3(dummy0) entered disabled state [ 288.561422][ T144] device bridge_slave_1 left promiscuous mode [ 288.567636][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.621578][ T144] device bridge_slave_0 left promiscuous mode [ 288.658757][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.698807][ T144] device hsr_slave_0 left promiscuous mode [ 288.720330][ T144] device hsr_slave_1 left promiscuous mode [ 288.729969][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.383534][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.412967][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.420510][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.442715][ T144] device dummy0 left promiscuous mode [ 290.448206][ T144] bridge0: port 3(dummy0) entered disabled state [ 290.510587][ T144] device bridge_slave_1 left promiscuous mode [ 290.541368][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.559172][ T144] device bridge_slave_0 left promiscuous mode [ 290.571618][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.621578][ T144] device bridge0 left promiscuous mode [ 290.645166][ T144] device veth1_macvtap left promiscuous mode [ 290.670231][ T144] device veth0_macvtap left promiscuous mode [ 290.679441][ T144] device veth1_vlan left promiscuous mode [ 290.710968][ T144] device veth0_vlan left promiscuous mode [ 290.732768][ T144] device veth1_macvtap left promiscuous mode [ 290.747372][ T144] device veth0_macvtap left promiscuous mode [ 290.768109][ T144] device veth1_vlan left promiscuous mode [ 290.786391][ T144] device veth0_vlan left promiscuous mode [ 291.430181][ T144] team0 (unregistering): Port device vlan2 removed [ 291.605200][ T144] team0 (unregistering): Port device team_slave_1 removed [ 291.623173][ T144] team0 (unregistering): Port device team_slave_0 removed [ 291.645192][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.742523][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.816612][ T144] bond0 (unregistering): Released all slaves [ 294.011415][ T144] team0 (unregistering): Port device team_slave_1 removed [ 294.035175][ T144] team0 (unregistering): Port device team_slave_0 removed [ 294.051032][ T3623] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 294.065798][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.088695][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.421198][ T3623] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 294.462346][ T3623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.480487][ T3623] usb 1-1: config 0 descriptor?? [ 294.566560][ T144] bond0 (unregistering): Released all slaves [ 294.642964][ T6598] device macvtap2 entered promiscuous mode [ 294.725788][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.745862][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.768648][ T6436] device veth0_vlan entered promiscuous mode [ 294.798806][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.820706][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.839407][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.866897][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.905878][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.920776][ T6436] device veth1_vlan entered promiscuous mode [ 294.963718][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.039283][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.048729][ T4555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.065438][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.076140][ T4555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.094412][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.112823][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.126506][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.140108][ T4118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.163582][ T6436] device veth0_macvtap entered promiscuous mode [ 295.222737][ T6436] device veth1_macvtap entered promiscuous mode [ 296.244168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.256850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.326247][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.378734][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.281233][ T3623] pegasus 1-1:0.0: can't reset MAC [ 299.286482][ T3623] pegasus: probe of 1-1:0.0 failed with error -5 [ 299.301719][ T3623] usb 1-1: USB disconnect, device number 28 [ 299.332178][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.342914][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.352786][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.363890][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.373870][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.385631][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.397075][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.418099][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.455728][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.563187][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.576004][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.587169][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.598212][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.730334][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.744584][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.761082][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.780002][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.800061][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.819180][ T6436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.847545][ T6436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.880970][ T6436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.912072][ T6436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.999850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.039316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.461783][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.488307][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.506189][ T6673] device macvtap2 entered promiscuous mode [ 302.604287][ T4117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.656444][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.681082][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.783701][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.231322][ T3619] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 304.776731][ T3619] usb 4-1: Using ep0 maxpacket: 32 [ 304.921361][ T3619] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 304.941553][ T3619] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 304.986349][ T3619] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.020974][ T3619] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 305.055324][ T3619] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.097217][ T3619] usb 4-1: config 0 interface 0 has no altsetting 0 [ 305.612413][ T3628] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 305.845720][ T3619] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 306.254701][ T3619] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 306.298271][ T3619] usb 4-1: Product: syz [ 306.316402][ T3619] usb 4-1: Manufacturer: syz [ 306.368114][ T3619] usb 4-1: SerialNumber: syz [ 306.400135][ T3619] usb 4-1: config 0 descriptor?? [ 306.408996][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 306.463783][ T3619] usb 4-1: can't set config #0, error -71 [ 306.494700][ T3619] usb 4-1: USB disconnect, device number 30 [ 306.641211][ T3628] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 306.669176][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.673523][ T6716] device syz_tun entered promiscuous mode [ 306.683797][ T6716] device macvtap1 entered promiscuous mode [ 306.723886][ T3628] usb 5-1: config 0 descriptor?? [ 306.730155][ T6716] device syz_tun left promiscuous mode [ 308.610608][ T3628] pegasus: probe of 5-1:0.0 failed with error -110 [ 309.017615][ T3628] usb 5-1: USB disconnect, device number 22 [ 309.862653][ T3619] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 310.370999][ T3619] usb 2-1: Using ep0 maxpacket: 32 [ 310.530212][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 310.536016][ T3619] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 310.586346][ T3619] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 310.616557][ T3619] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.647953][ T3619] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 310.678171][ T3619] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.715498][ T3619] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.901182][ T3619] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.915234][ T3619] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 310.932664][ T3619] usb 2-1: Product: syz [ 310.942467][ T3619] usb 2-1: Manufacturer: syz [ 310.981842][ T3619] usb 2-1: SerialNumber: syz [ 311.002623][ T3619] usb 2-1: config 0 descriptor?? [ 311.051305][ T6738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.301243][ T3619] usb 2-1: can't set config #0, error -71 [ 312.310368][ T3619] usb 2-1: USB disconnect, device number 29 [ 312.350506][ T6763] device macvtap2 entered promiscuous mode [ 312.741145][ T3843] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 313.111309][ T3843] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 313.134281][ T3843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.241700][ T3843] usb 5-1: config 0 descriptor?? [ 315.620962][ T3628] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 315.724869][ T6815] device macvtap2 entered promiscuous mode [ 315.960960][ T3628] usb 4-1: Using ep0 maxpacket: 32 [ 316.086389][ T3628] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 316.109772][ T3628] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 316.146028][ T3628] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 316.227918][ T3628] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 316.288922][ T3628] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 316.343858][ T3628] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.361407][ T3843] pegasus 5-1:0.0: can't reset MAC [ 316.367483][ T3843] pegasus: probe of 5-1:0.0 failed with error -5 [ 316.577320][ T3628] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 316.596837][ T3628] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 316.616548][ T3628] usb 4-1: Product: syz [ 316.631400][ T3628] usb 4-1: Manufacturer: syz [ 316.640550][ T3628] usb 4-1: SerialNumber: syz [ 316.668819][ T3628] usb 4-1: config 0 descriptor?? [ 316.691359][ T6802] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 316.718096][ T3628] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 316.751355][ T3628] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 316.966330][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.972814][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.102417][ T3628] usb 4-1: USB disconnect, device number 31 [ 318.235139][ T3628] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 318.335167][ T3623] usb 5-1: USB disconnect, device number 23 [ 318.985199][ T6865] device syz_tun entered promiscuous mode [ 318.993915][ T6865] device macvtap1 entered promiscuous mode [ 319.161730][ T6865] device syz_tun left promiscuous mode [ 320.281030][ T3843] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.501135][ T3623] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 320.531165][ T3843] usb 2-1: Using ep0 maxpacket: 32 [ 320.651141][ T3843] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 320.662818][ T3843] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 320.692827][ T3843] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.227405][ T3843] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.241250][ T3623] usb 4-1: Using ep0 maxpacket: 32 [ 322.252099][ T3843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.361290][ T3623] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 322.381296][ T3623] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 322.421326][ T3843] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.436662][ T3623] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.471007][ T3843] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.509944][ T3843] usb 2-1: Product: syz [ 322.516682][ T3623] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 322.537835][ T3843] usb 2-1: Manufacturer: syz [ 322.543253][ T3843] usb 2-1: SerialNumber: syz [ 322.562287][ T3843] usb 2-1: config 0 descriptor?? [ 322.567344][ T3623] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.604276][ T3623] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.632187][ T3843] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.652357][ T3843] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 322.662273][ T6893] sctp: [Deprecated]: syz.0.972 (pid 6893) Use of int in max_burst socket option. [ 322.662273][ T6893] Use struct sctp_assoc_value instead [ 322.801179][ T3623] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.817117][ T3623] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.826977][ T3623] usb 4-1: Product: syz [ 322.833470][ T3623] usb 4-1: Manufacturer: syz [ 322.840548][ T3623] usb 4-1: SerialNumber: syz [ 322.852642][ T3623] usb 4-1: config 0 descriptor?? [ 322.859741][ T3843] usb 2-1: USB disconnect, device number 30 [ 322.865755][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 322.872919][ T6876] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 322.884069][ T3843] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 322.892097][ T3623] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.914136][ T3623] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 323.053357][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 323.053373][ T26] audit: type=1326 audit(1726606507.942:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4334ffef9 code=0x0 [ 323.271463][ T3843] usb 4-1: USB disconnect, device number 32 [ 323.293742][ T3843] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 323.487211][ T26] audit: type=1326 audit(1726606508.372:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.0.974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e18dedef9 code=0x0 [ 323.508747][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.530788][ T6905] device macvtap2 entered promiscuous mode [ 331.918517][ T6964] dccp_close: ABORT with 64 bytes unread [ 332.450969][ T3731] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 332.701025][ T3731] usb 1-1: Using ep0 maxpacket: 8 [ 332.821739][ T3731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.841327][ T3731] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.884542][ T3731] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 332.913765][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.939764][ T3731] usb 1-1: config 0 descriptor?? [ 332.993163][ T3731] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 333.195262][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 337.380148][ T3628] usb 1-1: USB disconnect, device number 29 [ 337.517751][ T7014] device macvtap2 entered promiscuous mode [ 337.788391][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 337.825353][ T7026] binder: 7021:7026 ioctl 4020ae46 20000180 returned -22 [ 337.838872][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 338.090965][ T3628] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 338.150367][ T26] audit: type=1326 audit(1726606523.032:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.4.1016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0047fffef9 code=0x0 [ 338.401290][ T3628] usb 4-1: Using ep0 maxpacket: 32 [ 338.541705][ T3628] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 338.562316][ T3628] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 338.580380][ T3628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.603456][ T3628] usb 4-1: config 0 descriptor?? [ 338.636064][ T7027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 338.665255][ T3628] hub 4-1:0.0: bad descriptor, ignoring hub [ 338.681446][ T3628] hub: probe of 4-1:0.0 failed with error -5 [ 338.702937][ T3628] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 342.786793][ T3620] usb 4-1: USB disconnect, device number 33 [ 342.917367][ T7072] binder: 7067:7072 ioctl 4020ae46 20000180 returned -22 [ 343.085024][ T7081] device syz_tun entered promiscuous mode [ 343.091273][ T7081] device macvtap1 entered promiscuous mode [ 343.115853][ T7081] device syz_tun left promiscuous mode [ 343.550977][ T3619] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 343.812672][ T3619] usb 1-1: Using ep0 maxpacket: 8 [ 343.932838][ T3619] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 344.268704][ T3619] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.586704][ T3619] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.658495][ T3619] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.742474][ T3619] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.794437][ T3619] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.228892][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.191288][ T3619] usb 1-1: can't set config #16, error -71 [ 346.201132][ T7096] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 346.300028][ T3619] usb 1-1: USB disconnect, device number 30 [ 347.756283][ T7115] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 347.775243][ T7118] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 347.835142][ T7115] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 347.887042][ T7120] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 347.945646][ T7124] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 347.982672][ T7115] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 348.017170][ T7115] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 348.071945][ T7120] netlink: 'syz.2.1040': attribute type 29 has an invalid length. [ 348.631038][ T3622] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 348.692108][ T3623] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 348.920969][ T3622] usb 1-1: Using ep0 maxpacket: 32 [ 348.941130][ T3623] usb 5-1: Using ep0 maxpacket: 8 [ 349.041033][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 349.060196][ T7146] device vlan2 entered promiscuous mode [ 349.074177][ T3623] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.107843][ T3623] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.134795][ T3623] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.164528][ T3623] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.204288][ T3623] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.243150][ T3623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.337754][ T3622] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 349.402909][ T3622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.441155][ T3622] usb 1-1: Product: syz [ 349.467025][ T3622] usb 1-1: Manufacturer: syz [ 349.504981][ T3622] usb 1-1: SerialNumber: syz [ 349.542431][ T3623] usb 5-1: GET_CAPABILITIES returned 0 [ 349.550650][ T3623] usbtmc 5-1:16.0: can't read capabilities [ 349.563118][ T3622] usb 1-1: config 0 descriptor?? [ 349.685920][ T3622] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 349.755304][ T7134] udc-core: couldn't find an available UDC or it's busy [ 349.767079][ T7134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.841526][ T3843] usb 5-1: USB disconnect, device number 24 [ 349.848828][ T7134] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 350.098595][ T7163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 350.731037][ T2677] usb 1-1: Failed to submit usb control message: -110 [ 350.744143][ T2677] usb 1-1: unable to send the bmi data to the device: -110 [ 350.765256][ T2677] usb 1-1: unable to get target info from device [ 350.783267][ T2677] usb 1-1: could not get target info (-110) [ 350.789741][ T2677] usb 1-1: could not probe fw (-110) [ 351.097269][ T3731] usb 1-1: USB disconnect, device number 31 [ 351.669077][ T7187] device macvtap2 entered promiscuous mode [ 352.244426][ T7199] xt_socket: unknown flags 0x50 [ 352.272687][ T7199] loop0: detected capacity change from 0 to 127 [ 352.360379][ T26] audit: type=1326 audit(1726606537.242:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.2.1066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa846692ef9 code=0x0 [ 353.353839][ T7229] device macvtap2 entered promiscuous mode [ 353.672078][ T7237] device bond_slave_0 entered promiscuous mode [ 353.678275][ T7237] device bond_slave_1 entered promiscuous mode [ 353.708495][ T7237] device bond_slave_0 left promiscuous mode [ 353.714470][ T7237] device bond_slave_1 left promiscuous mode [ 354.169549][ T26] audit: type=1326 audit(1726606539.052:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.4.1086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0047fffef9 code=0x0 [ 354.191281][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.234430][ T7255] misc userio: Begin command sent, but we're already running [ 354.509383][ T7262] device macvtap2 entered promiscuous mode [ 355.977821][ T26] audit: type=1326 audit(1726606540.862:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.0.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e18dedef9 code=0x0 [ 360.858267][ T7371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.993467][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1125'. [ 362.071196][ T7402] device macvtap2 entered promiscuous mode [ 362.381448][ T7418] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 362.387988][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 362.412335][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 362.429745][ T7420] vhci_hcd: connection closed [ 362.430071][ T3777] vhci_hcd: stop threads [ 362.452084][ T3777] vhci_hcd: release socket [ 362.488799][ T3777] vhci_hcd: disconnect device [ 362.604347][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 363.738852][ T7445] device syz_tun entered promiscuous mode [ 363.779685][ T7445] device macvtap1 entered promiscuous mode [ 363.831753][ T7445] device syz_tun left promiscuous mode [ 363.844199][ T26] audit: type=1326 audit(1726606548.732:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922bec6ef9 code=0x0 [ 363.865827][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.099955][ T7460] binder: 7455:7460 ioctl 4020ae46 20000180 returned -22 [ 364.769843][ T7485] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 369.663424][ T7507] device bond_slave_0 entered promiscuous mode [ 369.669683][ T7507] device bond_slave_1 entered promiscuous mode [ 369.691431][ T7507] device bond_slave_0 left promiscuous mode [ 369.697392][ T7507] device bond_slave_1 left promiscuous mode [ 369.736637][ T7510] device macvtap2 entered promiscuous mode [ 369.752641][ T3591] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 369.765168][ T3591] CPU: 0 PID: 3591 Comm: kworker/u5:7 Not tainted 5.15.167-syzkaller #0 [ 369.773510][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 369.783565][ T3591] Workqueue: hci4 hci_rx_work [ 369.788263][ T3591] Call Trace: [ 369.791541][ T3591] [ 369.794467][ T3591] dump_stack_lvl+0x1e3/0x2d0 [ 369.799146][ T3591] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 369.804780][ T3591] ? panic+0x860/0x860 [ 369.808857][ T3591] ? sysfs_create_dir_ns+0x282/0x390 [ 369.814150][ T3591] sysfs_create_dir_ns+0x2c6/0x390 [ 369.819274][ T3591] ? sysfs_warn_dup+0xa0/0xa0 [ 369.823951][ T3591] ? do_raw_spin_unlock+0x137/0x8b0 [ 369.829157][ T3591] kobject_add_internal+0x6e0/0xe00 [ 369.834363][ T3591] kobject_add+0x14e/0x210 [ 369.838781][ T3591] ? device_add+0x3c2/0xfd0 [ 369.843301][ T3591] ? kobject_init+0x1d0/0x1d0 [ 369.847982][ T3591] ? __raw_spin_lock_init+0x41/0x100 [ 369.853266][ T3591] ? get_device_parent+0x128/0x400 [ 369.858384][ T3591] device_add+0x476/0xfd0 [ 369.862732][ T3591] hci_conn_add_sysfs+0xe4/0x1f0 [ 369.867671][ T3591] le_conn_complete_evt+0xc15/0x1500 [ 369.872966][ T3591] ? cs_le_create_conn+0x5f0/0x5f0 [ 369.878088][ T3591] hci_le_meta_evt+0xd86/0x3f50 [ 369.882941][ T3591] ? __lock_acquire+0x1ff0/0x1ff0 [ 369.887966][ T3591] ? __mutex_lock_common+0x444/0x25a0 [ 369.893346][ T3591] ? hci_remote_host_features_evt+0x280/0x280 [ 369.899411][ T3591] ? __mutex_unlock_slowpath+0x218/0x750 [ 369.905050][ T3591] ? hci_event_packet+0x3b4/0x1550 [ 369.910163][ T3591] ? mutex_unlock+0x10/0x10 [ 369.914671][ T3591] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 369.920653][ T3591] ? print_irqtrace_events+0x210/0x210 [ 369.926113][ T3591] hci_event_packet+0xc41/0x1550 [ 369.931061][ T3591] ? rcu_lock_release+0x20/0x20 [ 369.935919][ T3591] ? hci_send_to_monitor+0x99/0x4d0 [ 369.941120][ T3591] hci_rx_work+0x232/0x990 [ 369.945548][ T3591] process_one_work+0x8a1/0x10c0 [ 369.950507][ T3591] ? worker_detach_from_pool+0x260/0x260 [ 369.956143][ T3591] ? _raw_spin_lock_irqsave+0x120/0x120 [ 369.961690][ T3591] ? kthread_data+0x4e/0xc0 [ 369.966197][ T3591] ? wq_worker_running+0x97/0x170 [ 369.971223][ T3591] worker_thread+0xaca/0x1280 [ 369.975900][ T3591] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 369.981798][ T3591] kthread+0x3f6/0x4f0 [ 369.985843][ T3591] ? rcu_lock_release+0x20/0x20 [ 369.990672][ T3591] ? kthread_blkcg+0xd0/0xd0 [ 369.995260][ T3591] ret_from_fork+0x1f/0x30 [ 369.999661][ T3591] [ 370.011564][ T3591] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 370.025939][ T3591] Bluetooth: hci4: failed to register connection device [ 370.171009][ T7517] binder: 7515:7517 ioctl 4020ae46 20000180 returned -22 [ 370.211892][ T26] audit: type=1326 audit(1726606555.102:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922bec6ef9 code=0x0 [ 370.621940][ T3731] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 370.689579][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1176'. [ 371.001120][ T3731] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.013533][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.077654][ T3731] usb 1-1: config 0 descriptor?? [ 371.391168][ T3731] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 371.413381][ T3731] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 371.460995][ T3731] [drm:udl_init] *ERROR* Selecting channel failed [ 371.648391][ T3731] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 371.656387][ T3731] [drm] Initialized udl on minor 2 [ 371.658873][ T7558] device macvtap2 entered promiscuous mode [ 371.690977][ T3731] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 371.706074][ T3731] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 371.717870][ T3731] usb 1-1: USB disconnect, device number 32 [ 371.731008][ T2989] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 372.008365][ T7573] binder: 7569:7573 ioctl 4020ae46 20000180 returned -22 [ 372.020947][ T2989] usb 2-1: Using ep0 maxpacket: 8 [ 372.129502][ T26] audit: type=1326 audit(1726606557.012:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7574 comm="syz.2.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa846692ef9 code=0x0 [ 372.211072][ T2989] usb 2-1: config 0 has no interfaces? [ 372.401607][ T2989] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 372.422729][ T2989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.440485][ T2989] usb 2-1: Product: syz [ 372.449424][ T2989] usb 2-1: Manufacturer: syz [ 372.491018][ T2989] usb 2-1: SerialNumber: syz [ 372.528330][ T2989] usb 2-1: config 0 descriptor?? [ 372.793986][ T7549] udc-core: couldn't find an available UDC or it's busy [ 372.817132][ T7549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.848196][ T7595] device syz_tun entered promiscuous mode [ 372.861823][ T7549] udc-core: couldn't find an available UDC or it's busy [ 372.869507][ T7595] device macvtap1 entered promiscuous mode [ 372.891586][ T7549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.905905][ T7595] device syz_tun left promiscuous mode [ 372.937085][ T7549] udc-core: couldn't find an available UDC or it's busy [ 372.974621][ T7549] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.000821][ T3619] usb 2-1: USB disconnect, device number 31 [ 373.109203][ T7604] binder: 7602:7604 ioctl 4020ae46 20000180 returned -22 [ 374.161939][ T26] audit: type=1326 audit(1726606559.052:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0047fffef9 code=0x0 [ 374.341629][ T3731] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 374.540966][ T3731] usb 2-1: device descriptor read/64, error -71 [ 374.691002][ T2989] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 374.810933][ T3731] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 374.960961][ T2989] usb 3-1: Using ep0 maxpacket: 8 [ 375.011167][ T3731] usb 2-1: device descriptor read/64, error -71 [ 375.106043][ T2989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 375.120923][ T2989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.141318][ T3731] usb usb2-port1: attempt power cycle [ 375.145556][ T2989] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 375.261419][ T2989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 375.274604][ T2989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.287852][ T2989] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 375.391132][ T2989] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 375.402964][ T2989] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 375.416715][ T2989] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 375.550994][ T3731] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 375.641262][ T3731] usb 2-1: device descriptor read/8, error -71 [ 375.711110][ T2989] usb 3-1: string descriptor 0 read error: -22 [ 375.717715][ T2989] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 375.727899][ T2989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.783903][ T2989] adutux 3-1:168.0: interrupt endpoints not found [ 375.911041][ T3731] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 375.993096][ T13] usb 3-1: USB disconnect, device number 18 [ 376.008192][ T3731] usb 2-1: device descriptor read/8, error -71 [ 376.031040][ T3622] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 379.071202][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.077501][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.090140][ T3731] usb usb2-port1: unable to enumerate USB device [ 379.957612][ T26] audit: type=1326 audit(1726606564.842:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.0.1229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e18dedef9 code=0x0 [ 380.061084][ T3622] usb 1-1: device not accepting address 33, error -71 [ 381.001106][ T3619] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 381.401452][ T3619] usb 5-1: Using ep0 maxpacket: 8 [ 382.178979][ T7717] binder: 7712:7717 ioctl 4020ae46 20000180 returned -22 [ 382.281330][ T3619] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.370668][ T3619] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.400559][ T3619] usb 5-1: config 0 interface 0 has no altsetting 0 [ 382.419917][ T3619] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 382.453092][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.347428][ T3623] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.169532][ T3619] usb 5-1: config 0 descriptor?? [ 384.222587][ T3619] usb 5-1: can't set config #0, error -71 [ 384.243719][ T3731] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 384.245621][ T3619] usb 5-1: USB disconnect, device number 25 [ 387.830981][ T3623] usb 1-1: device descriptor read/64, error -71 [ 388.119204][ T3623] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 388.291064][ T5211] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 388.501133][ T3623] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 388.512425][ T3623] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.531092][ T3623] usb 1-1: config 0 has no interface number 0 [ 388.539147][ T3623] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 388.551063][ T3623] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.564691][ T5211] usb 2-1: Using ep0 maxpacket: 16 [ 388.701076][ T5211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.724910][ T5211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.735115][ T3843] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 388.751235][ T3623] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 388.770446][ T3623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.786529][ T5211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 388.829438][ T3623] usb 1-1: Product: syz [ 388.834088][ T3623] usb 1-1: Manufacturer: syz [ 388.838717][ T5211] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 388.848112][ T3623] usb 1-1: SerialNumber: syz [ 388.855400][ T3623] usb 1-1: config 0 descriptor?? [ 388.860524][ T5211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.888160][ T5211] usb 2-1: config 0 descriptor?? [ 388.932254][ T3843] usb 4-1: device descriptor read/64, error -71 [ 388.971954][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 389.241010][ T3843] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 389.451037][ T3843] usb 4-1: device descriptor read/64, error -71 [ 389.561106][ T3623] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 389.571568][ T3843] usb usb4-port1: attempt power cycle [ 389.590704][ T3623] usb 1-1: USB disconnect, device number 36 [ 389.981082][ T3843] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 390.025368][ T7776] netlink: 'syz.2.1262': attribute type 6 has an invalid length. [ 390.081705][ T3843] usb 4-1: device descriptor read/8, error -71 [ 390.351103][ T3843] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 390.451137][ T3843] usb 4-1: device descriptor read/8, error -71 [ 390.581189][ T3843] usb usb4-port1: unable to enumerate USB device [ 390.761152][ T5211] usbhid 2-1:0.0: can't add hid device: -71 [ 390.774535][ T5211] usbhid: probe of 2-1:0.0 failed with error -71 [ 390.800313][ T5211] usb 2-1: USB disconnect, device number 36 [ 390.966620][ T3622] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.220985][ T5211] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 391.701123][ T3622] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.705757][ T7815] device bond_slave_0 entered promiscuous mode [ 391.712974][ T3622] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.718449][ T7815] device bond_slave_1 entered promiscuous mode [ 391.728292][ T3622] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.735463][ T5211] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 391.750288][ T3622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.754676][ T5211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.771431][ T7817] device bond_slave_0 left promiscuous mode [ 391.777421][ T7817] device bond_slave_1 left promiscuous mode [ 391.790306][ T5211] usb 2-1: config 0 descriptor?? [ 391.811432][ T7791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 392.771774][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 392.853254][ T7833] ------------[ cut here ]------------ [ 392.860298][ T7833] name '50870' [ 392.864089][ T7833] WARNING: CPU: 1 PID: 7833 at fs/proc/generic.c:712 remove_proc_entry+0x2e1/0x5c0 [ 392.883199][ T7833] Modules linked in: [ 392.887957][ T7833] CPU: 1 PID: 7833 Comm: syz.0.1283 Not tainted 5.15.167-syzkaller #0 [ 392.900149][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 392.910568][ T7833] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 392.916462][ T7833] Code: 3f 86 ff eb 05 e8 0f 3f 86 ff 48 8b 5c 24 10 48 c7 c7 c0 b9 a4 8c e8 5e d3 43 08 48 c7 c7 a0 3e 99 8a 48 89 de e8 cf e8 51 ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 392.941117][ T2989] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 392.946716][ T7833] RSP: 0018:ffffc90002e17c20 EFLAGS: 00010246 [ 392.955152][ T5211] pegasus: probe of 2-1:0.0 failed with error -32 [ 392.977546][ T7833] RAX: fc0bc4cf11b4ae00 RBX: ffff888062f7e560 RCX: ffff888025498000 [ 392.986561][ T7833] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 392.994676][ T7833] RBP: ffffc90002e17d10 R08: ffffffff81668a3c R09: ffffed10172267a8 [ 393.003640][ T7833] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888065360500 [ 393.011905][ T7833] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 393.021031][ T7833] FS: 000055556d452500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 393.034199][ T7833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.040816][ T7833] CR2: 00000000200fa000 CR3: 0000000024a78000 CR4: 00000000003506e0 [ 393.041058][ T7833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 393.058387][ T7833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 393.066452][ T7833] Call Trace: [ 393.069760][ T7833] [ 393.072804][ T7833] ? __warn+0x15b/0x300 [ 393.077427][ T7833] ? remove_proc_entry+0x2e1/0x5c0 [ 393.083047][ T7833] ? report_bug+0x1b7/0x2e0 [ 393.087615][ T7833] ? handle_bug+0x3d/0x70 [ 393.101193][ T7833] ? exc_invalid_op+0x16/0x40 [ 393.113262][ T7833] ? asm_exc_invalid_op+0x16/0x20 [ 393.119196][ T7833] ? __wake_up_klogd+0xcc/0x100 [ 393.126230][ T7833] ? remove_proc_entry+0x2e1/0x5c0 [ 393.134613][ T7833] ? __local_bh_enable_ip+0x164/0x1f0 [ 393.140214][ T7833] ? proc_set_user+0x90/0x90 [ 393.146402][ T7833] ? bcm_release+0x1e0/0x860 [ 393.153146][ T7833] ? _local_bh_enable+0xa0/0xa0 [ 393.158654][ T7833] bcm_release+0x244/0x860 [ 393.160926][ T2989] usb 4-1: device descriptor read/64, error -71 [ 393.165173][ T7833] sock_close+0xcd/0x230 [ 393.175943][ T7833] ? sock_mmap+0x90/0x90 [ 393.180603][ T7833] __fput+0x3fe/0x8e0 [ 393.190304][ T7833] task_work_run+0x129/0x1a0 [ 393.205511][ T7833] exit_to_user_mode_loop+0x106/0x130 [ 393.217420][ T7833] exit_to_user_mode_prepare+0xb1/0x140 [ 393.224731][ T7833] syscall_exit_to_user_mode+0x5d/0x240 [ 393.237690][ T7833] do_syscall_64+0x47/0xb0 [ 393.242372][ T7833] ? clear_bhb_loop+0x15/0x70 [ 393.253700][ T7833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.259669][ T7833] RIP: 0033:0x7f6e18dedef9 [ 393.268554][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.293261][ T7833] RSP: 002b:00007ffcf1020538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 393.302227][ T7833] RAX: 0000000000000000 RBX: 00007f6e18fa7a80 RCX: 00007f6e18dedef9 [ 393.310562][ T7833] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 393.319580][ T7833] RBP: 00007f6e18fa7a80 R08: 00007f6e18f92000 R09: 00007ffcf102082f [ 393.327676][ T7833] R10: 00000000003ffcb8 R11: 0000000000000246 R12: 0000000000060162 [ 393.335821][ T7833] R13: 00007ffcf1020640 R14: 0000000000000032 R15: ffffffffffffffff [ 393.343936][ T7833] [ 393.347006][ T7833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.354286][ T7833] CPU: 1 PID: 7833 Comm: syz.0.1283 Not tainted 5.15.167-syzkaller #0 [ 393.362467][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 393.372509][ T7833] Call Trace: [ 393.375778][ T7833] [ 393.378692][ T7833] dump_stack_lvl+0x1e3/0x2d0 [ 393.383387][ T7833] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 393.389116][ T7833] ? panic+0x860/0x860 [ 393.393197][ T7833] ? remove_proc_entry+0x260/0x5c0 [ 393.398295][ T7833] ? remove_proc_entry+0x260/0x5c0 [ 393.403401][ T7833] panic+0x318/0x860 [ 393.407309][ T7833] ? __warn+0x16a/0x300 [ 393.411498][ T7833] ? fb_is_primary_device+0xd0/0xd0 [ 393.416685][ T7833] ? remove_proc_entry+0x2e1/0x5c0 [ 393.421776][ T7833] __warn+0x2b2/0x300 [ 393.425741][ T7833] ? remove_proc_entry+0x2e1/0x5c0 [ 393.430838][ T7833] report_bug+0x1b7/0x2e0 [ 393.435199][ T7833] handle_bug+0x3d/0x70 [ 393.439354][ T7833] exc_invalid_op+0x16/0x40 [ 393.443862][ T7833] asm_exc_invalid_op+0x16/0x20 [ 393.448696][ T7833] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 393.454399][ T7833] Code: 3f 86 ff eb 05 e8 0f 3f 86 ff 48 8b 5c 24 10 48 c7 c7 c0 b9 a4 8c e8 5e d3 43 08 48 c7 c7 a0 3e 99 8a 48 89 de e8 cf e8 51 ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 393.474139][ T7833] RSP: 0018:ffffc90002e17c20 EFLAGS: 00010246 [ 393.480193][ T7833] RAX: fc0bc4cf11b4ae00 RBX: ffff888062f7e560 RCX: ffff888025498000 [ 393.488162][ T7833] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 393.496136][ T7833] RBP: ffffc90002e17d10 R08: ffffffff81668a3c R09: ffffed10172267a8 [ 393.501108][ T2989] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 393.504094][ T7833] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888065360500 [ 393.504111][ T7833] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 393.504130][ T7833] ? __wake_up_klogd+0xcc/0x100 [ 393.532506][ T7833] ? __local_bh_enable_ip+0x164/0x1f0 [ 393.537863][ T7833] ? proc_set_user+0x90/0x90 [ 393.542441][ T7833] ? bcm_release+0x1e0/0x860 [ 393.547050][ T7833] ? _local_bh_enable+0xa0/0xa0 [ 393.551898][ T7833] bcm_release+0x244/0x860 [ 393.556325][ T7833] sock_close+0xcd/0x230 [ 393.560582][ T7833] ? sock_mmap+0x90/0x90 [ 393.564825][ T7833] __fput+0x3fe/0x8e0 [ 393.568815][ T7833] task_work_run+0x129/0x1a0 [ 393.573390][ T7833] exit_to_user_mode_loop+0x106/0x130 [ 393.578743][ T7833] exit_to_user_mode_prepare+0xb1/0x140 [ 393.584269][ T7833] syscall_exit_to_user_mode+0x5d/0x240 [ 393.589806][ T7833] do_syscall_64+0x47/0xb0 [ 393.594234][ T7833] ? clear_bhb_loop+0x15/0x70 [ 393.598905][ T7833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.604870][ T7833] RIP: 0033:0x7f6e18dedef9 [ 393.609284][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.628888][ T7833] RSP: 002b:00007ffcf1020538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 393.637295][ T7833] RAX: 0000000000000000 RBX: 00007f6e18fa7a80 RCX: 00007f6e18dedef9 [ 393.645267][ T7833] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 393.653232][ T7833] RBP: 00007f6e18fa7a80 R08: 00007f6e18f92000 R09: 00007ffcf102082f [ 393.661205][ T7833] R10: 00000000003ffcb8 R11: 0000000000000246 R12: 0000000000060162 [ 393.669161][ T7833] R13: 00007ffcf1020640 R14: 0000000000000032 R15: ffffffffffffffff [ 393.677137][ T7833] [ 393.680367][ T7833] Kernel Offset: disabled [ 393.684956][ T7833] Rebooting in 86400 seconds..