last executing test programs: 7.818906346s ago: executing program 3 (id=615): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x5, 0xc6, &(0x7f00000010c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x1, 0x0, 0x33, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x3, 0x9, 0x3], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x1, 0xec, 0x43d2, 0x2, 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x6, 0x63}, @output_terminal={0x9, 0x24, 0x3, 0x2b, 0x301, 0x6, 0x3, 0x6}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0x2, "9cf4"}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0xd, "be194af7a4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x4, "227a8c7cedb3e4f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xa, 0x80, 0x10, {0x7, 0x25, 0x1, 0x0, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfff8, 0x2, 0x5, "9efe366f3ecba4bd27"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x24, 0x3, 0x0, {0x7, 0x25, 0x1, 0x3, 0xd2, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0xc, 0x2, 0xff}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x1, [@generic={0x3b, 0x10, 0xb, "2208f8ff2a669bd2f8e4f6bde79354d19ec700c39252f457f6f8beb4a3a8014978ff77f9c4f07c7f56bc6b4f5224780c37e03657ad71f324"}]}, 0xa, [{0xc5, &(0x7f0000000280)=@string={0xc5, 0x3, "9639c4283c96556ebd19f1dec26d330ae74645101dd50ade7970c3de61e0d8a9041cfffc99cb0757d86de6c56c3c48f87f94983531d0c56326d5294528c6869c1ba5ff98b81195dcdc6ff3583b794c34989f480f3f73b23ec1ec6a62e1bfffd976202b71fd0cf2f47b6c29632a7c6b3b3879854ea1fc4ea08f5bfeffb2e5f903ccf07730a2ad392588b75c7a18c61a3b3b568a91145edcfc78952a58effd73ae5083880753ed59aaa38c64f43b679ace8fda4678a45adc1f8a1069c36efeb3257c4167"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1407}}, {0x90, &(0x7f0000000380)=@string={0x90, 0x3, "98dd11f48f80d8263bfc110624c6542a84138f1cb5c888f2b5d11537002d0cf82b562df606def9c2bbfa2f5c719c09f24aa5f5aaf3668e12807bc47ede3283bc8126a8a95daea244486af56b2e2ab6d689ca91dc76fce5f7b1fe811db416eae9d5c7afab760b49aa8283abd2d656b0abd9f49a52c34ef3117f50ac61581fba3a811564e531ba83ddbace77edc0ed"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}, {0xa5, &(0x7f0000000440)=@string={0xa5, 0x3, "2f1ef405fbf163d251e262fd73cddcdda0c56c7ee69041aeb5b644ca1e74b306023c55e13e0118ab5a959d71ce9d8c1fcac3049f598a938dbe1c9986c36a9f48dee9f5fcca7ea2c565297443fb4c96d1626066b5ce6cc54131e9e2c336eee9370a934d64f7326e204339ea43a027120c34bf7c06f5d0b6c0b480eee9f79975712dc6a4bab2dd7773606529346b58a4154baf7e1dd3d8c597c6945e54f19cf65c9d4c17"}}, {0xa9, &(0x7f0000000500)=@string={0xa9, 0x3, "9d42fe480b2a1dbc66a48cd6ffd99d7d6da29a801ca5e5d7d1ab3c47945b0601229acc47b22431479aacf77491d4120c0de3a7896a57acbf8349227b489b4f56ad6c172846becad085d447d6fd1d547cb751eae2b2fb1ef5e2bf73103d3406b2cb4120a5915838784dea0529d37f6bb5423431ba0c0190ccd8776bccc3565477061af2fe3c4ab20ce837d201b908142a5ed4201c398d739c25d8dc59e17cc97debc93769ce1f62"}}, {0x40, &(0x7f00000005c0)=@string={0x40, 0x3, "9b33bdb6e804a624294eb91c7807cf6f525a313b96286bae551dfcaf7437d906e1eef452316dd32933ee10909f43aee1f9a18fac2d31d87a9a2a254d2306"}}, {0xed, &(0x7f0000000640)=@string={0xed, 0x3, "334808d0635ed9d785eee1ab68380929c1603cb9d22e2f2ce3cbe36e01f72836277f91040b41b26d886c859ae4aea3b4c655d81c057fab74ab25bdfd0ca74d4eb8225b2ba7ae5c6368edb939507d0dac91011f043839d47f7136a6823f4351d7b9375949f7120cd3392559e2064f0c55db50d8383878938b0fa9c13a2b29687b6b5fbc88550cb18207541d6ffee986478796569e17fbe066820dda765bfa179f9aad0423e00e8c510099a51e68887f621127ce64dfea84016a47f77ae0a65346a26a48305e50a85a015c30e2cc7c579725218839e708229d1b96f918cd3bed38ea72e94bdfb0787392afb6"}}, {0x4, &(0x7f0000000740)=@lang_id={0xfffffea7, 0x3, 0x2409}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f00000007c0)={0x20, 0x1, 0x18, {0x18, 0x0, "72015e94c49602ef7b886d1fd50d6df9d8a1d5241bbf"}}, &(0x7f0000000900)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "9687a26ea3b4f2651bcd03ed024f5b1f69959fd43df68452959a78b95a61b599857d168c9cf468a30e2196ebc4b162002b3096bb91d1e2c7bc0c0204e9cf9be1855799e598978dc51c679343ce56e0bffef9d59b483f1d37f1f68bfd6fdd4fe6f259bd7ad2b9943870e77a6c7673bec4826c8157559cbed6b34eefca67737a5b5993a33946a166371341902398d642b2eff15a703a08554b1cd01e7a663e859cb78dde1f4fc19c7f20602ab7eef1e3884c5536895003e100927aa91ae8f6"}}, &(0x7f0000000a00)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@generic={0x11, 0x10, 0xa, "2de76e70849aff448d6279043edd"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e8f0341b6bd3ab20aa277528c2884560"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1b, 0x6, 0x239}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x6, 0xf00, 0x8, [0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0x3, 0xa}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x7, 0x9, "91ffd694", "083e90fd"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6d, 0x0, 0x8, 0x2, 0x5, 0xe, 0x5}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b40)={0x20, 0x31, 0xa9, "7898dc731a20d76eb9c4d067eaaefcea483a528347dc8f7075b225ca739461ec90c51797e24dac28e19a55e0566c4fe709de8c950186e954b0eaa8046e3dd76d59787bb84a099731075eca6b9b3999f191855913ca2eec5ccbbdff76c8d7f91702804abd3021146f6ca2a22f99a7376864da6b54cb12427df02a409aab23d367ad41c2bdb3c041f1eab5f0caa0961391fd788fbe956b649dcb06780bdc032d5d712607e398726f3293"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0x1, 0x44, [0xff00]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "eda7"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "63f6"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x1e, 0x1}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x9}}) syz_usb_disconnect(r0) 7.706279786s ago: executing program 0 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x4d8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4ac, 0x2, [@TCA_FW_POLICE={0x4a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0xa, 0xffff7fff, 0x7, {0x81, 0x2, 0xa7, 0x2, 0x2, 0x80000000}, {0xf4, 0x1, 0x81, 0x9, 0xffff, 0x800}, 0x7, 0xffff0000, 0xd}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x4, 0x2, 0x6, 0x7, 0x1, 0x0, 0x3, 0x9f, 0xe, 0x8, 0xfd, 0xb, 0xa797, 0x1, 0x7, 0x8, 0x8, 0x4, 0x2, 0x80000001, 0x3, 0x4, 0xffff, 0x6, 0xca2, 0x7, 0x7ff, 0xa, 0x6, 0x9, 0x2, 0x9, 0x5, 0x7ff, 0x3, 0x5, 0x2, 0x4, 0x9, 0x7ff, 0xfc, 0xa87, 0x100, 0x7, 0x4000, 0x8000, 0x8000, 0xb15, 0x836e, 0x2, 0x7, 0x6, 0x80000000, 0x5, 0x8, 0xa5, 0x2, 0xa587, 0x8, 0x80, 0x6, 0xb, 0x1, 0x80000000, 0x4, 0xa1, 0x19, 0x8001, 0x8, 0x14, 0x7, 0x401, 0x5, 0x200, 0x2, 0x17, 0x3, 0x2ba, 0xd, 0xa42, 0x7000000, 0x7, 0xbd, 0x1, 0x7f, 0x3, 0x62, 0x3, 0x2, 0x5, 0xdad, 0x9, 0x19c7, 0x75f9, 0x6, 0x4, 0xe, 0x82, 0x3, 0x3, 0x8, 0x8, 0xf11, 0x69, 0x5, 0x7, 0xc5, 0x39, 0xf2, 0x0, 0x4, 0x1, 0x7, 0xff, 0xfffffff7, 0x3, 0x9722, 0x3, 0x5f3, 0x0, 0x0, 0x80, 0x9, 0x52, 0x8, 0x5, 0x3, 0x6, 0xa, 0x0, 0x5, 0x7, 0x7, 0x2, 0x7, 0x7, 0x6, 0x5, 0xe, 0x9, 0x10, 0x7, 0xdcf, 0xede0, 0x1, 0x9, 0x8001, 0x800, 0x4, 0x3, 0x5, 0xe, 0x4, 0x6, 0xd918, 0x400, 0x9, 0x7, 0xffffffff, 0x0, 0x5, 0xf, 0x6, 0x7, 0x1, 0x6, 0x7, 0x3, 0x66, 0x40, 0x4, 0xffffff80, 0x3, 0x8, 0xe2, 0xffffffff, 0x9, 0x2, 0x8, 0x6, 0x6, 0x2, 0xffffffff, 0x9, 0x4, 0x5, 0x8, 0x6, 0x1fd, 0x0, 0x5, 0x9e, 0x72fa2bfb, 0x4, 0x3bc, 0x6b4f, 0xd2, 0x6000000, 0x3ff, 0x6, 0x2, 0x40, 0x1, 0xa5d, 0xd, 0x2, 0x43e7, 0x15c6, 0xffff, 0x101, 0x6, 0x6, 0x9, 0xffff8001, 0x9, 0x1, 0x3, 0x56, 0x5, 0x1, 0x26, 0xb, 0x7, 0x7, 0x5, 0x8, 0x40, 0x18, 0x2, 0x6, 0x9, 0x1, 0xfffffd80, 0x25938c1a, 0xc, 0x5, 0x7, 0x7, 0x0, 0x1, 0x7, 0x100, 0x2, 0x10000, 0x7, 0x401, 0x743, 0x1000, 0x2, 0x7, 0x2, 0x4, 0x9, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x0, 0x8, 0x8, {0x9, 0x2, 0x5, 0x400, 0x7, 0x2}, {0x58, 0x1, 0xfffa, 0x0, 0xac69, 0x8}, 0x3, 0x5, 0x9}}]}]}}]}, 0x4d8}}, 0x10) 7.35410171s ago: executing program 0 (id=618): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xa, 0x62000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563b, &(0x7f0000000000)={0x5}) 7.18091004s ago: executing program 0 (id=620): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4009010000002c6e0c20cc1540a5ce1b75186aa48931d9f3a8740f2836a01cbc62d6498c93e1c2eb680193b2d1398e123184325e8d7932598fe46abe6bb561cc514524286b02eebf75caa525d232d4d6602a7edd0148a4504d84cb839e3a59b92e1b58"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.167074841s ago: executing program 4 (id=621): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4009010000002c6e0c20cc1540a5ce1b75186aa48931d9f3a8740f2836a01cbc62d6498c93e1c2eb680193b2d1398e123184325e8d7932598fe46abe6bb561cc514524286b02eebf75caa525d232d4d6602a7edd0148a4504d84cb839e3a59b92e1b58"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000100)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.054337901s ago: executing program 0 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0xf5}, 0x0) 4.023357416s ago: executing program 0 (id=626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae0858110102030109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.98708437s ago: executing program 3 (id=627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x46, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r5, r6, 0x0, 0xf800) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000a00)={0xff, "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"}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x7, 0x0, [{0x814236899bbb71db, 0x92, &(0x7f0000000580)=""/146}, {0x1000, 0x1000, &(0x7f0000001600)=""/4096}, {0xffff1000, 0x98, &(0x7f00000006c0)=""/152}, {0x10000, 0x78, &(0x7f0000000780)=""/120}, {0x10000, 0x55, &(0x7f0000000800)=""/85}, {0xffff1000, 0x1000, &(0x7f0000002600)=""/4096}, {0xeeee8000, 0x7c, &(0x7f0000000880)=""/124}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.971754721s ago: executing program 4 (id=629): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 2.817692775s ago: executing program 4 (id=630): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x5}) 2.778576815s ago: executing program 3 (id=631): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, {0x1100, 0x3}, {0x2}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x2}) 2.666461994s ago: executing program 4 (id=632): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xab, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090299000301000000090400ff00010100000a240100000002010211240600000500000000000000000000000c2407000000003e8e7a70e108240400005cc3bc090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101"], 0x0) 2.66583561s ago: executing program 1 (id=633): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000200), 0x0}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_robust_list(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, r3, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_BSS_BASIC_RATES={0x2c, 0x24, [{0x16}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x68}}, 0x40840) 2.39809421s ago: executing program 3 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000013c0), 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4), 0x0, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000008}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c000000000011907800000000ffffffff000007d0909b7c4e20001890780400000000003c7262a554a292c7667b6109c40c82f3000000000000000000002af798b44842be31186a089fe91254311c3d17fd05f2cb35f41b8094742efbdb0cdb6f6332e53a13ae42c4e2aa921953a15e920753e2b0d0fadaf9ad5b2fa34490e50ebe0f8840"], 0x0) r9 = syz_clone(0x1000180, &(0x7f00000024c0)="4ca070d8e5fee5f24fe0c35ea5680dedff56fbdf0409b556418c4050b67c1791686556d883a286c250ea5f964b9dcea21fbef5adfdf078287cc4be130a5caae24c59e63e0bea6ab4e5ff0fe803eaf5cf4396e7eb5c9a", 0x56, &(0x7f0000000200), 0x0, &(0x7f0000002440)="199e1bbceb8d93d2bc72098b88c1826624f1705c04d10e1ed0ebf42dc0c8070062bad99855a57e9e02abd40bfb6381ffed0a784160") getpriority(0x2, r9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f0000000040)={0x1}) 2.077466933s ago: executing program 1 (id=635): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 1.783395732s ago: executing program 1 (id=636): dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001d40)={0x68, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x5014, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x5}}, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x3, 0x2e, 0x1}}}}]}, 0x68}, 0x1, 0xd000000}, 0x0) 1.361889732s ago: executing program 1 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000006580)=""/4103, 0x1007}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}], 0x7}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d0000000000000000310000000c0099000000000080"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4018010) 1.201643745s ago: executing program 1 (id=638): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x0, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) 1.162975105s ago: executing program 3 (id=639): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0xa6000000}, 0x0, 0x0, 0x2000, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\x00\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 957.834503ms ago: executing program 2 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10) 834.33202ms ago: executing program 4 (id=641): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 668.170001ms ago: executing program 2 (id=642): ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x5}) 650.784304ms ago: executing program 3 (id=643): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0x5421, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x40044591, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect$uac1(0x4, 0xe5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x5e}, [@mixer_unit={0x8, 0x24, 0x4, 0x4, 0x3, "44adda"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0xe, "72e41b96ce"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x0, 0x3, "ef36eafc32db"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x3, 0x1, [0xb], 0xfe}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x4], 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4d, 0x1, 0x3, 0x7, "", "8b6169"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x20, 0x4, 0x1, 0xfd, 'x', "4435e6"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x95, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9b, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0xa9, 0x10, {0x7, 0x25, 0x1, 0x82, 0x4, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe9, 0x3, 0x6, 0xe, "7dc581499f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x3, 0x35, "5ddb0a1f71"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x9, 0x9, {0x7, 0x25, 0x1, 0x3, 0x0, 0x9a}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5e, 0xd3, 0x1, 0x20, 0x6}, 0x41, &(0x7f0000000280)={0x5, 0xf, 0x41, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x7, 0x3, 0x80}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x55f, 0xf00f, 0x3, [0xff3fff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x1, 0x7f}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0xff0f, 0x6, [0xf, 0xff0000, 0xfff0]}]}, 0x1, [{0xa4, &(0x7f0000000300)=@string={0xa4, 0x3, "355ace7ad2cda6da7e9624b170ec51a70cda963627ed9913497918c8cf40be81a2c4e56172a1fb0aa13aa9a1c5aa284abadf132adec75cdf0985880130f35084e7dc7a5f9b325a2dd96a47fe12b1e9fad641a743e2b2b4ceec32cbcea37f79f5fe9f2448ddd06000fc2b4b07548eb69dddf561b76268554880686d31e75b171811b8d2af7566ec2d481b30825fc0fe7aa7c795ab0b789dee9bb13b0b0b6bd5394bb3"}}]}) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3e0b7a2d444688d2}, 0xc, &(0x7f0000000880)={&(0x7f0000003080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x990}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x26c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x1f0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xff101faf9fc04684}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x1a}]}}}, {0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x54, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xb5}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xeb}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffd}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xc5}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11a}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x945c}]}, @NFT_MSG_DELSETELEM={0xf28, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xf04, 0x3, 0x0, 0x1, [{0x4a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "69351b0aed729249176400ace253bf7bedb6ce47e66900869e8d7f40cf1d68a2946e7b41583053661db763da2e2882e6e6f7b355cdb1390cbff47a4507b65b"}, @NFTA_DATA_VALUE={0x0, 0x1, "00fa7968e5107a63393c9f87751f6685661996f5d3eb1a942c6bbddd77b8ab55c9825617c9ed9cc88d7c49b4282de5d6c05ec52aedf8d83975dbec722b508b133aea876d498d3ac951409e287f5bb0ead10421e2d9d8f175a0b3fe8a07dfaa67a96688328b18a6eb425d4a0bb99baab150f97f4fe6c6eb3056bb8b0074a03355439d12eaf1dca014fe6097dd06439e9a4d9d05a1f380ff0f11c2f7bd8c97924dcccd608989056be8f4acbd78d4aa4bd25626"}, @NFTA_DATA_VALUE={0x0, 0x1, "bf536c59a41018d2edea421e178e35921424e0179986b5585d44b8c5b24507948486fd9b311a7b3b8fb28f4394cc72c0310e2cbec6333c352259f88aa38d"}, @NFTA_DATA_VALUE={0x0, 0x1, "b3744aaa3a797154a1fd2d87cd16eb93b8aa9a39cfb5256974a22dc52d82e3ab8b09554b4dfa9ff9e70616013b1b9ede5adf5636fd18cd248f29362a7719ca12654749d69f1b22c607de521d2aa759ff9479527eb32e19961fb7b3c5ba941bd0c10ff67b8119bad4f90f36e8a72d1541754109da710ca7ea3e995f7e4b109c0729cf493bd2a0a777d5c334421c38a58fb0f4af0f0029fbd4ef8ff674738dfdb6dc4508c902f944082b0c06c9eb9097dae96070c5c371a42ef8ec557ca2cecd87141ed0710c4d1786fd981e5344e2d69f3d9b167634d26a97f7a5d27011ee8b265d21e17c1f3483e1f4e901"}, @NFTA_DATA_VALUE={0x0, 0x1, "6a258e3312e4e59f4e7157874714b45e6f9fdc27177173dc6115e1c80450d9d7a308baf8dc9ddeb10c4699ab0d7f20afc3970ccb19cd896a20858184a96f9979d2efbf4cd4992d7927d6336addb00d599c378689633684876a585fac5dffc1c5bb14fa0facdb16404ce50979cee3a7c1b62c52792c97ffa79a1aec01591b91ef28955d94180e8ebf13a36353640a8df92097d25dc72471d7db62edfb95c4c5350fa6099a98ca9470adfda91d09aad0e03b07eafa88964562295847b411b67c128d30dacd24dc1de11d81a77de91a9fb994c7192c4ca330479fd797d9ecd98623becf216a8c9dfd4c"}, @NFTA_DATA_VALUE={0x0, 0x1, "4a4070f05a1346bd5b7498b9d1d1a8cb9169fbbb2e1925d57662f3f812319ac715f47bb7f25b949c6eea0b36650445c0e95fa942f6036dbd52976aa0d435345df4eaef76f6a53afab46de69f5abd8b2519a7641bf55184df7fcf71b509078144a1b4f40e7e71dc182df9ece80842969c774096d15adf81edda1277a307bf3e49b2360f654e7381017c146ed3b31f64619b515cf0fb089e960ca2d45f486fe404a79a4573e2573412f595d515de7ff243656c4f5694eb2aecb49a0d05d906c5a82a0c7ee54524bc5fd273c2cb285176083f4932babb19141eb5fc15ee12dcd0e2778c08"}]}, @NFTA_SET_ELEM_EXPR={0x3e4, 0x7, 0x0, 0x1, @connlimit={{}, @void}}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "8c5cf07bda0fe18503e9411d257deeb73e8e0fae4555e557dce18e505e5884b0f08aace448424b704e70e6a3eb1676a4cd75831b3102f02905"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x3c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "8477cc2dc766178d3379f96e50d1f3c5ec1025c90b2fdcb01786ac7ccffe2f09ba14bc3659efc3717f82554d40cd7acbc7b9789c74363f25eb18ce4f706f36f378a3e85c02342accb287d7fd8b1dd09cf84ea83f383d1a04fd819d2aa455ee99a1715127c6afa26edbc07c35aeb4276fe7e194b5bcc4d096d684ad1c95f5de9d2bf7c6d22186641ecd1bcba5e20c94a5b3195d16f2182bc703084c41b4ccbf992077d228ee8b6ff97471bd4b2b2dbcb4b93020d63b0bc5e9b746b80fe71234ca96d8657d8fb67110"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "1eb42378ad22046841c43f12b4615267bca4faf63ffc69651ff1"}]}, @NFTA_SET_ELEM_KEY={0x294, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "23c95586fa03e28868f3ab7ba9fe37f78d5d6447705ebe7b8da872f12668e5a4d7a2a6c1996f78b9768e8e2df5c40ac107574872896f2532157c7c624543b495f8dc8eddb2dffded710c5271fa21bd9fe404107fc371baa8114836d6c605e09538eab997f29f098321c88340273128c73ac12b436a6750c13c4a"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "e7bd10e25c5ef41b102cd86b3d4300185d0b4786aa14e0c196491e367710784091dac217ee28ad2b1774f556c3ee434f07e0aac53c7001512e8336a032ac81d58c259d53dfb703d6c7a346e14043d3899fc8db4f42160a06f733"}, @NFTA_DATA_VALUE={0xcf, 0x1, "5ce72ad64d300fb24d86528baec2d1f2994e39f999c9f0132eb9e644c251d99cb4d15ede7d0713b073b7e0014c6462d5e79ba617b2f33434f860764ab806f93c9166cf507e4b437f3b6a29dd8587e239ac2192cc3ae6060be8cd6a6b879b7377a82bb80df06018b55fff12cdd23cf463ca527d3708cefb00e7e7f600d97cfb4c19f4498817b67f3cd337f1e2e8f3ae4b62113e1c331f65bdef17190d55cc3be50b0de5626fa5acee2da5f12e03a62840e3ec3733abb2e5ee1ef3b5405ee9bfaa169502d5e30f5b512055c5"}]}]}, {0x630, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "03f924c11674bbc50d5a7b7e7b228ea4655a51abaee1b6871c2f1f576c0705390bdb08f7a58007b3ede500e5aae0b2ebc1"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "accb12584075c3532af0eb303a7beeea494284095c9d7d78a865924a086de69fbd5810195d5551ed6f4bb7a24c03de8d389b6e8f0914493bfb7e09d720f168e951b2aed27771fcebee94051ec093eac78cc616ca8998a99211ea909e3c76289a30a2a535bdb245efac479392ea256332de7a17e23e18"}]}, @NFTA_SET_ELEM_EXPR={0xc0, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x6c, 0xa, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3225}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0xfffffffffffffff2, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "abccfd817de35c4dd5e6788a7ee2bb891d2ea611e081bf68a0ec3db3430aae53e69bd226025b1cd7dac9af7d359f918dd33fc6c6003b9eb68f23a2822588bea6505fccc29720127a7e3e6626a8b044abeac04664621602379eb784b0af0e335fbebb87345664633368df67d559bc53527a5284d352a1d9311a15ed138161ea1f77ce5058f7c980486e35215f1b19b0422c47772846100c697f09ca082dee1b06706376aa14f90a1f1cf3db6e1964835ae803ea41d2b80a84fe9bb2847dc3969e69fc321f73139ff521f64516fe0bd87ae91e3b1c3b1c676504251dded79c6f58"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "42354be9b6644f26731fc08d0b4cce070789818fe0ccba38ffa76167c46c35b30c4407647b6110a7f8ecef1ee1b90489492e46b1aa99e5d07d514c03a63efcd6ed2659344a8b9aed8c0c69fff0d1186f1d000e317c6c286aeb97c3c2f3f073ebbae8a9c26447561e3b7afcc354b81419211b55642c6de97069e8d6aeafbb5d29b141a75486dad40c4886faac2ffd9146be43a0fd4698ebc49e8afed95e24aa6ebede38ab4e39a7f7467cfbc96fa054eab1551673fdea35d631c6ff43218c896730d996dd65b768f7fbb2581bcc72d4acb1bd32ee047cd639d9"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "66f147b313c48277a8dffe2aefd52e37b16630d4b737e62316d9f8355b35148940b9e2790aa62b8e91997a2d61390fa1253774b0a40fc24253321bbe0a081c4e9bf180fba53b59c3f092c7bece6d9462cedff4385aa8eaa4af95494364317968165d16b209d0af0065fe06d974b601c8f513b1ae449aeccdf4cb4ffead1c38035dce748b501575c01ba0514cb4888b8fbb47a4e9e6e970c6c012cda3db3f01535b07830091414cda942b0edb87ebcb352b386c3f99e23bb0ab0cd9b93631d5675c1ae822"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "5cf585dcf26d4f5e3d3fb0067287c786ba251802a0fd5812f2d63dcab458d1d7555be93889364515c2bb680656af0f2d4fc7f563cf21ab28e98653b0c9aa3a7f3761dd04b5c92ce2"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0xa00, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x12d4}, 0x1, 0x0, 0x0, 0x8080}, 0x8082) syz_usb_control_io$uac1(r6, &(0x7f00000004c0)={0x14, &(0x7f00000003c0)={0x0, 0x1, 0x41, {0x41, 0x6, "41d4aa0b9e9a2f486d217412d4e33612e9b8cb17544251b2b02f60a22490f9089de81a2bddd84c81ee3e0be151f95d297aaf6f4e46cdaf2c6fcff26a16fc4a"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="4015ec0000000b478591d485cd510a6d5136e1eac4ba986d9e6a9ed16af614f489f6c48dd06c835c81c2afeda19c71426faa945a37f74d3eac809f147c22faeb29577eb04a8cbd773d799e8924e4886f4adf74769a1261d806cb708f13912e72fa0dc626a90147cc8e5587aeb90b336d6d6a5cc0cf1a99ab05cbe38ab72d98bdcc261f2addf7ede844c7e74a53577f48e780ef7ca8ff585d79746cad21c88ac00b7879d632a268a72d09a04a01a290f5844776dd5072c1cda86048c9ee5b9f17eecd29b7b3c4a114ef667f7c14388d3713c240bbda9d005124553944477acd3c26592fc616ed8fe72777f405c7c51beab6a7"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x81, 0x1, "b3"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "7da84c"}, &(0x7f0000000700)={0x20, 0x83, 0x1, 'u'}, &(0x7f0000000740)={0x20, 0x84, 0x4, "29bf9e78"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "1d7b4f"}}) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 518.151662ms ago: executing program 4 (id=644): syz_io_uring_setup(0x2ddd, 0x0, &(0x7f0000000200), &(0x7f0000000280)) syz_io_uring_setup(0x704a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040), &(0x7f00000001c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='}\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000180)='/\x00', 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 518.036038ms ago: executing program 2 (id=645): creat(&(0x7f0000000300)='./file0\x00', 0x363) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000200)='\xae'], 0x5c00}) 495.078249ms ago: executing program 2 (id=646): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 437.442105ms ago: executing program 2 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003600)={'veth1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360d", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x0, 0x142, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0101000000"], 0x50}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 340.086426ms ago: executing program 0 (id=648): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$key(0xf, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04001220", @ANYRES16], 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x592, 0x2, 0x46, 0x1000, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0x13e58, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2ee85000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000002c0)=0xb, 0x4) 178.132009ms ago: executing program 1 (id=649): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283aff20010000000000000044000000000000ff02ec070000000000000000000000018900907800000000fe800000000000000000000000000000fe8000"/94], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[], 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fcntl$dupfd(r2, 0xe84939bd66457107, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0xe) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000340)=0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) truncate(&(0x7f0000000040)='./file0\x00', 0x5) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000200)=0xa36) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 2 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003600)={'veth1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe3", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x0, 0x142, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0101000000"], 0x50}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 204.554106][ T7225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.586228][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.601445][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.612172][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.635495][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.669810][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.701685][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.724688][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.785024][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.813370][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.846212][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.878405][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.918070][ T7225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.944130][ T7225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.975158][ T7225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.984011][ T7225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.062994][ T7213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.085077][ T7213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.105355][ T7213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.114121][ T7213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.156609][ T58] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 205.225922][ T5281] usbhid 3-1:1.0: can't add hid device: -71 [ 205.239259][ T5281] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 205.304581][ T5281] usb 3-1: USB disconnect, device number 41 [ 205.335551][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 205.352652][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.399813][ T58] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 205.425730][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.454173][ T58] usb 2-1: Product: syz [ 205.465492][ T58] usb 2-1: Manufacturer: syz [ 205.480527][ T58] usb 2-1: SerialNumber: syz [ 205.504637][ T58] usb 2-1: config 0 descriptor?? [ 205.530835][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.547995][ T58] smsusb:smsusb_probe: board id=2, interface number 0 [ 205.570094][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.578142][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.587147][ T58] smsusb:smsusb_probe: Device initialized with return code -19 [ 205.610415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.753609][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.778909][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.838561][ T5282] usb 1-1: USB disconnect, device number 41 [ 205.864692][ T5282] em28xx 1-1:0.0: Disconnecting em28xx [ 205.903401][ T5282] em28xx 1-1:0.0: Freeing device [ 205.909359][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.926751][ T5279] usb 2-1: USB disconnect, device number 38 [ 205.962894][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.085580][ T5286] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 206.277731][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 206.288763][ T5286] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 206.300489][ T5286] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 206.314642][ T5286] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 206.386846][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.499285][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 206.635098][ T58] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 206.715162][ T5286] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 206.753001][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 206.753022][ T29] audit: type=1326 audit(1726871690.282:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 206.815601][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 206.839388][ T29] audit: type=1326 audit(1726871690.312:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 206.852251][ T58] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 206.873015][ T29] audit: type=1326 audit(1726871690.312:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 206.896602][ T29] audit: type=1326 audit(1726871690.312:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 206.899649][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.941271][ T5286] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.945268][ T29] audit: type=1326 audit(1726871690.312:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 206.957150][ T5286] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.000740][ T58] usb 4-1: config 0 descriptor?? [ 207.009420][ T5286] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.024908][ T5286] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.055226][ T5283] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.065314][ T29] audit: type=1326 audit(1726871690.312:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 207.065617][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.137520][ T7500] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 207.166939][ T29] audit: type=1326 audit(1726871690.312:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 207.200526][ T29] audit: type=1326 audit(1726871690.312:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 207.238095][ T29] audit: type=1326 audit(1726871690.312:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 207.260452][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.280663][ T58] usb 4-1: string descriptor 0 read error: -71 [ 207.297896][ T29] audit: type=1326 audit(1726871690.322:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f496d77def9 code=0x7ffc0000 [ 207.323636][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.334597][ T58] usb 4-1: Found UVC 0.00 device (2833:0201) [ 207.342129][ T58] usb 4-1: No valid video chain found. [ 207.360334][ T58] usb 4-1: USB disconnect, device number 15 [ 207.590065][ T5283] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.607871][ T5283] usb 5-1: config 1 interface 0 has no altsetting 0 [ 207.649354][ T5283] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 207.658596][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.667298][ T5283] usb 5-1: Product: à ” [ 207.671526][ T5283] usb 5-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 207.708343][ T5283] usb 5-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 207.805428][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 207.991016][ T25] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.023626][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 208.057430][ T25] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 208.080992][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.094269][ T25] usb 2-1: Product: à ” [ 208.114538][ T25] usb 2-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 208.155759][ T25] usb 2-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 208.444438][ T7523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.456'. [ 208.513614][ T5283] usbhid 5-1:1.0: can't add hid device: -71 [ 208.533197][ T5283] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 208.600909][ T5283] usb 5-1: USB disconnect, device number 29 [ 208.810992][ T5282] usb 3-1: USB disconnect, device number 42 [ 209.085120][ T5283] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 209.142124][ T25] usbhid 2-1:1.0: can't add hid device: -71 [ 209.169062][ T25] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 209.257862][ T25] usb 2-1: USB disconnect, device number 39 [ 209.296241][ T5283] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.332070][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.383216][ T5283] usb 5-1: config 0 descriptor?? [ 209.410108][ T5283] cp210x 5-1:0.0: cp210x converter detected [ 209.673062][ T5286] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 209.682555][ T5286] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input8 [ 210.315161][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 210.325239][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 210.481377][ T25] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.517597][ T46] usb 4-1: config 0 has no interfaces? [ 210.528032][ T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.540433][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 210.554171][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.640450][ T46] usb 4-1: config 0 descriptor?? [ 210.656120][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 210.668195][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.676425][ T25] usb 3-1: Product: à ” [ 210.680712][ T25] usb 3-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 210.716825][ T25] usb 3-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 211.034625][ T7576] netlink: 72 bytes leftover after parsing attributes in process `syz.2.465'. [ 211.202460][ T46] usb 4-1: USB disconnect, device number 16 [ 211.283335][ T5286] usb 1-1: USB disconnect, device number 42 [ 211.283383][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 211.595982][ T25] usbhid 3-1:1.0: can't add hid device: -71 [ 211.602279][ T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 211.635334][ T25] usb 3-1: USB disconnect, device number 43 [ 211.675091][ T5286] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 211.837137][ T5283] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 211.845254][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 211.857601][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.863385][ T5283] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 211.904005][ T5283] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 211.924335][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.930481][ T5283] usb 5-1: cp210x converter now attached to ttyUSB0 [ 211.966969][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.998199][ T5283] usb 5-1: USB disconnect, device number 30 [ 212.039018][ T5286] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 212.040991][ T5283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.095072][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.104070][ T5283] cp210x 5-1:0.0: device disconnected [ 212.105491][ T7607] sit0: entered promiscuous mode [ 212.131732][ T7607] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 212.156201][ T5286] usb 1-1: config 0 descriptor?? [ 212.165910][ T7607] netlink: 1 bytes leftover after parsing attributes in process `syz.3.470'. [ 212.544467][ T7621] netlink: 14 bytes leftover after parsing attributes in process `syz.1.472'. [ 212.591050][ T7629] fuse: Unknown parameter 'grou00000000000000000000' [ 212.733129][ T7623] netlink: 'syz.3.473': attribute type 29 has an invalid length. [ 212.773153][ T5286] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 212.781648][ T5286] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 212.797349][ T7631] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 212.875179][ T5286] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 212.931881][ T7631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 212.957361][ T7623] netlink: 'syz.3.473': attribute type 29 has an invalid length. [ 212.979462][ T7636] netlink: 'syz.3.473': attribute type 29 has an invalid length. [ 213.014118][ T7639] netlink: 'syz.3.473': attribute type 29 has an invalid length. [ 213.034379][ T25] usb 1-1: USB disconnect, device number 43 [ 213.195165][ T5286] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.290264][ T7651] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 213.352432][ T7652] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 213.368074][ T5286] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.385201][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.414524][ T5286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.439016][ T5286] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.471947][ T5286] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.493951][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.502097][ T5286] usb 4-1: Product: syz [ 213.509707][ T5286] usb 4-1: Manufacturer: syz [ 213.523971][ T5286] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 213.645089][ T5279] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 213.700410][ T7655] usb usb8: usbfs: process 7655 (syz.0.478) did not claim interface 0 before use [ 213.819605][ T5279] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 213.852397][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.914525][ T5279] usb 2-1: config 0 has no interfaces? [ 213.941712][ T5279] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 213.951335][ T58] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 213.965351][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.979684][ T5279] usb 2-1: config 0 descriptor?? [ 214.053496][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 214.053517][ T29] audit: type=1326 audit(1726871697.582:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.091672][ T29] audit: type=1326 audit(1726871697.612:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.132100][ T29] audit: type=1326 audit(1726871697.622:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.180714][ T58] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 214.197518][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.231815][ T58] usb 1-1: config 0 descriptor?? [ 214.240501][ T29] audit: type=1326 audit(1726871697.622:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.271259][ T29] audit: type=1326 audit(1726871697.622:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.302273][ T29] audit: type=1326 audit(1726871697.622:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.350466][ T29] audit: type=1326 audit(1726871697.622:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.385197][ T5283] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 214.403939][ T29] audit: type=1326 audit(1726871697.622:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.447790][ T29] audit: type=1326 audit(1726871697.622:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.504650][ T29] audit: type=1326 audit(1726871697.652:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 214.568774][ T7667] netlink: 'syz.2.482': attribute type 4 has an invalid length. [ 214.601701][ T5283] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.626189][ T7666] blktrace: Concurrent blktraces are not allowed on loop3 [ 214.656650][ T5283] usb 5-1: config 1 interface 0 has no altsetting 0 [ 214.681210][ T5283] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 214.708434][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.734710][ T5283] usb 5-1: Product: à ” [ 214.747375][ T5283] usb 5-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 214.794547][ T5283] usb 5-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 214.979900][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.029268][ T58] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 215.041565][ T58] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 215.078149][ T58] [drm:udl_init] *ERROR* Selecting channel failed [ 215.152864][ T7657] netlink: 72 bytes leftover after parsing attributes in process `syz.4.479'. [ 215.163196][ T58] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 215.173040][ T58] [drm] Initialized udl on minor 2 [ 215.200516][ T58] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.231185][ T58] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 215.258498][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.275672][ T58] usb 1-1: USB disconnect, device number 44 [ 215.282501][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 215.439077][ T25] usb 4-1: USB disconnect, device number 17 [ 215.660264][ T7681] fuse: Unknown parameter 'grou00000000000000000000' [ 215.737438][ T5283] usbhid 5-1:1.0: can't add hid device: -71 [ 215.780798][ T5283] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 215.811912][ T5283] usb 5-1: USB disconnect, device number 31 [ 215.958552][ T2502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.995336][ T58] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 216.066321][ T2502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.152210][ T2502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.175433][ T58] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.187693][ T58] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.210822][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.225511][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.240663][ T58] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.255502][ T58] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.263715][ T58] usb 1-1: Product: syz [ 216.268036][ T58] usb 1-1: Manufacturer: syz [ 216.284224][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 216.289710][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 216.308045][ T58] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 216.314075][ T58] cdc_wdm 1-1:1.0: Unknown control protocol [ 216.343373][ T2502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.404120][ T25] usb 2-1: USB disconnect, device number 40 [ 216.487581][ C0] wdm_int_callback: 52 callbacks suppressed [ 216.487604][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.500247][ C0] wdm_int_callback: 52 callbacks suppressed [ 216.500268][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.512472][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.519129][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.525426][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.532068][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.538371][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.544999][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.551288][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.558012][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.564418][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.571027][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.577289][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.583919][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.590214][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.596852][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.603142][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.609778][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.616064][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.622692][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.637972][ T58] usb 1-1: USB disconnect, device number 45 [ 216.643948][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 216.747825][ T2502] erspan0: left allmulticast mode [ 216.758368][ T2502] erspan0: left promiscuous mode [ 216.805346][ T2502] bridge0: port 3(erspan0) entered disabled state [ 216.863921][ T2502] bridge_slave_1: left allmulticast mode [ 216.905263][ T2502] bridge_slave_1: left promiscuous mode [ 216.912825][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.922326][ T2502] bridge_slave_0: left allmulticast mode [ 216.928599][ T2502] bridge_slave_0: left promiscuous mode [ 216.947199][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.718564][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.728980][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.742060][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.751801][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.762774][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.772614][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.878405][ T7713] fuse: Unknown parameter 'grou00000000000000000000' [ 218.265097][ T58] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 218.444418][ T58] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.507369][ T58] usb 1-1: config 1 interface 0 has no altsetting 0 [ 218.548990][ T58] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 218.592312][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.657821][ T58] usb 1-1: Product: à ” [ 218.662180][ T58] usb 1-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 218.732184][ T58] usb 1-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 218.848175][ T2502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.933202][ T2502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.992232][ T7717] netlink: 72 bytes leftover after parsing attributes in process `syz.0.497'. [ 219.097874][ T2502] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 219.138840][ T2502] bond0 (unregistering): Released all slaves [ 219.242047][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 219.421141][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 219.421158][ T29] audit: type=1326 audit(1726871702.952:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 219.451153][ T29] audit: type=1326 audit(1726871702.952:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 219.845239][ T5240] Bluetooth: hci4: command tx timeout [ 219.849619][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 219.958354][ T5283] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 220.062816][ T58] usbhid 1-1:1.0: can't add hid device: -71 [ 220.096877][ T58] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 220.103999][ T1186] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.155482][ T58] usb 1-1: USB disconnect, device number 46 [ 220.195634][ T5283] usb 5-1: device descriptor read/64, error -71 [ 220.296465][ T1186] usb 4-1: Using ep0 maxpacket: 8 [ 220.352907][ T1186] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 220.368132][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.377065][ T2502] hsr_slave_0: left promiscuous mode [ 220.380902][ T1186] usb 4-1: Product: syz [ 220.390314][ T1186] usb 4-1: Manufacturer: syz [ 220.400322][ T2502] hsr_slave_1: left promiscuous mode [ 220.402209][ T1186] usb 4-1: SerialNumber: syz [ 220.418330][ T2502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.433552][ T1186] usb 4-1: config 0 descriptor?? [ 220.438949][ T2502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.445208][ T5283] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 220.472742][ T1186] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 220.494010][ T2502] veth1_macvtap: left promiscuous mode [ 220.500626][ T2502] veth0_macvtap: left promiscuous mode [ 220.507776][ T2502] veth1_vlan: left promiscuous mode [ 220.513319][ T2502] veth0_vlan: left promiscuous mode [ 220.585198][ T5283] usb 5-1: device descriptor read/64, error -71 [ 220.697298][ T5283] usb usb5-port1: attempt power cycle [ 221.045358][ T5283] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 221.075873][ T5283] usb 5-1: device descriptor read/8, error -71 [ 221.248316][ T2502] team0 (unregistering): Port device team_slave_1 removed [ 221.298733][ T2502] team0 (unregistering): Port device team_slave_0 removed [ 221.323564][ T5283] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 221.356977][ T5283] usb 5-1: device descriptor read/8, error -71 [ 221.481919][ T5283] usb usb5-port1: unable to enumerate USB device [ 221.892662][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.911837][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.922756][ T7714] bridge_slave_0: entered allmulticast mode [ 221.928949][ T5240] Bluetooth: hci4: command tx timeout [ 221.940036][ T7714] bridge_slave_0: entered promiscuous mode [ 221.963779][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.980489][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.015427][ T7714] bridge_slave_1: entered allmulticast mode [ 222.043641][ T7714] bridge_slave_1: entered promiscuous mode [ 222.112361][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.135508][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.179506][ T7774] netlink: 'syz.0.507': attribute type 20 has an invalid length. [ 222.237595][ T7714] team0: Port device team_slave_0 added [ 222.256958][ T7714] team0: Port device team_slave_1 added [ 222.333408][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.340973][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.363865][ T7778] fuse: Unknown parameter 'group_i00000000000000000000' [ 222.402898][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.440690][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.451419][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.551615][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.640574][ T7787] fuse: Bad value for 'fd' [ 222.682441][ T7787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.763050][ T7714] hsr_slave_0: entered promiscuous mode [ 222.765784][ T25] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 222.789597][ T7714] hsr_slave_1: entered promiscuous mode [ 222.826262][ T7714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.838365][ T7714] Cannot create hsr debugfs directory [ 222.945124][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 222.954438][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 222.978287][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 223.003954][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.021557][ T25] usb 1-1: Product: syz [ 223.029330][ T25] usb 1-1: Manufacturer: syz [ 223.034033][ T25] usb 1-1: SerialNumber: syz [ 223.053325][ T25] usb 1-1: config 0 descriptor?? [ 223.071673][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 223.130777][ T29] audit: type=1326 audit(1726871706.662:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.145749][ T5283] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 223.166508][ T29] audit: type=1326 audit(1726871706.682:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.201166][ T1186] gspca_sonixj: reg_w1 err -71 [ 223.216498][ T29] audit: type=1326 audit(1726871706.692:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.245764][ T1186] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 223.269835][ T1186] usb 4-1: USB disconnect, device number 18 [ 223.288310][ T29] audit: type=1326 audit(1726871706.692:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.304074][ T5283] usb 2-1: device descriptor read/64, error -71 [ 223.366174][ T29] audit: type=1326 audit(1726871706.692:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.389789][ T29] audit: type=1326 audit(1726871706.702:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.414658][ T29] audit: type=1326 audit(1726871706.702:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.454468][ T29] audit: type=1326 audit(1726871706.702:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10bd7def9 code=0x7ffc0000 [ 223.477036][ T58] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 223.585081][ T5283] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 223.669875][ T58] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.685989][ T58] usb 5-1: config 1 interface 0 has no altsetting 0 [ 223.691785][ T7783] random: crng reseeded on system resumption [ 223.709421][ T58] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 223.735197][ T5283] usb 2-1: device descriptor read/64, error -71 [ 223.741148][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.782240][ T58] usb 5-1: Product: à ” [ 223.787160][ T58] usb 5-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 223.832393][ T58] usb 5-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 223.855474][ T5283] usb usb2-port1: attempt power cycle [ 224.015168][ T5240] Bluetooth: hci4: command tx timeout [ 224.084769][ T7714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.092729][ T7801] netlink: 72 bytes leftover after parsing attributes in process `syz.4.513'. [ 224.126730][ T7714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.148631][ T7714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.160739][ T7714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.255798][ T5283] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 224.303623][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.326160][ T5283] usb 2-1: device descriptor read/8, error -71 [ 224.368685][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.394711][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.402120][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.443947][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.451258][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.476695][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.485544][ T25] gspca_zc3xx: reg_w_i err -110 [ 224.507223][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.565762][ T5283] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 224.596876][ T5283] usb 2-1: device descriptor read/8, error -71 [ 224.606814][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.674523][ T7714] veth0_vlan: entered promiscuous mode [ 224.686725][ T7714] veth1_vlan: entered promiscuous mode [ 224.690149][ T58] usbhid 5-1:1.0: can't add hid device: -71 [ 224.713725][ T7714] veth0_macvtap: entered promiscuous mode [ 224.726725][ T7714] veth1_macvtap: entered promiscuous mode [ 224.727270][ T5279] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 224.742731][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.753381][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.758176][ T58] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 224.763600][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.782605][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.792711][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.803474][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.808209][ T58] usb 5-1: USB disconnect, device number 36 [ 224.813649][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.830693][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.842417][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.852400][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.863089][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.873177][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.884113][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.894411][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.905139][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.915133][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.915156][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.915170][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.915188][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.916599][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.968143][ T7714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.977276][ T7714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.986264][ T7714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.995188][ T7714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.021052][ T5283] usb usb2-port1: unable to enumerate USB device [ 225.075195][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 225.081572][ T25] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 225.101384][ T25] usb 1-1: USB disconnect, device number 47 [ 225.117201][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.135815][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.195276][ T5279] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 225.214826][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.255483][ T5279] usb 4-1: config 0 descriptor?? [ 225.302200][ T2975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.476652][ T2975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.539601][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.563901][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.654048][ T7833] fuse: Unknown parameter 'group_i00000000000000000000' [ 225.684219][ T5279] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 225.707661][ T2975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.844067][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.913814][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.943999][ T2975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.085377][ T5240] Bluetooth: hci4: command tx timeout [ 226.107481][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.130725][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.135714][ T7815] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.146825][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.158666][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.169782][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.187505][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.252730][ T5281] usb 4-1: USB disconnect, device number 19 [ 226.345450][ T7847] usb usb8: usbfs: process 7847 (syz.2.493) did not claim interface 0 before use [ 226.364582][ T2975] bridge_slave_1: left allmulticast mode [ 226.385386][ T2975] bridge_slave_1: left promiscuous mode [ 226.391221][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.399860][ T7849] fuse: Bad value for 'fd' [ 226.433685][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.446695][ T2975] bridge_slave_0: left allmulticast mode [ 226.467445][ T2975] bridge_slave_0: left promiscuous mode [ 226.473231][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.655461][ T5279] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 226.829051][ T5279] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.861736][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.893710][ T5279] usb 3-1: config 0 descriptor?? [ 227.063699][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 227.063719][ T29] audit: type=1326 audit(1726871710.592:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.119003][ T29] audit: type=1326 audit(1726871710.592:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.158297][ T29] audit: type=1326 audit(1726871710.642:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.263552][ T29] audit: type=1326 audit(1726871710.642:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.317498][ T7875] blktrace: Concurrent blktraces are not allowed on loop3 [ 227.338046][ T29] audit: type=1326 audit(1726871710.642:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.419844][ T29] audit: type=1326 audit(1726871710.642:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.459885][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.467949][ T29] audit: type=1326 audit(1726871710.642:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.468004][ T29] audit: type=1326 audit(1726871710.652:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.468044][ T29] audit: type=1326 audit(1726871710.652:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.468083][ T29] audit: type=1326 audit(1726871710.652:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb6b417def9 code=0x7ffc0000 [ 227.801344][ T8] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.830208][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 227.859587][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 227.876660][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.884806][ T8] usb 4-1: Product: à ” [ 227.895629][ T8] usb 4-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 227.948911][ T8] usb 4-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 228.003747][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.041910][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.067524][ T2975] bond0 (unregistering): Released all slaves [ 228.088191][ T7855] netlink: 76 bytes leftover after parsing attributes in process `syz.1.522'. [ 228.102927][ T7860] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 228.120195][ T7860] hsr0: entered promiscuous mode [ 228.175511][ T7860] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.219796][ T7873] netlink: 72 bytes leftover after parsing attributes in process `syz.3.524'. [ 228.235124][ T7860] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 228.250451][ T5240] Bluetooth: hci1: command tx timeout [ 228.278113][ T7860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 228.304605][ T7860] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 228.322296][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 228.334019][ T7865] netlink: 9 bytes leftover after parsing attributes in process `syz.1.522'. [ 228.354796][ T7865] 0·: renamed from hsr_slave_1 (while UP) [ 228.371340][ T7865] 0·: entered allmulticast mode [ 228.382471][ T7865] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 228.477600][ T5279] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 228.488203][ T5279] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 228.498264][ T5279] [drm:udl_init] *ERROR* Selecting channel failed [ 228.521168][ T5279] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 228.544354][ T5279] [drm] Initialized udl on minor 2 [ 228.566072][ T5279] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.583113][ T5279] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 228.611516][ T58] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.629520][ T5279] usb 3-1: USB disconnect, device number 44 [ 228.636910][ T58] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 229.045683][ T5286] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 229.087811][ T2975] hsr_slave_0: left promiscuous mode [ 229.115408][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 229.132146][ T8] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 229.140641][ T2975] hsr_slave_1: left promiscuous mode [ 229.157652][ T8] usb 4-1: USB disconnect, device number 20 [ 229.185206][ T5279] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 229.193107][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.209942][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.217643][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 229.229236][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.243876][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.254891][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.263234][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.271105][ T5286] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 229.280760][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.297256][ T5286] usb 2-1: config 0 descriptor?? [ 229.322126][ T2975] veth1_macvtap: left promiscuous mode [ 229.328254][ T2975] veth0_macvtap: left promiscuous mode [ 229.336485][ T2975] veth1_vlan: left promiscuous mode [ 229.342270][ T2975] veth0_vlan: left promiscuous mode [ 229.354747][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.530'. [ 229.395261][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 229.408374][ T5279] usb 1-1: config 0 has no interfaces? [ 229.429073][ T5279] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.451166][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.474441][ T5279] usb 1-1: Product: syz [ 229.486436][ T5279] usb 1-1: Manufacturer: syz [ 229.500888][ T5279] usb 1-1: SerialNumber: syz [ 229.518792][ T5279] usb 1-1: config 0 descriptor?? [ 229.851315][ T5286] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 230.043455][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.075908][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.100742][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 230.321608][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 230.330620][ T5240] Bluetooth: hci1: command tx timeout [ 230.380757][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 230.915277][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 230.924417][ T7911] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 230.983564][ T1186] usb 2-1: USB disconnect, device number 45 [ 231.075482][ T7944] fuse: Bad value for 'fd' [ 231.088640][ T7845] chnl_net:caif_netlink_parms(): no params data found [ 231.096344][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.337016][ T7954] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.532'. [ 231.369253][ T7954] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 231.371820][ T7957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.599600][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.630700][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.664548][ T7845] bridge_slave_0: entered allmulticast mode [ 231.692360][ T7845] bridge_slave_0: entered promiscuous mode [ 231.724300][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.735545][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.742977][ T7845] bridge_slave_1: entered allmulticast mode [ 231.765899][ T7845] bridge_slave_1: entered promiscuous mode [ 231.981701][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.534'. [ 232.010783][ T7845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.094293][ T7845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.114477][ T5279] usb 1-1: USB disconnect, device number 48 [ 232.281965][ T7980] xt_ipcomp: unknown flags 12 [ 232.330214][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 232.369947][ T7845] team0: Port device team_slave_0 added [ 232.382250][ T7845] team0: Port device team_slave_1 added [ 232.405370][ T5240] Bluetooth: hci1: command tx timeout [ 232.509045][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.524358][ T7989] usb usb8: usbfs: process 7989 (syz.2.540) did not claim interface 0 before use [ 232.529884][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 232.529907][ T29] audit: type=1326 audit(1726871716.062:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.567082][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 232.573553][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.597453][ T29] audit: type=1326 audit(1726871716.102:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.613196][ T7845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.626364][ T29] audit: type=1326 audit(1726871716.102:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.673242][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.681492][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.700850][ T29] audit: type=1326 audit(1726871716.102:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.736983][ T29] audit: type=1326 audit(1726871716.102:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.759450][ T29] audit: type=1326 audit(1726871716.102:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.763022][ T7845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.781862][ T29] audit: type=1326 audit(1726871716.102:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.781906][ T29] audit: type=1326 audit(1726871716.112:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.781945][ T29] audit: type=1326 audit(1726871716.112:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.781986][ T29] audit: type=1326 audit(1726871716.112:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa4abf7def9 code=0x7ffc0000 [ 232.837814][ T5282] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 232.912924][ T5279] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 232.990653][ T7845] hsr_slave_0: entered promiscuous mode [ 233.007418][ T5282] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.026337][ T7845] hsr_slave_1: entered promiscuous mode [ 233.035483][ T5282] usb 1-1: config 1 interface 0 has no altsetting 0 [ 233.043241][ T7845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.057687][ T7845] Cannot create hsr debugfs directory [ 233.070304][ T5279] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 233.077238][ T5282] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 233.103648][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.110066][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.134099][ T5282] usb 1-1: Product: à ” [ 233.146796][ T5279] usb 3-1: config 0 descriptor?? [ 233.159666][ T5282] usb 1-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 233.220856][ T5282] usb 1-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 233.500879][ T7988] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'. [ 233.810127][ T5279] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 233.850416][ T5279] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 233.882745][ T5279] [drm:udl_init] *ERROR* Selecting channel failed [ 233.942069][ T5279] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 233.968978][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 233.982576][ T5279] [drm] Initialized udl on minor 2 [ 234.000889][ T5279] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.016326][ T5279] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 234.024029][ T5286] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.049373][ T5279] usb 3-1: USB disconnect, device number 45 [ 234.062050][ T5286] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 234.164588][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 234.183942][ T5282] usbhid 1-1:1.0: can't add hid device: -71 [ 234.186978][ T9] usb 4-1: config 0 has no interfaces? [ 234.190554][ T5282] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 234.217930][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.243286][ T5282] usb 1-1: USB disconnect, device number 49 [ 234.254827][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.285210][ T9] usb 4-1: Product: syz [ 234.319700][ T9] usb 4-1: Manufacturer: syz [ 234.324365][ T9] usb 4-1: SerialNumber: syz [ 234.344564][ T9] usb 4-1: config 0 descriptor?? [ 234.480268][ T8008] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 234.488506][ T5240] Bluetooth: hci1: command tx timeout [ 234.494540][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.616079][ T8008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.623588][ T8021] syz.0.546 uses obsolete (PF_INET,SOCK_PACKET) [ 234.686451][ T8008] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 234.885107][ T5283] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 234.934818][ T7845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.996930][ T7845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.041152][ T5283] usb 3-1: device descriptor read/64, error -71 [ 235.048936][ T7845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.092485][ T7845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.106707][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 235.297992][ T5283] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 235.325010][ T7845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.373849][ T7845] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.417267][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.424487][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.472788][ T5283] usb 3-1: device descriptor read/64, error -71 [ 235.502394][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.509713][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.613915][ T5283] usb usb3-port1: attempt power cycle [ 235.701325][ T7845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.750554][ T7845] veth0_vlan: entered promiscuous mode [ 235.771974][ T7845] veth1_vlan: entered promiscuous mode [ 235.775415][ T5281] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 235.834793][ T7845] veth0_macvtap: entered promiscuous mode [ 235.847263][ T7845] veth1_macvtap: entered promiscuous mode [ 235.894262][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.934708][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.945300][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.963621][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.975117][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 235.980538][ T5283] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 235.994341][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.003582][ T5281] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 236.019576][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.021265][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.064928][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.071430][ T5281] usb 2-1: Product: syz [ 236.083966][ T5281] usb 2-1: Manufacturer: syz [ 236.092255][ T5283] usb 3-1: device descriptor read/8, error -71 [ 236.105893][ T5281] usb 2-1: SerialNumber: syz [ 236.124593][ T5281] usb 2-1: config 0 descriptor?? [ 236.133791][ T5281] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 236.155127][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.188850][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.222175][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.243032][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.275159][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.304637][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.328923][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.335302][ T5283] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 236.356960][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.367579][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.381038][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.384706][ T5283] usb 3-1: device descriptor read/8, error -71 [ 236.416640][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.442744][ T7845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.456851][ T7845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.477338][ T7845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.499106][ T7845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.505488][ T5283] usb usb3-port1: unable to enumerate USB device [ 236.594199][ T8069] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.550'. [ 236.634271][ T8050] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.550'. [ 236.673843][ T8069] input: syz1 as /devices/virtual/input/input10 [ 236.839815][ T5281] gspca_ov534_9: reg_w failed -110 [ 236.873161][ T5279] usb 4-1: USB disconnect, device number 21 [ 236.927198][ T2502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.945391][ T1186] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 236.965749][ T2502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.032736][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.041135][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.119129][ T8084] netlink: 'syz.4.517': attribute type 11 has an invalid length. [ 237.255145][ T5281] gspca_ov534_9: Unknown sensor 0000 [ 237.255224][ T5281] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 237.281153][ T5281] usb 2-1: USB disconnect, device number 46 [ 237.325313][ T5279] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.457097][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 237.495196][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 237.508276][ T5279] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 237.517622][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.528331][ T5279] usb 4-1: Product: syz [ 237.535336][ T5279] usb 4-1: Manufacturer: syz [ 237.539996][ T5279] usb 4-1: SerialNumber: syz [ 237.561955][ T5279] usb 4-1: config 0 descriptor?? [ 237.570089][ T5279] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 237.612610][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 237.612656][ T29] audit: type=1326 audit(1726871721.142:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 237.665234][ T1186] usb 1-1: device descriptor read/64, error -71 [ 237.781313][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 237.805519][ T29] audit: type=1326 audit(1726871721.332:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 237.858252][ T29] audit: type=1326 audit(1726871721.342:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 237.905145][ T29] audit: type=1326 audit(1726871721.412:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 237.925619][ T1186] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 237.955406][ T8] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 237.969179][ T29] audit: type=1326 audit(1726871721.482:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.028693][ T29] audit: type=1326 audit(1726871721.482:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.079894][ T29] audit: type=1326 audit(1726871721.482:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.099124][ T1186] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.109735][ T29] audit: type=1326 audit(1726871721.552:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.147149][ T1186] usb 1-1: config 1 interface 0 has no altsetting 0 [ 238.149768][ T29] audit: type=1326 audit(1726871721.632:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.192370][ T8] usb 5-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.210165][ T1186] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.40 [ 238.215088][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 238.222293][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.226574][ T29] audit: type=1326 audit(1726871721.632:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4abf7dafb code=0x7ffc0000 [ 238.276508][ T1186] usb 1-1: Product: à ” [ 238.277908][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 238.285818][ T1186] usb 1-1: Manufacturer: å‚♔ྰ㵮çºç“¥ì®‚⦈ìšïŒ€ã¥•ïµ¹ê§Ÿå±¨ï®Šå©§à è›£è¿µä®žëž­ê¼²î°¶ä‹žâ˜€éŽ„豞ਥ䃸匶墮欫曫펷ⶋ瑋༽袭ۜ丩ώ⟼칬샟隳äƒïµ»ë†‚懖拰艋ê»å¹°á¬¤è¹‘콙팬ڑ哯豞寑尵죔Ẽ㞚㟸㲴醣혰î¨ëŽ‰í†è‚Šê·»êŠ¡ê’µì‚纹㬟ê©æ«£ä¡ã›é´‡ï ï´ƒë¢šç¥·Þ®íƒ¨ê¡°ì¨˜åµˆâ™»ä¤ï•—׈å¿ì¥œíœ±è„°éƒà¢ºç„–Í¥ã³ã©“î´šäš•î­å±¿ê¶á€« [ 238.295096][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.333566][ T1186] usb 1-1: SerialNumber: í” é à³‰ë¨°ê¡³âµªá¿€ì¼‘î“„í®æŒ¶æ šï¾¸Ù²à½¤ë„‚꓃뉭ë¯ê£–ä•Õ葩샛鮫鑆내觅긟ᚨ乪婓댾éªì…£ë§žäŽ¾ã€ãž¨ë¨˜ï™ºã´ ä‡¯ë‚®ç›å¡‘ꡤ撀䉾Ἴ쵸綡凫㴃ꓰ䫞⬖锈å¢ê¨©à¨™é‡­í€¬î´ë ¹í„¿é­§é¸ˆî¯’㲅ᖴ埔䙢⬗ᤪ㬀ക訛ધ۽å¸ê™‡ê­§ç©–⛂ꞈʋ๑㵂ꚳ朊äŸá³«î¹¨×‡ï®†æ¬ì¼‚澤関ì±î®žÊ›è«§â˜®ì£³å€˜ë¡º [ 238.368664][ T8] usb 5-1: Product: syz [ 238.372957][ T8] usb 5-1: Manufacturer: syz [ 238.392576][ T8] usb 5-1: SerialNumber: syz [ 238.405167][ T5279] gspca_ov534_9: reg_w failed -71 [ 238.618810][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.631817][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.644041][ T8087] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 238.696879][ T8] usbhid 5-1:1.0: can't add hid device: -71 [ 238.715330][ T8] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 238.749370][ T5279] gspca_ov534_9: Unknown sensor 0000 [ 238.749453][ T5279] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 238.781907][ T8] usb 5-1: USB disconnect, device number 37 [ 238.802595][ T5279] usb 4-1: USB disconnect, device number 22 [ 238.844559][ T8114] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 238.870390][ T8114] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.881754][ T8114] gretap2: entered promiscuous mode [ 238.889518][ T8114] gretap2: entered allmulticast mode [ 238.924615][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 238.977797][ T8114] tmpfs: Unknown parameter ',2oºtmode' [ 238.984403][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.002845][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.038272][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.058964][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.072463][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.087974][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.107378][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.114844][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.130699][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.138414][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.158795][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.172013][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.180257][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.195015][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.214290][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.235100][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.242576][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.250235][ T8] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 239.269204][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.277183][ T1186] usbhid 1-1:1.0: can't add hid device: -71 [ 239.287070][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.294555][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.308574][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.316495][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.323947][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.324348][ T1186] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 239.333042][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.355377][ T5279] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 239.370772][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.379260][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.387124][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.394883][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.400945][ T1186] usb 1-1: USB disconnect, device number 51 [ 239.402806][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.417521][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.439024][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 239.449950][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 239.460104][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 239.469927][ T8125] netlink: 'syz.2.567': attribute type 10 has an invalid length. [ 239.470771][ T58] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.485649][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 239.494751][ T8] usb 2-1: config 1 has no interface number 0 [ 239.504234][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.519489][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 239.537016][ T58] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.556627][ T5279] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.576184][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 239.596315][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.611234][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.617225][ T8125] team0: Port device wlan1 added [ 239.630559][ T5279] usb 4-1: config 0 descriptor?? [ 239.659746][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 239.676336][ T5279] cp210x 4-1:0.0: cp210x converter detected [ 239.765297][ T1186] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 239.802281][ T8130] xt_cgroup: invalid path, errno=-2 [ 239.858002][ T8] snd_usb_pod 2-1:1.1: set_interface failed [ 239.870882][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 239.914393][ T8] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 239.927763][ T1186] usb 1-1: Using ep0 maxpacket: 8 [ 239.934353][ T8130] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 239.949868][ T1186] usb 1-1: no configurations [ 239.966446][ T8] usb 2-1: USB disconnect, device number 47 [ 239.975952][ T1186] usb 1-1: can't read configurations, error -22 [ 240.091310][ T5279] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 240.104201][ T5279] cp210x 4-1:0.0: querying part number failed [ 240.116224][ T5279] usb 4-1: cp210x converter now attached to ttyUSB0 [ 240.140748][ T5279] usb 4-1: USB disconnect, device number 23 [ 240.146816][ T1186] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 240.161801][ T5279] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.177804][ T5279] cp210x 4-1:0.0: device disconnected [ 240.202647][ T8132] vxcan1: entered promiscuous mode [ 240.210878][ T8133] vxcan1: left promiscuous mode [ 240.217219][ T8133] vxcan1: entered allmulticast mode [ 240.308672][ T1186] usb 1-1: Using ep0 maxpacket: 8 [ 240.319901][ T1186] usb 1-1: no configurations [ 240.324541][ T1186] usb 1-1: can't read configurations, error -22 [ 240.343251][ T1186] usb usb1-port1: attempt power cycle [ 240.705936][ T1186] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 240.748627][ T1186] usb 1-1: Using ep0 maxpacket: 8 [ 240.772853][ T1186] usb 1-1: no configurations [ 240.791795][ T1186] usb 1-1: can't read configurations, error -22 [ 240.896888][ T8136] netdevsim netdevsim3: Direct firmware load for [ 240.896888][ T8136] failed with error -2 [ 240.915188][ T8136] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 240.915188][ T8136] [ 240.965741][ T1186] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 241.007180][ T1186] usb 1-1: Using ep0 maxpacket: 8 [ 241.018577][ T1186] usb 1-1: no configurations [ 241.033602][ T1186] usb 1-1: can't read configurations, error -22 [ 241.067153][ T1186] usb usb1-port1: unable to enumerate USB device [ 241.266454][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.278554][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.290650][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.314696][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.329055][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.338364][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.342362][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.444747][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.524803][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.601309][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 241.612454][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.786520][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 241.819509][ T12] bridge_slave_1: left allmulticast mode [ 241.833853][ T12] bridge_slave_1: left promiscuous mode [ 241.844982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.857296][ T8153] fuse: Invalid rootmode [ 241.866627][ T12] bridge_slave_0: left allmulticast mode [ 241.872635][ T8153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.879642][ T12] bridge_slave_0: left promiscuous mode [ 241.887626][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.949452][ T12] gretap1: left allmulticast mode [ 241.954571][ T12] gretap1: left promiscuous mode [ 241.961956][ T12] bridge1: port 1(gretap1) entered disabled state [ 241.989023][ T8155] fuse: Bad value for 'fd' [ 241.998644][ T8155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.347660][ T8125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.781324][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.800225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.819923][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 242.839947][ T12] bond0 (unregistering): Released all slaves [ 242.892941][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.578'. [ 242.913696][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 243.146917][ T12] tipc: Disabling bearer [ 243.181183][ T12] tipc: Left network mode [ 243.417613][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 243.446896][ T54] Bluetooth: hci0: command tx timeout [ 243.464470][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 243.539281][ T8197] random: crng reseeded on system resumption [ 243.555726][ T8191] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 243.591072][ T5281] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 243.634650][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.652944][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.662451][ T8148] bridge_slave_0: entered allmulticast mode [ 243.681211][ T8148] bridge_slave_0: entered promiscuous mode [ 243.699884][ T8202] fuse: Bad value for 'fd' [ 243.730314][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.748459][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.755200][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 243.761256][ T8148] bridge_slave_1: entered allmulticast mode [ 243.771234][ T5281] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 243.776040][ T8148] bridge_slave_1: entered promiscuous mode [ 243.800098][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.837589][ T5281] usb 5-1: config 0 descriptor?? [ 243.971720][ T12] hsr_slave_0: left promiscuous mode [ 243.985409][ T12] 0·: left promiscuous mode [ 243.990871][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.010432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.065427][ T12] veth1_macvtap: left promiscuous mode [ 244.071303][ T12] veth0_macvtap: left promiscuous mode [ 244.095154][ T12] veth1_vlan: left promiscuous mode [ 244.100621][ T12] veth0_vlan: left promiscuous mode [ 244.436116][ T25] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 244.452003][ T5279] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 244.575289][ T5282] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 244.605316][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 244.615639][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 244.616205][ T25] usb 1-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 244.633018][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 244.644643][ T25] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 244.644681][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.644733][ T25] usb 1-1: Product: syz [ 244.644753][ T25] usb 1-1: Manufacturer: syz [ 244.644772][ T25] usb 1-1: SerialNumber: syz [ 244.651914][ T25] usb 1-1: config 0 descriptor?? [ 244.673290][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.684521][ T25] usb 1-1: bad CDC descriptors [ 244.702721][ T25] usb 1-1: unsupported MDLM descriptors [ 244.727286][ T5279] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.755129][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 244.762960][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.764993][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.777826][ T5282] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.789050][ T5279] usb 3-1: Product: syz [ 244.790626][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.810244][ T5282] usb 4-1: Product: syz [ 244.814603][ T5279] usb 3-1: Manufacturer: syz [ 244.814627][ T5279] usb 3-1: SerialNumber: syz [ 244.824483][ T5282] usb 4-1: Manufacturer: syz [ 244.829209][ T5279] usb 3-1: config 0 descriptor?? [ 244.840918][ T5282] usb 4-1: SerialNumber: syz [ 244.849176][ T5279] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 244.870210][ T5282] usb 4-1: config 0 descriptor?? [ 244.883858][ T5279] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 244.900596][ T5283] usb 1-1: USB disconnect, device number 56 [ 245.122124][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.211765][ T12] team0 (unregistering): Port device team_slave_0 removed [ 245.455932][ T5279] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 245.479539][ T5279] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 245.496539][ T5279] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 245.503562][ T5279] em28xx 3-1:0.0: No AC97 audio processor [ 245.525300][ T54] Bluetooth: hci0: command tx timeout [ 245.758832][ T5283] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 245.915157][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 245.921730][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.932188][ T5283] usb 1-1: no configurations [ 245.943977][ T5283] usb 1-1: can't read configurations, error -22 [ 245.958512][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.030619][ T8148] team0: Port device team_slave_0 added [ 246.054261][ T8148] team0: Port device team_slave_1 added [ 246.096203][ T5283] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 246.145365][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.156392][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.182323][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.203501][ T8148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.223832][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.241568][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.255224][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 246.267521][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.280063][ T5283] usb 1-1: no configurations [ 246.284782][ T5283] usb 1-1: can't read configurations, error -22 [ 246.292232][ T5283] usb usb1-port1: attempt power cycle [ 246.303579][ T8148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.384236][ T8148] hsr_slave_0: entered promiscuous mode [ 246.406174][ T8148] hsr_slave_1: entered promiscuous mode [ 246.421618][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.439791][ T8148] Cannot create hsr debugfs directory [ 246.479071][ T12] IPVS: stop unused estimator thread 0... [ 246.503043][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.513599][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 246.533060][ T5281] asix 5-1:0.0: probe with driver asix failed with error -71 [ 246.553021][ T5281] usb 5-1: USB disconnect, device number 38 [ 246.646017][ T5283] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 246.677652][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 246.686398][ T5283] usb 1-1: no configurations [ 246.691069][ T5283] usb 1-1: can't read configurations, error -22 [ 246.825803][ T5283] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 246.886170][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 246.905888][ T5283] usb 1-1: no configurations [ 246.910572][ T5283] usb 1-1: can't read configurations, error -22 [ 246.927764][ T5281] usb 3-1: USB disconnect, device number 50 [ 246.934585][ T5281] em28xx 3-1:0.0: Disconnecting em28xx [ 246.993403][ T5283] usb usb1-port1: unable to enumerate USB device [ 247.002487][ T5281] em28xx 3-1:0.0: Freeing device [ 247.229445][ T8250] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 247.247607][ T8250] hsr0: entered promiscuous mode [ 247.269293][ T8250] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.295452][ T8250] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 247.314069][ T8250] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 247.341739][ T8250] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 247.351781][ T8252] netlink: 9 bytes leftover after parsing attributes in process `syz.4.591'. [ 247.382239][ T8252] 0·: renamed from hsr_slave_1 (while UP) [ 247.400185][ T8252] 0·: entered allmulticast mode [ 247.406761][ T8252] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 247.445257][ T5281] usb 4-1: USB disconnect, device number 24 [ 247.605753][ T54] Bluetooth: hci0: command tx timeout [ 247.653608][ T8148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.684396][ T8148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.726471][ T8148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.747350][ T8148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.931805][ T8262] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 247.982569][ T8262] hsr0: entered promiscuous mode [ 248.001537][ T8262] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.014249][ T8262] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 248.027911][ T8262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 248.040552][ T8262] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 248.074057][ T8263] netlink: 9 bytes leftover after parsing attributes in process `syz.3.593'. [ 248.089267][ T8263] 0·: renamed from hsr_slave_1 (while UP) [ 248.108050][ T8263] 0·: entered allmulticast mode [ 248.121580][ T8263] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 248.168501][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.189448][ T8267] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 248.221848][ T8267] hsr0: entered promiscuous mode [ 248.294491][ T8267] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.308848][ T8267] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 248.322278][ T8267] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 248.358984][ T8267] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 248.393468][ T8276] FAULT_INJECTION: forcing a failure. [ 248.393468][ T8276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.432482][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.4.595 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 248.433794][ T8270] netlink: 9 bytes leftover after parsing attributes in process `syz.2.594'. [ 248.442757][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.442786][ T8276] Call Trace: [ 248.442801][ T8276] [ 248.442813][ T8276] dump_stack_lvl+0x241/0x360 [ 248.442857][ T8276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.442890][ T8276] ? __pfx__printk+0x10/0x10 [ 248.442924][ T8276] ? __pfx_lock_release+0x10/0x10 [ 248.442965][ T8276] should_fail_ex+0x3b0/0x4e0 [ 248.442997][ T8276] _copy_from_user+0x2f/0xe0 [ 248.443023][ T8276] get_timespec64+0x97/0x280 [ 248.458933][ T8270] 0·: renamed from hsr_slave_1 (while UP) [ 248.461921][ T8276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 248.461966][ T8276] ? __pfx_get_timespec64+0x10/0x10 [ 248.518524][ T8276] __se_sys_ppoll+0xd1/0x330 [ 248.523260][ T8276] ? __pfx___se_sys_ppoll+0x10/0x10 [ 248.528483][ T8276] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.534834][ T8276] ? do_syscall_64+0x100/0x230 [ 248.539627][ T8276] ? __x64_sys_ppoll+0x20/0xc0 [ 248.544423][ T8276] do_syscall_64+0xf3/0x230 [ 248.548948][ T8276] ? clear_bhb_loop+0x35/0x90 [ 248.553648][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.559671][ T8276] RIP: 0033:0x7f912d37def9 [ 248.564114][ T8276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.583759][ T8276] RSP: 002b:00007f912e14e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 248.592285][ T8276] RAX: ffffffffffffffda RBX: 00007f912d536058 RCX: 00007f912d37def9 [ 248.600731][ T8276] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 0000000020000000 [ 248.608736][ T8276] RBP: 00007f912e14e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.616722][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.624702][ T8276] R13: 0000000000000001 R14: 00007f912d536058 R15: 00007f912d65fa28 [ 248.632787][ T8276] [ 248.638652][ T8270] 0·: entered allmulticast mode [ 248.669405][ T8270] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 248.771324][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.796838][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.804049][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.848893][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.856127][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.962316][ T8284] fuse: Invalid rootmode [ 248.986494][ T8284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.128407][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.135674][ T5279] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 249.258226][ T8148] veth0_vlan: entered promiscuous mode [ 249.288994][ T5279] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.301230][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.326826][ T8148] veth1_vlan: entered promiscuous mode [ 249.347106][ T5279] usb 1-1: config 0 descriptor?? [ 249.415319][ T5281] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 249.430707][ T8148] veth0_macvtap: entered promiscuous mode [ 249.462099][ T8148] veth1_macvtap: entered promiscuous mode [ 249.493996][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.512889][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.531455][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.542509][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.553000][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.563983][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.575102][ T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 249.584518][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.597388][ T8281] blktrace: Concurrent blktraces are not allowed on loop3 [ 249.615575][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 249.624376][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.639511][ T5279] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 249.646843][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.661469][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.661899][ T5279] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 249.680486][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.692009][ T54] Bluetooth: hci0: command tx timeout [ 249.699789][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.713187][ T5279] [drm:udl_init] *ERROR* Selecting channel failed [ 249.731773][ T5281] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.752147][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.760133][ T5279] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 249.760882][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.767562][ T5279] [drm] Initialized udl on minor 2 [ 249.784497][ T5279] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 249.789214][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.804222][ T5279] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 249.820547][ T5281] usb 4-1: Product: syz [ 249.821315][ T5311] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 249.829936][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.833063][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.845174][ T5281] usb 4-1: Manufacturer: syz [ 249.865370][ T5311] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 249.872137][ T25] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 249.881855][ T5281] usb 4-1: SerialNumber: syz [ 249.885696][ T5279] usb 1-1: USB disconnect, device number 61 [ 249.890109][ T5281] usb 4-1: config 0 descriptor?? [ 249.898477][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.937627][ T5281] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.944885][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.969595][ T25] usb 5-1: config 0 descriptor?? [ 249.988885][ T5281] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 250.002796][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.022060][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.042194][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.068559][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.086987][ T8304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.089546][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.118366][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.144918][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.204382][ T8148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.243570][ T8148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.272561][ T8148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.319627][ T8148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.414225][ T25] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 250.493651][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.602'. [ 250.553334][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.553360][ T8315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.602'. [ 250.571709][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.572070][ T5281] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 250.606234][ T8316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.602'. [ 250.607377][ T5281] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 250.643894][ T5281] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 250.663152][ T5281] em28xx 4-1:0.0: No AC97 audio processor [ 250.760737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.795900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.942930][ T5279] usb 5-1: USB disconnect, device number 39 [ 251.078000][ T8333] netlink: 'syz.2.606': attribute type 10 has an invalid length. [ 251.091042][ T8333] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 251.104325][ T8333] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 251.115473][ T8333] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 251.129568][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 251.129588][ T29] audit: type=1326 audit(1726871734.662:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.158883][ T5281] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 251.173614][ T8333] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 251.192241][ T29] audit: type=1326 audit(1726871734.662:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.206969][ T8337] netlink: 9 bytes leftover after parsing attributes in process `syz.2.606'. [ 251.214571][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.231855][ T29] audit: type=1326 audit(1726871734.692:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.265186][ T8337] 1·: renamed from c0· (while UP) [ 251.286626][ T8337] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 251.287648][ T29] audit: type=1326 audit(1726871734.692:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.325155][ T29] audit: type=1326 audit(1726871734.692:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.355265][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 251.361772][ T5281] usb 1-1: no configurations [ 251.371986][ T5281] usb 1-1: can't read configurations, error -22 [ 251.389081][ T29] audit: type=1326 audit(1726871734.702:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.464693][ T29] audit: type=1326 audit(1726871734.702:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.525829][ T5281] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 251.583311][ T29] audit: type=1326 audit(1726871734.702:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.618183][ T5279] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 251.691370][ T29] audit: type=1326 audit(1726871734.702:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.704524][ T8351] netlink: 'syz.4.607': attribute type 20 has an invalid length. [ 251.713787][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.775298][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 251.785831][ T5281] usb 1-1: no configurations [ 251.790494][ T5281] usb 1-1: can't read configurations, error -22 [ 251.805255][ T5279] usb 2-1: Using ep0 maxpacket: 32 [ 251.811074][ T29] audit: type=1326 audit(1726871734.702:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8df997def9 code=0x7ffc0000 [ 251.811302][ T5281] usb usb1-port1: attempt power cycle [ 251.833260][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.856216][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.895041][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.933885][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 251.946353][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.983355][ T5279] usb 2-1: config 0 descriptor?? [ 252.217031][ T58] usb 4-1: USB disconnect, device number 25 [ 252.224301][ T58] em28xx 4-1:0.0: Disconnecting em28xx [ 252.241587][ T58] em28xx 4-1:0.0: Freeing device [ 252.255405][ T5281] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 252.308830][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 252.315342][ T5281] usb 1-1: no configurations [ 252.320432][ T5281] usb 1-1: can't read configurations, error -22 [ 252.328053][ T1186] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 252.338569][ T8370] netlink: 104 bytes leftover after parsing attributes in process `syz.3.611'. [ 252.426492][ T5311] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 252.476663][ T5281] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 252.505213][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 252.511248][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 252.523024][ T1186] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.536808][ T5281] usb 1-1: no configurations [ 252.545596][ T1186] usb 3-1: config 0 has no interface number 0 [ 252.555147][ T5281] usb 1-1: can't read configurations, error -22 [ 252.565127][ T1186] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 252.585316][ T5281] usb usb1-port1: unable to enumerate USB device [ 252.594837][ T1186] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 252.614756][ T1186] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.624664][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.635208][ T5311] usb 5-1: Using ep0 maxpacket: 8 [ 252.643283][ T1186] usb 3-1: config 0 descriptor?? [ 252.650672][ T8357] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 252.655196][ T5311] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 252.668291][ T1186] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 252.698478][ T5311] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 252.721404][ T5311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.741859][ T5311] usb 5-1: Product: syz [ 252.750421][ T5311] usb 5-1: Manufacturer: syz [ 252.757500][ T5311] usb 5-1: SerialNumber: syz [ 252.767187][ T5311] usb 5-1: config 0 descriptor?? [ 252.778726][ T5311] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 252.873546][ T1186] usb 3-1: USB disconnect, device number 51 [ 252.879545][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 252.914313][ T1186] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 252.924316][ T8382] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.614'. [ 252.937288][ T8382] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 253.315298][ T5311] gspca_zc3xx: reg_w_i err -110 [ 253.936389][ T5311] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 253.953190][ T5311] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 254.059878][ T58] usb 2-1: USB disconnect, device number 48 [ 254.201914][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 254.289898][ T5279] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 254.455154][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 254.462849][ T5279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 254.491982][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 254.511663][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.519891][ T5279] usb 4-1: Product: syz [ 254.532644][ T5279] usb 4-1: Manufacturer: syz [ 254.537564][ T5279] usb 4-1: SerialNumber: syz [ 254.555611][ T5279] usb 4-1: config 0 descriptor?? [ 254.565300][ T58] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 254.578089][ T5279] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 254.727199][ T5311] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 254.755279][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 254.762292][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.778852][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.793175][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.803369][ T58] usb 2-1: config 1 interface 0 has no altsetting 0 [ 254.805236][ T5282] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 254.814135][ T58] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.830908][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.839603][ T58] usb 2-1: Product: syz [ 254.844099][ T58] usb 2-1: Manufacturer: syz [ 254.849948][ T58] usb 2-1: SerialNumber: syz [ 254.885299][ T5311] usb 3-1: device descriptor read/64, error -71 [ 255.005064][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 255.013686][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.037713][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.061405][ T5282] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.077143][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.093679][ T5282] usb 1-1: Product: syz [ 255.101412][ T5282] usb 1-1: Manufacturer: syz [ 255.111457][ T5282] usb 1-1: SerialNumber: syz [ 255.126255][ T58] usb 2-1: USB disconnect, device number 49 [ 255.130995][ T5282] usb 1-1: config 0 descriptor?? [ 255.147289][ T5311] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 255.180105][ T8390] random: crng reseeded on system resumption [ 255.199502][ T5282] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.234097][ T5282] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 255.306154][ T5311] usb 3-1: device descriptor read/64, error -71 [ 255.388786][ T5281] usb 5-1: USB disconnect, device number 40 [ 255.425369][ T5311] usb usb3-port1: attempt power cycle [ 255.495514][ T5279] gspca_zc3xx: reg_w_i err -110 [ 255.766659][ T5311] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 255.782114][ T5282] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 255.796648][ T5282] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 255.812740][ T5311] usb 3-1: device descriptor read/8, error -71 [ 255.927855][ T58] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 255.936247][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.942585][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.075272][ T5311] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 256.085439][ T5279] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 256.091804][ T5279] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 256.101789][ T5311] usb 3-1: device descriptor read/8, error -71 [ 256.115298][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 256.122721][ T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 256.134723][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.149021][ T58] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.160146][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.169415][ T58] usb 5-1: Product: syz [ 256.173835][ T58] usb 5-1: Manufacturer: syz [ 256.180138][ T58] usb 5-1: SerialNumber: syz [ 256.187193][ T58] usb 5-1: config 0 descriptor?? [ 256.196366][ T58] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 256.206103][ T58] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 256.215602][ T5311] usb usb3-port1: unable to enumerate USB device [ 256.222853][ T5282] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 256.232710][ T5282] em28xx 1-1:0.0: No AC97 audio processor [ 256.295315][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 256.404766][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.422890][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.457276][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 256.468068][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.480330][ T9] usb 2-1: config 0 descriptor?? [ 256.490990][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 256.801026][ T58] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 256.812808][ T58] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 256.820939][ T58] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 256.828340][ T58] em28xx 5-1:0.0: No AC97 audio processor [ 257.293512][ T9] gspca_sunplus: reg_w_riv err -71 [ 257.306262][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 257.322747][ T9] usb 2-1: USB disconnect, device number 50 [ 257.485365][ T8416] xt_socket: unknown flags 0x8 [ 257.574061][ T5281] usb 1-1: USB disconnect, device number 66 [ 257.582748][ T5281] em28xx 1-1:0.0: Disconnecting em28xx [ 257.591869][ T5281] em28xx 1-1:0.0: Freeing device [ 257.641211][ T5283] usb 4-1: USB disconnect, device number 26 [ 257.845841][ T5282] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 258.025112][ T5281] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 258.046588][ T5282] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.065907][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.076100][ T5282] usb 3-1: config 0 descriptor?? [ 258.082916][ T5282] cp210x 3-1:0.0: cp210x converter detected [ 258.185158][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 258.195219][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.221713][ T5281] usb 1-1: config 0 has no interfaces? [ 258.233219][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 258.252151][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.264094][ T5281] usb 1-1: Product: syz [ 258.268647][ T5281] usb 1-1: Manufacturer: syz [ 258.273603][ T5281] usb 1-1: SerialNumber: syz [ 258.292200][ T5281] usb 1-1: config 0 descriptor?? [ 258.677113][ T9] usb 5-1: USB disconnect, device number 41 [ 258.713522][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 258.765990][ T9] em28xx 5-1:0.0: Freeing device [ 259.236731][ T8446] random: crng reseeded on system resumption [ 259.405207][ T5279] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 259.555039][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 259.566210][ T5279] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.592776][ T5279] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 259.658655][ T5279] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.709293][ T5279] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.761129][ T5279] usb 5-1: config 1 interface 0 has no altsetting 0 [ 259.774863][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.635'. [ 259.798974][ T5279] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.823599][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.909824][ T5279] usb 5-1: Product: syz [ 259.921888][ T5279] usb 5-1: Manufacturer: syz [ 259.938331][ T5279] usb 5-1: SerialNumber: syz [ 260.222076][ T5279] usb 5-1: USB disconnect, device number 42 [ 260.336083][ T5224] udevd[5224]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.628334][ T8467] fuse: Bad value for 'user_id' [ 260.634632][ T5282] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 260.643295][ T5282] cp210x 3-1:0.0: querying part number failed [ 260.650049][ T8467] fuse: Bad value for 'user_id' [ 260.661126][ T5282] usb 3-1: cp210x converter now attached to ttyUSB0 [ 260.796719][ T5282] usb 3-1: USB disconnect, device number 56 [ 260.817563][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 260.970872][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.980992][ T5282] cp210x 3-1:0.0: device disconnected [ 261.219103][ T8483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 261.282648][ T8485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 261.332671][ T5282] usb 1-1: USB disconnect, device number 67 [ 261.345417][ T5281] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 261.361250][ T8486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 261.390842][ T8485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.647'. [ 261.507699][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.545346][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.578277][ T5281] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 261.609340][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.621701][ T5281] usb 4-1: config 0 descriptor?? [ 261.702388][ T54] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 261.786852][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 261.795856][ C1] ------------[ cut here ]------------ [ 261.796070][ C1] WARNING: CPU: 1 PID: 8495 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 261.796148][ C1] Modules linked in: [ 261.796168][ C1] CPU: 1 UID: 0 PID: 8495 Comm: syz.0.648 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 261.796205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.796221][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 261.796283][ C1] Code: 0f b6 dc 31 ff 89 de e8 95 c6 ed f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 78 c3 ed f5 90 <0f> 0b 90 e9 47 ff ff ff e8 6a c3 ed f5 90 0f 0b 90 e9 99 e0 ff ff [ 261.796306][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 261.871121][ C1] RAX: ffffffff8ba6fba8 RBX: 00000000000081cd RCX: ffff88801c78da00 [ 261.879193][ C1] RDX: 0000000000000100 RSI: 000000000000e051 RDI: 00000000000081cd [ 261.887294][ C1] RBP: 1ffff1100d458a9e R08: ffffffff8ba6eba2 R09: 1ffff1100d458aa8 [ 261.895467][ C1] R10: dffffc0000000000 R11: ffffed100d458aa9 R12: 0000000000000000 [ 261.903480][ C1] R13: dffffc0000000000 R14: 0000000035c2f6fd R15: 000000000000e051 [ 261.911505][ C1] FS: 00007fa4ab9de6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 261.920480][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.927113][ C1] CR2: 0000000020013000 CR3: 00000000713e4000 CR4: 00000000003506f0 [ 261.935162][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.943194][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.951230][ C1] Call Trace: [ 261.954514][ C1] [ 261.957394][ C1] ? __warn+0x168/0x4e0 [ 261.961581][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 261.968079][ C1] ? report_bug+0x2b3/0x500 [ 261.972618][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 261.979080][ C1] ? handle_bug+0x60/0x90 [ 261.983438][ C1] ? exc_invalid_op+0x1a/0x50 [ 261.988155][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 261.993227][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 261.999715][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 262.006201][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 262.012660][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 262.019410][ C1] mptcp_data_ready+0x29c/0xa90 [ 262.024381][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 262.029816][ C1] subflow_data_ready+0x34a/0x920 [ 262.034868][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 262.040455][ C1] ? tcp_grow_window+0x221/0xb00 [ 262.045531][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 262.050428][ C1] tcp_data_queue+0x20fd/0x76c0 [ 262.055360][ C1] ? tcp_urg+0x100/0x450 [ 262.059793][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 262.065074][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 262.069804][ C1] ? ktime_get+0x9b/0xb0 [ 262.074112][ C1] tcp_rcv_established+0xfba/0x2020 [ 262.079406][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 262.085228][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 262.090294][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 262.094986][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 262.099577][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.104482][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.109379][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.114341][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 262.119863][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 262.125551][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 262.131037][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 262.137158][ C1] NF_HOOK+0x3a4/0x450 [ 262.141263][ C1] ? NF_HOOK+0x9a/0x450 [ 262.145456][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 262.150071][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 262.156100][ C1] ? ip_rcv_finish+0x406/0x560 [ 262.160886][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.166032][ C1] NF_HOOK+0x3a4/0x450 [ 262.170108][ C1] ? __lock_acquire+0x1384/0x2050 [ 262.175201][ C1] ? NF_HOOK+0x9a/0x450 [ 262.179373][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 262.183991][ C1] ? ip_rcv_core+0x801/0xd10 [ 262.188630][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.193772][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 262.198312][ C1] __netif_receive_skb+0x2bf/0x650 [ 262.203462][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 262.208534][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 262.214195][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.220237][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.225425][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 262.230574][ C1] process_backlog+0x662/0x15b0 [ 262.235478][ C1] ? process_backlog+0x33b/0x15b0 [ 262.240523][ C1] ? __pfx_process_backlog+0x10/0x10 [ 262.245858][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.251874][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.258251][ C1] __napi_poll+0xcb/0x490 [ 262.262649][ C1] net_rx_action+0x89b/0x1240 [ 262.267500][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 262.272733][ C1] ? sched_clock+0x4a/0x70 [ 262.277219][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.283648][ C1] handle_softirqs+0x2c5/0x980 [ 262.288462][ C1] ? do_softirq+0x11b/0x1e0 [ 262.293000][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 262.298333][ C1] do_softirq+0x11b/0x1e0 [ 262.302694][ C1] [ 262.305668][ C1] [ 262.308605][ C1] ? __pfx_do_softirq+0x10/0x10 [ 262.313574][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 262.319358][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.324157][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 262.329406][ C1] ? mptcp_recvmsg+0x2453/0x2dd0 [ 262.334377][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.340157][ C1] ? __tcp_send_ack+0x17e/0x600 [ 262.345109][ C1] mptcp_recvmsg+0x2453/0x2dd0 [ 262.349912][ C1] ? inet_recvmsg+0x2b5/0x2d0 [ 262.354640][ C1] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 262.359893][ C1] ? aa_sk_perm+0x96d/0xab0 [ 262.364451][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 262.369816][ C1] ? inet_recvmsg+0xde/0x2d0 [ 262.374504][ C1] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 262.379664][ C1] inet_recvmsg+0x2b5/0x2d0 [ 262.384207][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 262.389274][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 262.394246][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 262.399580][ C1] sock_recvmsg+0x1ae/0x280 [ 262.404120][ C1] __sys_recvfrom+0x24a/0x3d0 [ 262.408883][ C1] ? __pfx___sys_recvfrom+0x10/0x10 [ 262.414141][ C1] ? do_futex+0x33b/0x560 [ 262.418540][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.424561][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.430946][ C1] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 262.437348][ C1] __x64_sys_recvfrom+0xde/0x100 [ 262.442364][ C1] do_syscall_64+0xf3/0x230 [ 262.446928][ C1] ? clear_bhb_loop+0x35/0x90 [ 262.451682][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.457715][ C1] RIP: 0033:0x7fa4abf7def9 [ 262.462180][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.481945][ C1] RSP: 002b:00007fa4ab9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 262.490405][ C1] RAX: ffffffffffffffda RBX: 00007fa4ac136208 RCX: 00007fa4abf7def9 [ 262.498469][ C1] RDX: 0000000000013e58 RSI: 0000000020000180 RDI: 0000000000000008 [ 262.506519][ C1] RBP: 00007fa4abff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 262.514616][ C1] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.522641][ C1] R13: 0000000000000000 R14: 00007fa4ac136208 R15: 00007fa4ac25fa28 [ 262.530745][ C1] [ 262.533779][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.541059][ C1] CPU: 1 UID: 0 PID: 8495 Comm: syz.0.648 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 262.551473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.561527][ C1] Call Trace: [ 262.564804][ C1] [ 262.567735][ C1] dump_stack_lvl+0x241/0x360 [ 262.572447][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.577679][ C1] ? __pfx__printk+0x10/0x10 [ 262.582280][ C1] ? _printk+0xd5/0x120 [ 262.586627][ C1] ? __init_begin+0x41000/0x41000 [ 262.591685][ C1] ? vscnprintf+0x5d/0x90 [ 262.596048][ C1] panic+0x349/0x880 [ 262.600157][ C1] ? __warn+0x177/0x4e0 [ 262.604330][ C1] ? __pfx_panic+0x10/0x10 [ 262.608776][ C1] ? show_trace_log_lvl+0x3b2/0x410 [ 262.614011][ C1] __warn+0x34b/0x4e0 [ 262.618016][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 262.624459][ C1] report_bug+0x2b3/0x500 [ 262.628803][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 262.635250][ C1] handle_bug+0x60/0x90 [ 262.639441][ C1] exc_invalid_op+0x1a/0x50 [ 262.643950][ C1] asm_exc_invalid_op+0x1a/0x20 [ 262.648810][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 262.655948][ C1] Code: 0f b6 dc 31 ff 89 de e8 95 c6 ed f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 78 c3 ed f5 90 <0f> 0b 90 e9 47 ff ff ff e8 6a c3 ed f5 90 0f 0b 90 e9 99 e0 ff ff [ 262.675666][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 262.681740][ C1] RAX: ffffffff8ba6fba8 RBX: 00000000000081cd RCX: ffff88801c78da00 [ 262.689716][ C1] RDX: 0000000000000100 RSI: 000000000000e051 RDI: 00000000000081cd [ 262.698921][ C1] RBP: 1ffff1100d458a9e R08: ffffffff8ba6eba2 R09: 1ffff1100d458aa8 [ 262.706997][ C1] R10: dffffc0000000000 R11: ffffed100d458aa9 R12: 0000000000000000 [ 262.714996][ C1] R13: dffffc0000000000 R14: 0000000035c2f6fd R15: 000000000000e051 [ 262.723001][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 262.729448][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 262.736018][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 262.742510][ C1] mptcp_data_ready+0x29c/0xa90 [ 262.747421][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 262.752862][ C1] subflow_data_ready+0x34a/0x920 [ 262.758004][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 262.763589][ C1] ? tcp_grow_window+0x221/0xb00 [ 262.768542][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 262.773414][ C1] tcp_data_queue+0x20fd/0x76c0 [ 262.778294][ C1] ? tcp_urg+0x100/0x450 [ 262.782559][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 262.787785][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 262.792389][ C1] ? ktime_get+0x9b/0xb0 [ 262.796641][ C1] tcp_rcv_established+0xfba/0x2020 [ 262.801859][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 262.807501][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 262.812570][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 262.817170][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 262.821734][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.826695][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.831560][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 262.836440][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 262.841996][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 262.847749][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 262.853217][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 262.859201][ C1] NF_HOOK+0x3a4/0x450 [ 262.863276][ C1] ? NF_HOOK+0x9a/0x450 [ 262.867432][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 262.872027][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 262.878012][ C1] ? ip_rcv_finish+0x406/0x560 [ 262.882790][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.887905][ C1] NF_HOOK+0x3a4/0x450 [ 262.891986][ C1] ? __lock_acquire+0x1384/0x2050 [ 262.897144][ C1] ? NF_HOOK+0x9a/0x450 [ 262.901324][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 262.905949][ C1] ? ip_rcv_core+0x801/0xd10 [ 262.910553][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.915677][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 262.920212][ C1] __netif_receive_skb+0x2bf/0x650 [ 262.925338][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 262.930370][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 262.936008][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.942015][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.947089][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 262.952241][ C1] process_backlog+0x662/0x15b0 [ 262.957139][ C1] ? process_backlog+0x33b/0x15b0 [ 262.962182][ C1] ? __pfx_process_backlog+0x10/0x10 [ 262.967477][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.973575][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.979939][ C1] __napi_poll+0xcb/0x490 [ 262.984288][ C1] net_rx_action+0x89b/0x1240 [ 262.989189][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 262.994594][ C1] ? sched_clock+0x4a/0x70 [ 262.999139][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.005511][ C1] handle_softirqs+0x2c5/0x980 [ 263.010313][ C1] ? do_softirq+0x11b/0x1e0 [ 263.014821][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 263.020170][ C1] do_softirq+0x11b/0x1e0 [ 263.024528][ C1] [ 263.027478][ C1] [ 263.030404][ C1] ? __pfx_do_softirq+0x10/0x10 [ 263.035268][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 263.040917][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.045686][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 263.051153][ C1] ? mptcp_recvmsg+0x2453/0x2dd0 [ 263.056100][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 263.061843][ C1] ? __tcp_send_ack+0x17e/0x600 [ 263.066701][ C1] mptcp_recvmsg+0x2453/0x2dd0 [ 263.071479][ C1] ? inet_recvmsg+0x2b5/0x2d0 [ 263.076272][ C1] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 263.081398][ C1] ? aa_sk_perm+0x96d/0xab0 [ 263.085913][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 263.091227][ C1] ? inet_recvmsg+0xde/0x2d0 [ 263.095834][ C1] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 263.100954][ C1] inet_recvmsg+0x2b5/0x2d0 [ 263.105465][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 263.110493][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 263.115442][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 263.120734][ C1] sock_recvmsg+0x1ae/0x280 [ 263.125264][ C1] __sys_recvfrom+0x24a/0x3d0 [ 263.129965][ C1] ? __pfx___sys_recvfrom+0x10/0x10 [ 263.135182][ C1] ? do_futex+0x33b/0x560 [ 263.139551][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.145553][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.151903][ C1] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 263.158156][ C1] __x64_sys_recvfrom+0xde/0x100 [ 263.163104][ C1] do_syscall_64+0xf3/0x230 [ 263.167632][ C1] ? clear_bhb_loop+0x35/0x90 [ 263.172351][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.178253][ C1] RIP: 0033:0x7fa4abf7def9 [ 263.182683][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.202311][ C1] RSP: 002b:00007fa4ab9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 263.210742][ C1] RAX: ffffffffffffffda RBX: 00007fa4ac136208 RCX: 00007fa4abf7def9 [ 263.218892][ C1] RDX: 0000000000013e58 RSI: 0000000020000180 RDI: 0000000000000008 [ 263.226871][ C1] RBP: 00007fa4abff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 263.234842][ C1] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.242833][ C1] R13: 0000000000000000 R14: 00007fa4ac136208 R15: 00007fa4ac25fa28 [ 263.250819][ C1] [ 263.254070][ C1] Kernel Offset: disabled [ 263.258553][ C1] Rebooting in 86400 seconds..