last executing test programs: 11.024438962s ago: executing program 3 (id=944): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0xee, 0x9f, 0xf5, 0x8, 0x525, 0xa4a0, 0x72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3b, 0x7, 0x80, 0x6, [{{0x9, 0x4, 0x8d, 0x6, 0x2, 0x7d, 0x64, 0xf8, 0x81, [], [{{0x9, 0x5, 0xd, 0x3, 0x10, 0x1, 0xfb, 0x3}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0xa0, 0x9, 0xff}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r8, 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x9f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xab}], 0x18) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r11, 0x0, 0x0, r12], [0x2b8]}) close_range(r7, r6, 0x0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r3, {0x7, 0x29, 0x7f, 0xffffffff80020000, 0x5, 0x40, 0xe, 0x1, 0x0, 0x0, 0x20, 0x876}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x5, 0x0, 0x0, 0xffff, 0x2, 0x84, {0x8004, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r4, r5, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000040)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r4, r13}}, './file0\x00'}) 10.117648822s ago: executing program 3 (id=947): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9.569487777s ago: executing program 4 (id=949): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0x80000000003ff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bind$qrtr(r1, &(0x7f0000000280)={0x2a, 0x1, 0xffff}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)="fb", 0x1}], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x6, &(0x7f00000000c0)=[{0x644, 0x40, 0x6, 0x9}, {0xfff8, 0x2, 0x74, 0x2631}, {0x81, 0x1, 0x40, 0x400}, {0x8, 0x6, 0x4, 0x6}, {0x7ff, 0x0, 0x3, 0x7}, {0xb8d, 0x4, 0x7, 0x3ff}]}) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x54}}, 0x0) 9.360740343s ago: executing program 4 (id=952): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe2(&(0x7f0000000300), 0x40) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x0, 0x6}}, 0x28) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="26f7b2ab7a879cacf0c2a2f1f27095bd72f9be22fec71c0c4d1c0000183619f1cf982ee8ae3341a4cb3c0fb3a11af294f4073e8b3d1c4d3eca3937867df8dfa34718f9258d8aabde1831c6e115bec44ef27a1496ca199f132ed6462dec71be4ceacf67ca4ce9fed0b3293e1ce6107aaaf266d0bdeadcd808da90bce315c1ef73501185bde018", 0x1}], 0x1, 0x0, 0xfffffffffffffc86, 0x20004000}, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 8.598795124s ago: executing program 3 (id=953): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010ac0554020000000000010902240001000010000904008001030000000921030043012205000905810308000000027104db0c735a4e670612f11318b399e3a47d5fe50a3e4bf1c4950298742cc288b73862bfbc91fcf0b7b727b02e2d718ca228978d97e661aeffaf26a190cde353d00372774fe5e506c1b7364cd24923084996bd08315b0947493f0903cb828fcb5e802e7e9b84762bb465a8682b3929030a2749ceedd22a02549319399c2b064dd115f34e99a1ef73ec587652642d65beec5f1c2f3b5b9573b7fbcf3a4c988f412b01fcbda3c100a342aec82421"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "f723686a"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "f723686a"}]}}, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xa17cbb1268823751) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xa17cbb1268823751) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000240)={r6, r7, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x0, 0x0, 0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f0000002fc0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.38806151s ago: executing program 3 (id=962): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0x80000000003ff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bind$qrtr(r1, &(0x7f0000000280)={0x2a, 0x1, 0xffff}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)="fb", 0x1}], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x6, &(0x7f00000000c0)=[{0x644, 0x40, 0x6, 0x9}, {0xfff8, 0x2, 0x74, 0x2631}, {0x81, 0x1, 0x40, 0x400}, {0x8, 0x6, 0x4, 0x6}, {0x7ff, 0x0, 0x3, 0x7}, {0xb8d, 0x4, 0x7, 0x3ff}]}) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x54}}, 0x0) 6.805864787s ago: executing program 3 (id=963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20d0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000002c0)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000940)="5cdd2d64882de34031c3bffe9154da701d874fa14d5477cec20dec641ee490682d42da21e4ed6b90594b054d2c236b7795067e00a08c711792ab628ba8e737f822212edb8955da2628bc5f414e589318bb0b8a007cad6c82", 0x58, 0x0, 0x0, 0x1200) 6.285263597s ago: executing program 3 (id=964): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x6a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x7fff, 0x10, 0x2b, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3e4"}], 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) ioctl$I2C_SMBUS(r2, 0x720, 0x0) clock_gettime(0x0, &(0x7f0000000100)) 6.282610143s ago: executing program 4 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9000000}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x40}}, 0x0) 5.866432028s ago: executing program 4 (id=966): getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@setlink={0x6c, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x38, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0x8, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d2}, {0x8, 0x15, 0x0, 0x0, 0x50}]}}, @AF_MPLS={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x6c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2e, 0x9, 0x7fff, {0xe, @esp_ip4_spec={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fe, 0x8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x3]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x2, 0x34}, {0x0, @empty, 0x8, 0xd, [0x7ff, 0x6f8]}, 0xffffffff7fffffff, 0x5}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_open_dev$dri(0x0, 0xffffffff, 0x200) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r6}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket(0x22, 0x6, 0x0) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r2, @ANYBLOB="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"], 0xd94}, 0x1, 0x0, 0x0, 0x40001}, 0x80814) preadv(r4, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000440)=""/63, 0x3f}], 0x7, 0xfffffff8, 0x6) sendto$inet6(r8, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.696189941s ago: executing program 1 (id=967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="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", 0x245}], 0x1}}], 0x2, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) shutdown(r0, 0x1) 4.793280294s ago: executing program 4 (id=969): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x40, 0x0, 0x909, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.654074574s ago: executing program 4 (id=970): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000d6ff6edf6d0a55453277b31a8a36007a00000000b7020000000000008500000086000000bf91000000000000b7020000000000008590c886630000008500"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_control_io(r3, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x16, 0x3, "58cb02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x1, 0x4, 0xd331, 0x8, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0xfc, "4af1cecc"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x8, "a374b0142dba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc4, 0x4, 0x6, 0x7, "3f6b41b01e5e769170"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0x0, "d3", "d74d40"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x80, "7cd0", "ce7e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x1, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0x4, 0x3f, 0x10, 0xfb}, 0x127, &(0x7f00000004c0)={0x5, 0xf, 0x127, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "0cfe567a98090deb0ad8e8c85c9adaee"}, @generic={0x103, 0x10, 0x3, "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"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1c, 0xe, 0x80, 0x7, 0x7}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc01}}, {0x102, &(0x7f0000000a80)=@string={0x102, 0x3, "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"}}, {0x3a, &(0x7f00000006c0)=@string={0x3a, 0x3, "6561dfb615fe20284d461f87177c0556bfadefc1e488fb46e5f99f98d50093a42d06df10c39bd1961d341e7542c6beab393868697afa2ce4"}}, {0xc4, &(0x7f0000000780)=ANY=[@ANYBLOB="c40700fcd33c63321fe758333e15b386363ba0a6d85539aaff7e3496e9f6329244cfac5ab2b3e96d30060b6a39456e1a533ff50f329f0e9944e5bfc060e1dc5c0fedf73fb5487ea19721d406981db64418fb56617e5a5d8a948ad5bccd35976e2509f47050f3ce31d27fd280de1196c280953bde4bc39ade238b791d513b94546f0cd83ed9eaaab2ef2e76d8e1fcda3d1cc9befd25d8f06cedc5642187ccecec6207e57f4765d2bfa22569c60795ded6e8e0b9e9d080630f38117b74de83d26d76a0f243"]}]}) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000080)=ANY=[], 0x78) close(r11) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000740)={0x2, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}, {0x80000008, 0x8001, 0x2, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x49, 0xfff, 0x3}) 4.108765849s ago: executing program 1 (id=972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) (async, rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) (async) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0x540b, 0x0) (async, rerun: 32) socket$inet(0x2, 0x6, 0xffff) (async, rerun: 32) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010200000000000000000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) 3.486208877s ago: executing program 0 (id=974): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20d0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000002c0)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000940)="5cdd2d64882de34031c3bffe9154da701d874fa14d5477cec20dec641ee490682d42da21e4ed6b90594b054d2c236b7795067e00a08c711792ab628ba8e737f822212edb8955da2628bc5f414e589318bb0b8a007cad6c82", 0x58, 0x0, 0x0, 0x1802) 3.485741193s ago: executing program 2 (id=975): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x9, 0x2, {0x0, 0xb}, 0x6, 0x5}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x7ff, 0x20, 0xc83}, 0x2f) 3.317142571s ago: executing program 0 (id=976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x18}}, 0x0) 3.262039362s ago: executing program 0 (id=977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28, @ANYBLOB="4a1304e76a1d8750b27c847ea745bf4f8b51d2d707ee2d17324984a97eac7d8fcb86054dac8af3baa82831733e79dcfef482097163c9af2065278931a012b63209d402367e593a92477091a84f9f61744859fbde04fa6d83e835aeff79c5874d5727da3e4f37adc807f543e82558c9186ef7cbda6aceafcf1bc3ddda8b567d98eb7c4b9831135639a20bf7eae99f7157a070cbe666fe86044c75cb70442a76e32d75b702e606bfd9f694b08a7cf3e6c9a1e8cb7d9cdf9ddb8cf979d3fc4779f152748d149ef63aa73331bc8134f39c0448bd1cbcf60151bfad55d0ad463df3fd0a207bc985026abe9e119ade2b50a9add7aeaf314d6744", @ANYRES32=r1, @ANYRES32=r4, @ANYRESOCT=r2, @ANYRES16=r2], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000, 0x0, 0x8) dup(r5) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000680)={0x507b2ed28dbb6a8f, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0xee9, 0x0, 0xfffffffd, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e83363000000000000000000000000005244534b00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000005200110300000000000000000200000089d4a06b4aa1e85d2215218e1caaa125dfe97e7524a361db519608c07a4534c7de5a66088c4c8982f390901eeeaeb4ad8a6e1657ad45c6fcca1597998ac05cfa207f04176bec5895fd7a0ed8e7697e583b2468ec5d12c203795ed8f6d9a824843ea2c9d6d5082c5d4b793a03b8b474c0abe82fde6bce29c712"], 0x14}}, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe8000000000000000000000000000aa20010000000000000000000000000000fffd00004e2400020200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}}, 0x804) 3.149399491s ago: executing program 2 (id=978): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000137d7009400", "a8b6c5b29ca2b841381ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) close_range(r4, 0xffffffffffffffff, 0x10000000000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001c001200"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xa57, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000300)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x14) 2.868316226s ago: executing program 2 (id=979): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() bind$unix(0xffffffffffffffff, 0x0, 0x0) r7 = accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) bind$packet(r7, &(0x7f0000000240)={0x11, 0xd, r4, 0x1, 0x8, 0x6, @random="35cb8763c2a8"}, 0x14) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000000c0)=""/105, &(0x7f0000000000)=0x69) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x2, 0xfc, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="5d1d", 0x0, 0xffffffff, 0x0, 0x1, 0x0}) 2.459649149s ago: executing program 1 (id=980): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1090, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r3}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1038, 0x1, {{'sha512-neon\x00'}, 0x7f80, "c27a56a3af0ee88304243b7abb8fbeed88214aed6285d0ec1be006764eaf417cf41ee8f4537d711b0b0bbad340e410f4413d7ce146812324a7e79779ff2388dbeec67efccf459cfa0312ccb52450d7cfa445c7b1ef32ba72cafd5e7d237e22008338621b9e82fe5f804774865b789c60334b1681718c2a1dc0e8a21ac115e66f20d20bece7704a6a393fea1dc4ed062ea7e1271464085c4bfde9acdb2a53119f1fb7e7b4eeb523d81f9ec12e5bf5e7e232b7b952ae54fef5ab8ea3f486e3206572fbdd16199c6dc9207581da5e8f4d955885c68ef32c37f905a0788888717529a842655e600c2db3322b78fe42799c9c110c6dc8e1500b18c24608442be4ebd1b7215fa5b776aa45d19ae289b0915ac208711abfe3b70abccbc1087ecc9b3676a5365b1a2d91eb102fccde2474881b6211f2eb57c7ea328e7a099683890d90b0c234e19fadac59b0430003e4f7ac898a34326c0c3c7343011130f54b37a3e667edc93d9b175379441ee69681af9a7bfee47da79117f8750b7379fc293e60d583215c4820ac82b18c6c8557c0bcf6cf49961731b33fb6b1213e535ec60b9bb1a4abe5140eca29fd4d728e1bbd4b27205aae2f5c4fc2c7bbeda0142b35b699fd429d7e267b3abd5f47942c1ba3af1f05e5470f90b7f277cbb55867b6eb4f02232ae00bcb802352a7f431781232ec6574f6ca4c2c5c78a6af806a03c12abc28971038f9e15adbaa104f70cb86e08df2d9667f0c629a95971f4e9f33bf1217d4c455e3975dc9929ef06e9327ab2fab34f80be88a3c9a162f9cd33e6538d1b9888405caa97a389c6e206c28fc4ed25fa7e1155bc9e7682c664571792e00beca5e0a4c058bd51c1a24f747254caab1daf6916e8838b79f20e73f9424245ce531f1176f1dcd72fb0e881380162e4c3d0d4e5517c19d3e8ea1cfa7587403ff56e445d1bd10151300f8dbb0b4330b088216e26b55ea72960441859cc74ad10b3f3c6d28a392114afbd2c1263b34159b87ae53fa318db400980865da20303746dcb8968f26b752fc77283ce205f542847bd95631ca0c07203088809ea4dedd543d85fd0593adb1001a129c7ece1f2c321c1fa30ac9c7f24c90aedaa0bcde13c00cc4ae584c615c237c3702603fc3200d1da2646a1ddaa92650f5c998f50f0caf33a0205ea14e4de99da644e2cefeb6647b4a5525951237725c89a786e2b3304179b64b799836ba6f9fdfd6ac160c5bb8b14f252013bd204ab9d424e1c3092ecb774c116c36a5e353e4300bf76f610349d16e4d542862082439e540178e89adb1d54a9efe174ba33ceb3afb7feb5977e8f6036dd006f07d214f743bdcc2e429574026fd4a581f270dad57bac9baade152bbdab76c0c203aa262f347cd9ab5313ed9e884d71b8dd5d5ac1abaf147a587f703d388df263de8053b2ed95d2158530990168afadcb02116ea5985cd1132fa9b9f64a557b4c30a01c3e2cd891fe34b61e8b61de6a848ee6d864d0e2234e8f9b6702cc9939f5cf21415f402b8b9a67a0c5d20c68f4b29a6294aa39dbec96e213f9c99151728ed7aa9614356c44dd1c0e120a3e1665d8ff4914d0699f6f7ae3911cf6c90b1f8a499550436fe244b49cc6ecf85137a03aa1be9dd58c49375eab55e77ac451d55c1e17d6a13ccde36d49ad40359f3521ed2dd40c0a805ad3f8bd77f117d2bb359e1330c69527f6df8195a35b2550eb9d592c5993b746b83020f8fda3136b76cd291d6c62e95974feddf0ac784acf1268ada9235b0eb07c8e4c8026e4c273e9b98b9cb64777bc213664ba4dedb49a546ef3b50e9fe17de8d912c61d6207281e0e44f46255770f64d18e23e39d70d8c49eac50e06d3840909be357ed30f3cb04e745d488675eb282f526c2fd66f06bcf04bf2586a3c51d608aefb2bf5e5b351919b5249d6b2ca42419da7c25fc4999ea9c5d9ee95bbfec225e47903dd01c4aeab2e50db844028a756d40a6e46d57dc5dd1255c8168c07973ee86b57e91133f03155add06cdfa7f0baa2819ae8ff980ae66ba2aa7f24aef69addec39151e597e8965564439ca672fe8616fcc51365cf7c4ea1450d3eb40fe967954d10b85d8762177f5dd7f6e60552e8d31da062743a3ee11b6e5bbf7398d06b0f129db35d101198992fecc1af1029552917ad8b9ea2655e73bf6b79f72faad6cde339be24919ab366c5c9f5d3af3a172ba83a1fc1dbcdaff0b5df47c1239b1fbf935f9138f7a9969246771fa1b52a3beef7358bb9313ccdc4a32f4a130dd6fd4d96433a9f8e6e22d33f7949815aff7610105bb0c70ae2e41bc69343037975374974262c36af1526dd0dab1778887e2082fdbec941eaa57f31cbd62d14f4adc3fcdc1de729f1164390569dd0a8fc051e46378b50ad7c33b5afbd71a0f7c65b928c4c0368214af33d3e64b0cc27a73446c9ece59b900bfdc1859e89240645e26969b819bbec70ef069846a550aea6449e045c2a19199527acb92dfbad832f3ca19428f51b36c60f8aff3334fcec318c3db4bc52c3528241fec66d3bf74209f422029118c55e59e80371b475f091edff3c7c614e6f1f002ee3dfc069813c9bef6b00195b5d8b4898f6cd6d28b891462279005c0baa604b60473fc5a185c01e3366bc05ebf80f92fab85a8aea96f634344ba79b8407c4e3ed61d7d1df6ab77a34024c2d8252d8e50927e88e1c0a42685af36b2d01a6f50b3db187bd6ae36809146178702eb28456d1eb43ba3334dfa7e9c486ea431e52f8f5c56926fa52fe0986e4d10595e695c695e8ea4d289e551be0261eb2385d020be750dc17c070a849f57bd707cd01d68abed2cf4dd28bae7ba323105e1561884a52145319af75da1284db5372fd4d582caa8279cfebe62c8ed964cb32b8eeabe53cc9b5a7258fdc55ef6b01461e485b3b1897630a09d27a40901b2ec7b47e94da9889588ee339f08b4594799d299be67117ae41b7b74f868f74c278a07bcf87ba29b455291c9c5161b1318bae1f68ba81e3f9772c9750a5f9735c7e69817aaa64f17e77b5f4d1c6911af22ee159a8995fa75437a1c7a319f1815fba764d442ea69509edb7d5ed3ded780a96cace4a9e9ea1d007fecd0c9882450368adfbe7e3b114968e62f45642b695375aca14e29cb11bc8f4e2607bbded8f97052cb65ce178baa1bf7d903c17ca53299a34ee7efc1732b45e773f48f9267a887995c10efc7bf9e0aea56ae7804c3f900f3e454f529e8de26ae0fa4871ef30db12ded3aab98bd25a3feb70e3bc782165b0deaada39af126b3e66635d3710aca947e6e1ae5458fcae25ec3e10285ca9f9c33883a0ef73d120dffdef81d0451949f0a3a633211e1dd0cc3d653a7ec33108eb7dcbb295974528e79a1608ddddaf75edee6161eb0c70aa66a323e96aaa1b75fd872eefc482787332fdb696cfc5dd87636d4068b8b83387149123044ef95c816905c3c88cc79d62671670772350568856a2653e85fee5e1a5b9849d2acbe9011944a5fb8aee797f216909fa9a76f24cd2eed1d9c68a12f3aad45d27e5e1efcbc4877f9f41eaa0932fdb87e29462cdce56abebd38a39d8ba61c96a97521d97e308a8485565ce673daae1ea4a8f7a00c68a524c98385853f7195543e851f8d401d0a8b569615f74bca76889c60facae3017e92bace610ffee82fee71b972c8c73b104e8b839033bcbebf867dc9bcb8fca57d89a1beb3188244a8f63c9a465207cccfde0fe5fdb9087a0b82381c94837fc4ba46c7797c250fac01d19f25ecd38a0cbfc26cc9d0393d3b460859e29fab53a4da205b3ca5d1bc1022637a712155a47148cf926d9d056853edbe0b993b3cbd531e4d55b82b68bf28b73b2c1e8d491d226660b2fb079f85d1e3d0a2a869e18676aaabf40608c6cf125164ac08ba569112e2c876b397dde4aa57277671967319a4201dbae45d6e49e5b05b8b5c01c6d648924e68a723c19e0b93ed5f3199720f090f4803c067a64e5909f382cf124a16b90af34e949541158e989c0f1c5e19fd92e9705a6d21bf1342a4794a19062c64875066827b418c55e65b247d03211b506197213d53422f3da6146eff828db6b9ef89d17fcaa7923e31534d7d5a8d530335b9098aa8a3235c073119beff9faade8cae67ea616aa3d9f61236a4102fb767097adaa7b1599a1b9cfe280adfad3f47862d152f5379b8debbee1b807fc3b6f5afacac02a34e7a122b294166f7cc4ccb7530d976ae2c7df638c917c809f884a7fb097c7f62c31245ef0422664d4921405ee899a83d2d8ff9ffedbbd0a96692ccc8e6e8530237cf4f2ebd876b66075f8aaa005da6875d3495ba4cb7cec1626a4c406ee637c89581dbf9a3dcbf0cef2983a4536f00b1a8ff9865eaa89d293f371744a6288fb636c47bc2d36a1b6e3b5ad54609e26479172af210fb23a39146e212ce460d9e2619cc33717c05999fdc9f4bdae51c779a39b509ebc4b917f622991f5e1452550450e704d38591d29de7ce710dc110a09f9fefeed390ce7ab8ca83ac5c1f68364c70698c09e484f017d9f7f27858055d38e41659db237bf1c797a9e4c410ced3e26bfcfc86b22ab6c7d1ca83c48ebb92005c57f51eae615efb7a4c1085bcf752f2d43b29f70a693db5dd829167be7546509b014d8cf85d0406f89cc51b7e44d54d0ee99f1b62682df1fe0b0415977955f0089f223cedc821a7a2c4b2a8f75615d1ef1c5c4cf578d55b0a808db2a120e23f671a53bfca468429ee759f2d50487509777811eaca97b15780d149fa0d1cdb27941b6fd3ea4adbb2e155fef664c4c7c2e76010a26b8780a5571c2aa51daeb5c1e7b7d7c75edc363311eca85b22e8dddf41880f13df478829413952295163e7ea4666759c7095ae31b6e5605b7e1b7dc15fb232924ddae880e52e0bfdc2a1e477d8c54fe72d628711332959899a96589f6822bc6d4922fe7f7e51996d968f997b75aa2d4fd33085441ad5003ccd18643523b95f27386c61fda659d9beeda658bd96ad313c2daf796d6c448c0b426627a0ebb79d4cb4033db1453f23f331ad974e06eda58e37e2e8f0a8f3bab0c19a1da46b1bcb4c7d53bfeef46e3ae3826d04414ee6552564be82cde0b27b972f2082a651ac0a57e13193ce4a2fd488c7f885a3987177ffa69a4018ea4d9930e2611f12f6e34a2c5a56b1e2116bffff530a4b24f67d1b5c593948e210a45d998b55764b43c3b17ba31ee9255c9590fcca239a86dedaedf9bc7c70c860597ef951e11a1eafc22949068c03e98c8b2c693ee39495ec52c32db6f16b2e62f7fd510a61c8fd430c37ccecc60164b07e033ea611309255710e8126601920189dafaec0ec94e9627a7eb3e1a6cd6d128ce3c14d6db80424118df0f5b2242b8053b5f92623f2c92622b615c01dc753655ebde4119f9e0cb64492c0c8a6cbd55b290433c10490034a037458b9eda9b9bb2bb8486c549a79fc613979addb4f3a3a04f3f6dad560d97d78dd5f8ea1735f5072193a0d76701ea79f3902b5e6378b6b104a53cd9c46948c388dd968d38c3f23ee6231a9385227b1191f37f47bfe54a7c414f75569db3a4153c911d42f9553629d57feb96e94de6596827bc12847d79bfcc3e044402d12fef0c4b7916ed4f099aa538c162c08ae391e951494e23ee53f8b82902d05a57cf6fcf42fb43696c34b8d9d1bffc022afb51bd395a823f9135159d9262784f1721a6485edc8af8a5b5a6bc60011a7d6db50d716ee498fd7845272e761dcca2f18b756a4dacbdd33095a8c50789b0b9acb8f760ae3"}}]}, 0x1090}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.758355666s ago: executing program 2 (id=981): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104fdff0100fddbdf250000000051ca26cfc4453f8418", @ANYRES32=0x0, @ANYBLOB="03800000808001000500110001000000"], 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x4054) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x9fc, 0x0, 0x0, 0x0, [{0x4, 0x8, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x0, '\x00', 0xc}, {0x0, 0x5, 0xff, '\x00', 0x11}, {0x2, 0x10, 0x1, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x6, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0x9, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x7f}, {0x5, 0x6, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x7, '\x00', 0xc}, {0x4, 0x0, 0x2, '\x00', 0x42}, {0xed, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x6, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000600000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x1df) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0) (async) r7 = gettid() tkill(r7, 0x100) (async) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) (async, rerun: 64) io_uring_enter(r8, 0x3517, 0xa56c, 0x9, 0x0, 0x0) (rerun: 64) 1.732010287s ago: executing program 0 (id=982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="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", 0x245}], 0x1}}], 0x2, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) shutdown(r0, 0x1) 1.31988055s ago: executing program 2 (id=983): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0000000000119078000000000000000000004e200018907804000000030000040300000000000000"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0000000, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "eea2ce15f073cfc7b867a8f1eae374a32b050000000000000048ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1eec4feb340aa2a2dfcc3569d1153d"}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000315000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x0, 0x7) 991.047797ms ago: executing program 1 (id=984): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="7447d4bdecc08f7492446a2a696f70c00fe82f761277988e758709569fa7738fde8860aeec728178130ae3446bfb4ba84980358ac9c82acde910e8971a4474b9e005f6350f730a57568e2a6d63f37713b249a86fe998ce95a53046463c13951195ab5404ae98c3661b64e798367ec016be5ab94d58724fca3497", 0x7a, r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRESHEX=r0, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r2], 0x7c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 302.220311ms ago: executing program 0 (id=985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f00000006c0)=""/66, 0x42, &(0x7f0000000200)={&(0x7f00000000c0)={'sha1\x00'}}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x40}}, 0x0) 300.418343ms ago: executing program 2 (id=986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) msgsnd(0xffffffffffffffff, 0x0, 0xe, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) io_uring_setup(0x1946, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000003880)={0x8, 0xffffffff, 0x6000}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x8004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 253.153648ms ago: executing program 0 (id=987): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d8, &(0x7f0000001140)={[{0xb8, 0x4e00, "82fc1a4c6e2d1a562ef844a2463456adc7a9750e2507994c67971731f264af19f77d719a4f2b89b98bebd08556f58de6c6767cefccbef0e1c502f2c0e6cdd9d6bff86668d861fcea37a2d89bed9952ff056a360f3bf9f199c75b14808cacb6d4fae8661aad6d24a15a0ab2c3bda7af6993159f9423007407e89166d60a3835c8fa948fa7dc20c35c8cc8283023c109994aacdee5efe6e277230e108d9d294fbfaf0f1ba5f49b200f62dce04435158b99fce572c3bd79b508"}, {0x70, 0x4e00, "6900c098aa0fb6e80137846e32b6af5258726cf70953055c782bfe39bf56c1b0af76f5c67bc26f8c92ca835461a229a95e1daf40f23714f4208bc713dd7d47678b826a4c9f61e890e7c8131d0ffbddf977206de384623dd73dfdf8530bccbc71b90b78485e3b9638ee24f2582e7da570ac0a0480df9cd68cad7787a81ab3ec46e612f4143982e19489e2a6ffedcc37ce3867"}, {0x7e, 0x4e00, "d19a9a2e22193dade5fdc784869e79f161cf22a255e52480814f4579604118d4e04e457db29d55a5ce93aba4ca183e0527ef687d9d181fc6434b420b01d01538e758065ce519bdf736a216333443cf36eddc8d5f2755309b7c24f176e8388ebe37c3959b92feae7f7049164cd80e97a82d2b893a8d550d273f8dbd5a7c4f"}]}) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x26040885}, 0x4810) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 94.041226ms ago: executing program 1 (id=988): socket$packet(0x11, 0x2, 0x300) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="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", 0x140, 0x20000045, &(0x7f0000000040)={0xa, 0x4e22, 0xa, @remote, 0x10}, 0x1c) 0s ago: executing program 1 (id=989): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0x80000000003ff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bind$qrtr(r1, &(0x7f0000000280)={0x2a, 0x1, 0xffff}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)="fb", 0x1}], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='cubic', 0xea) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x6, &(0x7f00000000c0)=[{0x644, 0x40, 0x6, 0x9}, {0xfff8, 0x2, 0x74, 0x2631}, {0x81, 0x1, 0x40, 0x400}, {0x8, 0x6, 0x4, 0x6}, {0x7ff, 0x0, 0x3, 0x7}, {0xb8d, 0x4, 0x7, 0x3ff}]}) splice(r5, 0x0, r7, 0x0, 0xa, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x9, 0x100, 0x3}}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): oint 0x9 has invalid wMaxPacketSize 0 [ 191.737588][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.747365][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.805619][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 191.810646][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.815329][ T5955] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 191.823479][ T5913] usb 4-1: Product: syz [ 191.841014][ T5913] usb 4-1: Manufacturer: syz [ 191.888808][ T5913] usb 4-1: SerialNumber: syz [ 191.907267][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 191.924642][ T5913] usb 4-1: config 0 descriptor?? [ 191.932242][ T5954] usb 2-1: can't read configurations, error -61 [ 191.939691][ T5954] usb usb2-port1: attempt power cycle [ 191.970749][ T5913] usb 4-1: selecting invalid altsetting 0 [ 192.025224][ T5955] usb 3-1: device descriptor read/64, error -71 [ 192.055370][ T5905] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 192.173625][ T7756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.225416][ T9] usb 4-1: USB disconnect, device number 12 [ 192.225976][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 192.295473][ T5955] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 192.335183][ T5954] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 192.381793][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 192.394868][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 192.421962][ T5954] usb 2-1: can't read configurations, error -61 [ 192.436156][ T5955] usb 3-1: device descriptor read/64, error -71 [ 192.555812][ T5955] usb usb3-port1: attempt power cycle [ 192.575181][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.605642][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 192.621026][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 192.641590][ T5954] usb 2-1: can't read configurations, error -61 [ 192.658327][ T5954] usb usb2-port1: unable to enumerate USB device [ 192.895238][ T5955] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 192.945741][ T5955] usb 3-1: device descriptor read/8, error -71 [ 193.195539][ T5955] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 193.215848][ T5955] usb 3-1: device descriptor read/8, error -71 [ 193.503094][ T5955] usb usb3-port1: unable to enumerate USB device [ 194.249841][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256284][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.275971][ T7783] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 194.992404][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 195.325658][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.343575][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 195.351305][ T5905] usb 1-1: can't read configurations, error -71 [ 195.955254][ T1555] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.196596][ T1555] usb 5-1: Using ep0 maxpacket: 32 [ 196.260233][ T1555] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.284818][ T1555] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.365155][ T1555] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.388969][ T1555] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.409538][ T1555] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.440514][ T1555] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.511212][ T1555] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 196.588866][ T1555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.619751][ T1555] usb 5-1: config 0 descriptor?? [ 196.840278][ T1555] hid_parser_main: 48 callbacks suppressed [ 196.840293][ T1555] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 196.862319][ T1555] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 196.951725][ T1555] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 196.951763][ T1555] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 196.951791][ T1555] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 196.995292][ T1555] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 196.995503][ T1555] hid-thrustmaster 0003:044F:B65D.000C: setup data couldn't be sent [ 197.067260][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 197.077041][ T1555] usb 5-1: USB disconnect, device number 23 [ 197.135226][ T5905] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 197.225477][ T7825] fido_id[7825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 197.354885][ T5905] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 197.373933][ T5905] usb 1-1: config 0 has no interface number 0 [ 197.398239][ T5905] usb 1-1: config 0 interface 29 has no altsetting 0 [ 197.632693][ T5905] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 197.779442][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.879034][ T5905] usb 1-1: Product: syz [ 197.888499][ T5905] usb 1-1: Manufacturer: syz [ 197.901350][ T5905] usb 1-1: SerialNumber: syz [ 197.918362][ T5905] usb 1-1: config 0 descriptor?? [ 198.304801][ T5905] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 199.027348][ T5954] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 199.194234][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 199.226072][ T5954] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.241155][ T5954] usb 3-1: config 0 has no interface number 0 [ 199.278830][ T5954] usb 3-1: config 0 interface 184 has no altsetting 0 [ 199.327610][ T5954] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.463018][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.504842][ T5954] usb 3-1: Product: syz [ 199.531760][ T5954] usb 3-1: Manufacturer: syz [ 199.558550][ T5954] usb 3-1: SerialNumber: syz [ 199.625794][ T5954] usb 3-1: config 0 descriptor?? [ 199.660463][ T5954] smsc75xx v1.0.0 [ 199.685182][ T5954] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 199.825191][ T5954] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 199.856759][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.903440][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.971931][ T5954] usb 3-1: USB disconnect, device number 29 [ 200.243221][ T5905] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 200.272722][ T5905] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 200.366750][ T5905] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 200.454148][ T5905] usb 1-1: USB disconnect, device number 22 [ 201.077773][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 201.437879][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 201.444315][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 201.450434][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 201.456919][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 201.481347][ T7876] fuse: Unknown parameter '0x000000000000000d' [ 202.387790][ T7893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.498'. [ 202.995194][ T5905] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.208914][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 203.252477][ T5905] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 203.271755][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 203.335767][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 203.400514][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 203.455117][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.497894][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.542869][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.594813][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.625493][ T1555] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 203.792208][ T1555] usb 1-1: Using ep0 maxpacket: 16 [ 203.846768][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.903400][ T1555] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.946795][ T1555] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.994689][ T1555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.050760][ T1555] usb 1-1: config 0 descriptor?? [ 204.295027][ T5905] usb 4-1: GET_CAPABILITIES returned 0 [ 204.310222][ T5905] usbtmc 4-1:16.0: can't read capabilities [ 204.471099][ T1555] HID 045e:07da: Invalid code 65791 type 1 [ 204.511114][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 204.521936][ T7898] usbtmc 4-1:16.0: Unable to send data, error -71 [ 204.826636][ T1555] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input15 [ 204.849523][ T1555] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 205.112810][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 205.189952][ T9] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 205.391725][ T5954] usb 1-1: USB disconnect, device number 23 [ 205.548321][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 205.675362][ T5905] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 205.735140][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 205.858748][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 205.865236][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 205.874449][ T9] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 205.926383][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 205.953737][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.960158][ T9] usb 3-1: Product: syz [ 205.985913][ T9] usb 3-1: config 0 descriptor?? [ 206.004076][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.047474][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 206.099524][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 206.150281][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 206.175136][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.222222][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 206.223085][ T5905] usb 5-1: config 0 descriptor?? [ 206.246148][ T7919] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 206.261425][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.304661][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 206.336338][ T9] usb 3-1: media controller created [ 206.429010][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.478752][ T9] az6027: usb out operation failed. (-71) [ 206.489377][ T9] az6027: usb out operation failed. (-71) [ 206.495337][ T9] stb0899_attach: Driver disabled by Kconfig [ 206.501892][ T9] az6027: no front-end attached [ 206.501892][ T9] [ 206.502455][ T5918] usb 4-1: USB disconnect, device number 13 [ 206.509523][ T9] az6027: usb out operation failed. (-71) [ 206.638557][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 206.667170][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 206.699516][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 206.739582][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 206.773829][ T9] usb 3-1: USB disconnect, device number 30 [ 206.905962][ T5918] usb 5-1: USB disconnect, device number 24 [ 206.912430][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 207.016213][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.177500][ T7942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.877525][ T7956] FAULT_INJECTION: forcing a failure. [ 207.877525][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.892517][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.0.517 Not tainted syzkaller #0 PREEMPT(full) [ 207.892539][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.892549][ T7956] Call Trace: [ 207.892557][ T7956] [ 207.892565][ T7956] dump_stack_lvl+0x189/0x250 [ 207.892601][ T7956] ? __pfx____ratelimit+0x10/0x10 [ 207.892625][ T7956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.892642][ T7956] ? __pfx__printk+0x10/0x10 [ 207.892660][ T7956] ? __might_fault+0xb0/0x130 [ 207.892686][ T7956] should_fail_ex+0x414/0x560 [ 207.892718][ T7956] _copy_from_user+0x2d/0xb0 [ 207.892742][ T7956] do_ipt_set_ctl+0x696/0xcd0 [ 207.892762][ T7956] ? rcu_is_watching+0x15/0xb0 [ 207.892787][ T7956] ? trace_contention_end+0x39/0x120 [ 207.892810][ T7956] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 207.892847][ T7956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.892870][ T7956] ? __pfx___mutex_lock+0x10/0x10 [ 207.892899][ T7956] nf_setsockopt+0x26f/0x290 [ 207.892920][ T7956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.892943][ T7956] smc_setsockopt+0x232/0xab0 [ 207.892965][ T7956] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.892982][ T7956] ? aa_sock_opt_perm+0xff/0x1b0 [ 207.893002][ T7956] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 207.893023][ T7956] ? __pfx_smc_setsockopt+0x10/0x10 [ 207.893042][ T7956] do_sock_setsockopt+0x17c/0x1b0 [ 207.893073][ T7956] __x64_sys_setsockopt+0x13f/0x1b0 [ 207.893103][ T7956] do_syscall_64+0xfa/0xfa0 [ 207.893119][ T7956] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.893136][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.893153][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 207.893175][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.893192][ T7956] RIP: 0033:0x7f2de3b8eec9 [ 207.893222][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.893237][ T7956] RSP: 002b:00007f2de4a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.893263][ T7956] RAX: ffffffffffffffda RBX: 00007f2de3de5fa0 RCX: 00007f2de3b8eec9 [ 207.893277][ T7956] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 207.893288][ T7956] RBP: 00007f2de4a8b090 R08: 0000000000000570 R09: 0000000000000000 [ 207.893300][ T7956] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 207.893311][ T7956] R13: 00007f2de3de6038 R14: 00007f2de3de5fa0 R15: 00007f2de3f0fa28 [ 207.893342][ T7956] [ 208.191241][ T7952] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 208.218277][ T7952] bond1 (unregistering): Released all slaves [ 208.255206][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.525198][ T9] usb 5-1: device descriptor read/64, error -71 [ 208.734597][ T5918] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 208.767799][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 208.897548][ T5918] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.909644][ T5918] usb 1-1: config 179 has no interface number 0 [ 208.916580][ T5918] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 208.928344][ T5918] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 208.940187][ T5918] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 208.952038][ T5918] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.969668][ T9] usb 5-1: device descriptor read/64, error -71 [ 208.971024][ T5918] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.031406][ T5905] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 209.047771][ T5918] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.057078][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 209.070295][ T5918] usb 1-1: Product: syz [ 209.148749][ T9] usb usb5-port1: attempt power cycle [ 209.157058][ T7963] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 209.181135][ T5918] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 209.215238][ T5905] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.231709][ T5905] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.257134][ T5905] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.268128][ T5905] usb 2-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 209.282718][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.405802][ T5905] usb 2-1: Product: Ц [ 209.442765][ T5954] usb 1-1: USB disconnect, device number 24 [ 209.445431][ T5905] usb 2-1: Manufacturer: ⠉ [ 209.484744][ T5905] usb 2-1: SerialNumber: ఌ [ 209.556129][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 209.625766][ T9] usb 5-1: device descriptor read/8, error -71 [ 209.817004][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.829292][ T7992] team0: Port device batadv1 added [ 209.894702][ T7994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.524'. [ 210.015181][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 210.097181][ T9] usb 5-1: device descriptor read/8, error -71 [ 210.127205][ T7995] hub 9-0:1.0: USB hub found [ 210.133586][ T7995] hub 9-0:1.0: 1 port detected [ 210.212746][ T9] usb usb5-port1: unable to enumerate USB device [ 210.549110][ T7994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.591227][ T7994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.604427][ T7994] bond0 (unregistering): Released all slaves [ 210.695343][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.866542][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 210.890683][ T9] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 210.955020][ T9] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 211.035321][ T9] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.083783][ T9] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 211.132407][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 211.144528][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.174090][ T9] usb 4-1: Product: syz [ 211.183475][ T9] usb 4-1: Manufacturer: syz [ 211.194829][ T9] usb 4-1: SerialNumber: syz [ 211.216210][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 211.231852][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input17 [ 211.300646][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 211.425211][ T9] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 211.442043][ T9] (id 0x00) [ 211.456665][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 211.476541][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 211.491263][ T24] usb 1-1: config 0 has no interface number 0 [ 211.502635][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.512809][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.518527][ T9] rc_core: IR keymap rc-imon-pad not found [ 211.521978][ T24] usb 1-1: Product: syz [ 211.531731][ T24] usb 1-1: Manufacturer: syz [ 211.541551][ T24] usb 1-1: SerialNumber: syz [ 211.543945][ T9] Registered IR keymap rc-empty [ 211.551492][ T9] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 211.563395][ T24] usb 1-1: config 0 descriptor?? [ 211.563682][ T9] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 211.594937][ T24] smsc95xx v2.0.0 [ 211.640751][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 211.659493][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input18 [ 211.696124][ T9] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized [ 211.853262][ T5905] usbhid 2-1:1.0: can't add hid device: -71 [ 211.864463][ T5905] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 211.927099][ T5905] usb 2-1: USB disconnect, device number 18 [ 211.948998][ T7999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.955771][ T7999] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 212.010654][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 212.066155][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.107195][ T7999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.114310][ T7999] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 212.156144][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 212.170901][ T7999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.185736][ T7999] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 212.220211][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 212.259129][ T7999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.275395][ T7999] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 212.301676][ T24] usb 1-1: USB disconnect, device number 25 [ 212.323660][ T7999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.330640][ T7999] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 212.512489][ T9] usb 4-1: USB disconnect, device number 14 [ 212.605162][ T5905] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.730340][ T8037] netlink: 96 bytes leftover after parsing attributes in process `syz.2.543'. [ 212.759927][ T5905] usb 5-1: device descriptor read/64, error -71 [ 212.793617][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 212.985523][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.994385][ T24] usb 1-1: config 179 has no interface number 0 [ 213.040684][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 213.080845][ T5905] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 213.090291][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 213.194824][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 213.218789][ T30] audit: type=1326 audit(1760368301.906:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.251347][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 213.272073][ T5905] usb 5-1: device descriptor read/64, error -71 [ 213.294109][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.315200][ T30] audit: type=1326 audit(1760368301.906:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.347041][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 213.365211][ T24] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 213.503331][ T5905] usb usb5-port1: attempt power cycle [ 213.508975][ T30] audit: type=1326 audit(1760368301.906:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.546538][ T24] usb 1-1: Product: syz [ 213.578557][ T8025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.594167][ T24] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 213.617877][ T30] audit: type=1326 audit(1760368301.906:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.686833][ T30] audit: type=1326 audit(1760368301.906:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.714398][ T30] audit: type=1326 audit(1760368301.906:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.742195][ T30] audit: type=1326 audit(1760368301.906:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.780780][ T30] audit: type=1326 audit(1760368301.906:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.809803][ T5954] usb 1-1: USB disconnect, device number 26 [ 213.885551][ T5905] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 213.931958][ T30] audit: type=1326 audit(1760368301.906:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 213.984205][ T5905] usb 5-1: device descriptor read/8, error -71 [ 214.039095][ T30] audit: type=1326 audit(1760368301.936:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 214.235174][ T5905] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 214.266674][ T5905] usb 5-1: device descriptor read/8, error -71 [ 214.376212][ T5905] usb usb5-port1: unable to enumerate USB device [ 216.294403][ T8077] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.556'. [ 216.309660][ T8077] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 216.537619][ T5918] IPVS: starting estimator thread 0... [ 216.679887][ T8078] IPVS: using max 49 ests per chain, 117600 per kthread [ 216.701564][ T8080] MPI: mpi too large (130952 bits) [ 216.902008][ T8086] batadv_slave_0: entered promiscuous mode [ 216.927757][ T8086] batadv_slave_0: left promiscuous mode [ 217.055212][ T5954] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 217.214264][ T8090] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.560'. [ 217.228973][ T8090] debugfs: '`] Iq!>s*!)\+`iF=' already exists in 'ieee80211' [ 217.252640][ T5954] usb 1-1: device descriptor read/64, error -71 [ 217.272621][ T1555] IPVS: starting estimator thread 0... [ 217.545154][ T8091] IPVS: using max 49 ests per chain, 117600 per kthread [ 217.713807][ T5954] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 217.865175][ T5954] usb 1-1: device descriptor read/64, error -71 [ 217.975456][ T5954] usb usb1-port1: attempt power cycle [ 218.325285][ T5954] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 218.362024][ T5954] usb 1-1: device descriptor read/8, error -71 [ 218.470226][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 218.483442][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 218.528316][ T8095] input: syz0 as /devices/virtual/input/input19 [ 218.615163][ T5954] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 218.643671][ T5954] usb 1-1: device descriptor read/8, error -71 [ 218.757479][ T5954] usb usb1-port1: unable to enumerate USB device [ 218.907280][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 218.907297][ T30] audit: type=1326 audit(1760368307.596:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.3.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f359558eec9 code=0x0 [ 220.874632][ T30] audit: type=1326 audit(1760368309.556:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 220.937844][ T30] audit: type=1326 audit(1760368309.556:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 220.983898][ T30] audit: type=1326 audit(1760368309.556:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.006935][ T30] audit: type=1326 audit(1760368309.586:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.029235][ T30] audit: type=1326 audit(1760368309.586:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.095722][ T30] audit: type=1326 audit(1760368309.586:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.123259][ T30] audit: type=1326 audit(1760368309.586:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.211993][ T30] audit: type=1326 audit(1760368309.586:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.215191][ T5954] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.235167][ T30] audit: type=1326 audit(1760368309.586:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3b8eec9 code=0x7ffc0000 [ 221.535411][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 221.548430][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.562153][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.572533][ T8161] vivid-007: ================= START STATUS ================= [ 221.580877][ T8161] vivid-007: Enable Output Cropping: true [ 221.588654][ T8161] vivid-007: Enable Output Composing: true [ 221.594496][ T8161] vivid-007: Enable Output Scaler: true [ 221.600222][ T8161] vivid-007: Tx RGB Quantization Range: Automatic [ 221.606771][ T5954] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 221.616273][ T8161] vivid-007: Transmit Mode: HDMI [ 221.622773][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.631254][ T8161] vivid-007: Hotplug Present: 0x00000000 [ 221.642473][ T8161] vivid-007: RxSense Present: 0x00000000 [ 221.648272][ T8161] vivid-007: EDID Present: 0x00000000 [ 221.653794][ T8161] vivid-007: ================== END STATUS ================== [ 221.670472][ T5954] usb 2-1: config 0 descriptor?? [ 221.695165][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.845306][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 221.852798][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.869954][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.884043][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.905150][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.928574][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.940135][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.204656][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 222.212680][ T24] usbtmc 1-1:16.0: can't read capabilities [ 222.354544][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.409020][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.447644][ T24] usb 1-1: USB disconnect, device number 31 [ 222.513153][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 222.519640][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.571408][ T5954] usb 2-1: USB disconnect, device number 19 [ 223.997487][ T5918] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 224.175207][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 224.182695][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.194249][ T5918] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 224.211380][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.320639][ T5918] usb 1-1: config 0 descriptor?? [ 224.361738][ T8208] fuse: Bad value for 'fd' [ 224.366946][ T5905] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 224.384901][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.528073][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.536388][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 224.548661][ T5905] usb 3-1: not running at top speed; connect to a high speed hub [ 224.564940][ T5905] usb 3-1: config 1 interface 0 has no altsetting 0 [ 224.574778][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 224.584708][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.593042][ T5905] usb 3-1: Product: syz [ 224.597720][ T5905] usb 3-1: Manufacturer: syz [ 224.602571][ T5905] usb 3-1: SerialNumber: syz [ 224.712622][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.744796][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 224.757479][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 224.772720][ T5918] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 224.783692][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.794965][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.843765][ T5905] usb 3-1: USB disconnect, device number 31 [ 224.869742][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.053021][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.064116][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.090385][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 225.090402][ T30] audit: type=1326 audit(1760368313.776:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 225.143890][ T7594] udevd[7594]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.169525][ T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 225.216642][ T30] audit: type=1326 audit(1760368313.776:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef34f8d710 code=0x7ffc0000 [ 225.447083][ T30] audit: type=1326 audit(1760368313.776:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 225.471445][ T30] audit: type=1326 audit(1760368313.776:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 225.493551][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.563888][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.605020][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.928975][ T30] audit: type=1326 audit(1760368314.316:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 226.105203][ T30] audit: type=1326 audit(1760368314.316:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 226.128433][ T30] audit: type=1326 audit(1760368314.316:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 226.164448][ T30] audit: type=1326 audit(1760368314.316:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 226.246466][ T30] audit: type=1326 audit(1760368314.316:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 226.389727][ T30] audit: type=1326 audit(1760368314.316:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 227.141508][ T5954] usb 1-1: USB disconnect, device number 32 [ 227.395286][ T43] usb 5-1: USB disconnect, device number 33 [ 227.585232][ T5954] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 227.769444][ T5954] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 227.798196][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.820037][ T5954] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 227.855308][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.053116][ T8241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.154276][ T5954] usb 1-1: config 0 descriptor?? [ 228.281651][ T8246] fuse: Bad value for 'fd' [ 228.406921][ T5954] usb 1-1: string descriptor 0 read error: -71 [ 228.446182][ T5954] usb 1-1: ucan: probing device on interface #0 [ 228.452548][ T5954] usb 1-1: ucan: invalid endpoint configuration [ 228.486631][ T5954] usb 1-1: ucan: probe failed; try to update the device firmware [ 228.588084][ T5954] usb 1-1: USB disconnect, device number 33 [ 229.557593][ T1555] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 229.585362][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.726959][ T1555] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 229.738466][ T1555] usb 2-1: config 5 has no interface number 0 [ 229.745220][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 229.761746][ T1555] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 229.787363][ T1555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.789388][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.825715][ T1555] usb 2-1: Product: syz [ 229.825787][ T43] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 229.835929][ T1555] usb 2-1: Manufacturer: syz [ 229.853018][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.862475][ T43] usb 4-1: Product: syz [ 229.867927][ T43] usb 4-1: Manufacturer: syz [ 229.874266][ T43] usb 4-1: SerialNumber: syz [ 229.879768][ T1555] usb 2-1: SerialNumber: syz [ 229.891317][ T43] usb 4-1: config 0 descriptor?? [ 229.910433][ T43] usb 4-1: bad CDC descriptors [ 229.918862][ T1555] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 229.936670][ T1555] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 229.936734][ T43] usb 4-1: unsupported MDLM descriptors [ 230.108814][ T5905] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 230.124291][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 230.154013][ T8262] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.165442][ T5918] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 230.175204][ T1555] usb 2-1: USB disconnect, device number 20 [ 230.184354][ T1555] ftdi_sio 2-1:5.3: device disconnected [ 230.195396][ T43] usb 4-1: USB disconnect, device number 15 [ 230.291801][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 230.302372][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.315450][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 230.323336][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.333330][ T5905] usb 5-1: config 0 has an invalid interface number: 165 but max is 0 [ 230.348241][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.358750][ T5905] usb 5-1: config 0 has no interface number 0 [ 230.365424][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 230.374385][ T5905] usb 5-1: config 0 interface 165 has no altsetting 0 [ 230.387513][ T5918] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1096, setting to 64 [ 230.399350][ T5918] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 230.413893][ T5905] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 230.425924][ T5918] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.439014][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.447742][ T5905] usb 5-1: Product: syz [ 230.452017][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 230.458995][ T5905] usb 5-1: Manufacturer: syz [ 230.464138][ T5905] usb 5-1: SerialNumber: syz [ 230.471594][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.481477][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.492251][ T5918] usb 3-1: Product: syz [ 230.497394][ T5905] usb 5-1: config 0 descriptor?? [ 230.502632][ T5918] usb 3-1: Manufacturer: syz [ 230.508996][ T5918] usb 3-1: SerialNumber: syz [ 230.520709][ T8282] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 230.529034][ T8282] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 230.710403][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.719544][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.756975][ T5905] comedi comedi5: Wrong number of endpoints [ 230.773941][ T5918] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 230.793312][ T5905] ni6501 5-1:0.165: driver 'ni6501' failed to auto-configure device. [ 230.822523][ T5918] usb 3-1: USB disconnect, device number 32 [ 230.835599][ T5905] usb 5-1: USB disconnect, device number 34 [ 230.948883][ T8300] tipc: Enabled bearer , priority 10 [ 231.384173][ T8313] netlink: 136 bytes leftover after parsing attributes in process `syz.2.627'. [ 231.468881][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.4.625'. [ 231.776328][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 232.452814][ T8343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.634'. [ 232.688715][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 232.885145][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 232.893658][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.942616][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.969485][ T5905] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 232.993766][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.020620][ T5905] usb 3-1: Product: syz [ 233.029165][ T5905] usb 3-1: Manufacturer: syz [ 233.038222][ T5905] usb 3-1: SerialNumber: syz [ 233.091448][ T5905] usb 3-1: config 0 descriptor?? [ 233.653684][ T8351] x_tables: unsorted underflow at hook 3 [ 233.903781][ T5905] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 233.923701][ T5905] peak_usb 3-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 233.945228][ T5954] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 233.996436][ T5905] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 234.011432][ T5905] usb 3-1: USB disconnect, device number 33 [ 234.225536][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 234.240818][ T5954] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 234.260806][ T5954] usb 1-1: config 0 has no interface number 0 [ 234.276244][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 234.282405][ T5954] usb 1-1: config 0 interface 89 has no altsetting 0 [ 234.468742][ T5954] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 234.483122][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.508239][ T5954] usb 1-1: Product: syz [ 234.512589][ T5954] usb 1-1: Manufacturer: syz [ 234.517349][ T5954] usb 1-1: SerialNumber: syz [ 234.527833][ T5954] usb 1-1: config 0 descriptor?? [ 234.538305][ T5954] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 234.549634][ T5954] em28xx 1-1:0.89: Video interface 89 found: bulk [ 234.695269][ T5905] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 234.855217][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 234.864193][ T5905] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 234.888647][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.915335][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.929847][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.941471][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.955162][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.966238][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.050387][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 235.143408][ T5954] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 235.211554][ T5905] usb 3-1: usb_control_msg returned -32 [ 235.259629][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 235.347752][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 235.549118][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 235.549134][ T30] audit: type=1326 audit(1760368324.216:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.577600][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.584736][ T30] audit: type=1326 audit(1760368324.216:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.609005][ T30] audit: type=1326 audit(1760368324.216:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.631098][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.756379][ T30] audit: type=1326 audit(1760368324.216:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.784449][ T30] audit: type=1326 audit(1760368324.216:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.931518][ T30] audit: type=1326 audit(1760368324.216:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7f8eec9 code=0x7ffc0000 [ 235.957597][ T30] audit: type=1326 audit(1760368324.216:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3a7f8eacb code=0x7ffc0000 [ 235.985179][ T30] audit: type=1326 audit(1760368324.216:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3a7f8eacb code=0x7ffc0000 [ 236.013119][ T30] audit: type=1326 audit(1760368324.216:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3a7f8eacb code=0x7ffc0000 [ 236.037070][ T30] audit: type=1326 audit(1760368324.216:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3a7f8eacb code=0x7ffc0000 [ 236.128122][ T8365] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 236.353945][ T8391] netlink: 'syz.1.650': attribute type 13 has an invalid length. [ 236.477793][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 236.807349][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.151706][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.266703][ T5954] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 237.276394][ T5954] em28xx 1-1:0.89: board has no eeprom [ 237.369256][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.408721][ T24] usb 3-1: USB disconnect, device number 34 [ 237.435254][ T5954] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 237.442604][ T5954] em28xx 1-1:0.89: analog set to bulk mode. [ 237.774044][ T1555] em28xx 1-1:0.89: Registering V4L2 extension [ 238.148275][ T8411] usb 1-1: USB disconnect, device number 34 [ 238.170846][ T1555] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 238.190338][ T8411] em28xx 1-1:0.89: Disconnecting em28xx [ 238.209656][ T1555] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 238.243183][ T1555] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 238.260351][ T1555] em28xx 1-1:0.89: No AC97 audio processor [ 238.291524][ T1555] usb 1-1: Decoder not found [ 238.313617][ T1555] em28xx 1-1:0.89: failed to create media graph [ 238.350742][ T1555] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 238.401953][ T1555] em28xx 1-1:0.89: Registering snapshot button... [ 238.404536][ T8391] tipc: Resetting bearer [ 238.432398][ T1555] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input20 [ 238.512236][ T1555] em28xx 1-1:0.89: Remote control support is not available for this card. [ 238.531951][ T8409] netlink: 96 bytes leftover after parsing attributes in process `syz.4.652'. [ 238.551120][ T8411] em28xx 1-1:0.89: Closing input extension [ 238.561205][ T8411] em28xx 1-1:0.89: Deregistering snapshot button [ 238.610987][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.634944][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.714595][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.746256][ T8411] em28xx 1-1:0.89: Freeing device [ 238.785888][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.110531][ T8423] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 239.325130][ T8423] usb 2-1: Using ep0 maxpacket: 32 [ 239.371918][ T8423] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 239.383385][ T8423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.402632][ T8423] usb 2-1: config 0 descriptor?? [ 239.613050][ T8423] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 239.784914][ T8423] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.808977][ T8423] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 239.836176][ T8423] usb 2-1: media controller created [ 239.861207][ T8423] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.274203][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'. [ 240.360902][ T8423] DVB: Unable to find symbol dib7000p_attach() [ 240.391174][ T8423] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 240.505165][ T8423] rc_core: IR keymap rc-dib0700-rc5 not found [ 240.505996][ T8458] syzkaller0: entered promiscuous mode [ 240.517112][ T8423] Registered IR keymap rc-empty [ 240.531684][ T8423] dvb-usb: could not initialize remote control. [ 240.541831][ T8423] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 240.563557][ T8423] usb 2-1: USB disconnect, device number 21 [ 240.572232][ T8458] syzkaller0: entered allmulticast mode [ 240.752675][ T8423] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 240.762504][ T8424] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 240.939047][ T8424] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 240.947983][ T8424] usb 4-1: can't read configurations, error -61 [ 241.224100][ T8424] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 241.547173][ T8424] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.555530][ T8424] usb 4-1: can't read configurations, error -61 [ 241.573156][ T8424] usb usb4-port1: attempt power cycle [ 241.918879][ T8424] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.956989][ T8424] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 241.964727][ T8424] usb 4-1: can't read configurations, error -61 [ 242.115510][ T8424] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.160808][ T8424] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 242.173481][ T8424] usb 4-1: can't read configurations, error -61 [ 242.185339][ T8424] usb usb4-port1: unable to enumerate USB device [ 243.308074][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.175156][ T8424] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.406879][ T8424] usb 4-1: Using ep0 maxpacket: 16 [ 244.414409][ T8424] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.442729][ T8424] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.529597][ T8424] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.538914][ T8424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.763671][ T8424] usb 4-1: Product: syz [ 244.771866][ T8424] usb 4-1: Manufacturer: syz [ 244.792733][ T8424] usb 4-1: SerialNumber: syz [ 245.105177][ T5955] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 245.255464][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 245.272165][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.272213][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.272232][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 245.272253][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.283283][ T5955] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.283312][ T5955] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.283331][ T5955] usb 2-1: Manufacturer: syz [ 245.327217][ T5955] usb 2-1: config 0 descriptor?? [ 245.465685][ T8424] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 245.665178][ T8530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 245.679711][ T8530] ip6gretap1: entered promiscuous mode [ 245.771670][ T8530] ip6gretap1: entered allmulticast mode [ 245.885457][ T8530] batman_adv: batadv0: Adding interface: ip6gretap1 [ 245.903345][ T8530] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.013969][ T8530] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 246.080290][ T8424] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.093708][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.118998][ T8424] usb 4-1: USB disconnect, device number 20 [ 246.538522][ T8424] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 246.675130][ T8424] usb 4-1: device descriptor read/64, error -71 [ 246.855378][ T5955] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 246.955779][ T8424] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 247.115303][ T8424] usb 4-1: device descriptor read/64, error -71 [ 247.137572][ T8518] bond0: option xmit_hash_policy: invalid value (14) [ 247.226283][ T8424] usb usb4-port1: attempt power cycle [ 247.584181][ T1555] usb 2-1: USB disconnect, device number 22 [ 247.605218][ T8424] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 247.626362][ T8424] usb 4-1: device descriptor read/8, error -71 [ 247.865151][ T8424] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.941094][ T8424] usb 4-1: device descriptor read/8, error -71 [ 248.065560][ T8424] usb usb4-port1: unable to enumerate USB device [ 248.537795][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 248.565533][ T8424] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 248.705314][ T8424] usb 5-1: device descriptor read/64, error -71 [ 248.845405][ T8425] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 248.953775][ T8424] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 248.995135][ T8425] usb 3-1: Using ep0 maxpacket: 16 [ 249.002519][ T8425] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.010774][ T8425] usb 3-1: config 0 has no interface number 0 [ 249.025779][ T8425] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.053819][ T8425] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.066083][ T8425] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.079139][ T8425] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 249.088359][ T8424] usb 5-1: device descriptor read/64, error -71 [ 249.095207][ T8425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.139896][ T8425] usb 3-1: config 0 descriptor?? [ 249.195722][ T8424] usb usb5-port1: attempt power cycle [ 249.285762][ T8426] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 249.377302][ T8602] program syz.3.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.445963][ T8426] usb 1-1: Using ep0 maxpacket: 8 [ 249.456911][ T8426] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 249.467580][ T8426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.476508][ T8426] usb 1-1: Product: syz [ 249.480996][ T8426] usb 1-1: Manufacturer: syz [ 249.487246][ T8426] usb 1-1: SerialNumber: syz [ 249.496254][ T8426] usb 1-1: config 0 descriptor?? [ 249.545147][ T8424] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 249.573925][ T8424] usb 5-1: device descriptor read/8, error -71 [ 249.588377][ T8425] holtek_mouse 0003:04D9:A072.0010: item fetching failed at offset 3/4 [ 249.598559][ T8425] holtek_mouse 0003:04D9:A072.0010: hid parse failed: -22 [ 249.606509][ T8425] holtek_mouse 0003:04D9:A072.0010: probe with driver holtek_mouse failed with error -22 [ 249.709975][ T8426] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 249.770743][ T8425] usb 3-1: USB disconnect, device number 36 [ 249.835419][ T8424] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 249.858099][ T8424] usb 5-1: device descriptor read/8, error -71 [ 249.977422][ T8424] usb usb5-port1: unable to enumerate USB device [ 250.359732][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 250.623703][ T8615] tipc: Enabling of bearer rejected, failed to enable media [ 250.865162][ T1555] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.995180][ T1555] usb 4-1: device descriptor read/64, error -71 [ 251.132791][ T8619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.706'. [ 251.167511][ T8426] gspca_sunplus: reg_r err -71 [ 251.192999][ T8426] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 251.216097][ T8426] usb 1-1: USB disconnect, device number 35 [ 251.235154][ T1555] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 251.339387][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.708'. [ 251.375191][ T1555] usb 4-1: device descriptor read/64, error -71 [ 251.485913][ T1555] usb usb4-port1: attempt power cycle [ 251.762292][ T8636] netlink: 324 bytes leftover after parsing attributes in process `syz.4.713'. [ 251.825728][ T1555] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 251.857597][ T1555] usb 4-1: device descriptor read/8, error -71 [ 252.109362][ T8640] netlink: 1056 bytes leftover after parsing attributes in process `syz.1.715'. [ 252.118617][ T1555] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 252.129178][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.715'. [ 252.156858][ T1555] usb 4-1: device descriptor read/8, error -71 [ 252.275388][ T1555] usb usb4-port1: unable to enumerate USB device [ 252.805264][ T1555] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 253.097892][ T1555] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.115409][ T1555] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 253.124610][ T1555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.160185][ T1555] usb 2-1: config 0 descriptor?? [ 254.760750][ T8681] netlink: 10 bytes leftover after parsing attributes in process `syz.3.726'. [ 255.029714][ T8678] netlink: 136 bytes leftover after parsing attributes in process `syz.3.726'. [ 255.070889][ T8678] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 255.569346][ T8684] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 255.645610][ T8684] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 255.680835][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.841960][ T8690] tipc: Started in network mode [ 255.862435][ T8690] tipc: Node identity fac2f7355d0a, cluster identity 4711 [ 255.881555][ T8690] tipc: Enabled bearer , priority 0 [ 255.902682][ T8691] syzkaller0: entered promiscuous mode [ 255.935349][ T8691] syzkaller0: entered allmulticast mode [ 256.022787][ T8690] tipc: Resetting bearer [ 256.034611][ T8689] tipc: Resetting bearer [ 256.056716][ T8689] tipc: Disabling bearer [ 256.171177][ T1555] usb 2-1: USB disconnect, device number 23 [ 257.066400][ T8719] netlink: 96 bytes leftover after parsing attributes in process `syz.4.738'. [ 257.172015][ T8721] loop8: detected capacity change from 0 to 8 [ 257.218859][ T8721] Dev loop8: unable to read RDB block 8 [ 257.248496][ T8721] loop8: unable to read partition table [ 257.278402][ T8721] loop8: partition table beyond EOD, truncated [ 257.291165][ T8721] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 258.598144][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 258.749121][ T8737] bond1: option ad_actor_sys_prio: invalid value (0) [ 258.794452][ T8737] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 258.898562][ T8737] bond1 (unregistering): Released all slaves [ 259.596439][ T8737] netlink: 'syz.3.743': attribute type 2 has an invalid length. [ 260.315486][ T8425] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 260.485147][ T5955] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 260.497023][ T8425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.508433][ T8426] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 260.529424][ T8425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.550638][ T8425] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 260.561290][ T8425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.584290][ T8425] usb 5-1: config 0 descriptor?? [ 260.684957][ T5955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 260.700376][ T8426] usb 3-1: Using ep0 maxpacket: 8 [ 260.701531][ T5955] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 260.723577][ T5955] usb 4-1: can't read configurations, error -71 [ 260.730880][ T8426] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 260.743737][ T8426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.763412][ T8426] usb 3-1: config 0 descriptor?? [ 260.865429][ T1555] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 261.011350][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.015424][ T1555] usb 1-1: Using ep0 maxpacket: 16 [ 261.022857][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.026759][ T1555] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.038713][ T8425] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 261.062560][ T8425] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 261.065147][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.071116][ T8425] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 261.088796][ T8425] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 261.099067][ T1555] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.102243][ T8425] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 261.109365][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.129578][ T1555] usb 1-1: Product: syz [ 261.133774][ T1555] usb 1-1: Manufacturer: syz [ 261.138626][ T1555] usb 1-1: SerialNumber: syz [ 261.139252][ T8425] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 261.147305][ T1555] usb 1-1: config 0 descriptor?? [ 261.164540][ T1555] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.176686][ T1555] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 261.197571][ T8426] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 261.235100][ T8426] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 261.253917][ T8425] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 9: -32 [ 261.274201][ T8426] asix 3-1:0.0: probe with driver asix failed with error -32 [ 261.290666][ T8425] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -32 [ 261.316084][ T8425] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 261.324807][ T8425] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 261.357800][ T8425] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -32 [ 261.392865][ T8425] usb 5-1: USB disconnect, device number 39 [ 261.768638][ T1555] em28xx 1-1:0.0: chip ID is em2874 [ 261.932943][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.955152][ T5955] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 262.109635][ T5955] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 262.118210][ T5955] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 262.129633][ T5955] usb 4-1: config 8 has no interface number 0 [ 262.135866][ T5955] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.166461][ T5955] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 262.175965][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.183952][ T5955] usb 4-1: Product: syz [ 262.188382][ T5955] usb 4-1: Manufacturer: syz [ 262.192987][ T5955] usb 4-1: SerialNumber: syz [ 262.345261][ T8425] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 262.503274][ T8425] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 262.513053][ T8425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.521804][ T8425] usb 2-1: Product: syz [ 262.526674][ T8425] usb 2-1: Manufacturer: syz [ 262.531307][ T8425] usb 2-1: SerialNumber: syz [ 262.540227][ T8425] usb 2-1: config 0 descriptor?? [ 262.552858][ T8425] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 263.293426][ T8426] usb 3-1: USB disconnect, device number 37 [ 263.363422][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 263.476646][ T8425] gspca_sunplus: reg_r err -110 [ 263.482244][ T8425] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 263.589415][ T8425] usb 1-1: USB disconnect, device number 36 [ 263.622582][ T8425] em28xx 1-1:0.0: Disconnecting em28xx [ 263.633845][ T8425] em28xx 1-1:0.0: Freeing device [ 263.690592][ T8805] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 263.708689][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 263.708706][ T30] audit: type=1326 audit(1760368352.396:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.750953][ T8426] usb 2-1: USB disconnect, device number 24 [ 263.765936][ T30] audit: type=1326 audit(1760368352.396:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.790652][ T30] audit: type=1326 audit(1760368352.396:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.829845][ T8808] netlink: 48 bytes leftover after parsing attributes in process `syz.0.762'. [ 263.846530][ T30] audit: type=1326 audit(1760368352.406:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.869538][ T30] audit: type=1326 audit(1760368352.406:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.892331][ T30] audit: type=1326 audit(1760368352.426:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.914964][ T30] audit: type=1326 audit(1760368352.426:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.955834][ T30] audit: type=1326 audit(1760368352.426:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 263.980111][ T30] audit: type=1326 audit(1760368352.426:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 264.008994][ T30] audit: type=1326 audit(1760368352.426:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff667d8eec9 code=0x7ffc0000 [ 264.146578][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.766'. [ 264.357048][ T5955] usb 4-1: USB disconnect, device number 31 [ 264.528145][ T8821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.770'. [ 264.696513][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 264.940794][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 265.005216][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.773'. [ 265.385210][ T8425] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 265.545922][ T8425] usb 3-1: Using ep0 maxpacket: 8 [ 265.560155][ T8425] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 265.572323][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.625152][ T8425] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.663364][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.707881][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.718908][ T8426] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 265.744316][ T8425] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 265.752332][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.774945][ T8425] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.799785][ T8855] netlink: 116 bytes leftover after parsing attributes in process `syz.0.781'. [ 265.821344][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.848266][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.935136][ T8426] usb 2-1: Using ep0 maxpacket: 16 [ 265.948475][ T8425] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 265.980480][ T8426] usb 2-1: config 0 has no interfaces? [ 265.993283][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.005481][ T8426] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 266.025089][ T8426] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 266.084441][ T8425] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.115234][ T8426] usb 2-1: Manufacturer: syz [ 266.126517][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.159398][ T8426] usb 2-1: config 0 descriptor?? [ 266.175157][ T1555] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 266.175155][ T8425] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.241178][ T8425] usb 3-1: string descriptor 0 read error: -22 [ 266.255272][ T8425] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.276305][ T8425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.330456][ T8425] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.354103][ T1555] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 266.385418][ T1555] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.434306][ T1555] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.459745][ T1555] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 266.498597][ T1555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.549423][ T1555] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 266.599054][ T1555] usb 1-1: no configuration chosen from 1 choice [ 266.775595][ T8424] usb 3-1: USB disconnect, device number 38 [ 266.905288][ T1555] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 267.056594][ T1555] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 267.066808][ T1555] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.075674][ T1555] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 267.084789][ T1555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.092901][ T1555] usb 4-1: Product: syz [ 267.097144][ T1555] usb 4-1: Manufacturer: syz [ 267.101734][ T1555] usb 4-1: SerialNumber: syz [ 267.108832][ T1555] usb 4-1: config 0 descriptor?? [ 267.114556][ T8866] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 267.125881][ T1555] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 267.133622][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 267.142590][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 267.151804][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 267.159601][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 267.167305][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 267.174996][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 267.183859][ T1555] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 267.193200][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 267.201224][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 267.208959][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 267.216894][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 267.224622][ T1555] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 267.235121][ T1555] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 267.875128][ T1555] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 268.025120][ T1555] usb 3-1: Using ep0 maxpacket: 8 [ 268.031211][ T1555] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 268.041020][ T1555] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.048841][ T1555] usb 3-1: can't read configurations, error -61 [ 268.195203][ T1555] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 268.208421][ T8424] usb 2-1: USB disconnect, device number 25 [ 268.345170][ T1555] usb 3-1: Using ep0 maxpacket: 8 [ 268.351265][ T1555] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 268.361058][ T1555] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.368822][ T1555] usb 3-1: can't read configurations, error -61 [ 268.377477][ T1555] usb usb3-port1: attempt power cycle [ 268.423307][ T8425] usb 1-1: USB disconnect, device number 37 [ 268.588672][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.793'. [ 268.615712][ T8424] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 268.715329][ T1555] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 268.745766][ T1555] usb 3-1: Using ep0 maxpacket: 8 [ 268.751206][ T8423] usb 4-1: USB disconnect, device number 32 [ 268.751739][ T1555] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 268.767196][ T1555] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.774762][ T8423] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 268.774790][ T1555] usb 3-1: can't read configurations, error -61 [ 268.807350][ T8424] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.828982][ T8423] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 268.848313][ T8424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.879192][ T8423] keyspan 4-1:0.0: device disconnected [ 268.887740][ T8424] usb 2-1: config 0 descriptor?? [ 268.907360][ T8424] cp210x 2-1:0.0: cp210x converter detected [ 268.923671][ T8894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.795'. [ 269.055346][ T1555] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 269.075875][ T1555] usb 3-1: Using ep0 maxpacket: 8 [ 269.094215][ T1555] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 269.103579][ T8424] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 269.112436][ T8424] cp210x 2-1:0.0: querying part number failed [ 269.112656][ T1555] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 269.185473][ T8424] usb 2-1: cp210x converter now attached to ttyUSB0 [ 269.195171][ T1555] usb 3-1: can't read configurations, error -61 [ 269.279993][ T1555] usb usb3-port1: unable to enumerate USB device [ 270.720665][ T8919] mmap: syz.2.802 (8919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 271.339516][ T8423] usb 2-1: USB disconnect, device number 26 [ 271.564775][ T8933] fuse: Unknown parameter 'roomode' [ 271.616338][ T8423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.639872][ T8423] cp210x 2-1:0.0: device disconnected [ 272.235258][ T8423] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 272.406583][ T8423] usb 2-1: config 0 has no interfaces? [ 272.417895][ T8423] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 272.429456][ T8423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.453338][ T8423] usb 2-1: Product: syz [ 272.468267][ T8423] usb 2-1: Manufacturer: syz [ 272.488464][ T8423] usb 2-1: SerialNumber: syz [ 272.520790][ T8423] usb 2-1: config 0 descriptor?? [ 272.711457][ T8954] netem: incorrect ge model size [ 272.727870][ T8954] netem: change failed [ 273.056888][ T1555] usb 2-1: USB disconnect, device number 27 [ 275.805136][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 275.975183][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 275.982637][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.007617][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.039101][ T9025] kvm: pic: non byte write [ 276.073045][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.083002][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.091524][ T9] usb 5-1: Product: syz [ 276.101047][ T9] usb 5-1: Manufacturer: syz [ 276.128990][ T9] usb 5-1: SerialNumber: syz [ 276.149705][ T9] usb 5-1: config 0 descriptor?? [ 276.180508][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 276.215321][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 276.380154][ T9019] tipc: Started in network mode [ 276.392745][ T9019] tipc: Node identity ee512bcffa0d, cluster identity 4711 [ 276.445720][ T9019] tipc: Enabled bearer , priority 10 [ 276.857379][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 276.864393][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 277.083305][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 277.456363][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 277.487086][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 277.560923][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 277.575380][ T1555] tipc: Node number set to 341584847 [ 277.935190][ T5955] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 278.105174][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 278.112123][ T5955] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.122522][ T5955] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.143850][ T5955] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.193001][ T5955] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 278.274825][ T5955] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 278.303442][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.320907][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.336184][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.349723][ T5955] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 278.384176][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.412446][ T5955] usb 3-1: config 0 descriptor?? [ 278.486567][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 278.493930][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 278.501171][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 278.513107][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 278.559203][ T9] usb 5-1: USB disconnect, device number 40 [ 279.090459][ T9096] fuse: Bad value for 'fd' [ 279.098411][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.109563][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.115145][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 279.127271][ T5956] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 279.195203][ T1555] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 279.295198][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 279.301286][ T9] usb 5-1: no configurations [ 279.306043][ T9] usb 5-1: can't read configurations, error -22 [ 279.313091][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.323852][ T5956] usb 2-1: config 0 has no interfaces? [ 279.332812][ T5956] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 279.342055][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.350178][ T1555] usb 1-1: Using ep0 maxpacket: 8 [ 279.355621][ T5956] usb 2-1: Product: syz [ 279.359818][ T5956] usb 2-1: Manufacturer: syz [ 279.364499][ T5956] usb 2-1: SerialNumber: syz [ 279.371100][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 279.383470][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 279.393961][ T5956] usb 2-1: config 0 descriptor?? [ 279.411366][ T1555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 279.423190][ T1555] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8 [ 279.433131][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.441552][ T1555] usb 1-1: Product: syz [ 279.446005][ T1555] usb 1-1: Manufacturer: syz [ 279.450615][ T1555] usb 1-1: SerialNumber: syz [ 279.455319][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 279.466789][ T1555] usb 1-1: config 0 descriptor?? [ 279.474949][ T1555] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 279.615275][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 279.641437][ T9] usb 5-1: no configurations [ 279.653271][ T9] usb 5-1: can't read configurations, error -22 [ 279.668362][ T9] usb usb5-port1: attempt power cycle [ 279.683142][ T8424] usb 1-1: USB disconnect, device number 38 [ 280.019113][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 280.051762][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 280.057992][ T9] usb 5-1: no configurations [ 280.062923][ T9] usb 5-1: can't read configurations, error -22 [ 280.196791][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 280.229622][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 280.241912][ T9] usb 5-1: no configurations [ 280.250930][ T9] usb 5-1: can't read configurations, error -22 [ 280.258890][ T9] usb usb5-port1: unable to enumerate USB device [ 280.700307][ T5955] usbhid 3-1:0.0: can't add hid device: -71 [ 280.724467][ T5955] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 280.758547][ T5955] usb 3-1: USB disconnect, device number 43 [ 280.837820][ T9] usb 2-1: USB disconnect, device number 28 [ 281.259288][ T5955] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 281.418353][ T5955] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 281.428924][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.439428][ T5955] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.448817][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.456911][ T5955] usb 3-1: SerialNumber: syz [ 281.759306][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.853'. [ 281.896329][ T5956] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 281.909831][ T5955] usb 3-1: 0:2 : does not exist [ 281.944334][ T5955] usb 3-1: USB disconnect, device number 44 [ 282.059041][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.594896][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 282.603191][ T5956] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 282.612358][ T5956] usb 1-1: config 0 has no interface number 0 [ 282.646977][ T9134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 282.666671][ T5956] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 282.688236][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.775625][ T5956] usb 1-1: Product: syz [ 282.792825][ T5956] usb 1-1: Manufacturer: syz [ 282.818693][ T5956] usb 1-1: SerialNumber: syz [ 282.826946][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 282.837153][ T5956] usb 1-1: config 0 descriptor?? [ 282.845613][ T5956] smsc95xx v2.0.0 [ 282.874576][ T9137] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 282.886643][ T9137] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 283.221973][ T9141] netlink: 'syz.2.861': attribute type 13 has an invalid length. [ 283.375367][ T8395] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 283.535174][ T8395] usb 2-1: Using ep0 maxpacket: 16 [ 283.546908][ T8395] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 283.555389][ T8395] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.583371][ T8395] usb 2-1: config 0 has no interface number 0 [ 283.601729][ T8395] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 283.611706][ T8395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.628680][ T8395] usb 2-1: Product: syz [ 283.633947][ T8395] usb 2-1: Manufacturer: syz [ 283.644352][ T8395] usb 2-1: SerialNumber: syz [ 283.661094][ T8395] usb 2-1: config 0 descriptor?? [ 283.732778][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'. [ 283.854748][ T5956] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 283.901002][ T8395] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 283.918430][ T8395] uvcvideo 2-1:0.105: No valid video chain found. [ 284.086621][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.113524][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.196130][ T5956] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 284.263711][ T5956] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 284.293751][ T5956] usb 1-1: USB disconnect, device number 39 [ 284.384339][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'. [ 284.757590][ T9169] netlink: 96 bytes leftover after parsing attributes in process `syz.2.870'. [ 284.992768][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.121077][ T9175] netlink: 'syz.4.869': attribute type 13 has an invalid length. [ 285.323552][ T9171] bond1 (unregistering): Released all slaves [ 285.375290][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 285.375307][ T30] audit: type=1326 audit(1760368374.046:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.0.872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2de3b8eec9 code=0x0 [ 285.457780][ T5956] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 285.747090][ T9182] fuse: Unknown parameter '0xffffffffffffffff' [ 285.899134][ T9175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.927650][ T8424] usb 2-1: USB disconnect, device number 29 [ 285.993447][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 286.001233][ T5956] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 286.071558][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.095113][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.124619][ T9187] netlink: 'syz.2.874': attribute type 7 has an invalid length. [ 286.133266][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 286.149658][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 286.168513][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 286.184020][ T5956] usb 4-1: config 168 interface 0 has no altsetting 0 [ 286.194283][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 286.203488][ T5956] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 286.215786][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.227421][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.246546][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 286.358748][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 286.400533][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 286.472501][ T5956] usb 4-1: config 168 interface 0 has no altsetting 0 [ 286.501781][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 286.516603][ T5956] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 286.553660][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.574184][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.598741][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 286.652306][ T5956] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 286.711075][ T5956] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 286.748148][ T9195] netlink: 'syz.1.877': attribute type 28 has an invalid length. [ 286.776668][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 286.794668][ T5956] usb 4-1: config 168 interface 0 has no altsetting 0 [ 286.817992][ T5956] usb 4-1: string descriptor 0 read error: -22 [ 286.824601][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 286.834492][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.888042][ T5956] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 287.129892][ T8395] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 287.279211][ T5956] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 287.307165][ T8395] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.319035][ T8395] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.485426][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 287.491826][ T8395] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.503018][ T5956] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.511358][ T5956] usb 2-1: config 0 has no interface number 0 [ 287.537065][ T5956] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 287.570630][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.153144][ T5955] usb 4-1: USB disconnect, device number 33 [ 288.178983][ T5956] usb 2-1: Product: syz [ 288.198999][ T8395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.207645][ T5956] usb 2-1: Manufacturer: syz [ 288.212369][ T5956] usb 2-1: SerialNumber: syz [ 288.219760][ T9197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.230213][ T8395] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.241251][ T5956] usb 2-1: config 0 descriptor?? [ 288.293010][ T5956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 288.454617][ T8423] usb 1-1: USB disconnect, device number 40 [ 288.508241][ T5956] gspca_spca1528: reg_w err -71 [ 288.734517][ T30] audit: type=1326 audit(1760368377.256:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 288.808037][ T5956] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 288.840314][ T5956] usb 2-1: USB disconnect, device number 30 [ 288.848986][ T30] audit: type=1326 audit(1760368377.256:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 288.925812][ T30] audit: type=1326 audit(1760368377.256:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.105144][ T8423] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 289.129971][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 289.166256][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 289.385588][ T8423] usb 1-1: Using ep0 maxpacket: 8 [ 289.422021][ T8423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 289.446060][ T30] audit: type=1326 audit(1760368377.256:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.475378][ T8423] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 289.686057][ T30] audit: type=1326 audit(1760368377.256:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.708670][ T30] audit: type=1326 audit(1760368377.256:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.736583][ T30] audit: type=1326 audit(1760368377.266:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.766678][ T30] audit: type=1326 audit(1760368377.266:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.819932][ T8423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.825120][ T30] audit: type=1326 audit(1760368377.266:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359558eec9 code=0x7ffc0000 [ 289.994690][ T8423] usb 1-1: Product: syz [ 290.042658][ T8423] usb 1-1: Manufacturer: syz [ 290.091635][ T8423] usb 1-1: SerialNumber: syz [ 290.119444][ T8423] usb 1-1: config 0 descriptor?? [ 290.155692][ T8423] usb 1-1: can't set config #0, error -71 [ 290.200604][ T8423] usb 1-1: USB disconnect, device number 41 [ 290.998452][ T9250] netlink: 'syz.3.887': attribute type 13 has an invalid length. [ 291.315526][ T8395] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 291.466655][ T8395] usb 2-1: config 0 has no interfaces? [ 291.472329][ T8395] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 291.515994][ T8423] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 291.548706][ T8395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.596044][ T8395] usb 2-1: config 0 descriptor?? [ 291.686991][ T8423] usb 5-1: No LPM exit latency info found, disabling LPM. [ 291.696297][ T8423] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 291.715386][ T8423] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 291.738596][ T8423] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt [ 291.778363][ T8423] usb 5-1: config 1 interface 0 has no altsetting 0 [ 292.223361][ T9275] team_slave_1: Caught tx_queue_len zero misconfig [ 292.495426][ T1555] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 292.648976][ T1555] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.664019][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 292.664037][ T30] audit: type=1326 audit(1760368381.346:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.0.899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f2de3b8eec9 code=0x0 [ 292.735426][ T1555] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.745412][ T1555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.766030][ T1555] usb 3-1: config 0 descriptor?? [ 292.778235][ T1555] pwc: Askey VC010 type 2 USB webcam detected. [ 293.186631][ T1555] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.194358][ T1555] pwc: recv_control_msg error -32 req 02 val 2700 [ 293.202279][ T1555] pwc: recv_control_msg error -32 req 02 val 2c00 [ 293.209461][ T1555] pwc: recv_control_msg error -32 req 04 val 1000 [ 293.216913][ T1555] pwc: recv_control_msg error -32 req 04 val 1300 [ 293.224360][ T1555] pwc: recv_control_msg error -32 req 04 val 1400 [ 293.233913][ T1555] pwc: recv_control_msg error -32 req 02 val 2000 [ 293.241586][ T1555] pwc: recv_control_msg error -32 req 02 val 2100 [ 293.249648][ T1555] pwc: recv_control_msg error -32 req 04 val 1500 [ 293.479862][ T1555] pwc: recv_control_msg error -71 req 02 val 2400 [ 293.493239][ T1555] pwc: recv_control_msg error -71 req 02 val 2600 [ 293.500737][ T1555] pwc: recv_control_msg error -71 req 02 val 2900 [ 293.508396][ T1555] pwc: recv_control_msg error -71 req 02 val 2800 [ 293.520933][ T1555] pwc: recv_control_msg error -71 req 04 val 1100 [ 293.534560][ T1555] pwc: recv_control_msg error -71 req 04 val 1200 [ 293.557518][ T1555] pwc: Registered as video103. [ 293.581584][ T1555] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 294.263471][ T1555] usb 3-1: USB disconnect, device number 45 [ 294.347170][ T8423] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.375132][ T8423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.397234][ T8423] usb 5-1: Product: 慀ꍯ澮葇Ͼᢸ蝳᥌뻄裉薰琺蚝씶幻䀼臭褐ꏉꔕ쀚䗪 [ 294.493431][ T8423] usb 5-1: Manufacturer: င [ 294.517031][ T8423] usb 5-1: can't set config #1, error -71 [ 294.559465][ T8423] usb 5-1: USB disconnect, device number 45 [ 294.565536][ T8426] usb 2-1: USB disconnect, device number 31 [ 295.500973][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 296.587513][ T9341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.459738][ T9350] @: renamed from vlan0 [ 297.795305][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 298.180667][ T9355] bond0: (slave dummy0): Releasing backup interface [ 298.439545][ T5955] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 298.510668][ T9370] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 298.606335][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 298.613457][ T5955] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 298.634219][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.674238][ T5955] usb 1-1: config 0 descriptor?? [ 298.857356][ T9388] bridge0: entered promiscuous mode [ 298.909960][ T5955] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 298.923975][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.939925][ T5955] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 298.955603][ T5955] usb 1-1: media controller created [ 299.000155][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.134412][ T9398] fuse: Bad value for 'fd' [ 299.200297][ T9397] syz.4.929 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 299.221846][ T5955] DVB: Unable to find symbol dib7000p_attach() [ 299.238874][ T5955] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 299.355381][ T5955] rc_core: IR keymap rc-dib0700-rc5 not found [ 299.366198][ T5955] Registered IR keymap rc-empty [ 299.374649][ T5955] dvb-usb: could not initialize remote control. [ 299.386018][ T5955] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 300.280830][ T30] audit: type=1326 audit(1760368388.966:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 300.310780][ T30] audit: type=1326 audit(1760368388.966:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 300.333005][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.340717][ T30] audit: type=1326 audit(1760368388.976:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 300.363031][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.371152][ T30] audit: type=1326 audit(1760368388.976:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef34f8eec9 code=0x7ffc0000 [ 300.394600][ T30] audit: type=1326 audit(1760368388.976:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef34f8d710 code=0x7ffc0000 [ 300.416805][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.439672][ T30] audit: type=1326 audit(1760368388.976:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 300.471823][ T30] audit: type=1326 audit(1760368388.976:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 300.497431][ T30] audit: type=1326 audit(1760368388.986:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 300.520464][ T30] audit: type=1326 audit(1760368388.986:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 300.543734][ T30] audit: type=1326 audit(1760368389.126:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef34f8eacb code=0x7ffc0000 [ 300.555400][ T8395] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 300.597338][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 300.705483][ T5955] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 300.714071][ T8395] usb 5-1: device descriptor read/64, error -71 [ 300.865152][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 300.871955][ T5955] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 300.880598][ T5955] usb 4-1: config 0 has no interface number 0 [ 300.887056][ T5955] usb 4-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 300.898529][ T5955] usb 4-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 300.912457][ T5955] usb 4-1: config 0 interface 11 has no altsetting 0 [ 300.921877][ T5955] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 300.931095][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.940404][ T5955] usb 4-1: Product: syz [ 300.944834][ T5955] usb 4-1: Manufacturer: syz [ 300.949788][ T5955] usb 4-1: SerialNumber: syz [ 300.958465][ T5955] usb 4-1: config 0 descriptor?? [ 300.965151][ T8395] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 300.995371][ T8426] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 301.105175][ T8395] usb 5-1: device descriptor read/64, error -71 [ 301.155282][ T8426] usb 2-1: Using ep0 maxpacket: 32 [ 301.162795][ T8426] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 301.173024][ T8426] usb 2-1: config 0 has no interface number 0 [ 301.177741][ T5955] usb 4-1: Expected 3 endpoints, found: 0 [ 301.179438][ T8426] usb 2-1: config 0 interface 12 has no altsetting 0 [ 301.196591][ T8426] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 301.210714][ T5955] usb 4-1: USB disconnect, device number 34 [ 301.215098][ T8426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.217722][ T8395] usb usb5-port1: attempt power cycle [ 301.225652][ T8426] usb 2-1: Product: syz [ 301.238723][ T8426] usb 2-1: Manufacturer: syz [ 301.246440][ T8426] usb 2-1: SerialNumber: syz [ 301.254195][ T8426] usb 2-1: config 0 descriptor?? [ 301.585487][ T8395] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 301.616392][ T8395] usb 5-1: device descriptor read/8, error -71 [ 301.855578][ T8395] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 301.887375][ T8395] usb 5-1: device descriptor read/8, error -71 [ 301.998470][ T8395] usb usb5-port1: unable to enumerate USB device [ 302.315139][ T8395] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 302.475467][ T8395] usb 4-1: Using ep0 maxpacket: 8 [ 302.482679][ T8395] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.491801][ T8395] usb 4-1: config 59 has an invalid interface number: 141 but max is 0 [ 302.500403][ T8395] usb 4-1: config 59 has no interface number 0 [ 302.507339][ T8395] usb 4-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 302.518885][ T8395] usb 4-1: config 59 interface 141 has no altsetting 0 [ 302.528099][ T8395] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 302.537466][ T8395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.545661][ T8395] usb 4-1: Product: syz [ 302.549886][ T8395] usb 4-1: Manufacturer: syz [ 302.554529][ T8395] usb 4-1: SerialNumber: syz [ 302.943810][ T8395] usbtest 4-1:59.141: couldn't get endpoints, -71 [ 302.951237][ T8395] usbtest 4-1:59.141: probe with driver usbtest failed with error -71 [ 302.973977][ T8395] usb 4-1: USB disconnect, device number 35 [ 303.578366][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 303.688785][ T8426] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 303.713637][ T8426] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 303.726460][ T8426] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 303.734119][ T8426] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 304.225103][ T8426] usb 2-1: USB disconnect, device number 32 [ 304.550725][ T8395] usb 1-1: USB disconnect, device number 42 [ 304.729189][ T8395] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 304.903886][ T1555] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 305.136314][ T1555] usb 4-1: Using ep0 maxpacket: 16 [ 305.179710][ T1555] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.203374][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 305.245244][ T1555] usb 4-1: config 0 interface 0 has no altsetting 0 [ 305.269085][ T1555] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 305.331802][ T1555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.354056][ T1555] usb 4-1: config 0 descriptor?? [ 305.649637][ T1555] usbhid 4-1:0.0: can't add hid device: -71 [ 305.661004][ T1555] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.674991][ T1555] usb 4-1: USB disconnect, device number 36 [ 305.865205][ T8423] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 305.969750][ T9501] loop6: detected capacity change from 0 to 524288000 [ 306.187008][ T8423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 306.198461][ T8423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.234626][ T8423] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 306.293313][ T8423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.337626][ T8423] usb 1-1: config 0 descriptor?? [ 306.593201][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.609307][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.305133][ T8424] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 307.456701][ T8424] usb 4-1: Using ep0 maxpacket: 32 [ 307.464658][ T8424] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 307.477452][ T8424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.506524][ T8424] usb 4-1: config 0 descriptor?? [ 307.722898][ T8424] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 307.735123][ T8425] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 307.751121][ T8424] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.768302][ T8424] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 307.775965][ T8424] usb 4-1: media controller created [ 307.804003][ T8424] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.815229][ T8426] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 307.873716][ T8424] DVB: Unable to find symbol dib7000p_attach() [ 307.881461][ T8424] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 307.917955][ T8425] usb 2-1: Using ep0 maxpacket: 32 [ 307.928401][ T8425] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.972339][ T8425] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 307.998492][ T8426] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.015451][ T8425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.024453][ T8426] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.031582][ T8425] usb 2-1: Product: syz [ 308.036177][ T8426] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 308.047985][ T8425] usb 2-1: Manufacturer: syz [ 308.056173][ T8424] rc_core: IR keymap rc-dib0700-rc5 not found [ 308.064228][ T8425] usb 2-1: SerialNumber: syz [ 308.069704][ T8426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.078002][ T8424] Registered IR keymap rc-empty [ 308.095159][ T8424] dvb-usb: could not initialize remote control. [ 308.102573][ T8425] usb 2-1: config 0 descriptor?? [ 308.110051][ T8424] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 308.120940][ T8426] usb 3-1: config 0 descriptor?? [ 308.128843][ T8425] usb 2-1: bad CDC descriptors [ 308.147898][ T8425] usb 2-1: unsupported MDLM descriptors [ 308.343440][ T8425] usb 2-1: USB disconnect, device number 33 [ 308.657245][ T8423] usbhid 1-1:0.0: can't add hid device: -71 [ 308.727342][ T8423] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 308.752246][ T9529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.760612][ T8423] usb 1-1: USB disconnect, device number 43 [ 308.766649][ T5955] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 308.890280][ T8426] usb 3-1: string descriptor 0 read error: -71 [ 308.921169][ T8426] uclogic 0003:5543:0047.0012: failed retrieving string descriptor #200: -71 [ 308.957698][ T8426] uclogic 0003:5543:0047.0012: failed retrieving pen parameters: -71 [ 308.988209][ T8426] uclogic 0003:5543:0047.0012: failed probing pen v2 parameters: -71 [ 309.018743][ T8426] uclogic 0003:5543:0047.0012: failed probing parameters: -71 [ 309.025457][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 309.034460][ T5955] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 309.043079][ T8426] uclogic 0003:5543:0047.0012: probe with driver uclogic failed with error -71 [ 309.052162][ T8426] usb 3-1: USB disconnect, device number 46 [ 309.102620][ T5955] usb 5-1: config 0 has no interface number 0 [ 309.136682][ T5955] usb 5-1: config 0 interface 29 has no altsetting 0 [ 309.154591][ T5955] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 309.174470][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.289557][ T5955] usb 5-1: Product: syz [ 309.293779][ T5955] usb 5-1: Manufacturer: syz [ 309.299013][ T5955] usb 5-1: SerialNumber: syz [ 309.307009][ T5955] usb 5-1: config 0 descriptor?? [ 309.532594][ T5955] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 309.707789][ T9555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.743616][ T5955] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 309.788415][ T5955] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 309.825202][ T5955] peak_usb 5-1:0.29 can0: sending command failure: -8 [ 310.024461][ T5955] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -8 [ 310.047954][ T9562] loop6: detected capacity change from 0 to 524288000 [ 310.124218][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.149899][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.289860][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.482845][ T9572] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 310.497671][ T9572] batman_adv: batadv0: Adding interface: ip6gretap1 [ 310.504311][ T9572] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.538675][ T9572] batman_adv: batadv0: Interface activated: ip6gretap1 [ 310.584396][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.388714][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.406402][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.605414][ T1555] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 311.661988][ T8426] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 311.805394][ T1555] usb 1-1: Using ep0 maxpacket: 32 [ 311.812758][ T1555] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.827109][ T1555] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 311.836593][ T1555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.887402][ T1555] usb 1-1: Product: syz [ 311.893163][ T1555] usb 1-1: Manufacturer: syz [ 311.906815][ T1555] usb 1-1: SerialNumber: syz [ 311.945952][ T1555] usb 1-1: config 0 descriptor?? [ 311.957311][ T1555] usb 1-1: bad CDC descriptors [ 311.966817][ T1555] usb 1-1: unsupported MDLM descriptors [ 312.115174][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 312.115193][ T30] audit: type=1326 audit(1760368400.796:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.1.984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3a7f8eec9 code=0x0 [ 312.169038][ T8423] usb 1-1: USB disconnect, device number 44 [ 313.075177][ T8423] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 313.215632][ T9539] ------------[ cut here ]------------ [ 313.221534][ T9539] usb 4-1: BOGUS control dir, pipe 80002580 doesn't match bRequestType c0 [ 313.300455][ T1555] usb 4-1: USB disconnect, device number 37 [ 313.312320][ T9539] WARNING: CPU: 0 PID: 9539 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 313.322596][ T9539] Modules linked in: [ 313.327382][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.4.970 Not tainted syzkaller #0 PREEMPT(full) [ 313.337275][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.347412][ T9539] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 313.353053][ T9539] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 313.373014][ T9539] RSP: 0018:ffffc9001bbf7820 EFLAGS: 00010246 [ 313.379140][ T9539] RAX: b368eaabbf17af00 RBX: ffff888035b71000 RCX: 0000000000080000 [ 313.387384][ T9539] RDX: ffffc9000d980000 RSI: 0000000000006fa4 RDI: 0000000000006fa5 [ 313.395424][ T9539] RBP: 1ffff110286da6e8 R08: 0000000000000003 R09: 0000000000000004 [ 313.403426][ T9539] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88805593c100 [ 313.411953][ T9539] R13: ffff8881436d3740 R14: 0000000080002580 R15: ffff8880290560e0 [ 313.420088][ T9539] FS: 00007fef35dba6c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 313.429995][ T9539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.437125][ T9539] CR2: 0000200000272030 CR3: 0000000047f94000 CR4: 00000000003526f0 [ 313.445786][ T9539] Call Trace: [ 313.449429][ T9539] [ 313.452380][ T9539] usb_start_wait_urb+0x114/0x4c0 [ 313.457487][ T9539] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 313.463099][ T9539] usb_control_msg+0x232/0x3e0 [ 313.468175][ T9539] dib0700_i2c_xfer+0xba7/0xf70 [ 313.473075][ T9539] ? __lock_acquire+0xab9/0xd20 [ 313.477970][ T9539] __i2c_transfer+0x874/0x2170 [ 313.482750][ T9539] ? i2c_transfer+0x120/0x3a0 [ 313.487755][ T9539] ? __pfx___i2c_transfer+0x10/0x10 [ 313.492968][ T9539] ? rt_mutex_lock_nested+0x172/0x1e0 [ 313.498422][ T9539] ? i2c_transfer+0x120/0x3a0 [ 313.503100][ T9539] i2c_transfer+0x25b/0x3a0 [ 313.507995][ T9539] ? __pfx_i2c_transfer+0x10/0x10 [ 313.513652][ T9539] ? _copy_from_user+0x94/0xb0 [ 313.518735][ T9539] i2cdev_ioctl_rdwr+0x460/0x740 [ 313.523723][ T9539] i2cdev_ioctl+0x64b/0x7f0 [ 313.528594][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.534358][ T9539] ? __fget_files+0x3a0/0x420 [ 313.540067][ T9539] ? __fget_files+0x2a/0x420 [ 313.544668][ T9539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.549889][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.554953][ T9539] __se_sys_ioctl+0xfc/0x170 [ 313.559626][ T9539] do_syscall_64+0xfa/0xfa0 [ 313.564171][ T9539] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.569723][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.575861][ T9539] ? clear_bhb_loop+0x60/0xb0 [ 313.580558][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.586901][ T9539] RIP: 0033:0x7fef34f8eec9 [ 313.591346][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.612246][ T9539] RSP: 002b:00007fef35dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.621222][ T9539] RAX: ffffffffffffffda RBX: 00007fef351e6090 RCX: 00007fef34f8eec9 [ 313.629996][ T9539] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 000000000000000a [ 313.634715][ T8423] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.639029][ T9539] RBP: 00007fef35011f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.658211][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.666664][ T9539] R13: 00007fef351e6128 R14: 00007fef351e6090 R15: 00007fef3530fa28 [ 313.674726][ T9539] [ 313.677879][ T9539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.685472][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.4.970 Not tainted syzkaller #0 PREEMPT(full) [ 313.695036][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.705932][ T9539] Call Trace: [ 313.709214][ T9539] [ 313.712182][ T9539] dump_stack_lvl+0x99/0x250 [ 313.716869][ T9539] ? __asan_memcpy+0x40/0x70 [ 313.721452][ T9539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.726643][ T9539] ? __pfx__printk+0x10/0x10 [ 313.731221][ T9539] vpanic+0x237/0x6d0 [ 313.735222][ T9539] ? __pfx_vpanic+0x10/0x10 [ 313.739724][ T9539] panic+0xb9/0xc0 [ 313.743957][ T9539] ? __pfx_panic+0x10/0x10 [ 313.748453][ T9539] __warn+0x31b/0x4b0 [ 313.752434][ T9539] ? usb_submit_urb+0x114d/0x18b0 [ 313.757624][ T9539] ? usb_submit_urb+0x114d/0x18b0 [ 313.762646][ T9539] report_bug+0x2be/0x4f0 [ 313.766965][ T9539] ? usb_submit_urb+0x114d/0x18b0 [ 313.772008][ T9539] ? usb_submit_urb+0x114d/0x18b0 [ 313.777073][ T9539] ? usb_submit_urb+0x114f/0x18b0 [ 313.782112][ T9539] handle_bug+0x84/0x160 [ 313.786356][ T9539] exc_invalid_op+0x1a/0x50 [ 313.790848][ T9539] asm_exc_invalid_op+0x1a/0x20 [ 313.795681][ T9539] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 313.801317][ T9539] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 313.821009][ T9539] RSP: 0018:ffffc9001bbf7820 EFLAGS: 00010246 [ 313.827071][ T9539] RAX: b368eaabbf17af00 RBX: ffff888035b71000 RCX: 0000000000080000 [ 313.835068][ T9539] RDX: ffffc9000d980000 RSI: 0000000000006fa4 RDI: 0000000000006fa5 [ 313.843048][ T9539] RBP: 1ffff110286da6e8 R08: 0000000000000003 R09: 0000000000000004 [ 313.851009][ T9539] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff88805593c100 [ 313.858967][ T9539] R13: ffff8881436d3740 R14: 0000000080002580 R15: ffff8880290560e0 [ 313.866953][ T9539] usb_start_wait_urb+0x114/0x4c0 [ 313.871983][ T9539] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 313.877617][ T9539] usb_control_msg+0x232/0x3e0 [ 313.882374][ T9539] dib0700_i2c_xfer+0xba7/0xf70 [ 313.887272][ T9539] ? __lock_acquire+0xab9/0xd20 [ 313.892112][ T9539] __i2c_transfer+0x874/0x2170 [ 313.896952][ T9539] ? i2c_transfer+0x120/0x3a0 [ 313.901712][ T9539] ? __pfx___i2c_transfer+0x10/0x10 [ 313.906918][ T9539] ? rt_mutex_lock_nested+0x172/0x1e0 [ 313.912271][ T9539] ? i2c_transfer+0x120/0x3a0 [ 313.916944][ T9539] i2c_transfer+0x25b/0x3a0 [ 313.921545][ T9539] ? __pfx_i2c_transfer+0x10/0x10 [ 313.926651][ T9539] ? _copy_from_user+0x94/0xb0 [ 313.931407][ T9539] i2cdev_ioctl_rdwr+0x460/0x740 [ 313.936363][ T9539] i2cdev_ioctl+0x64b/0x7f0 [ 313.940855][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.945869][ T9539] ? __fget_files+0x3a0/0x420 [ 313.950528][ T9539] ? __fget_files+0x2a/0x420 [ 313.955193][ T9539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.960295][ T9539] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 313.965297][ T9539] __se_sys_ioctl+0xfc/0x170 [ 313.969896][ T9539] do_syscall_64+0xfa/0xfa0 [ 313.974436][ T9539] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.979629][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.985682][ T9539] ? clear_bhb_loop+0x60/0xb0 [ 313.990359][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.996257][ T9539] RIP: 0033:0x7fef34f8eec9 [ 314.000670][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.020364][ T9539] RSP: 002b:00007fef35dba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.028765][ T9539] RAX: ffffffffffffffda RBX: 00007fef351e6090 RCX: 00007fef34f8eec9 [ 314.036721][ T9539] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 000000000000000a [ 314.044683][ T9539] RBP: 00007fef35011f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.052646][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.060604][ T9539] R13: 00007fef351e6128 R14: 00007fef351e6090 R15: 00007fef3530fa28 [ 314.068623][ T9539] [ 314.071942][ T9539] Kernel Offset: disabled [ 314.076257][ T9539] Rebooting in 86400 seconds..