last executing test programs: 13.935943991s ago: executing program 3 (id=3787): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$inet6(0xa, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x12) 12.964476621s ago: executing program 3 (id=3791): syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x6, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) 11.510234179s ago: executing program 2 (id=3793): openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0xaa80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)={0x43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'trylock', ' ', 'none'}, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x87) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x541b) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000180), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x10001, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0xb, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x905942) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000008000d00000080561bdc0000000007340004800800014000000000080001400000800008000140000000d40800014080000001080001400000caf708000140000000040900010073797a3000000000"], 0x54}}, 0x48000) write$evdev(r8, &(0x7f0000000540)=[{{0x77359400}, 0x11, 0xf}], 0x18) 11.424748617s ago: executing program 0 (id=3794): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xa, 0x3, 0x3, 0x98, 0x4, 0x2, 0x0, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x4, 0x702, 0x0, 0x4}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0xfffffffa, @mcast2, 0x1}}}, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 10.033760661s ago: executing program 0 (id=3795): syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440)) r1 = creat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4) tkill(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'pimreg0\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, 0x0, 0x8800) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x51b, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xc004) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12) sendto$inet6(r5, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r5, 0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902980002010000000904000001020d0000052406000105240000000d240f5ea1000000000000000006241a4c9c001024078000000000feff000000000600052401000027241300d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d0905810300000000000904010000020d00000904010102020d0000090582020000000300090503020800000100"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.951593729s ago: executing program 3 (id=3796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a75940000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x10e, 0x0, 0x54}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0x1}]) read$dsp(r5, &(0x7f00000002c0)=""/185, 0xb9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x81, "95693fcf768492cb50d2a9106423807133a9829847a77b2399d36f1385748c1e", 0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f0000000200)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = dup2(r10, r9) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=r0, @ANYRESHEX], 0x9c}}, 0x0) 9.601317687s ago: executing program 2 (id=3798): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000004c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f67de5272232c32"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "32341681"}, @output_terminal={0x9}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "e0182c1423"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0xa1, 0x58, "aa8ec4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x3f, 0x0, {0x7, 0x25, 0x1, 0x2, 0xff, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x9, {0x7, 0x25, 0x1, 0x80, 0x84}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x81, 0x40, 0x4, 0x20, 0x81}, 0x15, &(0x7f0000000500)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xc, 0xf00, 0x101, [0x0]}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x415}}, {0x9d, &(0x7f0000000580)=@string={0x9d, 0x3, "79594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd089bd8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d90259ac61a382107a555f6cbedf657fae87a95e5a3336f40b91e28bfeca08fe7e43e2139e2a1b34eefdf6f454730039"}}, {0x3d, &(0x7f0000000680)=@string={0x3d, 0x3, "a162a8057c983cc4c9206ba7e83958361307aac221a037db83269f2d9458f0e1fc84a4f2230f3e9d90a6275173d68b06f6dc97ca15d80e9efad8aa"}}]}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) 8.342321254s ago: executing program 0 (id=3803): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/62, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)="80", 0x2}], 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) 7.915834613s ago: executing program 2 (id=3804): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a75940000000109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x10e, 0x0, 0x54}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, 0x0) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) read$dsp(r4, &(0x7f00000002c0)=""/185, 0xb9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x81, "95693fcf768492cb50d2a9106423807133a9829847a77b2399d36f1385748c1e", 0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000200)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = dup2(0xffffffffffffffff, r7) close_range(r8, 0xffffffffffffffff, 0x0) 6.432113082s ago: executing program 4 (id=3806): syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x6, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) 6.283874395s ago: executing program 3 (id=3807): syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 5.88659s ago: executing program 0 (id=3808): openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0xaa80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0404309, &(0x7f0000000040)={0x43, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'trylock', ' ', 'none'}, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x87) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x541b) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000180), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x10001, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0xb, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x905942) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000008000d00000080561bdc0000000007340004800800014000000000080001400000800008000140000000d40800014080000001080001400000caf708000140000000040900010073797a3000000000"], 0x54}}, 0x48000) write$evdev(r8, &(0x7f0000000540)=[{{0x77359400}, 0x11, 0xf}], 0x18) 5.172407427s ago: executing program 1 (id=3809): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x29}, &(0x7f0000bbdffc)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8104, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xe1}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.765060432s ago: executing program 1 (id=3810): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001440)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x540b, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.607133117s ago: executing program 0 (id=3811): prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000440)={0x80000000, 0x0, &(0x7f00000000c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000002c0)={r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000003c0)}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) 4.531123674s ago: executing program 3 (id=3812): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$inet6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x12) 4.454963813s ago: executing program 4 (id=3813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003080)=ANY=[], 0xbb4}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/13, 0xd}, {&(0x7f0000000840)=""/218, 0xda}], 0x2}}], 0x1, 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000005c0)) set_tid_address(0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) 4.102753656s ago: executing program 1 (id=3814): r0 = shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) (fail_nth: 1) 4.085412696s ago: executing program 4 (id=3815): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000200)='./file1\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0xe800, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call]}, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0xffffffffffffffda, 0x0, {{0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000200)) 4.059350209s ago: executing program 3 (id=3816): syz_emit_vhci(0x0, 0x17) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2) getrlimit(0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd6, 0x20}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb1, 0x81}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x24, 0x2a, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="1d4dec0e78f0add7cc9fadc5dc13c0b1"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8c1}, 0x801) setsockopt(0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000008000000b5020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.666469701s ago: executing program 2 (id=3817): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB="71f3d142a21bed96f4b2cdc52833609887469278ac7c892237a1ce6d89685ea17a31215c769be08b9d8fc6de5c1ebbbbdc0d676edefc9a9aaea7f227f7183cb19b4fdb4050", @ANYRES32=r0, @ANYRES8=r0, @ANYRES8, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x2000000000000015, &(0x7f0000000a80)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x1ef, 0x8, &(0x7f0000000a80)="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", &(0x7f0000000500)=""/8, 0x5ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x5f) iopl(0x3) setitimer(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000200)=r8) r9 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r9, 0xe, &(0x7f0000000280)=""/128) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r10, 0x402, 0x100000019) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000001800000000000000100001302000000010000000000000000000000002e5f00"], 0x0, 0x34}, 0x20) 3.665486369s ago: executing program 1 (id=3818): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 3.537135899s ago: executing program 0 (id=3819): r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000003580)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0), 0x10) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r5, &(0x7f0000001200)=""/99, 0x63, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigreturn() process_mrelease(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/102, 0x66}], 0x1, 0x97, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) 3.125141961s ago: executing program 4 (id=3820): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x14f13b79faf8e7df) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5f23150"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) open(0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') fcntl$notify(r2, 0x402, 0x80000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000000000002000000080000000000000000000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0a010102ac1414aa000000001400000000000000000000000100000005000000000000003c00000000000000000000000700000044144c43ffffffff000000020a01010100000000943801008612000000000709fe712315e4ce300503ac01000000000011000000000000000000000001000000050000000000000085b6553a1ded790cfd3ec4de2d44fd06c608d611c991ccfeaa0d651160b19c8ad2c32949dce196180c813e119e9e437e2574d425140722615dc2dc3a22f8a17aea17abd627e7cb286dcc17313b9c57"], 0xa0}, 0x40000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000180)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socket$inet6(0xa, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=@allocspi={0xfc, 0x16, 0x401, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0xfd}, @in6=@private0={0xfc, 0x0, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote}, @in=@remote, {}, {0x0, 0x0, 0x8}}, 0x8, 0xffffffff}, [@migrate={0x4, 0x1b}]}, 0xfc}}, 0x0) add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000001000)={'syz', 0x3}, &(0x7f0000001000)='.', 0x1, 0x0) 1.690825229s ago: executing program 4 (id=3821): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) 1.294238628s ago: executing program 1 (id=3822): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000200)='./file1\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0xe800, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call]}, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0xffffffffffffffda, 0x0, {{0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)) 587.081394ms ago: executing program 4 (id=3823): syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x6, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) 581.004571ms ago: executing program 2 (id=3824): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001440)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x540b, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 82.347214ms ago: executing program 1 (id=3825): syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000080)=ANY=[@ANYBLOB], 0x44) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x120a0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0xe}}, 0x0, 0x0, {0x0, 0x6, @default_ibss_ssid}, @val, @void, [{0xdd, 0x6, "62160a9990ee"}]}, 0x2e) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x4, "1c4542", 0x7}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f00000001c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff08020100000000000000000000640000000301ae"], 0x33) 0s ago: executing program 2 (id=3826): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$inet6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x12) kernel console output (not intermixed with test programs): 17264] team0: Port device netdevsim0 added [ 1118.654352][T17268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3363'. [ 1118.671690][ T5138] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1118.846868][T17273] fuse: Bad value for 'fd' [ 1119.006891][ T1791] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1119.046864][ T5138] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1119.206762][ T1791] usb 4-1: Using ep0 maxpacket: 8 [ 1119.217078][ T1791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1119.227691][ T1791] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping [ 1119.236912][ T5138] usb 1-1: Using ep0 maxpacket: 32 [ 1119.242204][ T1791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.259166][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.270384][ T1791] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1119.286840][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.296807][ T1791] usb 4-1: config 1 has no interface number 1 [ 1119.302954][ T1791] usb 4-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 1119.316032][ T5138] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1119.326654][ T1791] usb 4-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 1119.340274][ T5138] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1119.351330][ T5138] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1119.361413][ T1791] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1119.372271][ T1791] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.397051][ T1791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.405119][ T1791] usb 4-1: Product: 쑿퉈ਝ쑻 [ 1119.410439][ T5138] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1119.425396][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.446722][ T1791] usb 4-1: Manufacturer: ф [ 1119.451424][ T5138] usb 1-1: Product: syz [ 1119.455696][ T1791] usb 4-1: SerialNumber: syz [ 1119.461100][ T5138] usb 1-1: Manufacturer: syz [ 1119.473255][ T5138] usb 1-1: SerialNumber: syz [ 1119.512736][T17280] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1119.708558][ T5138] cdc_ncm 1-1:1.0: bind() failure [ 1119.739041][ T5138] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1119.755018][ T1791] usb 4-1: USB disconnect, device number 125 [ 1119.764093][ T5138] cdc_ncm 1-1:1.1: bind() failure [ 1119.810622][ T5138] usb 1-1: USB disconnect, device number 117 [ 1120.737365][ T5138] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1120.938976][ T5138] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1124.560512][ T5138] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1124.580066][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.659590][ T5138] usb 4-1: can't set config #17, error -71 [ 1124.693837][ T5138] usb 4-1: USB disconnect, device number 126 [ 1125.838794][T17312] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1125.874466][T17312] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1126.073647][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.081555][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.107172][ T5140] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1126.206748][ T5138] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1126.403177][ T5138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.426446][ T5138] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.452490][ T5138] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.462858][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.471978][ T5138] usb 4-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1126.486043][ T5138] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1126.509742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.524856][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1126.535792][ T5138] usb 4-1: SerialNumber: syz [ 1128.561875][ T5138] usb 4-1: 0:2 : does not exist [ 1128.675133][ T5138] usb 4-1: USB disconnect, device number 127 [ 1128.686999][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 1128.724828][ T5140] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1128.751533][ T5140] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1128.768572][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.821557][ T5140] usb 1-1: config 0 descriptor?? [ 1128.847140][ T5140] usb 1-1: can't set config #0, error -71 [ 1128.880104][ T5140] usb 1-1: USB disconnect, device number 118 [ 1129.333215][T11397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1129.378737][ T5140] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1129.391023][T11397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1129.507444][T11397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1129.517255][T11397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1129.525280][T11397] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1129.533179][T11397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1129.987080][ T5140] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1129.998641][ T5140] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1130.020001][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.035504][ T5140] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1130.052376][T17353] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1130.712775][ T2855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.148985][ T2855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.335462][ T2855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.428211][T17347] chnl_net:caif_netlink_parms(): no params data found [ 1131.577061][T11397] Bluetooth: hci3: command tx timeout [ 1131.629596][ T2855] team0: Port device netdevsim0 removed [ 1131.657525][ T2855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.266825][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.306058][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.317996][T17347] bridge_slave_0: entered allmulticast mode [ 1133.338688][T17347] bridge_slave_0: entered promiscuous mode [ 1133.389299][T17385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.397131][T17385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.406704][ T5140] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1133.496811][T17347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.511064][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.528743][T17347] bridge_slave_1: entered allmulticast mode [ 1133.543775][T17347] bridge_slave_1: entered promiscuous mode [ 1133.554088][ T2855] bridge_slave_1: left allmulticast mode [ 1133.563962][ T2855] bridge_slave_1: left promiscuous mode [ 1133.571378][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.582034][ T2855] bridge_slave_0: left allmulticast mode [ 1133.588047][ T2855] bridge_slave_0: left promiscuous mode [ 1133.597859][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.606655][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 1133.626935][ T5140] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1133.653381][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1133.663614][T11397] Bluetooth: hci3: command tx timeout [ 1133.670543][ T5140] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1133.683279][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.709403][ T5140] usb 5-1: config 0 descriptor?? [ 1133.727003][ T5140] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1133.949436][ T5140] usb 5-1: USB disconnect, device number 124 [ 1134.022003][ T5137] usb 1-1: USB disconnect, device number 119 [ 1134.154043][ T2855] dvmrp0 (unregistering): left allmulticast mode [ 1134.489659][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.502541][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.514438][ T2855] bond0 (unregistering): Released all slaves [ 1134.533919][ T2855] bond1 (unregistering): Released all slaves [ 1134.540145][ T5140] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1134.564151][ T2855] bond2 (unregistering): Released all slaves [ 1134.738563][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 1134.774373][ T5140] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1134.793930][ T5140] usb 3-1: config 179 has no interface number 0 [ 1134.807453][ T5140] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1134.842581][ T5140] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1134.861850][ T5140] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1134.875366][ T5140] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1134.887919][ T2855] tipc: Disabling bearer [ 1134.894059][ T5140] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1134.909210][ T5140] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1134.916307][ T5140] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1134.926031][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.997310][T17395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1135.034924][ T5140] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input146 [ 1135.060248][ T2855] tipc: Left network mode [ 1135.087176][T17347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.149132][T17347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.815268][T11397] Bluetooth: hci3: command tx timeout [ 1136.236056][T17347] team0: Port device team_slave_0 added [ 1136.342407][ T1791] usb 3-1: USB disconnect, device number 118 [ 1136.342448][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1136.354313][T17347] team0: Port device team_slave_1 added [ 1136.379219][ T1791] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1136.534534][T17347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.551094][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.579672][T17414] kvm: kvm [17413]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1136.584720][T17418] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1136.623882][T17347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.711382][T17347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.739314][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.826062][T17347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.172147][T17347] hsr_slave_0: entered promiscuous mode [ 1137.210004][T17347] hsr_slave_1: entered promiscuous mode [ 1137.229447][T17347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.240082][T17347] Cannot create hsr debugfs directory [ 1137.466981][T13407] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1137.543625][ T2855] hsr_slave_0: left promiscuous mode [ 1137.565309][ T2855] hsr_slave_1: left promiscuous mode [ 1137.582223][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.593976][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.606795][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.614740][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.666877][ T2855] veth1_macvtap: left promiscuous mode [ 1137.684688][ T2855] veth0_macvtap: left promiscuous mode [ 1137.701870][T13407] usb 3-1: Using ep0 maxpacket: 8 [ 1137.713131][T10432] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1137.732535][ T2855] veth1_vlan: left promiscuous mode [ 1137.746921][T13407] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1137.966734][T11397] Bluetooth: hci3: command tx timeout [ 1137.973733][ T2855] veth0_vlan: left promiscuous mode [ 1140.926858][T13407] usb 3-1: config 179 has no interface number 0 [ 1140.974822][T13407] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1141.010158][T13407] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1141.027221][T13407] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1141.076196][T13407] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1141.112773][T13407] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1141.155884][T13407] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1141.177560][T13407] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1141.208035][T13407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.602951][T13407] usb 3-1: can't set config #179, error -71 [ 1141.611285][T13407] usb 3-1: USB disconnect, device number 119 [ 1141.716692][ T5137] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1142.451011][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 1142.477843][ T5137] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.494744][ T5137] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.543034][ T5137] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1142.575713][ T5137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.592228][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.601254][ T5137] usb 4-1: Product: syz [ 1142.617637][ T5137] usb 4-1: Manufacturer: syz [ 1142.623060][ T5137] usb 4-1: SerialNumber: syz [ 1142.654006][ T5137] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1142.686805][ T5137] cdc_ncm 4-1:1.0: bind() failure [ 1142.836904][T10432] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1143.029432][T10432] usb 5-1: Using ep0 maxpacket: 8 [ 1143.043506][T10432] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1143.068684][T10432] usb 5-1: config 179 has no interface number 0 [ 1143.093560][T10432] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1143.116861][T10432] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1143.134193][T10432] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1143.152822][T10432] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1143.165097][T10432] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1143.185871][T10432] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1143.209089][T10432] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1143.224002][T10432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.246446][T17455] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1143.281629][T10432] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input148 [ 1143.788362][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 1144.315167][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 1145.606852][T13407] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1145.836932][T13407] usb 1-1: Using ep0 maxpacket: 8 [ 1145.845449][T13407] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1145.881805][T13407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.901249][T13407] usb 1-1: config 0 descriptor?? [ 1146.473136][T17437] vti0: entered promiscuous mode [ 1146.532628][ T5138] usb 4-1: USB disconnect, device number 2 [ 1146.557324][ T1791] usb 5-1: USB disconnect, device number 126 [ 1146.557431][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1146.571728][ T1791] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1146.936155][T10432] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1147.164730][T10432] usb 3-1: Using ep0 maxpacket: 8 [ 1147.293422][T10432] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1147.304397][T10432] usb 3-1: config 179 has no interface number 0 [ 1147.315610][T10432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1147.332979][T10432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1147.417119][T10432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1147.435237][T10432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1147.448034][T10432] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1147.462710][T10432] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1147.473250][T10432] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1147.643540][T10432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.687371][T17481] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1147.722956][T10432] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input149 [ 1147.736124][T17490] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1148.309465][T17347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1148.344123][T17347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1148.394804][T17347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1148.442015][T17347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1148.739085][T17505] netlink: 'syz.3.3429': attribute type 4 has an invalid length. [ 1148.937028][T13407] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1148.965855][T13407] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1149.010481][T13407] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1149.063688][T13407] usb 1-1: USB disconnect, device number 120 [ 1149.497839][T17347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.536965][ T5138] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1149.618499][T17347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.667700][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.675146][T13407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.759292][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 1149.771701][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.779256][T13407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.798743][ T5138] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1149.829312][ T5138] usb 5-1: config 179 has no interface number 0 [ 1149.857817][ T5138] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1149.910733][ T5138] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1149.960402][ T5138] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1150.046796][ T5138] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1150.094474][ T5138] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1150.124561][T17347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1150.156310][ T5138] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1150.164593][T17347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1150.185523][ T5138] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1150.223583][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.285729][T17511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1150.320709][ T5138] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input150 [ 1150.407039][T13407] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1150.627772][T13407] usb 1-1: Using ep0 maxpacket: 8 [ 1150.664982][T13407] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1150.694169][T13407] usb 1-1: config 179 has no interface number 0 [ 1150.719849][T13407] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1150.736989][T13407] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1150.783356][T13407] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1150.860230][T13407] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1150.922120][T13407] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1151.001504][T13407] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1151.044060][T13407] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1151.110526][T13407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.155549][T17518] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1151.331483][T13407] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input151 [ 1151.514382][ T5138] usb 3-1: USB disconnect, device number 120 [ 1151.514444][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1151.581670][ T5138] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1151.598844][T17347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.968457][T17347] veth0_vlan: entered promiscuous mode [ 1153.438483][T17347] veth1_vlan: entered promiscuous mode [ 1153.864175][T17535] pim6reg1: entered promiscuous mode [ 1153.888942][T17535] pim6reg1: entered allmulticast mode [ 1153.921779][ T1791] usb 1-1: USB disconnect, device number 121 [ 1153.921849][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1153.936256][ T1791] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1153.960031][T17537] netlink: 'syz.2.3439': attribute type 4 has an invalid length. [ 1154.002026][T17347] veth0_macvtap: entered promiscuous mode [ 1154.050640][T17347] veth1_macvtap: entered promiscuous mode [ 1154.148052][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.182071][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.192785][ T5138] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1154.203087][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.218761][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.232093][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.244056][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.254659][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1154.265763][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.279676][T17347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.322265][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.346088][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.363564][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.377907][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.395061][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.400204][ T5138] usb 4-1: Using ep0 maxpacket: 32 [ 1154.406417][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.438995][ T5138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.439809][T17347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.472758][T17347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.492221][ T5138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.503642][T17347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.579019][ T5138] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1154.596796][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.650937][ T5138] usb 4-1: config 0 descriptor?? [ 1154.680080][ T5138] hub 4-1:0.0: USB hub found [ 1154.683343][T17347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.710892][T17347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.720940][T17347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.730395][T17347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.867286][ T5138] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1155.154137][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.187858][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.193712][ T5138] usbhid 4-1:0.0: can't add hid device: -71 [ 1155.203859][ T5138] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1155.288485][ T5138] usb 4-1: USB disconnect, device number 3 [ 1155.451727][T13339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.489990][T13339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.920207][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1155.929568][ T5137] usb 5-1: USB disconnect, device number 127 [ 1155.945278][ T5137] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1157.336502][T17582] netlink: 'syz.0.3449': attribute type 4 has an invalid length. [ 1157.375639][T17582] netlink: 'syz.0.3449': attribute type 4 has an invalid length. [ 1157.759683][T13228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1157.989577][T13228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.010159][T13228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1158.058341][T13228] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1158.096395][T13228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.154053][T13228] usb 4-1: config 0 descriptor?? [ 1158.478213][ T5138] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1158.630852][T17602] netlink: 'syz.4.3456': attribute type 4 has an invalid length. [ 1158.705407][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.740430][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.799176][ T5138] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1158.815038][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.851677][ T5138] usb 1-1: config 0 descriptor?? [ 1158.859635][T13228] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1161.691638][ T5138] usb 1-1: can't set config #0, error -71 [ 1161.718063][ T5138] usb 1-1: USB disconnect, device number 122 [ 1161.810722][ T1791] usb 4-1: USB disconnect, device number 4 [ 1161.876957][T13228] usb 2-1: device not accepting address 10, error -71 [ 1162.343223][T17621] netlink: 'syz.4.3463': attribute type 4 has an invalid length. [ 1163.211057][T17624] netlink: 'syz.4.3463': attribute type 4 has an invalid length. [ 1163.256932][T13228] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1163.456742][T13228] usb 2-1: Using ep0 maxpacket: 16 [ 1163.468049][T13228] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1163.527655][T13228] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1163.663206][T13228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.708407][ T1791] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1163.851456][T13228] usb 2-1: config 0 descriptor?? [ 1163.881940][T13228] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1164.064782][ T1791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.200139][ T1791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.239843][ T1791] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1164.267242][ T1791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.449064][ T1791] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1164.465934][ T5140] usb 2-1: USB disconnect, device number 11 [ 1164.486641][ T1791] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1164.612692][ T1791] usb 5-1: SerialNumber: syz [ 1165.907246][T11397] Bluetooth: hci1: command 0x0406 tx timeout [ 1167.496953][ T1791] usb 5-1: 0:2 : does not exist [ 1167.530124][ T1791] usb 5-1: USB disconnect, device number 2 [ 1167.740782][T17670] netlink: 'syz.4.3476': attribute type 4 has an invalid length. [ 1167.749653][T13228] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1167.787197][T17670] netlink: 'syz.4.3476': attribute type 4 has an invalid length. [ 1167.916701][T10432] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1167.936788][T13228] usb 3-1: Using ep0 maxpacket: 32 [ 1167.943840][T13228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.955004][T13228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.965190][T13228] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1167.975000][T13228] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1167.985148][T13228] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1167.998581][T13228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.007897][T13228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.015927][T13228] usb 3-1: Product: syz [ 1168.022380][T13228] usb 3-1: Manufacturer: syz [ 1168.027189][T13228] usb 3-1: SerialNumber: syz [ 1168.104942][T10432] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.124733][T10432] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.134363][T13407] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1168.142466][T10432] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1168.162537][T10432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.171656][ T5141] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1168.182977][T10432] usb 2-1: config 0 descriptor?? [ 1168.262942][T13228] cdc_ncm 3-1:1.0: bind() failure [ 1168.272766][T13228] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1168.282996][T13228] cdc_ncm 3-1:1.1: bind() failure [ 1168.294049][T13228] usb 3-1: USB disconnect, device number 121 [ 1168.340433][T13407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.351550][T13407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.361434][T13407] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1168.374582][T13407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.384342][ T5141] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.395281][ T5141] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.405468][T13407] usb 1-1: config 0 descriptor?? [ 1168.410681][ T5141] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1168.420490][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.432827][ T5141] usb 5-1: config 0 descriptor?? [ 1168.838508][T13407] hid (null): invalid report_size -1837663976 [ 1168.849615][T13407] hid-led 0003:1D34:000A.0041: invalid report_size -1837663976 [ 1168.858002][T13407] hid-led 0003:1D34:000A.0041: item 0 4 1 7 parsing failed [ 1168.874618][T13407] hid-led 0003:1D34:000A.0041: probe with driver hid-led failed with error -22 [ 1169.859632][ T29] audit: type=1326 audit(1720516753.859:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.0.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bba775bd9 code=0x7ffc0000 [ 1169.898655][ T29] audit: type=1326 audit(1720516753.859:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17672 comm="syz.0.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bba775bd9 code=0x7ffc0000 [ 1170.807652][ T5137] usb 2-1: USB disconnect, device number 12 [ 1170.918243][ T1791] usb 1-1: USB disconnect, device number 123 [ 1170.938157][T13407] usb 5-1: USB disconnect, device number 3 [ 1171.250176][T10432] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1172.026689][T10432] usb 4-1: Using ep0 maxpacket: 32 [ 1172.417562][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.636794][T10432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.654845][T10432] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1172.676704][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.686775][T13407] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1172.716433][T10432] usb 4-1: config 0 descriptor?? [ 1172.724753][T10432] hub 4-1:0.0: USB hub found [ 1172.886749][T13407] usb 3-1: Using ep0 maxpacket: 32 [ 1172.898689][T13407] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.913441][T13407] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.924724][T13407] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1172.937691][T13407] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1172.955203][T10432] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1172.974811][T13407] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1172.994766][T17721] netlink: 'syz.0.3488': attribute type 4 has an invalid length. [ 1173.006936][ T5137] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1173.022974][T13407] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.024164][T17720] netlink: 'syz.1.3489': attribute type 10 has an invalid length. [ 1173.032825][T13407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.052401][T13407] usb 3-1: Product: syz [ 1173.056968][T13407] usb 3-1: Manufacturer: syz [ 1173.062350][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1173.074839][T13407] usb 3-1: SerialNumber: syz [ 1173.096400][T17720] team0: Failed to send options change via netlink (err -105) [ 1173.106676][T17720] team0: Port device netdevsim0 added [ 1173.113681][T17717] netlink: 'syz.0.3488': attribute type 4 has an invalid length. [ 1173.133393][ T1791] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1173.206464][T10432] usbhid 4-1:0.0: can't add hid device: -71 [ 1173.213629][T10432] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1173.233092][ T5137] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.243341][ T5137] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1173.248116][T10432] usb 4-1: USB disconnect, device number 5 [ 1173.263029][ T5137] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.278628][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.288980][ T5137] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1173.314172][ T5137] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1173.348390][ T5137] usb 5-1: SerialNumber: syz [ 1173.372779][T13407] cdc_ncm 3-1:1.0: bind() failure [ 1173.382635][T13407] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1173.391574][T13407] cdc_ncm 3-1:1.1: bind() failure [ 1173.405292][T13407] usb 3-1: USB disconnect, device number 122 [ 1173.417317][T17332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1173.576053][ T5137] usb 5-1: 0:2 : does not exist [ 1173.591049][ T5137] usb 5-1: USB disconnect, device number 4 [ 1173.608583][T17332] usb 2-1: Using ep0 maxpacket: 8 [ 1173.626494][T17332] usb 2-1: descriptor type invalid, skip [ 1173.632319][T17332] usb 2-1: descriptor type invalid, skip [ 1173.642996][T17332] usb 2-1: descriptor type invalid, skip [ 1173.649923][T17332] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 1173.659997][T17332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.670519][T17332] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1173.679576][T17332] usb 2-1: config 1 has no interface number 1 [ 1173.685824][T17332] usb 2-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 1173.697301][T17332] usb 2-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 1173.712711][T17332] usb 2-1: config 1 interface 2 has no altsetting 0 [ 1173.725324][T17332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.735968][T17332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.746158][T17332] usb 2-1: Product: 쑿퉈ਝ쑻 [ 1173.751269][T17332] usb 2-1: Manufacturer: ф [ 1173.755819][T17332] usb 2-1: SerialNumber: syz [ 1174.074482][T17332] usb 2-1: USB disconnect, device number 13 [ 1174.376850][T13407] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1174.457185][T10432] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1174.579790][T13407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.603044][T13407] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1174.630847][T13407] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1174.654618][T13407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.665245][T10432] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.677447][T10432] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1174.687111][T10432] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1174.696195][T10432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.718330][T13407] usb 3-1: config 0 descriptor?? [ 1174.726382][T10432] usb 1-1: config 0 descriptor?? [ 1176.436050][T17766] netlink: 'syz.1.3500': attribute type 4 has an invalid length. [ 1176.468312][T17766] netlink: 'syz.1.3500': attribute type 4 has an invalid length. [ 1176.547654][T17769] pim6reg1: entered promiscuous mode [ 1176.553292][T17769] pim6reg1: entered allmulticast mode [ 1176.847246][ T5137] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1177.066873][ T5137] usb 2-1: Using ep0 maxpacket: 32 [ 1177.078885][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.083185][T11599] usb 3-1: USB disconnect, device number 123 [ 1177.090002][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.110449][ T5137] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1177.119622][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.132989][ T5137] usb 2-1: config 0 descriptor?? [ 1177.142289][ T5137] hub 2-1:0.0: USB hub found [ 1177.153304][T13407] usb 1-1: USB disconnect, device number 124 [ 1177.369109][ T5137] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1177.624802][ T5137] usbhid 2-1:0.0: can't add hid device: -71 [ 1177.633221][ T5137] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1177.694258][ T5137] usb 2-1: USB disconnect, device number 14 [ 1177.806716][T17332] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1177.936883][T11599] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1178.016725][T17332] usb 1-1: Using ep0 maxpacket: 32 [ 1178.062001][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.074642][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.103064][T17332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1178.126519][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1178.165432][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1178.196982][T17332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1178.221617][T17332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.253364][T17332] usb 1-1: Product: syz [ 1178.264809][T17332] usb 1-1: Manufacturer: syz [ 1178.276046][T17332] usb 1-1: SerialNumber: syz [ 1178.904804][T17332] cdc_ncm 1-1:1.0: bind() failure [ 1179.100459][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.107029][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.138084][T13407] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1179.154597][T17332] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1179.162516][T17332] cdc_ncm 1-1:1.1: bind() failure [ 1179.171957][T17332] usb 1-1: USB disconnect, device number 125 [ 1179.177308][T11599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.192165][T11599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.207991][T11599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1179.217649][T11599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.225693][T11599] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1179.247295][T11599] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1179.276082][T11599] usb 3-1: SerialNumber: syz [ 1179.344012][T13407] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.365818][T13407] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1179.418933][T13407] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1179.468148][T13407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.958942][T11599] usb 3-1: 0:2 : does not exist [ 1179.968527][T13407] usb 5-1: config 0 descriptor?? [ 1179.987271][T11599] usb 3-1: USB disconnect, device number 124 [ 1180.857168][T17332] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1180.857398][T11599] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1181.041077][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x650000be53 [ 1181.053342][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1780000adc8 [ 1181.072605][T11599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.072691][T17332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.086784][T11599] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.098042][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x3480000da42 [ 1181.107193][T11599] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1181.113847][T17332] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.130039][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x3570000b51e [ 1181.139508][T11599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.152051][T11599] usb 3-1: config 0 descriptor?? [ 1181.160104][T17332] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1181.186115][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5d00000bf60 [ 1181.195711][T17332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.206507][T17332] usb 1-1: config 0 descriptor?? [ 1181.214874][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5f60000ae46 [ 1181.226212][T17824] kvm: kvm [17823]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x6c60000ca48 [ 1181.835525][T11599] usb 5-1: USB disconnect, device number 5 [ 1182.903104][T17838] vti0: entered promiscuous mode [ 1183.208605][T11599] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1183.396852][T17332] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1183.420577][ T5138] usb 3-1: USB disconnect, device number 125 [ 1183.506680][T11599] usb 2-1: Using ep0 maxpacket: 32 [ 1183.514340][T11599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.546399][T11599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.557595][T11599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.568512][T11599] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1183.584328][ T1791] usb 1-1: USB disconnect, device number 126 [ 1183.588263][T11599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.604411][T11599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.613442][T11599] usb 2-1: Product: syz [ 1183.618216][T11599] usb 2-1: Manufacturer: syz [ 1183.619094][T17332] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1183.627641][T11599] usb 2-1: SerialNumber: syz [ 1183.648099][T17857] netlink: 'syz.2.3524': attribute type 4 has an invalid length. [ 1183.659884][T17332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1183.683290][T17857] netlink: 'syz.2.3524': attribute type 4 has an invalid length. [ 1183.695991][T17332] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.713420][T17332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.738567][T17332] usb 5-1: Product: syz [ 1183.745727][T17332] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1183.775086][T17332] usb 5-1: SerialNumber: syz [ 1183.879002][T11599] cdc_ncm 2-1:1.0: bind() failure [ 1183.898623][T11599] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1183.905515][T11599] cdc_ncm 2-1:1.1: bind() failure [ 1183.939533][T11599] usb 2-1: USB disconnect, device number 15 [ 1184.024248][T17846] 9pnet_fd: Insufficient options for proto=fd [ 1184.155156][T17332] usb 5-1: 0:2 : does not exist [ 1184.167899][T17332] usb 5-1: USB disconnect, device number 6 [ 1184.296653][ T5137] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1184.659545][ T5137] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1184.673828][ T5137] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1184.683433][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.710299][ T5137] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1186.911257][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1186.966856][T17888] openvswitch: netlink: Flow actions attr not present in new flow. [ 1187.090538][T17892] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1187.135391][T17892] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3534'. [ 1188.314426][T17906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.356746][T17906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.372780][T13407] usb 3-1: USB disconnect, device number 126 [ 1188.373143][T17906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.488502][T17906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.523810][T17906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.879831][ T5137] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1188.937049][T17332] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1189.121378][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 1189.130132][ T5137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.159992][T17332] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1189.174285][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.186865][T17332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.197727][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.209327][ T5137] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1189.226109][ T5137] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.242007][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.252285][ T5137] usb 1-1: Product: syz [ 1189.260409][ T5137] usb 1-1: Manufacturer: syz [ 1189.267468][T17332] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1189.281643][ T5137] usb 1-1: SerialNumber: syz [ 1189.293542][T17332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.306485][T17332] usb 5-1: Product: syz [ 1189.316155][T17332] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1189.344785][ T5126] kworker/0:3 (5126) used greatest stack depth: 18360 bytes left [ 1189.380418][T17332] usb 5-1: SerialNumber: syz [ 1189.629782][ T5137] cdc_ncm 1-1:1.0: bind() failure [ 1189.633408][T17913] 9pnet_fd: Insufficient options for proto=fd [ 1189.655402][ T5137] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1189.689364][T17332] usb 5-1: 0:2 : does not exist [ 1189.698848][ T5137] cdc_ncm 1-1:1.1: bind() failure [ 1189.786263][ T5137] usb 1-1: USB disconnect, device number 127 [ 1189.803363][T17332] usb 5-1: USB disconnect, device number 7 [ 1190.086385][T17937] pim6reg1: entered promiscuous mode [ 1190.114151][T17937] pim6reg1: entered allmulticast mode [ 1190.446657][T11599] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1192.506687][T11599] usb 2-1: Using ep0 maxpacket: 32 [ 1192.513996][T11599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.525657][T11599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.556678][T11599] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1192.588125][T11599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.630857][T11599] usb 2-1: config 0 descriptor?? [ 1192.651316][T11599] hub 2-1:0.0: USB hub found [ 1192.861333][T17954] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1192.886182][T11599] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1192.939989][T17942] kvm: kvm [17941]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2300003341 [ 1193.008364][T17942] kvm: kvm [17941]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x240000d6aa [ 1193.052698][T17942] kvm: kvm [17941]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x240000b1da [ 1193.118142][T11599] usbhid 2-1:0.0: can't add hid device: -71 [ 1193.136067][T11599] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1193.210908][T11599] usb 2-1: USB disconnect, device number 16 [ 1193.603406][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x650000be53 [ 1193.650096][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1780000adc8 [ 1193.697438][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x3480000da42 [ 1193.717049][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x3570000b51e [ 1193.782751][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5d00000bf60 [ 1193.807498][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x5f60000ae46 [ 1193.853917][T17960] kvm: kvm [17959]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x6c60000ca48 [ 1194.899232][T13407] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1195.109255][T13407] usb 1-1: Using ep0 maxpacket: 32 [ 1195.130639][T13407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.153337][T13407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.190198][T13407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.226797][T13407] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1195.252373][T13407] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1195.294181][T13407] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.334737][T13407] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.349523][T13407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.369522][T13407] usb 1-1: Product: syz [ 1195.374397][T13407] usb 1-1: Manufacturer: syz [ 1195.387628][T13407] usb 1-1: SerialNumber: syz [ 1195.397605][T17332] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1195.608570][T17332] usb 3-1: Using ep0 maxpacket: 32 [ 1195.626634][T17332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.656471][T17332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.691732][T17332] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1195.722378][T17332] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1195.792854][T13407] cdc_ncm 1-1:1.0: bind() failure [ 1195.819794][T13407] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1195.860425][T13407] cdc_ncm 1-1:1.1: bind() failure [ 1195.930363][T17332] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1195.943064][T17332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.945581][T13407] usb 1-1: USB disconnect, device number 2 [ 1195.955969][T17332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.966670][T17332] usb 3-1: Product: syz [ 1195.970869][T17332] usb 3-1: Manufacturer: syz [ 1195.975494][T17332] usb 3-1: SerialNumber: syz [ 1196.066814][T11599] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1196.283566][T17332] cdc_ncm 3-1:1.0: bind() failure [ 1196.286713][T11599] usb 2-1: Using ep0 maxpacket: 16 [ 1196.304479][T17332] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1196.311504][T17332] cdc_ncm 3-1:1.1: bind() failure [ 1196.320298][T11599] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1196.321470][T17332] usb 3-1: USB disconnect, device number 127 [ 1196.351323][T11599] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1196.371635][T11599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.393093][T11599] usb 2-1: config 0 descriptor?? [ 1196.405983][T11599] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1196.540561][T18013] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3571'. [ 1196.620421][T11599] usb 2-1: USB disconnect, device number 17 [ 1198.928905][T13407] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1198.957047][T11599] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1199.026721][T10432] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1199.138667][T13407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.150260][T13407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.161546][T13407] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1199.226513][T13407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.285103][T10432] usb 4-1: Using ep0 maxpacket: 16 [ 1199.316067][T10432] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1199.717670][T13407] usb 1-1: config 0 descriptor?? [ 1199.723060][T10432] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1201.058528][T11599] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1201.086956][T10432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.107533][T11599] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1201.138839][T10432] usb 4-1: config 0 descriptor?? [ 1201.153829][T11599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.173793][T10432] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1201.198672][T11599] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1201.588622][T13407] hid (null): invalid report_size -1837663976 [ 1201.595403][T11599] usb 4-1: USB disconnect, device number 6 [ 1201.648975][T13407] hid-led 0003:1D34:000A.0042: invalid report_size -1837663976 [ 1201.679379][T13407] hid-led 0003:1D34:000A.0042: item 0 4 1 7 parsing failed [ 1201.690422][T13407] hid-led 0003:1D34:000A.0042: probe with driver hid-led failed with error -22 [ 1202.113387][ T29] audit: type=1326 audit(1720516786.109:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18042 comm="syz.0.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bba775bd9 code=0x7ffc0000 [ 1202.156124][ T5137] usb 1-1: USB disconnect, device number 3 [ 1202.202702][ T29] audit: type=1326 audit(1720516786.109:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18042 comm="syz.0.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bba775bd9 code=0x7ffc0000 [ 1202.291340][T18074] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1203.288962][T13407] usb 2-1: USB disconnect, device number 18 [ 1204.836631][ T5137] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1205.177139][T13407] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1205.226441][ T5137] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.250667][ T5137] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1205.299853][ T5137] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1205.319120][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.346493][ T5137] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1205.394653][ T5137] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1205.397951][T13407] usb 2-1: Using ep0 maxpacket: 16 [ 1205.440022][T13407] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1205.460381][T13407] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1205.477173][T13407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.493090][ T5137] usb 1-1: SerialNumber: syz [ 1205.521605][T13407] usb 2-1: config 0 descriptor?? [ 1205.533252][T13407] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1206.266736][T13407] usb 2-1: USB disconnect, device number 19 [ 1208.858219][ T5137] usb 1-1: 0:2 : does not exist [ 1208.884791][ T5137] usb 1-1: USB disconnect, device number 4 [ 1209.416811][T17332] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1209.606895][ T5137] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1209.675330][T17332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.733504][T17332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.765313][T17332] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1209.787632][T17332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.828223][ T5138] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1209.835929][ T5137] usb 1-1: Using ep0 maxpacket: 32 [ 1209.852293][T17332] usb 5-1: config 0 descriptor?? [ 1209.860361][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.880721][ T5137] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.895532][ T5137] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1209.908748][ T5137] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1209.921508][ T5137] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1209.956095][ T5137] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1209.975635][ T5137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.996042][ T5137] usb 1-1: Product: syz [ 1210.006211][ T5137] usb 1-1: Manufacturer: syz [ 1210.023407][ T5137] usb 1-1: SerialNumber: syz [ 1210.068762][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.079508][ T5138] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1210.103944][ T5138] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1210.139883][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.161391][ T5138] usb 2-1: config 0 descriptor?? [ 1210.263423][ T5137] cdc_ncm 1-1:1.0: bind() failure [ 1210.286206][ T5137] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1210.325988][T17332] hid (null): invalid report_size -1837663976 [ 1210.338491][ T5137] cdc_ncm 1-1:1.1: bind() failure [ 1210.357058][T17332] hid-led 0003:1D34:000A.0043: invalid report_size -1837663976 [ 1210.380693][ T5137] usb 1-1: USB disconnect, device number 5 [ 1210.388674][T17332] hid-led 0003:1D34:000A.0043: item 0 4 1 7 parsing failed [ 1210.407609][T17332] hid-led 0003:1D34:000A.0043: probe with driver hid-led failed with error -22 [ 1210.853087][ T29] audit: type=1326 audit(1720516794.849:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18113 comm="syz.4.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24b75bd9 code=0x7ffc0000 [ 1210.959200][ T29] audit: type=1326 audit(1720516794.849:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18113 comm="syz.4.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24b75bd9 code=0x7ffc0000 [ 1211.766673][ T5137] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1212.000283][ T5137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.040612][ T5137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.057690][ T5137] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1212.073547][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.091864][ T5137] usb 4-1: config 0 descriptor?? [ 1212.381209][T17332] usb 5-1: USB disconnect, device number 8 [ 1212.400342][ T5138] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1212.512968][ T5133] usb 2-1: USB disconnect, device number 20 [ 1212.547473][ T5137] hid (null): invalid report_size -1837663976 [ 1215.730524][ T5138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.741844][ T5137] hid-led 0003:1D34:000A.0044: invalid report_size -1837663976 [ 1215.802648][ T5138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1215.811995][ T5137] hid-led 0003:1D34:000A.0044: item 0 4 1 7 parsing failed [ 1215.821454][ T5137] hid-led 0003:1D34:000A.0044: probe with driver hid-led failed with error -22 [ 1215.849527][T11599] usb 4-1: USB disconnect, device number 7 [ 1215.862238][ T5138] usb 1-1: string descriptor 0 read error: -71 [ 1215.869884][ T5138] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1215.880093][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.917211][ T5138] usb 1-1: can't set config #1, error -71 [ 1215.940846][ T5138] usb 1-1: USB disconnect, device number 6 [ 1218.743550][T18190] pim6reg1: entered promiscuous mode [ 1218.753883][T18190] pim6reg1: entered allmulticast mode [ 1218.785948][ T5137] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1218.961463][T13407] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1218.980646][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 1219.011095][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.022262][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.032338][ T5137] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1219.042240][ T5137] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1219.052160][ T5137] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1219.066645][T17332] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1219.078800][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1219.117547][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.146360][ T5137] usb 3-1: Product: syz [ 1219.146629][T13407] usb 4-1: Using ep0 maxpacket: 32 [ 1219.153209][ T5137] usb 3-1: Manufacturer: syz [ 1219.164879][ T5137] usb 3-1: SerialNumber: syz [ 1219.167748][T13407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.193307][T13407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.218101][T13407] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1219.238153][T13407] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1219.259389][T13407] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1219.276790][T13407] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1219.294016][T13407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.296679][T17332] usb 5-1: Using ep0 maxpacket: 32 [ 1219.302360][T13407] usb 4-1: Product: syz [ 1219.311652][T13407] usb 4-1: Manufacturer: syz [ 1219.322363][T13407] usb 4-1: SerialNumber: syz [ 1219.339172][T17332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.353621][T17332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.507333][T17332] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1219.518121][ T5137] cdc_ncm 3-1:1.0: bind() failure [ 1219.530708][T17332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.540683][ T5137] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1219.550537][T17332] usb 5-1: config 0 descriptor?? [ 1219.555773][ T5137] cdc_ncm 3-1:1.1: bind() failure [ 1219.565240][ T5137] usb 3-1: USB disconnect, device number 2 [ 1219.573844][T17332] hub 5-1:0.0: USB hub found [ 1223.077926][T17332] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1223.092740][T13407] cdc_ncm 4-1:1.0: bind() failure [ 1223.135689][T13407] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1223.136880][T17332] usbhid 5-1:0.0: can't add hid device: -71 [ 1223.173181][T13407] cdc_ncm 4-1:1.1: bind() failure [ 1223.186733][T17332] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1223.197016][T13407] usb 4-1: USB disconnect, device number 8 [ 1223.239563][T17332] usb 5-1: USB disconnect, device number 9 [ 1223.579508][ T5133] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1224.114291][ T5133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.125655][ T5133] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1224.134779][ T5133] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1224.146788][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.182091][ T5133] usb 1-1: config 0 descriptor?? [ 1224.586628][T17332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1224.668823][ T5133] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1224.694488][T10432] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1224.802392][T17332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.814935][T17332] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1224.824832][T17332] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1224.834390][T17332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.856796][ T5133] usb 4-1: Using ep0 maxpacket: 8 [ 1224.861437][T17332] usb 5-1: config 0 descriptor?? [ 1224.884965][ T5133] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1224.894801][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.905720][T10432] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.917590][T10432] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.927761][ T5133] usb 4-1: config 0 descriptor?? [ 1224.938756][T10432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.953528][T10432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.961882][T10432] usb 2-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1224.972284][T10432] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1225.000445][T10432] usb 2-1: SerialNumber: syz [ 1225.042164][T18221] kvm: kvm [18220]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1225.286274][T10432] usb 2-1: 0:2 : does not exist [ 1225.323262][T10432] usb 2-1: USB disconnect, device number 21 [ 1226.219386][T10432] usb 1-1: USB disconnect, device number 7 [ 1230.960078][ T5138] usb 5-1: USB disconnect, device number 10 [ 1231.414645][ T5133] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1231.461590][ T5133] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1231.494290][ T5133] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1231.526944][ T5133] usb 4-1: USB disconnect, device number 9 [ 1232.077191][ T5137] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1232.372986][ T5137] usb 2-1: Using ep0 maxpacket: 8 [ 1232.393580][ T5137] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1232.420037][ T5137] usb 2-1: config 179 has no interface number 0 [ 1232.439336][ T5137] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1232.479813][ T5137] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1232.531835][ T5137] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1232.573719][ T5137] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1232.625276][ T5137] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1233.107839][ T5137] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1233.169565][ T5133] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1233.251416][ T5137] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1233.410747][ T5133] usb 4-1: Using ep0 maxpacket: 32 [ 1233.458401][ T5133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.461689][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.471796][ T5133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.495859][ T5133] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1233.525725][ T5133] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1233.536626][ T5133] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1233.553327][ T5133] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.576079][T18253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1233.595972][ T5133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.603806][ T5137] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input167 [ 1233.636765][ T5133] usb 4-1: Product: syz [ 1233.642251][ T5133] usb 4-1: Manufacturer: syz [ 1233.887427][ T5133] usb 4-1: SerialNumber: syz [ 1235.763464][ T5133] cdc_ncm 4-1:1.0: bind() failure [ 1235.837849][ T5133] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1235.844741][ T5133] cdc_ncm 4-1:1.1: bind() failure [ 1235.867714][ T5133] usb 4-1: USB disconnect, device number 10 [ 1236.446778][ T5133] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1236.636782][T18242] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1239.274259][ T5133] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.386655][ T5133] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1239.419133][ T5133] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1239.434972][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.495770][ T5133] usb 4-1: config 0 descriptor?? [ 1239.520607][ T5133] usb 4-1: can't set config #0, error -71 [ 1239.568208][ T5133] usb 4-1: USB disconnect, device number 11 [ 1239.907279][ T12] Bluetooth: (null): Too short H5 packet [ 1239.919198][ T12] Bluetooth: (null): Invalid header checksum [ 1239.925378][ T12] Bluetooth: (null): Invalid header checksum [ 1240.019757][T13609] Bluetooth: (null): Invalid header checksum [ 1240.026791][ T5133] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1240.692014][ T5141] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1240.716191][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.724277][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.736996][T13339] Bluetooth: (null): Invalid header checksum [ 1240.774259][T13339] Bluetooth: (null): Invalid header checksum [ 1240.797335][ T5133] usb 4-1: Using ep0 maxpacket: 8 [ 1240.821572][T13339] Bluetooth: (null): Invalid header checksum [ 1240.833944][ T5133] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1240.853014][T13339] Bluetooth: (null): Invalid header checksum [ 1240.859425][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.869694][T13339] Bluetooth: (null): Invalid header checksum [ 1240.898847][T13339] Bluetooth: (null): Invalid header checksum [ 1240.918413][ T5133] usb 4-1: config 0 descriptor?? [ 1240.948934][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.959705][ T5141] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1240.971711][ T5141] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1241.011687][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.078697][ T5141] usb 3-1: config 0 descriptor?? [ 1243.317843][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1243.433511][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1243.442348][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1243.451678][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1243.460039][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1243.468385][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1243.827311][T11599] usb 3-1: USB disconnect, device number 3 [ 1244.745757][T18319] kvm: kvm [18318]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x560000d216 [ 1244.849630][ T5133] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1244.904789][ T5133] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1244.980226][ T5133] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1245.116684][ T5133] usb 4-1: USB disconnect, device number 12 [ 1245.428533][T18311] chnl_net:caif_netlink_parms(): no params data found [ 1245.506904][ T5133] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1245.576945][T11397] Bluetooth: hci2: command tx timeout [ 1245.686903][T18242] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1245.719449][ T5133] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.768107][ T5133] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1245.798660][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.805933][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.813479][ T5133] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1245.844317][T18311] bridge_slave_0: entered allmulticast mode [ 1245.850517][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.872517][T18311] bridge_slave_0: entered promiscuous mode [ 1245.886593][T18242] usb 3-1: Using ep0 maxpacket: 32 [ 1245.913383][ T5133] usb 4-1: config 0 descriptor?? [ 1245.928357][T18242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.954662][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.999737][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.013038][T18242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.041633][T18311] bridge_slave_1: entered allmulticast mode [ 1246.071633][T18242] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1246.114649][T18311] bridge_slave_1: entered promiscuous mode [ 1246.136335][T18242] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1246.198416][T18242] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1246.273867][T18242] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.326456][T18242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.367465][T18311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.377628][T18242] usb 3-1: Product: syz [ 1246.389449][T18242] usb 3-1: Manufacturer: syz [ 1246.418719][T18242] usb 3-1: SerialNumber: syz [ 1246.446363][T18311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.765144][T18311] team0: Port device team_slave_0 added [ 1246.977104][T18242] cdc_ncm 3-1:1.0: bind() failure [ 1246.996289][T18242] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1247.004458][T18311] team0: Port device team_slave_1 added [ 1247.024785][T18242] cdc_ncm 3-1:1.1: bind() failure [ 1247.055193][T18242] usb 3-1: USB disconnect, device number 4 [ 1247.113475][T18311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.130684][ T5137] usb 2-1: USB disconnect, device number 22 [ 1247.130745][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1247.134331][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.180262][T18311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.204147][ T5137] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1247.291809][T13609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.327325][ T5141] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1247.328012][T18311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.345441][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.383649][T18311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.435378][T13609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.566738][ T5141] usb 5-1: Using ep0 maxpacket: 32 [ 1247.569545][T13609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.589212][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.619374][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.625419][T18311] hsr_slave_0: entered promiscuous mode [ 1247.642630][ T5141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1247.657637][T11397] Bluetooth: hci2: command tx timeout [ 1247.663285][ T5141] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1247.674044][ T5141] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1247.674953][T18311] hsr_slave_1: entered promiscuous mode [ 1247.687339][ T5141] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1247.690212][T17332] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1247.710217][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.719910][ T5141] usb 5-1: Product: syz [ 1247.725478][ T5141] usb 5-1: Manufacturer: syz [ 1247.732154][ T5141] usb 5-1: SerialNumber: syz [ 1247.752179][T18311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.768627][T18311] Cannot create hsr debugfs directory [ 1247.885476][T13609] team0: Port device netdevsim0 removed [ 1247.915738][T13609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.940390][T17332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.964247][T17332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.994451][T17332] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1248.009841][T17332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.013162][ T5141] cdc_ncm 5-1:1.0: bind() failure [ 1248.025626][T17332] usb 1-1: config 0 descriptor?? [ 1248.075458][ T5141] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1248.082826][ T5141] cdc_ncm 5-1:1.1: bind() failure [ 1248.092829][T18242] usb 4-1: USB disconnect, device number 13 [ 1248.139226][ T5141] usb 5-1: USB disconnect, device number 11 [ 1248.666911][T17332] hid (null): invalid report_size -1837663976 [ 1248.703362][T17332] hid-led 0003:1D34:000A.0045: invalid report_size -1837663976 [ 1248.711326][T17332] hid-led 0003:1D34:000A.0045: item 0 4 1 7 parsing failed [ 1248.719599][T17332] hid-led 0003:1D34:000A.0045: probe with driver hid-led failed with error -22 [ 1249.488623][T13609] bridge_slave_1: left allmulticast mode [ 1249.494284][T13609] bridge_slave_1: left promiscuous mode [ 1249.521457][T13609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.589063][T13609] bridge_slave_0: left allmulticast mode [ 1249.614460][T13609] bridge_slave_0: left promiscuous mode [ 1249.631666][T13609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.736815][T11397] Bluetooth: hci2: command tx timeout [ 1252.271619][T11397] Bluetooth: hci2: command tx timeout [ 1252.401470][ T5133] usb 1-1: USB disconnect, device number 9 [ 1252.488987][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x560000d216 [ 1252.535200][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1770000fefb [ 1252.565083][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2f500008b93 [ 1252.622427][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x37500008f1e [ 1252.698189][T13228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1252.723459][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4ff0000f2ce [ 1252.771525][T18366] kvm_intel: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x56d0000da1a [ 1252.808588][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6c60000ba66 [ 1252.818348][T18366] kvm: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6ce0000f626 [ 1252.832421][T18366] kvm_intel: kvm [18364]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x84f00009fab [ 1252.955841][T13228] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1252.976761][T13228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.000087][T13228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.028428][T13228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.059396][T13228] usb 3-1: Product: syz [ 1253.063635][T13228] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1253.160290][T13228] usb 3-1: SerialNumber: syz [ 1255.119276][T13609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.143323][T13609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.390341][T13609] bond0 (unregistering): Released all slaves [ 1256.725346][T13228] usb 3-1: 0:2 : does not exist [ 1256.756988][T13228] usb 3-1: USB disconnect, device number 5 [ 1257.247218][ T2887] Bluetooth: (null): Too short H5 packet [ 1257.256486][ T2887] Bluetooth: (null): Invalid header checksum [ 1257.275020][ T2887] Bluetooth: (null): Invalid header checksum [ 1257.372414][ T2887] Bluetooth: (null): Invalid header checksum [ 1257.384625][T13609] hsr_slave_0: left promiscuous mode [ 1257.403184][T13609] hsr_slave_1: left promiscuous mode [ 1257.415177][T13609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.433339][T13609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.447814][T13609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.462364][T13609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.474827][T13339] Bluetooth: (null): Invalid header checksum [ 1257.493328][T13609] veth1_macvtap: left promiscuous mode [ 1257.499220][T13609] veth0_macvtap: left promiscuous mode [ 1257.505107][T13609] veth1_vlan: left promiscuous mode [ 1257.511894][T13609] veth0_vlan: left promiscuous mode [ 1257.581588][ T2443] Bluetooth: (null): Invalid header checksum [ 1257.687783][ T2887] Bluetooth: (null): Invalid header checksum [ 1257.802818][ T2855] Bluetooth: (null): Invalid header checksum [ 1258.356729][T18242] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1258.538801][T18242] usb 1-1: Using ep0 maxpacket: 32 [ 1258.550958][T18242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.571212][T18242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.581267][T18242] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1258.598470][T18242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.617598][T18242] usb 1-1: config 0 descriptor?? [ 1258.634452][T18242] hub 1-1:0.0: USB hub found [ 1258.717935][T13609] team0 (unregistering): Port device team_slave_1 removed [ 1258.837431][T18242] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1258.877397][T13609] team0 (unregistering): Port device team_slave_0 removed [ 1259.766867][T18242] usbhid 1-1:0.0: can't add hid device: -71 [ 1259.777081][T18242] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1259.848323][T18242] usb 1-1: USB disconnect, device number 10 [ 1259.941234][T18311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.994721][T18311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1260.027042][T18311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1260.094653][T18311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.522218][T18311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.530851][T11397] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 1260.595957][T18448] binder: 18446:18448 ioctl c018620c 20000080 returned -22 [ 1260.664377][T18311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.675645][T18448] 9pnet_fd: Insufficient options for proto=fd [ 1260.720528][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.727793][T18242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.801510][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.808768][T13228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.846646][ T5141] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1261.058708][ T5141] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1261.082896][ T5141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.119312][ T5141] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1261.155545][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.188202][ T5141] usb 1-1: Product: syz [ 1261.192430][ T5141] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1261.292782][ T5141] usb 1-1: SerialNumber: syz [ 1261.653018][T18445] 9pnet_fd: Insufficient options for proto=fd [ 1262.064983][T18311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.153243][ T5141] usb 1-1: 0:2 : does not exist [ 1262.173905][ T5141] usb 1-1: USB disconnect, device number 11 [ 1262.224074][T18311] veth0_vlan: entered promiscuous mode [ 1262.264708][T18311] veth1_vlan: entered promiscuous mode [ 1262.296981][ T5133] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1262.486714][ T5133] usb 5-1: Using ep0 maxpacket: 32 [ 1262.507217][T18311] veth0_macvtap: entered promiscuous mode [ 1262.524706][ T5133] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.554516][T18311] veth1_macvtap: entered promiscuous mode [ 1262.568957][ T5133] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.577478][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.589717][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.599855][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.610504][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.622083][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.693749][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.847494][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.986385][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.255423][ T5133] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1263.265978][ T5133] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1263.275873][ T5133] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1263.299102][T18311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.373418][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.387451][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.408595][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1263.428909][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.440920][ T5133] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.450161][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.458285][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.468260][ T5133] usb 5-1: Product: syz [ 1263.472470][ T5133] usb 5-1: Manufacturer: syz [ 1263.477226][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.496663][ T5133] usb 5-1: SerialNumber: syz [ 1263.504431][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.528128][T18311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.543916][T18311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.573142][T18311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.625088][T18311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.641383][T18311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.656238][T18311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.665451][T18311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.793366][ T5133] cdc_ncm 5-1:1.0: bind() failure [ 1263.811809][ T5139] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1263.813802][ T5133] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1263.827104][ T5133] cdc_ncm 5-1:1.1: bind() failure [ 1263.839712][ T5133] usb 5-1: USB disconnect, device number 12 [ 1263.923379][T13609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.945194][T13609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.989493][T13609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.012989][T13609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.050656][ T5139] usb 3-1: Using ep0 maxpacket: 32 [ 1264.065252][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.097439][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.126574][ T5139] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1264.135696][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.251859][ T5139] usb 3-1: config 0 descriptor?? [ 1264.279241][ T5139] hub 3-1:0.0: USB hub found [ 1264.625235][T18508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.654118][T11397] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1264.663659][T11397] Bluetooth: hci0: Injecting HCI hardware error event [ 1264.711769][ T5102] Bluetooth: hci0: hardware error 0x00 [ 1267.147648][ T5139] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1267.184166][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 1267.215592][ T5139] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1267.223777][T18508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1267.307859][ T5139] usb 3-1: USB disconnect, device number 6 [ 1267.661853][T18508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.044748][T18528] syz.1.3709: attempt to access beyond end of device [ 1268.044748][T18528] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1268.137840][T18528] F2FS-fs (loop3): Unable to read 1th superblock [ 1268.197439][T18528] syz.1.3709: attempt to access beyond end of device [ 1268.197439][T18528] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1268.231207][T18528] F2FS-fs (loop3): Unable to read 2th superblock [ 1268.859028][ T5102] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1270.079557][T18545] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1270.386958][ T5141] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1270.727344][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 1270.735902][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.749707][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.933785][ T5141] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1270.960592][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1270.988956][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1270.999536][T18242] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1271.028962][ T5141] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1271.048093][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.056647][ T5141] usb 4-1: Product: syz [ 1271.061050][ T5141] usb 4-1: Manufacturer: syz [ 1271.065842][ T5141] usb 4-1: SerialNumber: syz [ 1271.216677][T18242] usb 1-1: Using ep0 maxpacket: 32 [ 1271.325712][T18242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.620302][T18242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.630356][T18242] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1271.639604][T18242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.649945][T18242] usb 1-1: config 0 descriptor?? [ 1271.660218][T18242] hub 1-1:0.0: USB hub found [ 1271.678408][ T5141] cdc_ncm 4-1:1.0: bind() failure [ 1271.688329][ T5141] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1271.704011][ T5141] cdc_ncm 4-1:1.1: bind() failure [ 1271.742439][ T5141] usb 4-1: USB disconnect, device number 14 [ 1271.880800][T18242] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1272.664759][T18242] usbhid 1-1:0.0: can't add hid device: -71 [ 1272.733547][T18242] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1272.897755][T18242] usb 1-1: USB disconnect, device number 12 [ 1273.546254][T18584] syz.0.3725: attempt to access beyond end of device [ 1273.546254][T18584] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1273.606911][T18584] F2FS-fs (loop1): Unable to read 1th superblock [ 1273.655981][T18584] syz.0.3725: attempt to access beyond end of device [ 1273.655981][T18584] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1273.703846][T18584] F2FS-fs (loop1): Unable to read 2th superblock [ 1273.996614][ T5139] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1274.066644][T18242] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1274.197371][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 1274.205420][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.226645][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.240409][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.266845][T18242] usb 5-1: Using ep0 maxpacket: 8 [ 1274.272246][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.280837][T18242] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1274.288801][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1274.295450][T18242] usb 5-1: config 179 has no interface number 0 [ 1274.329956][T18242] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1274.333273][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.350349][T18242] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1274.358158][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.379906][ T5139] usb 4-1: Product: syz [ 1274.384641][ T5139] usb 4-1: Manufacturer: syz [ 1274.389612][T18242] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1274.394344][ T5139] usb 4-1: SerialNumber: syz [ 1274.404711][T18242] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1274.416115][T18242] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1274.429685][T18242] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1274.436978][T18242] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1274.446230][T18242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.461273][T18587] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1274.497566][T18242] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input174 [ 1274.728348][T18582] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3724'. [ 1274.764074][ T5139] cdc_ncm 4-1:1.0: bind() failure [ 1274.791240][ T5139] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1274.820537][ T5139] cdc_ncm 4-1:1.1: bind() failure [ 1274.869464][ T5139] usb 4-1: USB disconnect, device number 15 [ 1275.968094][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1278.567793][ T12] Bluetooth: (null): Too short H5 packet [ 1278.581076][ T12] Bluetooth: (null): Invalid header checksum [ 1278.589516][ T12] Bluetooth: (null): Invalid header checksum [ 1280.252325][ T5138] usb 5-1: USB disconnect, device number 13 [ 1280.252438][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1280.266661][ T5138] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1280.290228][T18645] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1283.126623][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1283.334285][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.347921][ T57] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1283.370601][ T57] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1283.405110][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.428095][ T57] usb 5-1: config 0 descriptor?? [ 1285.611867][T17332] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1285.766645][ T5138] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1285.796781][T17332] usb 4-1: Using ep0 maxpacket: 32 [ 1285.820667][T17332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.843944][ T5139] usb 5-1: USB disconnect, device number 14 [ 1285.857572][T17332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.913345][T18703] netlink: 'syz.0.3757': attribute type 29 has an invalid length. [ 1285.935531][T17332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1285.953614][T17332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.990019][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.040728][ T5138] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1286.073103][T17332] usb 4-1: config 0 descriptor?? [ 1286.366560][T17332] hub 4-1:0.0: USB hub found [ 1286.371706][ T5138] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1286.383722][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.659994][T17332] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1286.679017][ T5138] usb 2-1: config 0 descriptor?? [ 1287.065431][T17332] usbhid 4-1:0.0: can't add hid device: -71 [ 1287.519430][T17332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1287.879471][T17332] usb 4-1: USB disconnect, device number 16 [ 1288.305207][T18724] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1288.958701][T18242] usb 2-1: USB disconnect, device number 23 [ 1289.382828][T18737] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1291.358788][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.449425][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.467134][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.491165][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.505266][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.986706][ T5138] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1293.202037][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 1293.219307][ T5138] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1293.245267][ T5138] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1293.268349][ T5138] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1293.287411][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.318142][ T5138] usb 2-1: config 0 descriptor?? [ 1293.358551][ T5139] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1293.552214][T18510] usb 2-1: USB disconnect, device number 24 [ 1293.569255][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.579942][ T5139] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1293.590759][ T5139] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1294.134883][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.153476][ T5139] usb 3-1: config 0 descriptor?? [ 1294.879056][T18780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3780'. [ 1294.954791][T18785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.979156][T18785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.993720][T18785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.190297][T18790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.222010][T18785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.217630][ T57] usb 3-1: USB disconnect, device number 7 [ 1296.394000][T18803] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1296.568600][T17332] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1296.756644][T17332] usb 1-1: Using ep0 maxpacket: 32 [ 1296.776387][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.845986][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.865835][T17332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1296.886874][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1296.917299][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1296.941292][T17332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.950898][T17332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.961465][T17332] usb 1-1: Product: syz [ 1296.972649][T17332] usb 1-1: Manufacturer: syz [ 1296.983588][T17332] usb 1-1: SerialNumber: syz [ 1297.261349][T17332] cdc_ncm 1-1:1.0: bind() failure [ 1297.320979][T17332] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1297.334578][T17332] cdc_ncm 1-1:1.1: bind() failure [ 1297.362076][T17332] usb 1-1: USB disconnect, device number 13 [ 1298.017873][T17332] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1298.301779][T18828] FAULT_INJECTION: forcing a failure. [ 1298.301779][T18828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.315213][T18828] CPU: 1 PID: 18828 Comm: syz.0.3792 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1298.325420][T18828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1298.335511][T18828] Call Trace: [ 1298.338811][T18828] [ 1298.341768][T18828] dump_stack_lvl+0x241/0x360 [ 1298.346489][T18828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.351723][T18828] ? __pfx__printk+0x10/0x10 [ 1298.356351][T18828] ? __pfx_lock_release+0x10/0x10 [ 1298.361413][T18828] should_fail_ex+0x3b0/0x4e0 [ 1298.366131][T18828] _copy_from_iter+0x1f6/0x1960 [ 1298.371013][T18828] ? __virt_addr_valid+0x183/0x520 [ 1298.376161][T18828] ? __pfx_lock_release+0x10/0x10 [ 1298.381250][T18828] ? __check_object_size+0x77/0x900 [ 1298.386478][T18828] ? __pfx__copy_from_iter+0x10/0x10 [ 1298.391789][T18828] ? __virt_addr_valid+0x183/0x520 [ 1298.396934][T18828] ? __virt_addr_valid+0x183/0x520 [ 1298.402076][T18828] ? __virt_addr_valid+0x44e/0x520 [ 1298.407221][T18828] ? __check_object_size+0x49c/0x900 [ 1298.412548][T18828] netlink_sendmsg+0x743/0xcb0 [ 1298.417371][T18828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1298.422700][T18828] ? __import_iovec+0x536/0x820 [ 1298.427585][T18828] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1298.432892][T18828] ? security_socket_sendmsg+0x87/0xb0 [ 1298.438389][T18828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1298.443706][T18828] __sock_sendmsg+0x221/0x270 [ 1298.448412][T18828] ____sys_sendmsg+0x525/0x7d0 [ 1298.453217][T18828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1298.458558][T18828] __sys_sendmsg+0x2b0/0x3a0 [ 1298.463182][T18828] ? __pfx___sys_sendmsg+0x10/0x10 [ 1298.468330][T18828] ? vfs_write+0x7c4/0xc90 [ 1298.472831][T18828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1298.479192][T18828] ? do_syscall_64+0x100/0x230 [ 1298.484001][T18828] ? do_syscall_64+0xb6/0x230 [ 1298.488715][T18828] do_syscall_64+0xf3/0x230 [ 1298.493257][T18828] ? clear_bhb_loop+0x35/0x90 [ 1298.497975][T18828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.503906][T18828] RIP: 0033:0x7f2bba775bd9 [ 1298.508345][T18828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.527982][T18828] RSP: 002b:00007f2bbb49d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.536428][T18828] RAX: ffffffffffffffda RBX: 00007f2bba904110 RCX: 00007f2bba775bd9 [ 1298.544424][T18828] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 1298.552422][T18828] RBP: 00007f2bbb49d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1298.560415][T18828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.568495][T18828] R13: 000000000000006e R14: 00007f2bba904110 R15: 00007ffcf53fdd48 [ 1298.576510][T18828] [ 1298.867126][T17332] usb 2-1: Using ep0 maxpacket: 16 [ 1298.880422][T17332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.891022][T17332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1298.900156][T17332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.919542][T17332] usb 2-1: config 0 descriptor?? [ 1298.957393][T17332] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1299.307720][T17332] usb 2-1: USB disconnect, device number 25 [ 1300.857677][T17332] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1300.875498][ T5138] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1301.077969][T17332] usb 1-1: Using ep0 maxpacket: 32 [ 1301.090012][ T5138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.104563][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.118818][ T5138] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1301.148335][T17332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.165490][ T5138] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1301.181015][T17332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1301.195406][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.206029][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1301.221988][ T5138] usb 4-1: config 0 descriptor?? [ 1301.227492][T17332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1301.243605][T17332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1301.252878][ T5139] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1301.260889][T17332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.269912][T17332] usb 1-1: Product: syz [ 1301.274583][T17332] usb 1-1: Manufacturer: syz [ 1301.282590][T17332] usb 1-1: SerialNumber: syz [ 1301.449485][ T5139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.478666][ T5139] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.522333][ T5139] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.531866][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.547040][ T5139] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1301.557735][T17332] cdc_ncm 1-1:1.0: bind() failure [ 1301.566888][T17332] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1301.573781][ T5139] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1301.599616][T17332] cdc_ncm 1-1:1.1: bind() failure [ 1301.621487][T17332] usb 1-1: USB disconnect, device number 14 [ 1301.634014][ T5139] usb 3-1: SerialNumber: syz [ 1301.768383][ T57] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1301.885267][ T5139] usb 3-1: 0:2 : does not exist [ 1301.907860][ T5139] usb 3-1: USB disconnect, device number 8 [ 1301.981386][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.984409][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 1301.988532][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.004944][ T57] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1302.014381][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.028317][ T57] usb 2-1: config 0 descriptor?? [ 1302.036224][ T57] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1302.111443][T18869] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1302.878143][ T5141] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1303.967685][ T57] gspca_sunplus: reg_w_riv err -110 [ 1303.972998][ T57] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1304.003922][ T5139] usb 4-1: USB disconnect, device number 17 [ 1304.006325][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.044628][ T5141] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1304.071912][T18510] usb 2-1: USB disconnect, device number 26 [ 1304.073384][ T5141] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1304.105404][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.171838][ T5141] usb 3-1: config 0 descriptor?? [ 1306.409047][T18916] FAULT_INJECTION: forcing a failure. [ 1306.409047][T18916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1306.433640][T18916] CPU: 0 PID: 18916 Comm: syz.1.3814 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1306.443863][T18916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1306.454042][T18916] Call Trace: [ 1306.457357][T18916] [ 1306.460313][T18916] dump_stack_lvl+0x241/0x360 [ 1306.465047][T18916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.471816][T18916] ? __pfx__printk+0x10/0x10 [ 1306.471895][T18916] ? snprintf+0xda/0x120 [ 1306.480791][T18916] should_fail_ex+0x3b0/0x4e0 [ 1306.480838][T18916] _copy_to_user+0x2f/0xb0 [ 1306.489941][T18916] simple_read_from_buffer+0xca/0x150 [ 1306.495332][T18916] proc_fail_nth_read+0x1e9/0x250 [ 1306.500401][T18916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1306.505961][T18916] ? rw_verify_area+0x520/0x6b0 [ 1306.510837][T18916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1306.516397][T18916] vfs_read+0x204/0xbc0 [ 1306.520565][T18916] ? __pfx_lock_release+0x10/0x10 [ 1306.525622][T18916] ? __pfx_vfs_read+0x10/0x10 [ 1306.530359][T18916] ? __fget_files+0x29/0x470 [ 1306.534955][T18916] ? __fget_files+0x3f6/0x470 [ 1306.539646][T18916] ksys_read+0x1a0/0x2c0 [ 1306.543939][T18916] ? __pfx_ksys_read+0x10/0x10 [ 1306.548717][T18916] ? do_syscall_64+0x100/0x230 [ 1306.553491][T18916] ? do_syscall_64+0xb6/0x230 [ 1306.558190][T18916] do_syscall_64+0xf3/0x230 [ 1306.562728][T18916] ? clear_bhb_loop+0x35/0x90 [ 1306.567419][T18916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.573321][T18916] RIP: 0033:0x7f24e7f746bc [ 1306.577745][T18916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1306.597367][T18916] RSP: 002b:00007f24e8d3a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1306.605892][T18916] RAX: ffffffffffffffda RBX: 00007f24e8103f60 RCX: 00007f24e7f746bc [ 1306.613886][T18916] RDX: 000000000000000f RSI: 00007f24e8d3a0b0 RDI: 0000000000000003 [ 1306.621868][T18916] RBP: 00007f24e8d3a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.629843][T18916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.637821][T18916] R13: 000000000000000b R14: 00007f24e8103f60 R15: 00007ffd18d61bf8 [ 1306.645831][T18916] [ 1306.696884][ T5139] usb 3-1: USB disconnect, device number 9 [ 1306.806734][T17332] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1307.017718][T17332] usb 4-1: Using ep0 maxpacket: 8 [ 1307.033279][T17332] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1307.058523][T17332] usb 4-1: config 179 has no interface number 0 [ 1307.069647][T17332] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1307.104230][T17332] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1307.121087][T17332] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1307.135026][T17332] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1307.151165][T17332] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1307.166851][T17332] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1307.173901][T17332] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1307.183828][ T5139] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1307.201236][T17332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.217683][T18918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1307.252287][T17332] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input182 [ 1307.388651][ T5139] usb 3-1: Using ep0 maxpacket: 32 [ 1307.403427][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.438728][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.466721][ T5139] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1307.505576][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.555241][ T5139] usb 3-1: config 0 descriptor?? [ 1307.627672][ T5139] hub 3-1:0.0: USB hub found [ 1308.734406][ T5139] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1308.990423][ T5139] usbhid 3-1:0.0: can't add hid device: -71 [ 1309.007542][ T5139] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1309.075183][ T5139] usb 3-1: USB disconnect, device number 10 [ 1310.440584][T18960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.708513][T18967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.920848][ C1] ------------[ cut here ]------------ [ 1310.927123][ C1] WARNING: CPU: 1 PID: 24 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 1310.935962][ C1] Modules linked in: [ 1310.939909][ C1] CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1310.949942][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1310.958173][T18960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.960055][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 1310.975654][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 1310.995325][ C1] RSP: 0018:ffffc90000a18930 EFLAGS: 00010002 [ 1311.001466][ C1] RAX: 0000000080010302 RBX: ffff8880176e8000 RCX: 0000000000000002 [ 1311.009486][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 1311.017506][ C1] RBP: 0100000000000004 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be [ 1311.025528][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: ffffffff8196306e [ 1311.033545][ C1] R13: ffff8880241c3d00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 1311.041552][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1311.050498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.057092][ C1] CR2: 0000000020030000 CR3: 0000000029ab4000 CR4: 00000000003506f0 [ 1311.065075][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1311.073055][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1311.081034][ C1] Call Trace: [ 1311.084320][ C1] [ 1311.087176][ C1] ? __warn+0x163/0x4e0 [ 1311.091350][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1311.096482][ C1] ? report_bug+0x2b3/0x500 [ 1311.101016][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1311.106168][ C1] ? handle_bug+0x3e/0x70 [ 1311.110507][ C1] ? exc_invalid_op+0x1a/0x50 [ 1311.115279][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 1311.120364][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 1311.125411][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1311.130560][ C1] ? usb_unanchor_urb+0x7d/0xc0 [ 1311.135433][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 1311.140828][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1311.146740][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1311.151972][ C1] dummy_timer+0x830/0x45d0 [ 1311.156508][ C1] ? __pfx_lock_release+0x10/0x10 [ 1311.161583][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1311.167934][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 1311.173332][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1311.178558][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1311.183516][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1311.188467][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1311.193682][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1311.199687][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1311.205424][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1311.211506][ C1] hrtimer_interrupt+0x396/0x990 [ 1311.216490][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1311.222515][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1311.228164][ C1] [ 1311.231100][ C1] [ 1311.234039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1311.240039][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 1311.246203][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 1311.265821][ C1] RSP: 0018:ffffc900001e6d00 EFLAGS: 00000283 [ 1311.271930][ C1] RAX: ffffffff8140f66c RBX: 0000000000000000 RCX: 0000000000040000 [ 1311.279926][ C1] RDX: ffffc900022e2000 RSI: 00000000000002bb RDI: 00000000000002bc [ 1311.287905][ C1] RBP: 1ffff9200003cdbc R08: ffffffff8140f500 R09: ffffc900001e6ed0 [ 1311.295889][ C1] R10: 0000000000000003 R11: ffffffff8181dca0 R12: ffffffff901f6d20 [ 1311.303872][ C1] R13: dffffc0000000000 R14: 1ffff9200003cdbc R15: ffffffff90c34c22 [ 1311.311864][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1311.318045][ C1] ? unwind_next_frame+0x510/0x2a00 [ 1311.323262][ C1] ? unwind_next_frame+0x67c/0x2a00 [ 1311.328482][ C1] unwind_next_frame+0x67c/0x2a00 [ 1311.333528][ C1] ? ieee80211_rx_list+0x2cdd/0x3780 [ 1311.338836][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1311.344142][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1311.349534][ C1] ? __kernel_text_address+0xd/0x40 [ 1311.354750][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1311.360055][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1311.366232][ C1] arch_stack_walk+0x151/0x1b0 [ 1311.371023][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1311.376332][ C1] stack_trace_save+0x118/0x1d0 [ 1311.381209][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1311.386609][ C1] ? mark_lock+0x9a/0x350 [ 1311.390957][ C1] kasan_save_track+0x3f/0x80 [ 1311.395650][ C1] ? kasan_save_track+0x3f/0x80 [ 1311.400514][ C1] ? kasan_save_free_info+0x40/0x50 [ 1311.405724][ C1] ? poison_slab_object+0xe0/0x150 [ 1311.410853][ C1] ? __kasan_slab_free+0x37/0x60 [ 1311.415806][ C1] ? kmem_cache_free+0x145/0x350 [ 1311.420756][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1311.426404][ C1] ? ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 1311.432915][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1311.438253][ C1] ? skb_release_data+0x64d/0x880 [ 1311.443295][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1311.448941][ C1] kasan_save_free_info+0x40/0x50 [ 1311.453977][ C1] poison_slab_object+0xe0/0x150 [ 1311.458933][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1311.464583][ C1] __kasan_slab_free+0x37/0x60 [ 1311.469369][ C1] kmem_cache_free+0x145/0x350 [ 1311.474153][ C1] ieee80211_rx_handlers+0x3f3d/0xb820 [ 1311.479666][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1311.485493][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1311.490988][ C1] ? deref_stack_reg+0x1c7/0x260 [ 1311.495943][ C1] ? mark_lock+0x9a/0x350 [ 1311.500281][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1311.505756][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1311.510806][ C1] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 1311.517160][ C1] ? __pfx_lock_release+0x10/0x10 [ 1311.522198][ C1] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 1311.528930][ C1] ? ieee80211_rx_for_interface+0x304/0x3d0 [ 1311.534838][ C1] ieee80211_rx_list+0x2cde/0x3780 [ 1311.539966][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1311.545014][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1311.550497][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1311.555531][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1311.561527][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1311.567876][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1311.572924][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 1311.577887][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1311.584240][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1311.589723][ C1] ? skb_dequeue+0x113/0x150 [ 1311.594333][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1311.600372][ C1] tasklet_action_common+0x321/0x4d0 [ 1311.605676][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1311.611496][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1311.617836][ C1] ? __schedule+0x179e/0x49d0 [ 1311.622521][ C1] ? workqueue_softirq_action+0xca/0x140 [ 1311.628166][ C1] handle_softirqs+0x2c4/0x970 [ 1311.632944][ C1] ? run_ksoftirqd+0xca/0x130 [ 1311.637639][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1311.642943][ C1] run_ksoftirqd+0xca/0x130 [ 1311.647461][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1311.652600][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1311.657727][ C1] smpboot_thread_fn+0x544/0xa30 [ 1311.662676][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 1311.667715][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1311.673181][ C1] kthread+0x2f0/0x390 [ 1311.677262][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1311.682728][ C1] ? __pfx_kthread+0x10/0x10 [ 1311.687331][ C1] ret_from_fork+0x4b/0x80 [ 1311.691763][ C1] ? __pfx_kthread+0x10/0x10 [ 1311.696366][ C1] ret_from_fork_asm+0x1a/0x30 [ 1311.701158][ C1] [ 1311.704188][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1311.711463][ C1] CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1311.721454][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1311.731515][ C1] Call Trace: [ 1311.734813][ C1] [ 1311.737666][ C1] dump_stack_lvl+0x241/0x360 [ 1311.742366][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1311.747580][ C1] ? __pfx__printk+0x10/0x10 [ 1311.752189][ C1] ? _printk+0xd5/0x120 [ 1311.756363][ C1] ? vscnprintf+0x5d/0x90 [ 1311.760703][ C1] panic+0x349/0x860 [ 1311.764612][ C1] ? __warn+0x172/0x4e0 [ 1311.768784][ C1] ? __pfx_panic+0x10/0x10 [ 1311.773209][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 1311.778431][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1311.783389][ C1] __warn+0x346/0x4e0 [ 1311.787384][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1311.792506][ C1] report_bug+0x2b3/0x500 [ 1311.796845][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1311.801968][ C1] handle_bug+0x3e/0x70 [ 1311.806125][ C1] exc_invalid_op+0x1a/0x50 [ 1311.810741][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1311.815612][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 1311.821343][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 56 1e e7 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 1311.840978][ C1] RSP: 0018:ffffc90000a18930 EFLAGS: 00010002 [ 1311.847073][ C1] RAX: 0000000080010302 RBX: ffff8880176e8000 RCX: 0000000000000002 [ 1311.855054][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f15c0 [ 1311.863032][ C1] RBP: 0100000000000004 R08: ffffffff92f715f7 R09: 1ffffffff25ee2be [ 1311.871010][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2bf R12: ffffffff8196306e [ 1311.878992][ C1] R13: ffff8880241c3d00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 1311.886978][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 1311.892032][ C1] ? usb_unanchor_urb+0x7d/0xc0 [ 1311.896919][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 1311.902312][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1311.908221][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1311.913441][ C1] dummy_timer+0x830/0x45d0 [ 1311.917964][ C1] ? __pfx_lock_release+0x10/0x10 [ 1311.923012][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1311.929354][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 1311.934746][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1311.939967][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1311.944918][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1311.949882][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1311.955127][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1311.961146][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1311.966906][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1311.973001][ C1] hrtimer_interrupt+0x396/0x990 [ 1311.977980][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1311.983980][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1311.989624][ C1] [ 1311.992571][ C1] [ 1311.995512][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1312.001517][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 1312.007683][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 1312.027303][ C1] RSP: 0018:ffffc900001e6d00 EFLAGS: 00000283 [ 1312.033380][ C1] RAX: ffffffff8140f66c RBX: 0000000000000000 RCX: 0000000000040000 [ 1312.041357][ C1] RDX: ffffc900022e2000 RSI: 00000000000002bb RDI: 00000000000002bc [ 1312.049335][ C1] RBP: 1ffff9200003cdbc R08: ffffffff8140f500 R09: ffffc900001e6ed0 [ 1312.057354][ C1] R10: 0000000000000003 R11: ffffffff8181dca0 R12: ffffffff901f6d20 [ 1312.065331][ C1] R13: dffffc0000000000 R14: 1ffff9200003cdbc R15: ffffffff90c34c22 [ 1312.073319][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1312.079516][ C1] ? unwind_next_frame+0x510/0x2a00 [ 1312.084750][ C1] ? unwind_next_frame+0x67c/0x2a00 [ 1312.089969][ C1] unwind_next_frame+0x67c/0x2a00 [ 1312.095013][ C1] ? ieee80211_rx_list+0x2cdd/0x3780 [ 1312.100316][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1312.105614][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1312.110912][ C1] ? __kernel_text_address+0xd/0x40 [ 1312.116124][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1312.121447][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1312.127623][ C1] arch_stack_walk+0x151/0x1b0 [ 1312.132497][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1312.137802][ C1] stack_trace_save+0x118/0x1d0 [ 1312.142684][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1312.148085][ C1] ? mark_lock+0x9a/0x350 [ 1312.152431][ C1] kasan_save_track+0x3f/0x80 [ 1312.157120][ C1] ? kasan_save_track+0x3f/0x80 [ 1312.161980][ C1] ? kasan_save_free_info+0x40/0x50 [ 1312.167186][ C1] ? poison_slab_object+0xe0/0x150 [ 1312.172310][ C1] ? __kasan_slab_free+0x37/0x60 [ 1312.177265][ C1] ? kmem_cache_free+0x145/0x350 [ 1312.182214][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1312.187858][ C1] ? ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 1312.194363][ C1] ? ieee80211_rx_list+0x2cde/0x3780 [ 1312.199696][ C1] ? skb_release_data+0x64d/0x880 [ 1312.204735][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1312.210380][ C1] kasan_save_free_info+0x40/0x50 [ 1312.215418][ C1] poison_slab_object+0xe0/0x150 [ 1312.220470][ C1] ? ieee80211_rx_handlers+0x3f3d/0xb820 [ 1312.226117][ C1] __kasan_slab_free+0x37/0x60 [ 1312.230903][ C1] kmem_cache_free+0x145/0x350 [ 1312.235684][ C1] ieee80211_rx_handlers+0x3f3d/0xb820 [ 1312.241195][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1312.247120][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1312.252598][ C1] ? deref_stack_reg+0x1c7/0x260 [ 1312.257553][ C1] ? mark_lock+0x9a/0x350 [ 1312.261895][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 1312.267372][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1312.272421][ C1] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 1312.278786][ C1] ? __pfx_lock_release+0x10/0x10 [ 1312.283843][ C1] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 1312.290541][ C1] ? ieee80211_rx_for_interface+0x304/0x3d0 [ 1312.296496][ C1] ieee80211_rx_list+0x2cde/0x3780 [ 1312.301628][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1312.306677][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1312.312180][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1312.317212][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1312.323206][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1312.329573][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1312.334610][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 1312.339592][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1312.345951][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1312.351432][ C1] ? skb_dequeue+0x113/0x150 [ 1312.356033][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1312.362047][ C1] tasklet_action_common+0x321/0x4d0 [ 1312.367354][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1312.373172][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1312.379508][ C1] ? __schedule+0x179e/0x49d0 [ 1312.384196][ C1] ? workqueue_softirq_action+0xca/0x140 [ 1312.389841][ C1] handle_softirqs+0x2c4/0x970 [ 1312.394635][ C1] ? run_ksoftirqd+0xca/0x130 [ 1312.399326][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1312.404624][ C1] run_ksoftirqd+0xca/0x130 [ 1312.409134][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1312.414257][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1312.419372][ C1] smpboot_thread_fn+0x544/0xa30 [ 1312.424418][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 1312.429449][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1312.434913][ C1] kthread+0x2f0/0x390 [ 1312.439002][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1312.444478][ C1] ? __pfx_kthread+0x10/0x10 [ 1312.449080][ C1] ret_from_fork+0x4b/0x80 [ 1312.453507][ C1] ? __pfx_kthread+0x10/0x10 [ 1312.458115][ C1] ret_from_fork_asm+0x1a/0x30 [ 1312.462906][ C1] [ 1312.466289][ C1] Kernel Offset: disabled [ 1312.470739][ C1] Rebooting in 86400 seconds..