last executing test programs: 8.871418971s ago: executing program 3 (id=1305): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') flistxattr(r0, &(0x7f0000000480)=""/178, 0xb2) r1 = socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e20, 0x400, @private2, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000380)={0x0, 0x3, 0x2002, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0x1, 0x4004084, 0x0, 0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x101, 0x950f, 0x9, 0x8000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 8.295402275s ago: executing program 0 (id=1308): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680)={0x0, 0x34, "cb7571b02940f844b147f97325bd21283a9f4ebc0de0dcdbbcca7b97e7775141b85f418f9226e6432766297aeafb8ff9d6b94996"}, &(0x7f0000001700)=0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x7f, 0x1, 0xd, 0x9, 0x4, 0x0, 0x81}, &(0x7f0000001800)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0xa8, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3f76}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}, @in6={0xa, 0x4e22, 0xfffff000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd885}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x685}]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001ac0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x1ff, 0x8, 0xc13, 0x1ff, 0xa2, 0x9, 0x0, r1}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xff11, 0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x6c2d, 0x1, 0x1a85}}, @sndinfo={0x20, 0x84, 0x2, {0xe59, 0x6, 0x3, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0x400, 0x0, r3}}], 0x108, 0x20000804}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28c600, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040)=0x1ff7f, 0x4) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) 8.179673257s ago: executing program 3 (id=1309): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680)={0x0, 0x34, "cb7571b02940f844b147f97325bd21283a9f4ebc0de0dcdbbcca7b97e7775141b85f418f9226e6432766297aeafb8ff9d6b94996"}, &(0x7f0000001700)=0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x7f, 0x1, 0xd, 0x9, 0x4, 0x0, 0x81}, &(0x7f0000001800)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0xa8, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3f76}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}, @in6={0xa, 0x4e22, 0xfffff000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd885}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x685}]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001ac0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x1ff, 0x8, 0xc13, 0x1ff, 0xa2, 0x9, 0x0, r1}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xff11, 0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x6c2d, 0x1, 0x1a85}}, @sndinfo={0x20, 0x84, 0x2, {0xe59, 0x6, 0x3, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0x400, 0x0, r3}}], 0x108, 0x20000804}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) 8.067681889s ago: executing program 4 (id=1310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0xe) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x40) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0xfffffffd}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.752773297s ago: executing program 1 (id=1312): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYBLOB="e9"], 0x40}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000003c0)=""/171, 0xab}], 0x2, 0x0, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xb0, 0x0, 0x401}, 0xc) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7.569925786s ago: executing program 1 (id=1314): r0 = socket$inet(0x2, 0x3, 0x6) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/56, 0x38}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20240, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000240)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="c99b5738181861f0217a07e1238c09d0", 0x10) accept4$alg(r11, 0x0, 0x0, 0x0) 6.134541725s ago: executing program 3 (id=1315): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f000001a040)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000580), &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00'}) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800010000000000ede871deb4b9898d947df7333e0395e068"], 0x20}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x2, 0x0, 0x8000}], 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x20, 0x0, 0x7, 0xfffffffffb872f3b, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x0, {0x0, 0xff, 0x4}, {0x0, 0x0, 0x1}, 0xff}, {0x0, 0x0, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x3}, 0xff, 0xfd}, {0x2, 0x3, {0x2, 0x1, 0x2}, {0x3, 0x1, 0x4}, 0xfe, 0x2}, {0x2, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x2}, 0xfd, 0x1}, {0x2, 0x3, {0x2, 0xf0, 0x6}, {0x0, 0x0, 0x3}, 0x1, 0xfd}, {0x2, 0x1, {0x1, 0x1, 0x1}, {0x2, 0xff}, 0xfe, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x3}, 0xfd, 0x2}, {0x0, 0x3, {0x0, 0xf0, 0x4}, {0x2, 0x0, 0x1}, 0xfd, 0x2}], 0xe0) 6.046062799s ago: executing program 0 (id=1316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x1}) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000008c0)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(0xffffffffffffffff, r4) sendmmsg$unix(r5, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() waitid(0x0, r6, &(0x7f0000000340), 0x0, &(0x7f0000000440)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000080)=0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r12, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r10, 0x2, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r12, &(0x7f0000002940)="02", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x0, r11, 0x0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x200, &(0x7f0000000280)="fb67d1") 5.294810389s ago: executing program 0 (id=1318): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0080c50000000e800002850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x6020400) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$inet_int(r10, 0x0, 0xe, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 5.098116454s ago: executing program 0 (id=1320): syz_usb_connect(0x2, 0x190, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000c296210f415150072740102030109027e01010000000009"], 0x0) 4.87768047s ago: executing program 4 (id=1322): r0 = fsopen(&(0x7f00000003c0)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='cpuset\x00', &(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{\x00', &(0x7f0000000180)='\'\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.792826251s ago: executing program 4 (id=1323): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000000000000000000000000000005"], 0x1c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000003400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r6}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000003140)="30d5316e5a9f82afc05e78e1b262faca0f4e8a434c2bc7787c31161515847a9b", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x13) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @remote, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getstats={0x1c, 0x5e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x8041) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006180)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.59963787s ago: executing program 2 (id=1325): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x40, 0x4a) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000080)={0x3, r3, 0x0, 0x0, 0x200, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000340)={0x2, r3}) r4 = io_uring_setup(0x462f, &(0x7f0000000340)={0x0, 0xe4f2, 0x400, 0x0, 0x25d, 0x0, r0}) socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101341) r6 = epoll_create(0x6) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) r8 = epoll_create(0x100) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)={0x20000010}) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x4b66, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r0, &(0x7f00000003c0)=0x400, 0x9) 4.241914627s ago: executing program 2 (id=1326): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create(0x3f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1], 0x154}, 0x1, 0x0, 0x0, 0x4021}, 0x24042845) socket$inet_udplite(0x2, 0x2, 0x88) r4 = io_uring_setup(0x765b, &(0x7f0000000380)={0x0, 0xfffffffd, 0x800, 0x2}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) r8 = epoll_create(0x6) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x30000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r10, 0x40047435, &(0x7f0000000280)) syslog(0x3, &(0x7f0000000080)=""/107, 0x6b) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0xdfa7}}) 4.105133533s ago: executing program 1 (id=1327): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680)={0x0, 0x34, "cb7571b02940f844b147f97325bd21283a9f4ebc0de0dcdbbcca7b97e7775141b85f418f9226e6432766297aeafb8ff9d6b94996"}, &(0x7f0000001700)=0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x7f, 0x1, 0xd, 0x9, 0x4, 0x0, 0x81}, &(0x7f0000001800)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0xa8, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3f76}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}, @in6={0xa, 0x4e22, 0xfffff000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd885}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x685}]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001ac0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x1ff, 0x8, 0xc13, 0x1ff, 0xa2, 0x9, 0x0, r1}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xff11, 0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x6c2d, 0x1, 0x1a85}}, @sndinfo={0x20, 0x84, 0x2, {0xe59, 0x6, 0x3, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0x400, 0x0, r3}}], 0x108, 0x20000804}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28c600, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040)=0x1ff7f, 0x4) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) 3.949668213s ago: executing program 2 (id=1328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x54540) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x13}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = mq_open(0x0, 0x40, 0x4, &(0x7f0000000200)={0xffffffffffffffe0, 0x1, 0x87c, 0x3ff}) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) readv(r4, &(0x7f0000002c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "9906"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @main=@item_4={0x3, 0x0, 0xb, "f2a808b9"}, @global=@item_012={0x1, 0x1, 0x0, ':'}, @main=@item_4={0x3, 0x0, 0x0, "0000e600"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "9d0e0020"}, @main=@item_4={0x3, 0x0, 0xb, "9a7ee4c4"}]}}, 0x0}, 0x0) syz_usb_disconnect(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x319200) 3.690739324s ago: executing program 0 (id=1329): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x54540) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x13}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = mq_open(0x0, 0x40, 0x4, &(0x7f0000000200)={0xffffffffffffffe0, 0x1, 0x87c, 0x3ff}) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) readv(r4, &(0x7f0000002c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "9906"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @main=@item_4={0x3, 0x0, 0xb, "f2a808b9"}, @global=@item_012={0x1, 0x1, 0x0, ':'}, @main=@item_4={0x3, 0x0, 0x0, "0000e600"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "9d0e0020"}, @main=@item_4={0x3, 0x0, 0xb, "9a7ee4c4"}]}}, 0x0}, 0x0) syz_usb_disconnect(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x319200) 2.55308777s ago: executing program 4 (id=1330): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x54540) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = mq_open(&(0x7f0000000380)='$]\x00', 0x40, 0x4, &(0x7f0000000200)={0xffffffffffffffe0, 0x1, 0x87c, 0x3ff}) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) readv(r4, &(0x7f0000002c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "9906"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @main=@item_4={0x3, 0x0, 0xb, "f2a808b9"}, @global=@item_012={0x1, 0x1, 0x0, ':'}, @main=@item_4={0x3, 0x0, 0x0, "0000e600"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "9d0e0020"}, @main=@item_4={0x3, 0x0, 0xb, "9a7ee4c4"}]}}, 0x0}, 0x0) syz_usb_disconnect(r0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x319200) 2.551791326s ago: executing program 3 (id=1340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000000000000000000000000000005"], 0x1c}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000003400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r6}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000003140)="30d5316e5a9f82afc05e78e1b262faca0f4e8a434c2bc7787c31161515847a9b", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x13) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @remote, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getstats={0x1c, 0x5e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x8041) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000006180)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.01902098s ago: executing program 1 (id=1331): socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102389, 0x18ff5}, {&(0x7f00000002c0)=""/237, 0xed}], 0x2, 0x0, 0x10800) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r0, @ANYRES16, @ANYBLOB="04"], 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_getevents(0x0, 0x3, 0x4, &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f0000000100)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.709352671s ago: executing program 1 (id=1332): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1e5a2d0000000000010902240001000000000900"], 0x0) epoll_create1(0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(&(0x7f0000002400), &(0x7f0000002440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000001380)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000001400)="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", 0x5c1, r2) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xd0001, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) r5 = dup2(0xffffffffffffffff, r1) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f00000018c0)=ANY=[@ANYRES8=r4, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000", @ANYRES16=r5, @ANYRESHEX=r4, @ANYRESOCT=r5], &(0x7f0000000080)='GPL\x00', 0x1, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x61, 0x0, 0x29) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0xfffffffc}, 0x48) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000240)="586c3380071d7e9a0a763e830934d91869a4887f96f47c85236602becf29e450e4c93db6dbb437e914bc5225a9371e3f1d2355d74afcdf5babe3861908e713ae11df0534542513f1d4dd948464939ed32ab991c98cbb7a36d8fc2eb850d28609eeea7906bc8358821b0c1244f0088214101f564887a43d4c46291c22956014a077f1f0d7efbff0e3dfba12c4c5", &(0x7f0000000000), &(0x7f0000000740), &(0x7f0000000380)="e3500f87bcbada052deda221dd11e359cdde6ce6300867fe8d39d9ddf027bd829c4bbf67f878e2d2c9ff2d2caf50e9e5dd8d56ba4af4e8c749abc9f054371dc723a0fb9b779e3da5341e3eb3a4a923d66bc841c7ef058380fdf6e202ef14c26e1d542716467719c49e47b1d8dc229bc12b3545e43cfeaad2899c1cf4c022411a55c90d83ecd53d73cbf116935683b252ab81780fcad3b773245228449a91b25caf9733d9e139145d6ac1cc8a95c4e79a0cc304d1c8f90154be902f5de121a70fa8356e", 0xfffffff9, r6, 0x4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) 1.705296845s ago: executing program 2 (id=1333): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0xfa}], 0x18}, 0x40000) sendmsg$nl_route_sched_retired(r7, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f000000af00), 0x634}}, 0x0) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002300)=""/4094, 0xffe}], 0x1}}], 0x1, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000200)="497013a7707b6a37ab2c07ba34bc22ea40ff84a312c291ba2002bd25a17febd69892f7d001fccef8", 0x28, 0x0, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@gettaction={0x58, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x58}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.263157681s ago: executing program 0 (id=1334): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = getpid() syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @stop_pts=0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x80046601, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x1, 0xff}, 0xfffffffffffffdb9) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0x20, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(r5, &(0x7f0000002400)=ANY=[], 0x1920) syz_pidfd_open(r2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) io_uring_enter(r4, 0x5676, 0x63fc, 0x8, &(0x7f00000000c0)={[0x2, 0x40]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r7}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 721.987043ms ago: executing program 2 (id=1335): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}) dup2(r1, r1) 592.831517ms ago: executing program 1 (id=1336): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680)={0x0, 0x34, "cb7571b02940f844b147f97325bd21283a9f4ebc0de0dcdbbcca7b97e7775141b85f418f9226e6432766297aeafb8ff9d6b94996"}, &(0x7f0000001700)=0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x7f, 0x1, 0xd, 0x9, 0x4, 0x0, 0x81}, &(0x7f0000001800)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0xa8, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3f76}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}, @in6={0xa, 0x4e22, 0xfffff000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd885}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x685}]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001ac0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x1ff, 0x8, 0xc13, 0x1ff, 0xa2, 0x9, 0x0, r1}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xff11, 0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x6c2d, 0x1, 0x1a85}}, @sndinfo={0x20, 0x84, 0x2, {0xe59, 0x6, 0x3, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0x400, 0x0, r3}}], 0x108, 0x20000804}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28c600, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040)=0x1ff7f, 0x4) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) unshare(0x300) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0xfffffffc}}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001100), &(0x7f0000001b00)=0x4) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x1, 0x0) sendmmsg$unix(r10, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002840)=[{0x0}], 0x1}}], 0x5, 0x0) recvmmsg$unix(r10, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x58}}], 0x7, 0x0, 0x0) 521.192297ms ago: executing program 2 (id=1337): r0 = socket$inet(0x2, 0x3, 0x6) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/56, 0x38}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20240, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000240)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="c99b5738181861f0217a07e1238c09d0", 0x10) accept4$alg(r11, 0x0, 0x0, 0x0) 215.282692ms ago: executing program 3 (id=1338): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create(0x3f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1], 0x154}, 0x1, 0x0, 0x0, 0x4021}, 0x24042845) socket$inet_udplite(0x2, 0x2, 0x88) r4 = io_uring_setup(0x765b, &(0x7f0000000380)={0x0, 0xfffffffd, 0x800, 0x2}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) r8 = epoll_create(0x6) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x30000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r10, 0x40047435, &(0x7f0000000280)) syslog(0x3, &(0x7f0000000080)=""/107, 0x6b) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0xdfa7}}) 141.276075ms ago: executing program 4 (id=1339): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a30000000"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 10.396334ms ago: executing program 3 (id=1341): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x8100000018000000}, 0x20008001) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0xa0179e08}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x71}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x78}}, 0x0) 0s ago: executing program 4 (id=1342): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001680)={0x0, 0x34, "cb7571b02940f844b147f97325bd21283a9f4ebc0de0dcdbbcca7b97e7775141b85f418f9226e6432766297aeafb8ff9d6b94996"}, &(0x7f0000001700)=0x3c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}}, 0x7f, 0x1, 0xd, 0x9, 0x4, 0x0, 0x81}, &(0x7f0000001800)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0xa8, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3f76}, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0x5}, @in6={0xa, 0x4e22, 0xfffff000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd885}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x685}]}, &(0x7f0000001940)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001ac0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001980)=[@sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x1ff, 0x8, 0xc13, 0x1ff, 0xa2, 0x9, 0x0, r1}}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xff11, 0x8000}}, @init={0x18, 0x84, 0x0, {0x3, 0x6c2d, 0x1, 0x1a85}}, @sndinfo={0x20, 0x84, 0x2, {0xe59, 0x6, 0x3, 0x8, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0x400, 0x0, r3}}], 0x108, 0x20000804}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x4) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x394}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) kernel console output (not intermixed with test programs): fc0000 [ 344.829303][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.867345][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1138'. [ 344.868090][ T29] audit: type=1326 audit(1725854957.249:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 344.898470][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.905600][ T29] audit: type=1326 audit(1725854957.249:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 344.927666][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.998296][ T29] audit: type=1326 audit(1725854957.249:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 345.100028][ T5629] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 345.300485][ T5629] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.317541][ T5286] r8152-cfgselector 1-1: USB disconnect, device number 85 [ 345.329711][ T5629] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 345.358730][ T5629] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.383216][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.406576][T10126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 345.419303][ T5629] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.427792][ T5631] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 345.627713][ T5286] usb 3-1: USB disconnect, device number 74 [ 345.641091][ T5631] usb 2-1: Using ep0 maxpacket: 8 [ 345.659508][ T5631] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 345.674816][ T5631] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 345.693797][ T5631] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 345.706024][ T5631] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.726935][ T5631] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 345.735858][ T5631] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 345.750513][ T5631] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 345.763264][ T5631] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.778774][ T5631] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 345.789992][ T5631] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 345.807615][ T5631] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 345.816858][ T5631] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.836698][ T5631] usb 2-1: string descriptor 0 read error: -22 [ 345.843295][ T5631] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.852923][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.881609][ T5631] adutux 2-1:246.0: interrupt endpoints not found [ 345.964839][T10145] fuse: Unknown parameter '0x0000000000000007' [ 345.982248][T10145] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 345.992005][T10145] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 346.000518][T10145] ALSA: mixer_oss: invalid OSS volume '' [ 346.156116][ T5629] usb 2-1: USB disconnect, device number 73 [ 346.220380][T10152] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 346.234162][T10149] IPVS: stopping backup sync thread 10152 ... [ 346.677449][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1151'. [ 346.698563][T10171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1152'. [ 346.761524][ T5629] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 346.959983][ T5629] usb 1-1: Using ep0 maxpacket: 8 [ 346.967446][ T5629] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 346.976656][ T5629] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 346.984751][ T5629] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 346.994756][ T5629] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 347.000209][ T5286] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 347.007019][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 347.025373][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 347.036599][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 347.047974][ T5629] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 347.056861][ T5631] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 347.064468][ T5629] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 347.072168][ T5629] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 347.081452][ T5629] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 347.093177][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 347.105857][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 347.116988][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 347.127748][ T5629] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 347.136618][ T5629] usb 1-1: config 246 descriptor has 1 excess byte, ignoring [ 347.144025][ T5629] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 347.153365][ T5629] usb 1-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 347.165010][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 347.176283][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 347.187875][ T5629] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 347.190007][ T58] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 347.201815][ T5629] usb 1-1: string descriptor 0 read error: -22 [ 347.213721][ T5629] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 347.220183][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 347.222781][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.235133][ T5286] usb 4-1: no configurations [ 347.242772][ T5286] usb 4-1: can't read configurations, error -22 [ 347.258515][ T5629] adutux 1-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 347.290195][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 347.296800][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 347.305777][ T5631] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 347.316528][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 347.326021][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.344977][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 347.353827][ T5631] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 347.364455][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 347.373822][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.387946][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 347.390076][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 347.396810][ T5631] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 347.410524][ T5286] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 347.412775][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 347.429056][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.430625][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.452412][ T58] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 347.462568][ T5631] usb 3-1: string descriptor 0 read error: -22 [ 347.468875][ T5631] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 347.485262][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.485975][ T58] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 347.504817][ T5631] adutux 3-1:246.0: interrupt endpoints not found [ 347.509834][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.522653][ T58] usb 2-1: Product: syz [ 347.530011][ T58] usb 2-1: Manufacturer: syz [ 347.534649][ T58] usb 2-1: SerialNumber: syz [ 347.542119][ T58] usb 2-1: config 0 descriptor?? [ 347.600023][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 347.605802][ T5286] usb 4-1: no configurations [ 347.614943][ T5286] usb 4-1: can't read configurations, error -22 [ 347.621754][ T5286] usb usb4-port1: attempt power cycle [ 347.725309][ T5231] usb 3-1: USB disconnect, device number 75 [ 347.987725][ T5631] usb 2-1: USB disconnect, device number 74 [ 348.030385][ T5286] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 348.070827][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 348.078742][ T5286] usb 4-1: no configurations [ 348.087593][ T5286] usb 4-1: can't read configurations, error -22 [ 348.260039][ T5286] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 348.291211][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 348.297181][ T5286] usb 4-1: no configurations [ 348.302460][ T5286] usb 4-1: can't read configurations, error -22 [ 348.309354][ T5286] usb usb4-port1: unable to enumerate USB device [ 349.090058][ T5631] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 349.281690][ T5631] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 349.290435][ T5631] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.307961][ T5631] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 349.317279][ T5631] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 349.325457][ T5631] usb 2-1: Manufacturer: syz [ 349.332698][ T5631] usb 2-1: config 0 descriptor?? [ 349.420021][ T5631] rc_core: IR keymap rc-hauppauge not found [ 349.426864][ T5631] Registered IR keymap rc-empty [ 349.438826][ T5631] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 349.451446][ T5631] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 349.462801][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'. [ 349.624360][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 350.010118][ T5231] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 350.136335][ T5286] usb 2-1: USB disconnect, device number 75 [ 350.190263][ T5231] usb 3-1: Using ep0 maxpacket: 8 [ 350.215958][ T5231] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 350.232365][ T5231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.244573][ T5231] usb 3-1: Product: syz [ 350.248777][ T5231] usb 3-1: Manufacturer: syz [ 350.257321][ T5231] usb 3-1: SerialNumber: syz [ 350.270338][ T5629] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 350.274508][ T5231] usb 3-1: config 0 descriptor?? [ 350.480001][ T5629] usb 4-1: Using ep0 maxpacket: 8 [ 350.488331][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.505339][ T5629] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 350.505568][ T5231] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.519289][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.541410][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.559128][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.577481][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.599753][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.609211][ T5629] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 350.627077][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.637942][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.650289][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.669983][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.684760][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 350.698793][ T5629] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 350.715852][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 350.725186][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 350.727143][T10212] syz.1.1169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 350.747538][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 350.760484][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.778072][ T5629] usb 4-1: string descriptor 0 read error: -22 [ 350.784569][ T5629] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 350.794639][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.813244][ T5629] adutux 4-1:246.0: interrupt endpoints not found [ 351.573041][ T58] usb 1-1: USB disconnect, device number 86 [ 351.581989][ T5629] usb 4-1: USB disconnect, device number 70 [ 351.727428][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 351.857161][ T5231] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 351.901229][ T5231] usb 3-1: USB disconnect, device number 76 [ 351.907448][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 352.356783][ T5629] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 352.380034][ T5231] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 352.500092][ T5286] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 352.549994][ T5629] usb 1-1: Using ep0 maxpacket: 16 [ 352.557254][ T5629] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.568750][ T5629] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.571595][ T5231] usb 3-1: Using ep0 maxpacket: 16 [ 352.578631][ T5629] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 352.594907][ T5629] usb 1-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 352.615614][ T5629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.624462][ T5231] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.635756][ T5629] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 352.642930][ T5231] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.656958][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.658103][ T5231] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 352.668363][ T5629] usb 1-1: config 0 descriptor?? [ 352.675134][ T5286] usb 4-1: device descriptor read/64, error -71 [ 352.692843][ T5231] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 352.708762][ T5231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 352.718579][ T5231] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 352.733545][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.746552][ T5231] usb 3-1: config 0 descriptor?? [ 352.960070][ T5286] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 353.102290][ T5629] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0028/input/input48 [ 353.119414][ T5286] usb 4-1: device descriptor read/64, error -71 [ 353.196506][ T5231] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0029/input/input49 [ 353.246821][ T5286] usb usb4-port1: attempt power cycle [ 353.250344][ T5629] kye 0003:0458:5010.0028: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 353.274362][ T5231] kye 0003:0458:5010.0029: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 353.334198][ T5629] usb 1-1: USB disconnect, device number 87 [ 353.452732][ T58] usb 3-1: USB disconnect, device number 77 [ 353.653560][ T5231] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 353.680055][ T5286] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 353.714660][ T5286] usb 4-1: device descriptor read/8, error -71 [ 353.840085][ T5231] usb 2-1: Using ep0 maxpacket: 16 [ 353.847592][ T5231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.858584][ T5231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.868994][ T5231] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.882082][ T5231] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.891655][ T5231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.902160][ T5231] usb 2-1: config 0 descriptor?? [ 353.955503][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 353.990145][ T5286] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 354.050762][ T5286] usb 4-1: device descriptor read/8, error -71 [ 354.170588][ T5286] usb usb4-port1: unable to enumerate USB device [ 354.310045][ T58] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 354.424346][ T5231] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 354.434930][ T5231] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 354.444620][ T5231] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 354.459265][ T5231] microsoft 0003:045E:07DA.002A: no inputs found [ 354.466770][ T5231] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 354.500058][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 354.507339][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.518543][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.528548][ T58] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 354.537688][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.547502][ T58] usb 1-1: config 0 descriptor?? [ 354.672266][ T5629] usb 2-1: USB disconnect, device number 76 [ 354.967310][ T58] ft260 0003:0403:6030.002B: item fetching failed at offset 0/2 [ 354.981723][ T58] ft260 0003:0403:6030.002B: failed to parse HID [ 354.999263][ T58] ft260 0003:0403:6030.002B: probe with driver ft260 failed with error -22 [ 355.087575][T10275] raw_sendmsg: syz.2.1188 forgot to set AF_INET. Fix it! [ 355.173386][ T58] usb 1-1: USB disconnect, device number 88 [ 355.365880][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 355.365899][ T29] audit: type=1326 audit(1725854968.069:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.400052][ T29] audit: type=1326 audit(1725854968.069:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.422142][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.450955][ T29] audit: type=1326 audit(1725854968.069:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.472978][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.487793][ T29] audit: type=1326 audit(1725854968.069:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.519349][ T29] audit: type=1326 audit(1725854968.069:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.545395][ T29] audit: type=1326 audit(1725854968.069:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.572515][ T29] audit: type=1326 audit(1725854968.069:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.599981][ T29] audit: type=1326 audit(1725854968.189:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.621864][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.636477][ T29] audit: type=1326 audit(1725854968.269:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.660041][ T5231] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 355.669418][ T29] audit: type=1326 audit(1725854968.369:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 355.850641][ T5231] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 355.873376][ T5231] usb 4-1: config 0 has no interface number 0 [ 355.879513][ T5231] usb 4-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 355.897138][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.909733][ T5231] usb 4-1: config 0 descriptor?? [ 355.937709][ T5231] ums-cypress 4-1:0.32: USB Mass Storage device detected [ 356.050207][ T58] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 356.130025][ T5629] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 356.167587][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.193508][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.230132][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 356.241538][ T58] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 356.257297][ T58] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 356.267815][ T58] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 356.280075][ T58] usb 1-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.301204][ T58] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 356.316434][ T58] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 356.327396][ T58] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 356.340012][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 356.343175][ T58] usb 1-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.351854][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.365514][ T58] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 356.370135][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.388500][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.390022][ T58] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 356.402020][ T5629] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 356.417845][ T58] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 356.422750][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.439725][ T58] usb 1-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.456146][ T58] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.460136][ T5629] usb 3-1: config 0 descriptor?? [ 356.465537][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.478372][ T58] usb 1-1: Product: syz [ 356.483855][ T58] usb 1-1: Manufacturer: syz [ 356.489044][ T58] usb 1-1: SerialNumber: syz [ 356.712756][ T58] adutux 1-1:246.0: interrupt endpoints not found [ 356.728123][ T58] usb 1-1: USB disconnect, device number 89 [ 356.890092][ T5631] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 357.002128][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 357.080027][ T5631] usb 2-1: Using ep0 maxpacket: 16 [ 357.088078][ T5631] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.099456][ T5631] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.110629][ T5631] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.120721][ T5631] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 357.136822][ T5631] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.144340][ T5629] usbhid 3-1:0.0: can't add hid device: -71 [ 357.150495][ T5629] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 357.158795][ T5631] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 357.168133][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.179562][ T5629] usb 3-1: USB disconnect, device number 78 [ 357.191900][ T5631] usb 2-1: config 0 descriptor?? [ 357.616341][ T5631] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.002C/input/input50 [ 357.710480][ T5631] kye 0003:0458:5010.002C: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 357.815038][ T5629] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 357.866093][ T58] usb 2-1: USB disconnect, device number 77 [ 358.011757][ T5629] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.027180][ T5629] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 358.037124][ T5629] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 358.047513][ T5629] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.056674][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.072327][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.146956][ T5629] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 358.250041][ T5231] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 358.291643][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.300533][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.311855][ T58] usb 1-1: USB disconnect, device number 90 [ 358.356271][ T5629] usb 4-1: USB disconnect, device number 75 [ 358.430039][ T5231] usb 3-1: Using ep0 maxpacket: 16 [ 358.444594][ T5231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.457763][ T5463] Bluetooth: Firmware request failed [ 358.476264][ T5463] bfusb 5-1:7.227: probe with driver bfusb failed with error -5 [ 358.487558][ T5231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.517861][ T5231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.535435][ T5463] usb 5-1: USB disconnect, device number 73 [ 358.560980][ T5231] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.571610][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.584726][ T5231] usb 3-1: config 0 descriptor?? [ 358.910160][ T5463] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 358.921790][ T5629] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 358.990013][ T5631] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 359.090105][ T5463] usb 5-1: Using ep0 maxpacket: 16 [ 359.097462][ T5463] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.109892][ T5463] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.126602][ T5231] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 359.130144][ T5629] usb 4-1: Using ep0 maxpacket: 8 [ 359.134070][ T5463] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.141607][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 359.149772][ T5231] microsoft 0003:045E:07DA.002D: No inputs registered, leaving [ 359.158988][ T5629] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 359.173452][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 359.176223][ T5463] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 359.183194][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 359.203455][ T5231] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 359.208081][ T5631] usb 2-1: Using ep0 maxpacket: 8 [ 359.226172][ T5463] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.231586][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 359.233219][ T5231] microsoft 0003:045E:07DA.002D: no inputs found [ 359.245128][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 359.263911][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.276158][ T5631] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.277003][ T5463] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 359.285376][ T5631] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.303376][ T5631] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.313783][ T5231] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 359.326527][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 359.332194][ T5463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.347154][ T5629] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 359.355121][ T5631] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.364618][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 359.374683][ T5231] usb 3-1: USB disconnect, device number 79 [ 359.375198][ T5631] usb 2-1: config 1 has no interface number 1 [ 359.386590][ T5463] usb 5-1: config 0 descriptor?? [ 359.388624][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 359.408338][ T5631] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 359.421677][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 359.439279][ T5631] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 359.451660][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 359.463370][ T5631] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 359.474292][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.486652][ T5629] usb 4-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 359.497413][ T5631] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.506641][ T5629] usb 4-1: config 246 descriptor has 1 excess byte, ignoring [ 359.514097][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.522165][ T5629] usb 4-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 359.531429][ T5631] usb 2-1: Product: syz [ 359.535637][ T5631] usb 2-1: Manufacturer: syz [ 359.540334][ T5629] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 359.551984][ T5631] usb 2-1: SerialNumber: syz [ 359.578531][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 359.611459][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 359.657836][ T5629] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.689037][ T5629] usb 4-1: string descriptor 0 read error: -22 [ 359.706067][ T5629] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 359.729335][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.750720][ T5629] adutux 4-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 359.774060][ T5631] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 359.796575][ T5631] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 359.821600][ T5631] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 359.831745][ T5631] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 359.839679][ T5631] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 359.848447][ T5631] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 359.888868][ T5463] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.002E/input/input51 [ 359.902367][ T5631] usb 2-1: USB disconnect, device number 78 [ 359.948600][ T8842] udevd[8842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.058666][ T5463] kye 0003:0458:5010.002E: input,hiddev1,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 360.087680][ T5463] usb 5-1: USB disconnect, device number 74 [ 360.360884][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 360.700037][ T5463] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 360.780212][ T5631] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 360.880076][ T5463] usb 2-1: Using ep0 maxpacket: 8 [ 360.886731][ T5463] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 360.896729][ T5463] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 360.907580][ T5463] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 360.930034][ T5463] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.961335][ T5463] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 360.979570][ T5463] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 360.990367][ T5463] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 360.999550][ T5463] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.000159][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 361.017579][ T5463] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 361.027594][ T5463] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 361.038687][ T5463] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 361.046597][ T5631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.047984][ T5463] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.058469][ T5631] usb 3-1: config 0 has no interfaces? [ 361.073664][ T5463] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 361.085958][ T5631] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.085989][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.096676][ T5631] usb 3-1: config 0 descriptor?? [ 361.110353][ T5463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.118805][ T5463] usb 2-1: Product: syz [ 361.127471][ T5463] usb 2-1: Manufacturer: syz [ 361.132272][ T5463] usb 2-1: SerialNumber: syz [ 361.260015][ T5629] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 361.358908][ T5463] adutux 2-1:246.0: interrupt endpoints not found [ 361.375812][ T5463] usb 2-1: USB disconnect, device number 79 [ 361.387655][T10335] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1210'. [ 361.407867][T10335] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 361.449996][ T5629] usb 5-1: Using ep0 maxpacket: 16 [ 361.462643][ T5629] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.489984][ T5629] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.499747][ T5629] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 361.509807][ T5629] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 361.523061][ T5629] usb 5-1: config 0 interface 0 has no altsetting 0 [ 361.529701][ T5629] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 361.539650][ T5629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.555227][ T5629] usb 5-1: config 0 descriptor?? [ 361.985468][ T5629] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.002F/input/input52 [ 362.018754][ T5629] kye 0003:0458:5010.002F: input,hiddev1,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 362.182836][ T5629] usb 5-1: USB disconnect, device number 75 [ 362.230091][ T5463] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 362.231017][ T5631] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 362.410017][ T5463] usb 1-1: Using ep0 maxpacket: 16 [ 362.416890][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.427884][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.437628][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 362.443401][ T5463] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 362.456445][ T5463] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.465557][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.467305][ T5631] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 362.484371][ T5631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.485954][ T5463] usb 1-1: config 0 descriptor?? [ 362.499150][ T5631] usb 2-1: Product: syz [ 362.503696][ T5631] usb 2-1: Manufacturer: syz [ 362.508913][ T5631] usb 2-1: SerialNumber: syz [ 362.515877][ T5631] usb 2-1: config 0 descriptor?? [ 362.524044][ T5631] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 362.723567][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.734246][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.753235][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.772916][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.792592][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.803004][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.815166][ T5631] gspca_sunplus: reg_w_riv err -71 [ 362.832360][ T5631] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 362.844643][ T5631] usb 2-1: USB disconnect, device number 80 [ 362.973387][ T5463] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 362.981604][ T5463] microsoft 0003:045E:07DA.0030: No inputs registered, leaving [ 363.002886][ T5463] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 363.032277][ T5463] microsoft 0003:045E:07DA.0030: no inputs found [ 363.038772][ T5463] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 363.197571][ T5629] usb 1-1: USB disconnect, device number 91 [ 363.552616][ T5629] usb 3-1: USB disconnect, device number 80 [ 363.572908][ T5463] usb 4-1: USB disconnect, device number 76 [ 363.696597][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 363.728976][T10358] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 364.098824][ T5463] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 364.300803][ T5463] usb 4-1: Using ep0 maxpacket: 16 [ 364.313148][ T5463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.337683][ T5463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.370042][ T5463] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.420143][ T5463] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 364.429241][ T5463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.442901][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 364.470589][ T5463] usb 4-1: config 0 descriptor?? [ 364.472332][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 364.725910][ T58] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 364.870068][ T5631] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 364.914931][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 364.936239][ T58] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 364.969795][ T58] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 364.992525][ T58] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.005527][ T58] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.020070][ T5629] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 365.029236][ T58] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 365.054770][ T58] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 365.069982][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 365.077726][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 365.091941][ T58] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.101159][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 365.101185][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.101229][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 365.101254][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 365.101280][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 365.101304][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 365.102482][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 365.136097][ T5463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 365.183147][ T58] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.198031][ T58] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 365.207391][ T58] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 365.219749][ T5463] microsoft 0003:045E:07DA.0031: No inputs registered, leaving [ 365.227827][ T58] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.239338][ T5463] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 365.255552][ T58] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.269354][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 365.276267][ T5463] microsoft 0003:045E:07DA.0031: no inputs found [ 365.285559][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.286619][ T5463] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 365.312312][ T58] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 365.322922][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.337052][ T58] usb 2-1: Product: syz [ 365.353700][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 365.353849][ T5463] usb 4-1: USB disconnect, device number 77 [ 365.375211][ T58] usb 2-1: Manufacturer: syz [ 365.379827][ T58] usb 2-1: SerialNumber: syz [ 365.384801][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 365.406649][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 365.421830][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 365.438262][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 365.447799][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 365.459035][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 365.468465][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 365.481300][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 365.493463][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 365.504768][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 365.526608][ T5631] usb 3-1: string descriptor 0 read error: -22 [ 365.549768][ T5631] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 365.595959][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.627080][ T58] adutux 2-1:246.0: interrupt endpoints not found [ 365.688763][ T58] usb 2-1: USB disconnect, device number 81 [ 365.694488][ T5631] adutux 3-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 366.953677][ T6616] bridge_slave_1: left allmulticast mode [ 366.969638][ T6616] bridge_slave_1: left promiscuous mode [ 366.987605][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.034453][ T6616] bridge_slave_0: left allmulticast mode [ 367.062378][ T6616] bridge_slave_0: left promiscuous mode [ 367.078936][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.167610][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.181153][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.191212][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.220334][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.231280][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.238799][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.518950][T10415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.750595][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.830650][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 367.830668][ T29] audit: type=1326 audit(1725854980.539:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 367.915325][ T29] audit: type=1326 audit(1725854980.539:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 367.972331][ T29] audit: type=1326 audit(1725854980.559:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 368.017065][ T29] audit: type=1326 audit(1725854980.569:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 368.055647][ T29] audit: type=1326 audit(1725854980.569:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10414 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 368.179228][ T6616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.193028][ T6616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.206884][ T6616] bond0 (unregistering): Released all slaves [ 368.227506][ T6616] bond1 (unregistering): Released all slaves [ 368.253377][ T6616] bond2 (unregistering): Released all slaves [ 368.277861][ T6616] bond3 (unregistering): Released all slaves [ 368.305047][T10418] bridge_slave_1: left allmulticast mode [ 368.315239][T10418] bridge_slave_1: left promiscuous mode [ 368.323644][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.343441][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1239'. [ 368.587888][T10431] tipc: Started in network mode [ 368.596796][T10431] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 368.627866][T10431] tipc: Enabling of bearer rejected, failed to enable media [ 368.881877][ T6616] hsr_slave_0: left promiscuous mode [ 368.900304][ T6616] hsr_slave_1: left promiscuous mode [ 368.921432][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.964373][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.332392][ T5243] Bluetooth: hci2: command tx timeout [ 369.586689][ T6616] team0 (unregistering): Port device team_slave_1 removed [ 369.634726][ T6616] team0 (unregistering): Port device team_slave_0 removed [ 369.642058][ T58] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 369.651445][ T5631] usb 3-1: USB disconnect, device number 81 [ 369.840260][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 369.858448][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 369.869066][ T58] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 369.885011][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 369.894335][ T58] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.919448][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 369.938041][ T58] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 369.949148][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 369.967171][ T58] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.988539][ T58] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 369.997556][ T58] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 370.014582][ T58] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 370.032409][ T58] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.061617][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 370.071072][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.079208][ T58] usb 5-1: Product: syz [ 370.083554][ T58] usb 5-1: Manufacturer: syz [ 370.088177][ T58] usb 5-1: SerialNumber: syz [ 370.170233][ T5631] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 370.322351][ T58] adutux 5-1:246.0: interrupt endpoints not found [ 370.339542][ T58] usb 5-1: USB disconnect, device number 76 [ 370.393508][ T5631] usb 3-1: Using ep0 maxpacket: 16 [ 370.432520][ T5631] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.458691][T10452] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 370.487224][ T5631] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.512405][T10411] chnl_net:caif_netlink_parms(): no params data found [ 370.519457][ T5631] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.536108][ T5631] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 370.555519][ T5631] usb 3-1: config 0 interface 0 has no altsetting 0 [ 370.568472][ T5631] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 370.617932][T10462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'. [ 370.643764][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.680457][ T5631] usb 3-1: config 0 descriptor?? [ 370.803899][T10411] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.823273][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.838329][T10411] bridge_slave_0: entered allmulticast mode [ 370.847824][T10411] bridge_slave_0: entered promiscuous mode [ 370.918592][T10411] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.932796][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.949145][T10411] bridge_slave_1: entered allmulticast mode [ 370.961694][ T5286] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 370.962232][T10411] bridge_slave_1: entered promiscuous mode [ 371.088184][T10479] netlink: 'syz.4.1250': attribute type 29 has an invalid length. [ 371.107034][T10479] netlink: 'syz.4.1250': attribute type 29 has an invalid length. [ 371.128087][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.148776][ T5286] usb 2-1: device descriptor read/64, error -71 [ 371.154959][ T5631] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0032/input/input55 [ 371.177501][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.207048][T10482] netlink: 'syz.4.1250': attribute type 29 has an invalid length. [ 371.317385][ T5631] kye 0003:0458:5010.0032: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 371.330068][ T58] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 371.392260][ T5631] usb 3-1: USB disconnect, device number 82 [ 371.400346][ T5243] Bluetooth: hci2: command tx timeout [ 371.407212][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 371.436558][T10411] team0: Port device team_slave_0 added [ 371.440730][ T5286] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 371.454144][T10411] team0: Port device team_slave_1 added [ 371.479060][T10486] netlink: 177 bytes leftover after parsing attributes in process `syz.4.1251'. [ 371.544621][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.579019][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.612211][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.619311][ T58] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 371.630125][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.660407][ T5286] usb 2-1: device descriptor read/64, error -71 [ 371.670118][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.687343][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.700656][ T58] usb 4-1: config 0 descriptor?? [ 371.731633][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.755039][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.788347][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.801017][ T5286] usb usb2-port1: attempt power cycle [ 371.916010][T10411] hsr_slave_0: entered promiscuous mode [ 371.931070][T10411] hsr_slave_1: entered promiscuous mode [ 371.939310][T10411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.950251][T10411] Cannot create hsr debugfs directory [ 372.053982][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 372.063284][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 372.110914][T10498] netlink: 131 bytes leftover after parsing attributes in process `syz.4.1253'. [ 372.133080][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 372.222137][ T5286] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 372.291363][ T5286] usb 2-1: device descriptor read/8, error -71 [ 372.470138][ T5631] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 372.560999][ T5286] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 372.606184][ T5286] usb 2-1: device descriptor read/8, error -71 [ 372.650931][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 372.668870][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 372.706396][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 372.719276][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 372.734514][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 372.740786][ T5286] usb usb2-port1: unable to enumerate USB device [ 372.760160][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 372.797318][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 372.837820][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.866652][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 372.895906][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 372.928256][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 372.941155][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 372.966243][T10411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.977151][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 373.014279][T10411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.021293][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 373.033201][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.036556][T10411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.055117][ T5631] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 373.064348][ T5631] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 373.076882][T10411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.083796][ T5631] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 373.100807][ T5631] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 373.136377][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 373.158808][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 373.188234][ T5631] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.215486][ T5631] usb 3-1: string descriptor 0 read error: -22 [ 373.225010][ T5631] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 373.251260][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.308895][ T5631] adutux 3-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 373.364941][T10411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.405034][T10411] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.421175][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.428479][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.463576][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.470887][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.482574][ T5243] Bluetooth: hci2: command tx timeout [ 373.609636][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.777578][T10411] veth0_vlan: entered promiscuous mode [ 373.811713][T10411] veth1_vlan: entered promiscuous mode [ 373.899534][T10411] veth0_macvtap: entered promiscuous mode [ 373.926404][T10411] veth1_macvtap: entered promiscuous mode [ 374.029126][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.069304][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.083022][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.094910][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 374.114262][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 374.123048][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.142190][ T5286] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 374.158754][ T58] usb 4-1: USB disconnect, device number 78 [ 374.167646][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.194835][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.226474][T10411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.237000][T10411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.253648][T10411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.262586][T10411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.300443][ T5463] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 374.330518][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 374.340045][ T5286] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.351909][ T5286] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.379371][ T5286] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.409707][ T5286] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 374.415471][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.433147][ T5286] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.452705][ T5286] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 374.459987][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.462752][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.485298][ T5286] usb 2-1: config 0 descriptor?? [ 374.490895][ T5463] usb 5-1: Using ep0 maxpacket: 8 [ 374.507322][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 374.516121][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.516145][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.535111][ T5463] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 374.550107][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 374.559506][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.575054][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 374.584951][ T5463] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 374.600377][ T58] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 374.616313][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 374.629613][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.646320][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 374.656369][ T5463] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 374.667960][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 374.693680][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.711250][ T5463] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 374.725077][ T5463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.734065][ T5463] usb 5-1: Product: syz [ 374.738373][ T5463] usb 5-1: Manufacturer: syz [ 374.753421][ T5463] usb 5-1: SerialNumber: syz [ 374.780441][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 374.802066][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.818011][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.828918][ T58] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 374.838094][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.871092][ T58] usb 4-1: config 0 descriptor?? [ 374.993428][ T5631] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 375.010722][ T5286] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0033/input/input56 [ 375.024852][ T5463] adutux 5-1:246.0: interrupt endpoints not found [ 375.064490][ T5463] usb 5-1: USB disconnect, device number 77 [ 375.117225][ T5286] kye 0003:0458:5010.0033: input,hiddev1,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 375.199111][ T5286] usb 2-1: USB disconnect, device number 86 [ 375.223294][ T5631] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.286440][ T5631] usb 1-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 375.326617][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.364012][ T5631] usb 1-1: config 0 descriptor?? [ 375.396420][ T29] audit: type=1400 audit(1725854988.089:868): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D31383434363734343037333730393535313631353078303030303030303030303030303030343031373737373737373737373737373737373737373737 pid=10545 comm="syz.3.1260" [ 375.452953][T10568] netlink: 106832 bytes leftover after parsing attributes in process `syz.3.1260'. [ 375.462748][T10568] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 375.560662][ T5243] Bluetooth: hci2: command tx timeout [ 375.615408][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 375.625043][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.648013][ T58] usb 4-1: USB disconnect, device number 79 [ 375.982655][ T5631] aquacomputer_d5next 0003:0C70:F001.0034: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.0-1/input0 [ 376.250713][ T5463] usb 1-1: USB disconnect, device number 93 [ 376.450297][ T58] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 376.502543][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'. [ 376.668932][ T58] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 376.679250][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.687839][ T58] usb 5-1: Product: syz [ 376.692583][ T58] usb 5-1: Manufacturer: syz [ 376.697310][ T58] usb 5-1: SerialNumber: syz [ 376.706805][ T58] usb 5-1: config 0 descriptor?? [ 376.810325][ T5632] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 376.907011][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 376.968570][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 376.980046][ T5632] usb 4-1: device descriptor read/64, error -71 [ 376.993102][ T5631] usb 5-1: USB disconnect, device number 78 [ 377.251318][ T940] usb 3-1: USB disconnect, device number 83 [ 377.278186][ T5632] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 377.460513][ T5632] usb 4-1: device descriptor read/64, error -71 [ 377.467011][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1273'. [ 377.498879][ T29] audit: type=1326 audit(1725854990.199:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.560753][ T29] audit: type=1326 audit(1725854990.229:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.590735][ T5632] usb usb4-port1: attempt power cycle [ 377.630121][ T29] audit: type=1326 audit(1725854990.229:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.686160][ T29] audit: type=1326 audit(1725854990.229:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.761568][ T29] audit: type=1326 audit(1725854990.229:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.776491][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1275'. [ 377.811892][ T29] audit: type=1326 audit(1725854990.229:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.859241][ T29] audit: type=1326 audit(1725854990.229:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.892446][ T29] audit: type=1326 audit(1725854990.229:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.920355][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.933483][ T29] audit: type=1326 audit(1725854990.229:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 377.957812][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.967087][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.976550][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.985611][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.993525][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.032908][ T5632] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 378.071154][ T5632] usb 4-1: device descriptor read/8, error -71 [ 378.086948][T10641] netlink: 'syz.4.1277': attribute type 4 has an invalid length. [ 378.106653][ T62] bridge_slave_1: left allmulticast mode [ 378.115822][ T62] bridge_slave_1: left promiscuous mode [ 378.130314][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.144504][ T62] bridge_slave_0: left allmulticast mode [ 378.151214][ T62] bridge_slave_0: left promiscuous mode [ 378.158921][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.355117][ T5632] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 378.392305][ T5632] usb 4-1: device descriptor read/8, error -71 [ 378.510606][ T5632] usb usb4-port1: unable to enumerate USB device [ 378.544132][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.554411][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.565457][ T62] bond0 (unregistering): Released all slaves [ 378.576779][ T62] bond1 (unregistering): Released all slaves [ 378.593136][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 378.688207][ T62] tipc: Left network mode [ 378.924875][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.933115][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.038688][T10642] chnl_net:caif_netlink_parms(): no params data found [ 379.120588][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.127772][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.142997][T10642] bridge_slave_0: entered allmulticast mode [ 379.153681][T10642] bridge_slave_0: entered promiscuous mode [ 379.180339][ T62] hsr_slave_0: left promiscuous mode [ 379.187602][ T62] hsr_slave_1: left promiscuous mode [ 379.196206][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.206440][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.280255][ T5463] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 379.475417][ T5463] usb 5-1: Using ep0 maxpacket: 8 [ 379.484273][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 379.509258][ T5463] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 379.518731][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 379.542476][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 379.558545][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 379.576630][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 379.588720][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.619031][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 379.656470][ T5463] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 379.684015][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 379.707952][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 379.736108][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 379.768463][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 379.780641][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.792938][ T5463] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 379.801986][ T5463] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 379.809398][ T5463] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 379.819099][ T5463] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 379.830837][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 379.842148][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 379.853371][ T5463] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.866723][ T5463] usb 5-1: string descriptor 0 read error: -22 [ 379.873314][ T5463] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.882852][ T5463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.915505][ T5463] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 379.917234][ T62] team0 (unregistering): Port device team_slave_1 removed [ 379.977659][ T62] team0 (unregistering): Port device team_slave_0 removed [ 380.041070][ T5243] Bluetooth: hci1: command tx timeout [ 380.486083][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.495631][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.503074][T10642] bridge_slave_1: entered allmulticast mode [ 380.510444][T10642] bridge_slave_1: entered promiscuous mode [ 380.533650][T10631] veth0_vlan: left promiscuous mode [ 380.638905][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.684174][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.799612][T10642] team0: Port device team_slave_0 added [ 380.828334][T10642] team0: Port device team_slave_1 added [ 380.966811][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.994741][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.032423][ T940] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 381.070971][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.112221][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.119213][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.149407][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.244875][T10642] hsr_slave_0: entered promiscuous mode [ 381.257002][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 381.274503][ T940] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 381.291540][T10642] hsr_slave_1: entered promiscuous mode [ 381.297267][ T940] usb 1-1: config 0 has no interface number 0 [ 381.312781][ T940] usb 1-1: config 0 interface 183 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.324850][T10642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.344538][T10642] Cannot create hsr debugfs directory [ 381.350631][ T940] usb 1-1: config 0 interface 183 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.387847][ T940] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 381.417004][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.448415][ T940] usb 1-1: config 0 descriptor?? [ 381.638364][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.655676][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.668506][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.678115][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.687749][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.689021][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.714395][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.715170][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.732149][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.744455][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.120104][ T5229] Bluetooth: hci1: command tx timeout [ 382.525102][T10688] chnl_net:caif_netlink_parms(): no params data found [ 382.657875][ T62] bridge_slave_1: left allmulticast mode [ 382.664087][ T62] bridge_slave_1: left promiscuous mode [ 382.670116][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.679139][ T62] bridge_slave_0: left allmulticast mode [ 382.687416][ T62] bridge_slave_0: left promiscuous mode [ 382.693417][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.799137][ T940] usbhid 1-1:0.183: can't add hid device: -71 [ 382.828476][ T940] usbhid 1-1:0.183: probe with driver usbhid failed with error -71 [ 382.870249][ T940] usb 1-1: USB disconnect, device number 94 [ 383.161774][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.175359][ T62] bond0 (unregistering): Released all slaves [ 383.199767][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 383.280710][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.287943][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.303564][T10688] bridge_slave_0: entered allmulticast mode [ 383.315388][T10688] bridge_slave_0: entered promiscuous mode [ 383.325018][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.333496][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.341006][T10688] bridge_slave_1: entered allmulticast mode [ 383.348318][T10688] bridge_slave_1: entered promiscuous mode [ 383.360919][T10642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.383303][T10642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.399328][T10642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.471131][T10717] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 383.502072][T10642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.528000][T10717] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 383.549299][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.598423][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.688747][T10688] team0: Port device team_slave_0 added [ 383.738736][T10688] team0: Port device team_slave_1 added [ 383.754580][ T62] hsr_slave_0: left promiscuous mode [ 383.761387][ T62] hsr_slave_1: left promiscuous mode [ 383.767483][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.776023][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.811650][ T5229] Bluetooth: hci0: command tx timeout [ 384.127753][ T5463] usb 5-1: USB disconnect, device number 79 [ 384.200469][ T5229] Bluetooth: hci1: command tx timeout [ 384.567541][ T5632] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 384.600660][ T62] team0 (unregistering): Port device team_slave_1 removed [ 384.694082][ T62] team0 (unregistering): Port device team_slave_0 removed [ 384.766237][ T5632] usb 1-1: Using ep0 maxpacket: 16 [ 384.780190][ T5286] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 384.784294][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.800504][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.812872][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.822971][ T5632] usb 1-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 384.836603][ T5632] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.843390][ T5632] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 384.858779][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.879749][ T5632] usb 1-1: config 0 descriptor?? [ 384.972880][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 384.984801][ T5286] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.994215][ T5286] usb 5-1: config 6 has an invalid interface number: 6 but max is 0 [ 385.003231][ T5286] usb 5-1: config 6 has no interface number 0 [ 385.009361][ T5286] usb 5-1: config 6 interface 6 has no altsetting 0 [ 385.027780][ T5286] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ee.60 [ 385.037096][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.052947][ T5286] usb 5-1: Product: syz [ 385.057175][ T5286] usb 5-1: Manufacturer: syz [ 385.064917][ T5286] usb 5-1: SerialNumber: syz [ 385.349199][ T5632] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0035/input/input57 [ 385.379370][ T5632] kye 0003:0458:5010.0035: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 385.516064][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.536284][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.547458][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.579577][ T5632] usb 1-1: USB disconnect, device number 95 [ 385.586550][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.617910][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.651686][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.691664][ T5286] snd-usb-audio 5-1:6.6: probe with driver snd-usb-audio failed with error -2 [ 385.700191][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.711384][ T5286] usb 5-1: USB disconnect, device number 80 [ 385.747990][ T8842] udevd[8842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.890036][ T5229] Bluetooth: hci0: command tx timeout [ 385.949070][T10688] hsr_slave_0: entered promiscuous mode [ 385.959299][T10688] hsr_slave_1: entered promiscuous mode [ 385.973791][T10688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.981686][T10688] Cannot create hsr debugfs directory [ 386.059811][T10642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.135136][ T5229] Bluetooth: hci4: command 0x0406 tx timeout [ 386.280063][ T5243] Bluetooth: hci1: command tx timeout [ 386.378038][T10642] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.410443][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.417629][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.523091][ T3040] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.530294][ T3040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.774616][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.912076][T10642] veth0_vlan: entered promiscuous mode [ 387.009067][T10642] veth1_vlan: entered promiscuous mode [ 387.027065][T10688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.054165][T10688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.083870][T10688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.167262][T10688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.282234][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.324174][T10642] veth0_macvtap: entered promiscuous mode [ 387.324957][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.357736][T10642] veth1_macvtap: entered promiscuous mode [ 387.398458][T10642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.430281][T10642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.449230][T10642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.465171][T10642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.485403][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.511572][T10642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.532771][T10642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.550239][T10642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.570209][ T5286] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 387.589079][T10642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.601334][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.648380][T10642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.668310][T10642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.677289][T10642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.695262][T10642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.760949][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 387.768229][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.787914][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.810483][ T5286] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 387.819660][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.862212][ T5286] usb 5-1: config 0 descriptor?? [ 387.881516][T10688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.957559][T10688] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.965667][ T5243] Bluetooth: hci0: command tx timeout [ 388.012005][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.019238][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.098275][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.105532][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.162551][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.215479][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.300455][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 388.300475][ T29] audit: type=1400 audit(1725855000.999:915): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D31383434363734343037333730393535313631353078303030303030303030303030303030353031373737373737373737373737373737373737373737 pid=10769 comm="syz.4.1297" [ 388.316130][T10774] netlink: 115104 bytes leftover after parsing attributes in process `syz.4.1297'. [ 388.350272][T10774] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 388.381673][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.406454][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.592272][ T5286] usbhid 5-1:0.0: can't add hid device: -71 [ 388.615416][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.619725][ T5286] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 388.655839][ T5286] usb 5-1: USB disconnect, device number 81 [ 388.819777][T10688] veth0_vlan: entered promiscuous mode [ 388.839146][T10688] veth1_vlan: entered promiscuous mode [ 388.918222][T10688] veth0_macvtap: entered promiscuous mode [ 388.947127][T10688] veth1_macvtap: entered promiscuous mode [ 388.983538][ T58] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 388.992095][ T5231] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 389.005949][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.021144][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.037987][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.049572][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.060936][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.087156][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.111527][T10688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.136783][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.161540][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.180629][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.193588][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.207421][ T5231] usb 2-1: Using ep0 maxpacket: 8 [ 389.212793][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 389.221964][ T5231] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 389.231862][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 389.253972][ T5231] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 389.275319][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.287381][ T58] usb 4-1: config 6 has an invalid interface number: 49 but max is 0 [ 389.301824][ T58] usb 4-1: config 6 has no interface number 0 [ 389.309465][ T5231] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 389.318881][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.343513][ T58] usb 4-1: config 6 interface 49 altsetting 8 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.356010][ T5231] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.372715][T10688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.385221][ T58] usb 4-1: config 6 interface 49 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.406674][ T5231] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 389.419843][ T58] usb 4-1: config 6 interface 49 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 389.440035][ T5231] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 389.451687][T10688] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.467751][ T58] usb 4-1: config 6 interface 49 altsetting 8 endpoint 0x4 has an invalid bInterval 23, changing to 8 [ 389.479102][T10688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.489822][ T5231] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 389.500790][T10688] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.509652][ T5231] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.523038][ T58] usb 4-1: config 6 interface 49 has no altsetting 0 [ 389.530645][T10688] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.543492][ T5231] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 389.553836][ T5231] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 389.554118][ T58] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=be.b7 [ 389.576734][ T5231] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 389.597377][ T5231] usb 2-1: config 246 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.611777][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.619985][ T58] usb 4-1: Product: syz [ 389.624642][ T58] usb 4-1: Manufacturer: syz [ 389.629551][ T58] usb 4-1: SerialNumber: syz [ 389.636526][ T5231] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 389.648947][ T5231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.658894][ T5231] usb 2-1: Product: syz [ 389.664016][ T5231] usb 2-1: Manufacturer: syz [ 389.670555][ T5231] usb 2-1: SerialNumber: syz [ 389.906597][ T5231] adutux 2-1:246.0: interrupt endpoints not found [ 389.931363][T10793] Cannot find map_set index 0 as target [ 389.946624][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.962207][ T5231] usb 2-1: USB disconnect, device number 87 [ 389.986785][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.040112][ T5243] Bluetooth: hci0: command tx timeout [ 390.165248][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.208054][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.255749][ T58] usbhid 4-1:6.49: couldn't find an input interrupt endpoint [ 390.313577][ T58] usb 4-1: USB disconnect, device number 84 [ 390.396886][T10822] netlink: 'syz.2.1288': attribute type 4 has an invalid length. [ 391.121176][ T58] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 391.290141][ T5629] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 391.324631][ T58] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 391.346196][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.362724][ T58] usb 3-1: Product: syz [ 391.372606][ T58] usb 3-1: Manufacturer: syz [ 391.381850][ T58] usb 3-1: SerialNumber: syz [ 391.397193][ T58] usb 3-1: config 0 descriptor?? [ 391.480641][ T5629] usb 4-1: Using ep0 maxpacket: 16 [ 391.489691][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.517721][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.548022][ T5629] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.588011][ T5629] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.615550][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.643456][ T5629] usb 4-1: config 0 descriptor?? [ 391.798706][T10866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'. [ 392.300915][ T5629] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 392.324639][ T5629] microsoft 0003:045E:07DA.0036: No inputs registered, leaving [ 392.346165][ T5629] microsoft 0003:045E:07DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 392.369179][ T5629] microsoft 0003:045E:07DA.0036: no inputs found [ 392.375869][ T5629] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 392.716749][ T5629] usb 4-1: USB disconnect, device number 85 [ 392.739390][ T29] audit: type=1326 audit(1725855005.439:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10871 comm="syz.4.1304" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x0 [ 393.709768][ T29] audit: type=1326 audit(1725855006.409:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 393.795762][ T29] audit: type=1326 audit(1725855006.409:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 393.842449][T10879] batadv0: entered promiscuous mode [ 393.880851][ T29] audit: type=1326 audit(1725855006.439:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 393.912848][T10879] batadv_slave_0: entered promiscuous mode [ 393.918881][T10879] batadv_slave_0: left promiscuous mode [ 393.959563][T10879] batadv0: left promiscuous mode [ 393.980700][ T29] audit: type=1326 audit(1725855006.439:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.018398][ T58] usb-storage 3-1:0.0: USB Mass Storage device detected [ 394.074537][ T29] audit: type=1326 audit(1725855006.439:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.170743][ T29] audit: type=1326 audit(1725855006.449:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.233988][ T58] usb 3-1: USB disconnect, device number 84 [ 394.277858][ T29] audit: type=1326 audit(1725855006.449:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.400429][ T29] audit: type=1326 audit(1725855006.449:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.464780][ T29] audit: type=1326 audit(1725855006.459:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.485996][T10896] team0: entered promiscuous mode [ 394.493330][T10896] team_slave_0: entered promiscuous mode [ 394.499343][T10896] team_slave_1: entered promiscuous mode [ 394.510199][ T5632] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 394.521105][ T5231] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 394.539511][ T29] audit: type=1326 audit(1725855006.459:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 394.577224][T10893] team0: left promiscuous mode [ 394.589396][T10893] team_slave_0: left promiscuous mode [ 394.602335][T10893] team_slave_1: left promiscuous mode [ 394.710041][ T5231] usb 4-1: Using ep0 maxpacket: 16 [ 394.722304][ T5231] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.742906][ T5231] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.757852][ T5231] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 394.770314][ T5632] usb 1-1: Using ep0 maxpacket: 16 [ 394.781172][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.798921][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.809163][ T5231] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 394.811264][ T5632] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 394.835231][ T5632] usb 1-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 394.849511][ T5632] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.856275][ T5632] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 394.859847][ T5231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.866200][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.880653][ T5231] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 394.880685][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.899258][ T5632] usb 1-1: config 0 descriptor?? [ 394.917437][ T5231] usb 4-1: config 0 descriptor?? [ 394.988509][T10902] netlink: 'syz.2.1313': attribute type 10 has an invalid length. [ 395.044380][T10902] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 395.250145][ T58] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 395.350481][ T5632] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0037/input/input58 [ 395.359209][ T5231] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.0038/input/input59 [ 395.442299][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 395.455378][ T58] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 395.472599][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.484875][ T5231] kye 0003:0458:5010.0038: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 395.525939][ T5632] kye 0003:0458:5010.0037: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 395.531086][ T58] usb 3-1: config 0 descriptor?? [ 395.596694][ T5632] usb 1-1: USB disconnect, device number 96 [ 395.626911][ T58] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 395.683471][ T5629] usb 4-1: USB disconnect, device number 86 [ 395.819348][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.830605][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.844212][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.855680][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.864334][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.877188][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.890952][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.905678][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.914439][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.924510][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.948766][ T58] usb 3-1: USB disconnect, device number 85 [ 396.328561][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 396.596099][T10920] FAULT_INJECTION: forcing a failure. [ 396.596099][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 396.617661][T10920] CPU: 1 UID: 0 PID: 10920 Comm: syz.2.1317 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 396.628469][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 396.638510][T10920] Call Trace: [ 396.641861][T10920] [ 396.644785][T10920] dump_stack_lvl+0x241/0x360 [ 396.649448][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.654644][T10920] ? __pfx__printk+0x10/0x10 [ 396.659218][T10920] ? __kmalloc_noprof+0xb0/0x400 [ 396.664401][T10920] ? __pfx___might_resched+0x10/0x10 [ 396.669686][T10920] ? do_fast_syscall_32+0x34/0x80 [ 396.674735][T10920] should_fail_ex+0x3b0/0x4e0 [ 396.679442][T10920] ? copy_splice_read+0x18d/0xb60 [ 396.684470][T10920] should_failslab+0xac/0x100 [ 396.689138][T10920] ? copy_splice_read+0x18d/0xb60 [ 396.694146][T10920] __kmalloc_noprof+0xd8/0x400 [ 396.698981][T10920] ? __pfx_copy_splice_read+0x10/0x10 [ 396.704340][T10920] copy_splice_read+0x18d/0xb60 [ 396.709175][T10920] ? __asan_memset+0x23/0x50 [ 396.713753][T10920] ? __pfx_copy_splice_read+0x10/0x10 [ 396.719112][T10920] ? __raw_spin_lock_init+0x45/0x100 [ 396.724388][T10920] ? alloc_pipe_info+0x370/0x4d0 [ 396.729314][T10920] ? __pfx_copy_splice_read+0x10/0x10 [ 396.734756][T10920] splice_direct_to_actor+0x4b7/0xc90 [ 396.740117][T10920] ? __pfx_direct_splice_actor+0x10/0x10 [ 396.745729][T10920] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 396.751604][T10920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.757916][T10920] do_splice_direct+0x28c/0x3e0 [ 396.762749][T10920] ? __pfx_do_splice_direct+0x10/0x10 [ 396.768098][T10920] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 396.774080][T10920] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 396.779990][T10920] ? rw_verify_area+0x13d/0x6b0 [ 396.784847][T10920] ? rw_verify_area+0x1d2/0x6b0 [ 396.789679][T10920] do_sendfile+0x56d/0xe20 [ 396.794090][T10920] ? __pfx___might_resched+0x10/0x10 [ 396.799363][T10920] ? __pfx_do_sendfile+0x10/0x10 [ 396.804547][T10920] ? __might_fault+0xaa/0x120 [ 396.809207][T10920] ? __might_fault+0xc6/0x120 [ 396.813874][T10920] __se_compat_sys_sendfile+0x121/0x1f0 [ 396.819586][T10920] ? __pfx___se_compat_sys_sendfile+0x10/0x10 [ 396.825650][T10920] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 396.832259][T10920] ? lockdep_hardirqs_on+0x99/0x150 [ 396.837484][T10920] __do_fast_syscall_32+0xb4/0x110 [ 396.842618][T10920] ? asm_common_interrupt+0x26/0x40 [ 396.847836][T10920] ? lockdep_hardirqs_on+0x99/0x150 [ 396.853063][T10920] do_fast_syscall_32+0x34/0x80 [ 396.857919][T10920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.864239][T10920] RIP: 0023:0xf747d579 [ 396.868298][T10920] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 396.887908][T10920] RSP: 002b:00000000f575556c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 396.896333][T10920] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000003 [ 396.904306][T10920] RDX: 00000000200003c0 RSI: 0000000000000009 RDI: 0000000000000000 [ 396.912278][T10920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.920253][T10920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 396.928229][T10920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.936203][T10920] [ 397.100091][ T58] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 397.186827][T10924] netlink: 'syz.2.1319': attribute type 4 has an invalid length. [ 397.293645][ T58] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.302722][ T58] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 397.322184][ T58] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.336226][T10928] batadv0: entered promiscuous mode [ 397.345236][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 397.357969][T10928] batadv_slave_0: entered promiscuous mode [ 397.364214][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 397.376446][T10928] batadv_slave_0: left promiscuous mode [ 397.396214][ T58] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.416258][ T58] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.429072][T10928] batadv0: left promiscuous mode [ 397.437320][ T58] usb 4-1: Product: syz [ 397.442354][ T58] usb 4-1: Manufacturer: syz [ 397.455885][ T58] cdc_wdm 4-1:1.0: skipping garbage [ 397.475801][ T58] cdc_wdm 4-1:1.0: skipping garbage [ 397.497503][ T58] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 397.504044][ T58] cdc_wdm 4-1:1.0: Unknown control protocol [ 397.561738][ T5632] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 397.642828][T10935] batadv0: entered promiscuous mode [ 397.649657][T10935] batadv_slave_0: entered promiscuous mode [ 397.660184][T10935] batadv_slave_0: left promiscuous mode [ 397.677264][T10935] batadv0: left promiscuous mode [ 397.772179][ T5632] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.782738][ T5632] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.799030][ T5632] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 397.809651][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.818212][ T5632] usb 1-1: Product: syz [ 397.825098][ T5632] usb 1-1: Manufacturer: syz [ 397.830312][ T5632] usb 1-1: SerialNumber: syz [ 397.847562][ T5632] usb 1-1: config 0 descriptor?? [ 397.890072][ T5629] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 398.094436][ T5629] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 398.136927][ T5629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.161447][ T5632] usb 1-1: USB disconnect, device number 97 [ 398.182476][ T5629] usb 5-1: Product: syz [ 398.205657][ T5629] usb 5-1: Manufacturer: syz [ 398.225907][ T5629] usb 5-1: SerialNumber: syz [ 398.249575][ T5629] usb 5-1: config 0 descriptor?? [ 398.610065][ T58] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 398.711670][ T5632] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 398.790343][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 398.806413][ T58] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.818676][ T58] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.839121][ T58] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.849400][ T58] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 398.864749][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.873217][ T58] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 398.884512][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.896564][ T58] usb 2-1: config 0 descriptor?? [ 398.921528][ T5632] usb 3-1: Using ep0 maxpacket: 16 [ 398.934533][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.948967][ T5632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.959079][ T5629] usb 5-1: Firmware version (0.0) predates our first public release. [ 398.973932][ T5629] usb 5-1: Please update to version 0.2 or newer [ 398.980167][ T5463] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 398.982751][ T5632] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.017592][ T5632] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.029610][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.042108][ T5632] usb 3-1: config 0 descriptor?? [ 399.064704][ T5629] usb 5-1: USB disconnect, device number 82 [ 399.197333][ T5463] usb 1-1: Using ep0 maxpacket: 16 [ 399.212818][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.232021][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.244123][ T5463] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.280091][ T5463] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.312790][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.313205][ T940] usb 4-1: USB disconnect, device number 87 [ 399.344732][ T5463] usb 1-1: config 0 descriptor?? [ 399.376376][ T58] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0039/input/input60 [ 399.469268][ T58] kye 0003:0458:5010.0039: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 399.670971][ T5632] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 399.699170][ T5632] microsoft 0003:045E:07DA.003A: No inputs registered, leaving [ 399.726419][ T5632] microsoft 0003:045E:07DA.003A: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 399.752924][ T5231] usb 2-1: USB disconnect, device number 88 [ 399.765269][ T5632] microsoft 0003:045E:07DA.003A: no inputs found [ 399.773640][ T5632] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 399.872984][ T5632] usb 3-1: USB disconnect, device number 86 [ 399.988263][ T5463] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 400.004329][ T5463] microsoft 0003:045E:07DA.003B: No inputs registered, leaving [ 400.021361][ T5463] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 400.033172][ T5463] microsoft 0003:045E:07DA.003B: no inputs found [ 400.041780][ T5463] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 400.210030][ T940] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 400.230289][ T58] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 400.254276][ T5632] usb 1-1: USB disconnect, device number 98 [ 400.404329][ T940] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 400.414476][T10961] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1331'. [ 400.430167][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.430902][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 400.442108][ T940] usb 4-1: Product: syz [ 400.448375][ T940] usb 4-1: Manufacturer: syz [ 400.457756][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.463514][ T940] usb 4-1: SerialNumber: syz [ 400.469447][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.485867][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.500891][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.518925][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.520901][ T940] usb 4-1: config 0 descriptor?? [ 400.541190][ T58] usb 5-1: config 0 descriptor?? [ 400.970219][ T5463] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 401.150655][ T58] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 401.180031][ T5463] usb 2-1: Using ep0 maxpacket: 16 [ 401.194892][ T5463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.210633][ T58] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 401.229291][ T5463] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.241056][ T58] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 401.262806][ T5463] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 401.285706][ T58] microsoft 0003:045E:07DA.003C: no inputs found [ 401.292633][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.304325][ T58] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 401.333458][ T5463] usb 2-1: config 0 descriptor?? [ 401.352172][ T940] usb 4-1: Firmware version (0.0) predates our first public release. [ 401.399252][ T940] usb 4-1: Please update to version 0.2 or newer [ 401.457438][ T5632] usb 5-1: USB disconnect, device number 83 [ 401.492531][ T940] usb 4-1: USB disconnect, device number 88 [ 401.570025][ T6129] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 401.741803][ T5632] usb 2-1: USB disconnect, device number 89 [ 401.762290][ T6129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 401.780367][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 401.792135][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.804763][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 401.818134][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.832420][ T6129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 401.839872][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 401.870024][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.888508][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 401.901893][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.914967][ T6129] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 401.922543][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 401.932948][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.943067][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 401.955134][ T6129] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.977958][ T6129] usb 1-1: string descriptor 0 read error: -22 [ 401.984527][ T6129] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 401.995377][ T6129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.024502][ T6129] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 402.250320][ T5632] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 402.273452][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 402.378917][ T6129] usb 1-1: USB disconnect, device number 99 [ 402.415684][T10998] ------------[ cut here ]------------ [ 402.421991][T10998] name '44825' [ 402.430611][T10998] WARNING: CPU: 1 PID: 10998 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 [ 402.440365][T10998] Modules linked in: [ 402.444311][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.0.1334 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 402.455170][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 402.459207][ T5632] usb 2-1: Using ep0 maxpacket: 16 [ 402.465334][T10998] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 402.465441][T10998] Code: ff eb 05 e8 5b 20 5e ff 48 8b 5c 24 10 48 c7 c7 20 f8 aa 8e e8 1a 68 8e 09 90 48 c7 c7 a0 3a 1b 8c 48 89 de e8 6a 44 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 402.485362][ T5632] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.496300][T10998] RSP: 0018:ffffc90004be7b80 EFLAGS: 00010246 [ 402.496334][T10998] RAX: 6389e60703c5f000 RBX: ffff888064d2e548 RCX: 0000000000040000 [ 402.496351][T10998] RDX: ffffc9000a469000 RSI: 0000000000012150 RDI: 0000000000012151 [ 402.496365][T10998] RBP: ffffc90004be7c68 R08: ffffffff8155b372 R09: 1ffff1101710519a [ 402.496387][T10998] R10: dffffc0000000000 R11: ffffed101710519b R12: ffff888048a05140 [ 402.496403][T10998] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 402.496417][T10998] FS: 0000000000000000(0000) GS:ffff8880b8900000(0063) knlGS:00000000f5735b40 [ 402.496436][T10998] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 402.496452][T10998] CR2: 00000000f7464f84 CR3: 000000003236c000 CR4: 00000000003526f0 [ 402.496472][T10998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.539134][ T5632] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.540336][T10998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.560055][ T5632] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.565569][T10998] Call Trace: [ 402.578173][ T5632] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 402.580200][T10998] [ 402.580216][T10998] ? __warn+0x163/0x4e0 [ 402.580241][T10998] ? remove_proc_entry+0x2e7/0x5d0 [ 402.580271][T10998] ? report_bug+0x2b3/0x500 [ 402.580297][T10998] ? remove_proc_entry+0x2e7/0x5d0 [ 402.580327][T10998] ? handle_bug+0x3e/0x70 [ 402.580350][T10998] ? exc_invalid_op+0x1a/0x50 [ 402.594034][ T5632] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.598079][T10998] ? asm_exc_invalid_op+0x1a/0x20 [ 402.617468][ T5632] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 402.617501][ T5632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.631957][ T5632] usb 2-1: config 0 descriptor?? [ 402.634426][T10998] ? __warn_printk+0x292/0x360 [ 402.655014][T11004] sch_fq: defrate 0 ignored. [ 402.656358][T10998] ? remove_proc_entry+0x2e7/0x5d0 [ 402.656417][T10998] ? __local_bh_enable_ip+0x168/0x200 [ 402.656443][T10998] ? __pfx_remove_proc_entry+0x10/0x10 [ 402.726163][T10998] ? bcm_release+0x1ec/0x880 [ 402.730911][T10998] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 402.736667][T10998] ? do_raw_spin_unlock+0x13c/0x8b0 [ 402.741972][T10998] bcm_release+0x250/0x880 [ 402.746429][T10998] sock_close+0xbc/0x240 [ 402.750788][T10998] ? __pfx_sock_close+0x10/0x10 [ 402.755661][T10998] __fput+0x24a/0x8a0 [ 402.759677][T10998] task_work_run+0x24f/0x310 [ 402.764515][T10998] ? __pfx_task_work_run+0x10/0x10 [ 402.769650][T10998] ? syscall_exit_to_user_mode+0xa3/0x370 [ 402.770177][ T5631] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 402.775481][T10998] syscall_exit_to_user_mode+0x168/0x370 [ 402.775518][T10998] __do_fast_syscall_32+0xc4/0x110 [ 402.775541][T10998] ? ret_from_fork_asm+0x1a/0x30 [ 402.798909][T10998] ? lockdep_hardirqs_on+0x99/0x150 [ 402.804193][T10998] do_fast_syscall_32+0x34/0x80 [ 402.809078][T10998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.816150][T10998] RIP: 0023:0xf745d579 [ 402.820803][T10998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 402.840725][T10998] RSP: 002b:00000000f573556c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 402.849176][T10998] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 402.857227][T10998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.865291][T10998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.873326][T10998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.881475][T10998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.889490][T10998] [ 402.892618][T10998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.899995][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.0.1334 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 402.910765][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 402.920821][T10998] Call Trace: [ 402.924107][T10998] [ 402.927039][T10998] dump_stack_lvl+0x241/0x360 [ 402.931730][T10998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.936918][T10998] ? __pfx__printk+0x10/0x10 [ 402.941521][T10998] ? vscnprintf+0x5d/0x90 [ 402.945870][T10998] panic+0x349/0x860 [ 402.949782][T10998] ? __warn+0x172/0x4e0 [ 402.953953][T10998] ? __pfx_panic+0x10/0x10 [ 402.958401][T10998] __warn+0x346/0x4e0 [ 402.962383][T10998] ? remove_proc_entry+0x2e7/0x5d0 [ 402.967508][T10998] report_bug+0x2b3/0x500 [ 402.971858][T10998] ? remove_proc_entry+0x2e7/0x5d0 [ 402.976986][T10998] handle_bug+0x3e/0x70 [ 402.981154][T10998] exc_invalid_op+0x1a/0x50 [ 402.985690][T10998] asm_exc_invalid_op+0x1a/0x20 [ 402.990549][T10998] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 402.996289][T10998] Code: ff eb 05 e8 5b 20 5e ff 48 8b 5c 24 10 48 c7 c7 20 f8 aa 8e e8 1a 68 8e 09 90 48 c7 c7 a0 3a 1b 8c 48 89 de e8 6a 44 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 403.015908][T10998] RSP: 0018:ffffc90004be7b80 EFLAGS: 00010246 [ 403.021996][T10998] RAX: 6389e60703c5f000 RBX: ffff888064d2e548 RCX: 0000000000040000 [ 403.029966][T10998] RDX: ffffc9000a469000 RSI: 0000000000012150 RDI: 0000000000012151 [ 403.037938][T10998] RBP: ffffc90004be7c68 R08: ffffffff8155b372 R09: 1ffff1101710519a [ 403.045908][T10998] R10: dffffc0000000000 R11: ffffed101710519b R12: ffff888048a05140 [ 403.053882][T10998] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 403.061856][T10998] ? __warn_printk+0x292/0x360 [ 403.066627][T10998] ? __local_bh_enable_ip+0x168/0x200 [ 403.072024][T10998] ? __pfx_remove_proc_entry+0x10/0x10 [ 403.077486][T10998] ? bcm_release+0x1ec/0x880 [ 403.082080][T10998] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.087795][T10998] ? do_raw_spin_unlock+0x13c/0x8b0 [ 403.093015][T10998] bcm_release+0x250/0x880 [ 403.097714][T10998] sock_close+0xbc/0x240 [ 403.101970][T10998] ? __pfx_sock_close+0x10/0x10 [ 403.106834][T10998] __fput+0x24a/0x8a0 [ 403.110829][T10998] task_work_run+0x24f/0x310 [ 403.115423][T10998] ? __pfx_task_work_run+0x10/0x10 [ 403.120547][T10998] ? syscall_exit_to_user_mode+0xa3/0x370 [ 403.126268][T10998] syscall_exit_to_user_mode+0x168/0x370 [ 403.131896][T10998] __do_fast_syscall_32+0xc4/0x110 [ 403.137000][T10998] ? ret_from_fork_asm+0x1a/0x30 [ 403.141947][T10998] ? lockdep_hardirqs_on+0x99/0x150 [ 403.147156][T10998] do_fast_syscall_32+0x34/0x80 [ 403.152008][T10998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.158340][T10998] RIP: 0023:0xf745d579 [ 403.162412][T10998] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 403.182015][T10998] RSP: 002b:00000000f573556c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 403.190424][T10998] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 403.198388][T10998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.206361][T10998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.214325][T10998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 403.222303][T10998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.230283][T10998] [ 403.233415][T10998] Kernel Offset: disabled [ 403.237841][T10998] Rebooting in 86400 seconds..