last executing test programs: 29m10.373935266s ago: executing program 2 (id=130): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 29m7.853765916s ago: executing program 2 (id=134): kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xf4) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)}, {&(0x7f0000000140)}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setuid(0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) 29m6.553849223s ago: executing program 2 (id=137): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001d7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 29m6.375867135s ago: executing program 2 (id=138): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) 29m6.073778308s ago: executing program 2 (id=142): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket(0x1e, 0x1, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x48) 28m58.302546222s ago: executing program 2 (id=161): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 28m42.728550538s ago: executing program 32 (id=161): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 10m17.277651821s ago: executing program 1 (id=3157): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0xc, 0x2b, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x9, 0x0, @void}}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006111580000000000850000001a00000095000000000000006b791d5dc24e0c22ed4ba28f5a4c65bb723444ca661a1b40e832b11f4da5712b20b98abc21beb9ce47b27bea49956e994c432f117a16c23d25385f9aefeca8e271f769d920e4a61b20e678cbd7dc51be249bda2e8408532b05ccc28bbb6c9d9bfbc79999fd59a5402f64fc3391357cf20f7d2fcb44b79ed6277386eb30ac26f68a6a363c829ec535dde66e7cb08c48176ae451613927f64ef8470c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) 10m12.642538589s ago: executing program 1 (id=3167): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) 10m12.052768981s ago: executing program 1 (id=3171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@newqdisc={0x34, 0x24, 0x714, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x5, 0xfff3}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a1ab0000000000ba000005000000080003000a000596"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x4b4, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x21}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30e}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x400]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x32f, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6d}, @device_a, @device_b, @initial, {0x5, 0x24}, @value=@ver_80211n={0x0, 0x8, 0x1}}, 0x10, 0x68, @random=0x575, @void, @void, [{0xdd, 0xd4, "76738a86dbf1b22f9ac8c7b07ec89284e0f467764c891aff50ab89045a9e1c1f9b54cebd3656bc36cb05038ead49a4b424a6e8e2de6ba2b9c6d1b14e097090a61cec43af3a12d191644845f00833952fb6273f816347106767650fb3aedd5918fff35b38f3ecc17589167b4d54cb763473572c4e9a469160afccb03d4e7ea00642ca7ad0d89c16ed84954c8793827a65b7192782f62fcdef82ec0ebc8691212887e7091c2879311a4fe4b956dc853f114af51ea7c97b0ae1e3513c7792d233e197021801c2eb4a97355a7fb2b0f6e4c781c8fcda"}, {0xdd, 0x91, "973fd2aa63343691c1fd842e58fe7b4b793bc9a95ff712a8658485ed0a5a44fd994803e7c0dc13ab4e927a27398cee45a986f2c3a2ca2b6a37179d271cd64694d9b3d5b91d846aa0fe55c9d9215872b22aa1f74179a45db22e6961418c6188297b84db3f1e86bcdb2e7a8eb4b691786f716251fba2556026f1ca9a07e933f1e4a425170704992b1c387fbf43dc781ae1a7"}, {0xdd, 0x75, "c2c9887e59c1a4a5cd38687ec70dc202a9c6b2fd53128ae28a60a2b76c98ce479eed43ac3950e58061f63d694f087ef2267ba527a5c626a0256a4d6cb31e2dd34ab2e586ed7601c2ad0d2c2e437aedd564ff58158f9b7add96f9b7b8cf657108a2caab8b2d007fba1048b8a87c1b599a2f29bc6dd2"}, {0xdd, 0x3a, "fe85a00b45df996197f24ed00d6d09451c28500b7c6166b5f335503b4577b94b1ce2fcfae575333620527ef930be784c545807d5de29d187971b"}, {0xdd, 0xc8, "f4cf37290a8ae53fc4da1ea2060fad0c448d65bde45c9e7a5243b77f4f64f166bac78b2f18f4be9272b5e0ee071fb6b28792f06cafdf0c923abedb30b461e29d645520e2dbe5207e6decc886cd2cb0fc2de7369066921a3152f9315761e6a719ae8f62dc24f49f49cd1151b0f26b6622fafa6cc1f5035c7e3e491d500f7de9c9269495ba73c7cecd984e6efa5910d4ddcc05a8036d7ab4d4192de182280bfd86e1d13ab699cfa1b759f53b2a2f768c88e6c7c878dd8a17679b15af57206ab2cdf77a4f92ac5ea62d"}, {0xdd, 0x21, "2db1a32224ecc31c3e2d52908d31ed56e728137758f577266e95596b5a611abd91"}]}}, @NL80211_ATTR_FRAME={0xff, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xc}, @device_b, @device_b, @initial, {0x2, 0x4}}, 0x31, 0x2d, @random=0x1, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x3, 0x0, {0x1, 0x1ffd, 0x0, 0xe, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x1, 0x4}}, [{0xdd, 0xbf, "b1fd396574bed039ec73b1356fb4632d7ec8ac586cf4e4a05308267548549c10e2201e4e22240017f0ab0ba665be2b869f721e1797ae7a5c9f02dc2dca9f13c951291b95f6b036e2b49c9acda403b377dc45cf15adaeab048d5cd3d849e84b8ce8868b9a06aebb053808cdaf01ee59b724339ac49de548377fbdea8f04fc00182c5acb4fbc444f3f5374747db36010ede7c1c8e920ba65d3d8adf4fbd38c6108f02faaf47f00be730630a1aaa43eb4d6900eb444ac3641f9f0d8fece3e412f"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d2}]}, 0x4b4}}, 0x800) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 10m11.047523299s ago: executing program 1 (id=3173): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYRES32, @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m10.517642931s ago: executing program 1 (id=3174): socket$inet6(0xa, 0x6, 0x8000003) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x6c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x20, 0x121000}) io_uring_enter(r2, 0xeb5, 0x49e3, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000000508000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x20000851}, 0x4004c004) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7570646174652064656661756c7420757365723a6e657720002bc591dfc7209b37d6fe7905f875e7256846f2983fc9179b7cc3bb41d602ea2bcb5f449d5bdafe373278111ae4afcd94aa5f8995711147a1a397dfec724daa6c98cd651fa7c32a9a70cfebcbb65d06759c0e649dbfb9c22c58114c11a74b8a3d2f4e3cb382abb346f0ab68644d5eacd3c24d1f3704a77d2ebcbaf933d3e62418"], 0x19, 0xfffffffffffffffe) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_open_dev$radio(&(0x7f0000000640), 0x0, 0x2) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r8, 0x0, 0x2404c011) gettid() 10m8.352371903s ago: executing program 1 (id=3178): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) 9m53.102086938s ago: executing program 33 (id=3178): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) lstat(&(0x7f00000000c0)='./file1\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) ftruncate(0xffffffffffffffff, 0x8800000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f30d9eec1935b7b88c7b9e794eed30b622f1045b921055c7647c4396d5163e532cee80669b376006dd76b9bd738da323548df98fc79d6f93ddeb57124416830e9e3307e1f0b265e1a5ebfd085281bc8169ec4976c84fb2f412c7610eb5773233ba2bc3190c6e71fc89ef6a2beb7856118b59e51e9d2f3f8128eda49531181e368413136b1b9d92068f049148c74afdcac45c8eb8c4365e0329b00d552a406c1d51262a2b2b015e10227fc7eeb03b26f23aeba362974ec2ec1202debd78dd5d388abd47708fde7941755f66aec1d", 0xce, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) 13.385476663s ago: executing program 5 (id=4522): syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109029e0003010230000904000000010100000a24010600310201020b2407030100077cf5354e08240504032920ec082405024045cf7b0a2407010400008c8e58090401000001020000090c0101010102000009050109ff030803dd072501020cf7ff090402000001020000090402010101020000072401800f04000b24020101040901ec27ab08240201070405070905820910"], 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 9.554389228s ago: executing program 5 (id=4530): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYRES32, @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 9.403467913s ago: executing program 4 (id=4532): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000480)=0x10000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2682, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0xc8, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @mpls={[{0x2}], @ipv4=@tcp={{0x2c, 0x4, 0x2, 0x4, 0x137, 0x68, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x34, 0x91, 0x3, 0x8, [{@private=0xa010102, 0x2}, {@remote, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0xfffffffd}, {@loopback, 0x2}, {@empty, 0x28}]}, @ssrr={0x89, 0x3, 0xc7}, @lsrr={0x83, 0x17, 0xee, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xd9, [@multicast2, @empty, @multicast1, @multicast1, @broadcast, @remote, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x0, [{@rand_addr=0x64010100, 0x53}, {@multicast2, 0x28}, {@private=0xa010100, 0xdc77}, {@empty, 0x6}, {@multicast2}]}]}}, {{0x4e21, 0x4e21, 0x41424344, r4, 0x0, 0x0, 0x18, 0x20, 0xd1a, 0x0, 0xf800, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xd, 0xf989, "e97c175d59a95c6ce2"}, @exp_fastopen={0xfe, 0x6, 0xf989, "af96"}, @md5sig={0x13, 0x12, "e46de3f9dde6370baff8025ede6d54cf"}, @generic={0x13, 0x5, "3160d4"}, @fastopen={0x22, 0x6, "9ef537e6"}, @mss={0x2, 0x4, 0x8}, @exp_fastopen={0xfe, 0xf, 0xf989, "31a48f88cee28d5e425525"}]}}, {"a151d5a93da8c4a8e9d30817df3e3f873e1f6791910691dde5a846d42d8ca64ebbdba986e80572"}}}}}, 0x13b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7fffffff}) 9.312210217s ago: executing program 3 (id=4533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x40000000}, 0x18) 9.261887031s ago: executing program 5 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4665}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2004, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 9.107282848s ago: executing program 3 (id=4535): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_init(0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioperm(0x524, 0xab49, 0x9) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f00007d2000/0x3000)=nil) shmat(r3, &(0x7f0000261000/0x9000)=nil, 0x4000) 7.942041423s ago: executing program 4 (id=4538): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.859957923s ago: executing program 4 (id=4539): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)="04e43cb9f9c577e12a648ef79b0d4c14b768e6a496f80d3164dd638949b56a452986be367fbbc6f67b25d0706490aea39a055fab666a0b30a6e63d9aae15cc5a18fd029c78d55e3e", 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000084) recvmmsg$unix(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000080)=""/36, 0x24}], 0x2}}], 0x1, 0x10101, 0x0) 6.399890786s ago: executing program 4 (id=4540): r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{0x0}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="41902256", 0x4}, {0x0}], 0x2}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, 0x0) 5.950224635s ago: executing program 6 (id=4541): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) 4.650345603s ago: executing program 3 (id=4543): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x20, 0x0, 0x1, 'B'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.497432884s ago: executing program 0 (id=4544): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYRES32, @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 4.366453781s ago: executing program 5 (id=4545): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0, 0x0, 0x40000000}, 0x18) 4.34081294s ago: executing program 6 (id=4546): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYRES32, @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 4.141126871s ago: executing program 5 (id=4547): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @empty}, 0x10) 4.140581126s ago: executing program 6 (id=4548): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000480)=0x10000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2682, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0xc8, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @mpls={[{0x2}], @ipv4=@tcp={{0x2c, 0x4, 0x2, 0x4, 0x137, 0x68, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x34, 0x91, 0x3, 0x8, [{@private=0xa010102, 0x2}, {@remote, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0xfffffffd}, {@loopback, 0x2}, {@empty, 0x28}]}, @ssrr={0x89, 0x3, 0xc7}, @lsrr={0x83, 0x17, 0xee, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xd9, [@multicast2, @empty, @multicast1, @multicast1, @broadcast, @remote, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x0, [{@rand_addr=0x64010100, 0x53}, {@multicast2, 0x28}, {@private=0xa010100, 0xdc77}, {@empty, 0x6}, {@multicast2}]}]}}, {{0x4e21, 0x4e21, 0x41424344, r4, 0x0, 0x0, 0x18, 0x20, 0xd1a, 0x0, 0xf800, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xd, 0xf989, "e97c175d59a95c6ce2"}, @exp_fastopen={0xfe, 0x6, 0xf989, "af96"}, @md5sig={0x13, 0x12, "e46de3f9dde6370baff8025ede6d54cf"}, @generic={0x13, 0x5, "3160d4"}, @fastopen={0x22, 0x6, "9ef537e6"}, @mss={0x2, 0x4, 0x8}, @exp_fastopen={0xfe, 0xf, 0xf989, "31a48f88cee28d5e425525"}]}}, {"a151d5a93da8c4a8e9d30817df3e3f873e1f6791910691dde5a846d42d8ca64ebbdba986e80572"}}}}}, 0x13b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7fffffff}) 4.118481113s ago: executing program 0 (id=4549): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.936793124s ago: executing program 5 (id=4550): socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x2, 0xdddd0000, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x46e, 0x1}) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x0) syslog(0x4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000700) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_async', 0x2, 0x8) 3.102904953s ago: executing program 0 (id=4551): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.054325224s ago: executing program 6 (id=4552): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x40000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="05000000000000007111510000000000851000000200000085000000a000000095000000000000009500a50500000000076a08d945ad774b6f89c0514cc7c8031c4a5d60aab29083a11f797a1f6f29ae1e2605fda5cfd6f17ac50af769cb2e9983159580d23d1642ef82b625996e65600e7e50fa6db612212fc1821cee8b1dd4d1b197"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.051880691s ago: executing program 4 (id=4553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x9f5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.470251532s ago: executing program 0 (id=4554): syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xa3, &(0x7f0000000680)=@string={0xa3, 0x3, "6e565d1be464c02b759b2414c8748ff555693aeb2c53f86211264372ffc92f0b0c8c44fbaa2b61c6b18a45a6bcafca60e910227fc54ede0aff7d4061c3b43c6245195d95c997439465246c476842fbe8ef81d5175561a10390c2441582f3b0f9c56f7ce213233e7385627bcff4f26e312a77393335ae9c8e9fd088ecf426559fc0b5a1535ac9fd125e5d8864de4f11a01481d3b4a651e255817d2593ffd7110e6c"}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.307803691s ago: executing program 6 (id=4555): syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4890, 0x34b00}}}}}}]}, 0x48}}, 0x0) 2.279003734s ago: executing program 3 (id=4556): shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ff8000/0x5000)=nil) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x1}, &(0x7f0000000100), &(0x7f00000012c0)) io_uring_enter(r1, 0x1, 0x3, 0x29, 0x0, 0x0) timerfd_gettime(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x8, 0x9a, 0x101, {{0x1d, 0x4, 0x1, 0x7, 0x74, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x34, 0x82, 0x1, 0x2, [{@remote, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x8}, {@remote, 0x7}, {@private=0xa010102, 0xa000}, {@empty, 0xfffffffe}, {@private=0xa010100, 0x9}]}, @end, @rr={0x7, 0x1f, 0x80, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'erspan0\x00', 0x0}) sched_setscheduler(0x0, 0xce46179f0e141374, &(0x7f0000000040)=0xd8) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x800) 2.024909309s ago: executing program 6 (id=4557): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xa, 0x147b42) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 1.905387098s ago: executing program 4 (id=4558): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) 1.597782286s ago: executing program 0 (id=4559): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYRES32, @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 1.097812852s ago: executing program 0 (id=4560): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$tcp_mem(r3, &(0x7f0000000180)={0x5, 0x20, 0x544c, 0x20, 0x100000001}, 0x48) 993.457768ms ago: executing program 3 (id=4561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@newqdisc={0x34, 0x24, 0x714, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x5, 0xfff3}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1}, 0x10120) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a1ab0000000000ba000005000000080003000a000596"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x4b4, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x21}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30e}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x400]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x32f, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6d}, @device_a, @device_b, @initial, {0x5, 0x24}, @value=@ver_80211n={0x0, 0x8, 0x1}}, 0x10, 0x68, @random=0x575, @void, @void, [{0xdd, 0xd4, "76738a86dbf1b22f9ac8c7b07ec89284e0f467764c891aff50ab89045a9e1c1f9b54cebd3656bc36cb05038ead49a4b424a6e8e2de6ba2b9c6d1b14e097090a61cec43af3a12d191644845f00833952fb6273f816347106767650fb3aedd5918fff35b38f3ecc17589167b4d54cb763473572c4e9a469160afccb03d4e7ea00642ca7ad0d89c16ed84954c8793827a65b7192782f62fcdef82ec0ebc8691212887e7091c2879311a4fe4b956dc853f114af51ea7c97b0ae1e3513c7792d233e197021801c2eb4a97355a7fb2b0f6e4c781c8fcda"}, {0xdd, 0x91, "973fd2aa63343691c1fd842e58fe7b4b793bc9a95ff712a8658485ed0a5a44fd994803e7c0dc13ab4e927a27398cee45a986f2c3a2ca2b6a37179d271cd64694d9b3d5b91d846aa0fe55c9d9215872b22aa1f74179a45db22e6961418c6188297b84db3f1e86bcdb2e7a8eb4b691786f716251fba2556026f1ca9a07e933f1e4a425170704992b1c387fbf43dc781ae1a7"}, {0xdd, 0x75, "c2c9887e59c1a4a5cd38687ec70dc202a9c6b2fd53128ae28a60a2b76c98ce479eed43ac3950e58061f63d694f087ef2267ba527a5c626a0256a4d6cb31e2dd34ab2e586ed7601c2ad0d2c2e437aedd564ff58158f9b7add96f9b7b8cf657108a2caab8b2d007fba1048b8a87c1b599a2f29bc6dd2"}, {0xdd, 0x3a, "fe85a00b45df996197f24ed00d6d09451c28500b7c6166b5f335503b4577b94b1ce2fcfae575333620527ef930be784c545807d5de29d187971b"}, {0xdd, 0xc8, "f4cf37290a8ae53fc4da1ea2060fad0c448d65bde45c9e7a5243b77f4f64f166bac78b2f18f4be9272b5e0ee071fb6b28792f06cafdf0c923abedb30b461e29d645520e2dbe5207e6decc886cd2cb0fc2de7369066921a3152f9315761e6a719ae8f62dc24f49f49cd1151b0f26b6622fafa6cc1f5035c7e3e491d500f7de9c9269495ba73c7cecd984e6efa5910d4ddcc05a8036d7ab4d4192de182280bfd86e1d13ab699cfa1b759f53b2a2f768c88e6c7c878dd8a17679b15af57206ab2cdf77a4f92ac5ea62d"}, {0xdd, 0x21, "2db1a32224ecc31c3e2d52908d31ed56e728137758f577266e95596b5a611abd91"}]}}, @NL80211_ATTR_FRAME={0xff, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xc}, @device_b, @device_b, @initial, {0x2, 0x4}}, 0x31, 0x2d, @random=0x1, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x3, 0x0, {0x1, 0x1ffd, 0x0, 0xe, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x1, 0x4}}, [{0xdd, 0xbf, "b1fd396574bed039ec73b1356fb4632d7ec8ac586cf4e4a05308267548549c10e2201e4e22240017f0ab0ba665be2b869f721e1797ae7a5c9f02dc2dca9f13c951291b95f6b036e2b49c9acda403b377dc45cf15adaeab048d5cd3d849e84b8ce8868b9a06aebb053808cdaf01ee59b724339ac49de548377fbdea8f04fc00182c5acb4fbc444f3f5374747db36010ede7c1c8e920ba65d3d8adf4fbd38c6108f02faaf47f00be730630a1aaa43eb4d6900eb444ac3641f9f0d8fece3e412f"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4d2}]}, 0x4b4}}, 0x800) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=4562): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000480)=0x10000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2682, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0xc8, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @mpls={[{0x2}], @ipv4=@tcp={{0x20, 0x4, 0x2, 0x4, 0x107, 0x68, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0xc7, [@empty]}, @lsrr={0x83, 0x17, 0xee, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0xd9, [@multicast2, @empty, @multicast1, @multicast1, @broadcast, @remote, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0x0, [{@rand_addr=0x64010100, 0x53}, {@multicast2, 0x28}, {@private=0xa010100, 0xdc77}, {@empty, 0x6}, {@multicast2}]}]}}, {{0x4e21, 0x4e21, 0x41424344, r4, 0x0, 0x0, 0x18, 0x20, 0xd1a, 0x0, 0xf800, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xd, 0xf989, "e97c175d59a95c6ce2"}, @exp_fastopen={0xfe, 0x6, 0xf989, "af96"}, @md5sig={0x13, 0x12, "e46de3f9dde6370baff8025ede6d54cf"}, @generic={0x13, 0x5, "3160d4"}, @fastopen={0x22, 0x6, "9ef537e6"}, @mss={0x2, 0x4, 0x8}, @exp_fastopen={0xfe, 0xf, 0xf989, "31a48f88cee28d5e425525"}]}}, {"a151d5a93da8c4a8e9d30817df3e3f873e1f6791910691dde5a846d42d8ca64ebbdba986e80572"}}}}}, 0x10b) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7fffffff}) kernel console output (not intermixed with test programs): T24] usb 5-1: config 0 descriptor?? [ 1445.698768][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1445.746159][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1445.776671][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1445.825911][ T24] usb 5-1: media controller created [ 1445.969189][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1446.121478][ T9] usb 1-1: USB disconnect, device number 20 [ 1447.147931][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1447.928936][ T24] usb 5-1: USB disconnect, device number 31 [ 1448.506152][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1449.015805][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1449.155921][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1449.196131][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1449.398868][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1449.417306][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1449.428226][ T9] usb 1-1: config 0 has no interface number 0 [ 1449.434360][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1449.506606][ T24] usb 6-1: config 0 has no interface number 0 [ 1449.530596][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1449.592263][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1449.631378][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.651170][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1449.666889][ T24] usb 6-1: Product: syz [ 1449.685083][ T24] usb 6-1: Manufacturer: syz [ 1449.700703][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.719819][ T24] usb 6-1: SerialNumber: syz [ 1449.745884][ T9] usb 1-1: Product: syz [ 1449.760429][ T9] usb 1-1: Manufacturer: syz [ 1449.761753][ T24] usb 6-1: config 0 descriptor?? [ 1449.774923][ T9] usb 1-1: SerialNumber: syz [ 1449.825057][ T9] usb 1-1: config 0 descriptor?? [ 1449.833340][ T24] smsc75xx v1.0.0 [ 1449.842911][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1450.076457][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1450.499290][ T9] smsc75xx v1.0.0 [ 1450.503015][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1450.532807][T19144] openvswitch: : Dropping previously announced user features [ 1450.607756][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1451.555293][T19151] openvswitch: : Dropping previously announced user features [ 1451.566710][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1455.147302][ T9] usb 1-1: USB disconnect, device number 21 [ 1455.853340][T19179] openvswitch: : Dropping previously announced user features [ 1455.855849][T13474] Bluetooth: hci0: command 0x0405 tx timeout [ 1456.452221][ T9] usb 6-1: USB disconnect, device number 12 [ 1457.177968][ T30] kauditd_printk_skb: 525 callbacks suppressed [ 1457.177986][ T30] audit: type=1326 audit(1748659859.734:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61fc32ab39 code=0x7ffc0000 [ 1457.238846][T12880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1457.364700][ T30] audit: type=1326 audit(1748659859.764:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1457.446275][T12880] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1457.472898][ T30] audit: type=1326 audit(1748659859.764:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61fc32ab39 code=0x7ffc0000 [ 1457.483483][T12880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.495411][T19198] bond_slave_0: entered promiscuous mode [ 1457.508815][T19198] bond_slave_1: entered promiscuous mode [ 1457.556122][ T30] audit: type=1326 audit(1748659859.764:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1457.566922][T12880] usb 4-1: Product: syz [ 1457.595679][T19198] vlan2: entered promiscuous mode [ 1457.600872][T19198] bond0: entered promiscuous mode [ 1457.634015][T12880] usb 4-1: Manufacturer: syz [ 1457.655054][T12880] usb 4-1: SerialNumber: syz [ 1457.691329][ T30] audit: type=1326 audit(1748659859.764:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1457.703184][T12880] usb 4-1: config 0 descriptor?? [ 1457.823018][T12880] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1457.844579][ T30] audit: type=1326 audit(1748659859.764:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61fc32ab39 code=0x7ffc0000 [ 1457.913674][ T30] audit: type=1326 audit(1748659859.764:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1458.011943][ T30] audit: type=1326 audit(1748659859.764:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61fc32ab39 code=0x7ffc0000 [ 1458.116239][ T30] audit: type=1326 audit(1748659859.764:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1458.236217][ T30] audit: type=1326 audit(1748659859.764:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19194 comm="syz.5.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1458.262433][T12880] sonixb 4-1:0.0: Error writing register 01: -71 [ 1458.314200][T12880] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 1458.380853][T12880] usb 4-1: USB disconnect, device number 28 [ 1461.237978][T19230] lo speed is unknown, defaulting to 1000 [ 1462.956005][T12880] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1463.186044][T12880] usb 4-1: Using ep0 maxpacket: 16 [ 1463.313505][T12880] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1463.335729][T12880] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1463.354607][T12880] usb 4-1: Product: syz [ 1463.360976][T12880] usb 4-1: Manufacturer: syz [ 1463.387249][T12880] usb 4-1: SerialNumber: syz [ 1463.401046][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1463.427130][T12880] usb 4-1: config 0 descriptor?? [ 1464.221933][T19257] siw: device registration error -23 [ 1464.510467][T19248] netlink: 'syz.6.3529': attribute type 7 has an invalid length. [ 1464.528853][T19252] team0: Port device team_slave_0 removed [ 1464.644636][T19248] : entered promiscuous mode [ 1465.580847][T19270] batadv1: entered promiscuous mode [ 1465.640592][T19270] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1466.135796][T16302] usb 4-1: USB disconnect, device number 29 [ 1466.316017][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1466.496004][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1466.571972][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1466.638440][ T9] usb 7-1: config 0 has no interface number 0 [ 1466.661398][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1466.822213][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1466.898864][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.951386][ T9] usb 7-1: Product: syz [ 1466.956293][ T9] usb 7-1: Manufacturer: syz [ 1466.970058][ T9] usb 7-1: SerialNumber: syz [ 1466.999279][ T9] usb 7-1: config 0 descriptor?? [ 1467.022695][ T9] smsc75xx v1.0.0 [ 1467.030827][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1467.062197][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1467.295817][T19285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.303864][T19285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.777528][T19285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.020391][T19285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.215858][ T30] kauditd_printk_skb: 561 callbacks suppressed [ 1469.215872][ T30] audit: type=1326 audit(1748659871.764:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1469.332335][ T30] audit: type=1326 audit(1748659871.764:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1469.473727][ T30] audit: type=1326 audit(1748659871.764:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4f52ab39 code=0x7ffc0000 [ 1469.497743][ T30] audit: type=1326 audit(1748659871.764:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1469.520222][ T30] audit: type=1326 audit(1748659871.764:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4f52ab39 code=0x7ffc0000 [ 1469.542266][ T30] audit: type=1326 audit(1748659871.764:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1469.564781][ T30] audit: type=1326 audit(1748659871.764:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4f52ab39 code=0x7ffc0000 [ 1469.593024][ T30] audit: type=1326 audit(1748659871.764:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1469.617666][ T30] audit: type=1326 audit(1748659871.804:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c4f52ab39 code=0x7ffc0000 [ 1469.646102][ T30] audit: type=1326 audit(1748659871.804:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19310 comm="syz.0.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f58e969 code=0x7ffc0000 [ 1470.067670][T19311] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1470.437382][T12880] usb 7-1: USB disconnect, device number 2 [ 1471.436407][T19323] autofs: Unknown parameter '0x0000000000000000' [ 1471.450208][ T5827] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1472.224185][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1472.676111][T19328] team0: Port device team_slave_0 removed [ 1476.536547][T19359] lo speed is unknown, defaulting to 1000 [ 1477.057588][ T30] kauditd_printk_skb: 370 callbacks suppressed [ 1477.057602][ T30] audit: type=1326 audit(1748659879.614:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19372 comm="syz.5.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1477.127977][ T30] audit: type=1326 audit(1748659879.614:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19372 comm="syz.5.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1477.158675][ T30] audit: type=1326 audit(1748659879.644:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19372 comm="syz.5.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1477.302437][ T30] audit: type=1326 audit(1748659879.644:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19372 comm="syz.5.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1477.858232][ T30] audit: type=1326 audit(1748659879.644:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19372 comm="syz.5.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fc38e969 code=0x7ffc0000 [ 1478.469969][T19377] netlink: 'syz.5.3563': attribute type 7 has an invalid length. [ 1479.237675][T19387] autofs: Unknown parameter 'fd0x0000000000000000' [ 1479.264484][T13474] Bluetooth: hci3: unexpected event for opcode 0x0062 [ 1480.097353][T19394] netlink: 'syz.0.3569': attribute type 39 has an invalid length. [ 1480.166072][T13613] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1480.373952][T13613] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1480.402875][T13613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.426146][T13613] usb 4-1: Product: syz [ 1480.431161][T13613] usb 4-1: Manufacturer: syz [ 1480.437762][T13613] usb 4-1: SerialNumber: syz [ 1480.457953][T13613] usb 4-1: config 0 descriptor?? [ 1480.495241][T13613] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1481.000682][T13613] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 1481.374642][T12880] usb 4-1: USB disconnect, device number 30 [ 1482.542807][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1483.463167][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1483.511790][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1483.593313][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1483.633162][ T24] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1483.808120][T13613] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1483.817143][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.830857][ T24] usb 7-1: Product: syz [ 1483.835054][ T24] usb 7-1: Manufacturer: syz [ 1483.842134][ T24] usb 7-1: SerialNumber: syz [ 1483.866652][ T24] usb 7-1: config 0 descriptor?? [ 1483.978659][T19428] autofs: Unknown parameter 'fd0x0000000000000000' [ 1483.990937][ T5827] Bluetooth: hci2: unexpected event for opcode 0x0062 [ 1484.246005][T13613] usb 4-1: Using ep0 maxpacket: 32 [ 1484.324949][T13613] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1484.388185][T13613] usb 4-1: config 0 has no interface number 0 [ 1484.393320][ T24] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1484.409270][T13613] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1484.489910][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.522397][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.694923][T13613] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1484.755814][T13613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.809161][T13613] usb 4-1: Product: syz [ 1484.900624][T13613] usb 4-1: Manufacturer: syz [ 1484.905284][T13613] usb 4-1: SerialNumber: syz [ 1484.930827][ T24] usb 7-1: USB disconnect, device number 3 [ 1484.949492][T13613] usb 4-1: config 0 descriptor?? [ 1485.027681][T13613] smsc75xx v1.0.0 [ 1485.031380][T13613] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1485.094731][T13613] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1485.625695][T19436] netlink: 'syz.0.3580': attribute type 7 has an invalid length. [ 1485.722832][T13613] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1485.910099][T13613] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1485.966382][T13613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.041852][T13613] usb 6-1: Product: syz [ 1486.065644][T13613] usb 6-1: Manufacturer: syz [ 1486.071660][T13613] usb 6-1: SerialNumber: syz [ 1486.117095][T13613] usb 6-1: config 0 descriptor?? [ 1486.124976][T19445] batadv0: entered promiscuous mode [ 1486.138145][T13613] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1486.348925][T13613] sonixb 6-1:0.0: Error reading register 00: -71 [ 1486.368662][T13613] usb 6-1: USB disconnect, device number 13 [ 1486.561230][T12880] usb 4-1: USB disconnect, device number 31 [ 1486.688875][T19454] lo speed is unknown, defaulting to 1000 [ 1486.807583][T19458] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1487.696292][T19471] autofs: Unknown parameter 'fd0x0000000000000000' [ 1487.712885][ T5827] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1489.571054][T19487] siw: device registration error -23 [ 1490.149653][T19491] 8021q: VLANs not supported on vcan0 [ 1490.703756][T19498] netlink: 'syz.6.3591': attribute type 12 has an invalid length. [ 1491.370899][T19506] batadv1: entered promiscuous mode [ 1491.396093][T12880] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1491.467255][T19512] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1491.577453][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1491.585997][T12880] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1491.614811][T12880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.633167][T12880] usb 6-1: Product: syz [ 1491.641646][T12880] usb 6-1: Manufacturer: syz [ 1491.650988][T12880] usb 6-1: SerialNumber: syz [ 1491.668147][T12880] usb 6-1: config 0 descriptor?? [ 1491.689208][T12880] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1491.776938][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1491.805915][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.813961][ T24] usb 5-1: Product: syz [ 1491.903242][T12880] sonixb 6-1:0.0: Error reading register 00: -71 [ 1491.961535][T12880] usb 6-1: USB disconnect, device number 14 [ 1492.065050][ T24] usb 5-1: Manufacturer: syz [ 1492.075755][ T24] usb 5-1: SerialNumber: syz [ 1492.099799][ T24] usb 5-1: config 0 descriptor?? [ 1492.109832][ T24] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1492.549669][ T24] sonixb 5-1:0.0: Error reading register 00: -71 [ 1492.556863][T19519] siw: device registration error -23 [ 1492.570166][ T24] usb 5-1: USB disconnect, device number 32 [ 1493.275925][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1493.475535][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1493.484743][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1493.497135][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1493.512546][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1493.522795][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.534186][ T24] usb 4-1: Product: syz [ 1493.539552][ T24] usb 4-1: Manufacturer: syz [ 1493.544193][ T24] usb 4-1: SerialNumber: syz [ 1493.552801][ T24] usb 4-1: config 0 descriptor?? [ 1493.592617][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1493.608624][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1493.912970][T19542] netlink: 'syz.5.3604': attribute type 12 has an invalid length. [ 1494.257605][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1494.296690][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1494.956453][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1494.988784][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1495.111455][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1495.127653][T19553] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1495.818765][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1495.827263][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1495.839349][ T24] usb 4-1: USB disconnect, device number 32 [ 1496.795860][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1497.968099][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1498.007902][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.030252][ T9] usb 6-1: Product: syz [ 1498.045001][ T9] usb 6-1: Manufacturer: syz [ 1498.067755][ T9] usb 6-1: SerialNumber: syz [ 1498.169801][ T9] usb 6-1: config 0 descriptor?? [ 1498.370093][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1498.381995][ T9] sonixb 6-1:0.0: Error reading register 00: -71 [ 1498.397382][ T9] usb 6-1: USB disconnect, device number 15 [ 1499.932806][T19599] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1502.823591][T19601] ALSA: mixer_oss: invalid OSS volume '' [ 1502.979368][T19620] netlink: 'syz.6.3628': attribute type 1 has an invalid length. [ 1502.999189][T19620] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1504.534150][ T5827] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 1504.832826][T19647] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1505.476421][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1506.305922][T19664] netlink: 'syz.6.3639': attribute type 4 has an invalid length. [ 1506.329606][T19664] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3639'. [ 1507.666647][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1508.826279][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1509.066695][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1509.097493][ T9] usb 5-1: config 0 has no interface number 0 [ 1509.148094][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1509.349684][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1509.444602][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.515930][ T9] usb 5-1: Product: syz [ 1509.520173][ T9] usb 5-1: Manufacturer: syz [ 1509.524799][ T9] usb 5-1: SerialNumber: syz [ 1509.698118][ T9] usb 5-1: config 0 descriptor?? [ 1509.839231][ T9] smsc75xx v1.0.0 [ 1509.842934][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1509.906166][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1511.144753][ T5827] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 1511.353375][T19691] netlink: 'syz.5.3649': attribute type 1 has an invalid length. [ 1511.401606][T19691] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1512.704210][T19702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3651'. [ 1512.762123][T16302] usb 5-1: USB disconnect, device number 33 [ 1515.892480][T19707] ALSA: mixer_oss: invalid OSS volume '' [ 1517.008118][ T5827] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 1517.064325][T19735] netlink: 'syz.5.3663': attribute type 1 has an invalid length. [ 1517.638405][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3662'. [ 1517.639019][T19735] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1517.692436][T19747] openvswitch: : Dropping previously announced user features [ 1518.123736][ T5827] Bluetooth: Frame is too long (len 16, expected len 4) [ 1518.914603][T19761] siw: device registration error -23 [ 1519.287180][T19764] siw: device registration error -23 [ 1521.735896][T12880] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1522.067470][ T5827] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 1522.475035][T12880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.530119][T12880] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1522.581129][T12880] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1522.622764][T12880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.652910][T12880] usb 6-1: config 0 descriptor?? [ 1524.157478][T19818] siw: device registration error -23 [ 1525.822964][T19833] siw: device registration error -23 [ 1526.476460][T12880] usb 6-1: USB disconnect, device number 16 [ 1527.393864][T19840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1529.283885][ T5827] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1530.976196][T19888] netlink: 'syz.5.3696': attribute type 1 has an invalid length. [ 1531.039550][T19888] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1533.427954][ T5827] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1535.781972][ T5827] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1536.278866][T19943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1538.020318][T16552] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1538.255875][T16552] usb 7-1: Using ep0 maxpacket: 32 [ 1538.287359][T16552] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1538.311398][T16552] usb 7-1: config 0 has no interface number 0 [ 1538.342756][T16552] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1538.484924][T16552] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1538.529955][T16552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.747261][T16552] usb 7-1: Product: syz [ 1538.751494][T16552] usb 7-1: Manufacturer: syz [ 1539.111056][T16552] usb 7-1: SerialNumber: syz [ 1539.144128][T16552] usb 7-1: config 0 descriptor?? [ 1539.191596][T16552] smsc75xx v1.0.0 [ 1539.236180][T16552] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1539.298411][T16552] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1541.076535][T12880] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1541.326595][T12880] usb 1-1: Using ep0 maxpacket: 32 [ 1541.338538][T12880] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1541.356076][T12880] usb 1-1: config 0 has no interface number 0 [ 1541.381288][T12880] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1543.019749][T16302] usb 7-1: USB disconnect, device number 4 [ 1543.121191][T12880] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1543.130769][T12880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.139410][T12880] usb 1-1: Product: syz [ 1543.146042][T12880] usb 1-1: Manufacturer: syz [ 1543.150675][T12880] usb 1-1: SerialNumber: syz [ 1543.165164][T12880] usb 1-1: config 0 descriptor?? [ 1543.183851][T12880] smsc75xx v1.0.0 [ 1543.199452][T12880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1543.276116][T12880] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1543.464760][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.475900][T19988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.590806][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.631352][T19988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.855890][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1544.061370][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1544.099625][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1544.163074][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1544.228363][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1544.260127][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.312004][ T24] usb 7-1: Product: syz [ 1544.331272][ T24] usb 7-1: Manufacturer: syz [ 1544.355926][ T24] usb 7-1: SerialNumber: syz [ 1544.372697][ T24] usb 7-1: config 0 descriptor?? [ 1544.397368][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1544.415943][ T24] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1545.069398][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1545.080380][ T24] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1545.332411][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1545.458844][T20007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1545.736492][ T24] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1545.777259][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1545.828210][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1545.858674][T19947] syz.5.3709 (19947): drop_caches: 1 [ 1545.859859][T19949] syz.5.3709 (19949): drop_caches: 1 [ 1545.931885][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.939041][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.019641][T13613] usb 1-1: USB disconnect, device number 22 [ 1546.820893][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1546.845819][ T24] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1546.885075][ T24] usb 7-1: USB disconnect, device number 5 [ 1547.011187][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 1547.443270][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3731'. [ 1548.603790][T20030] team0: Port device team_slave_0 removed [ 1550.377480][T20054] syz.5.3737 (20054): drop_caches: 1 [ 1550.446516][ T5871] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1550.582136][T20053] syz.5.3737 (20053): drop_caches: 1 [ 1550.618300][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 1550.645112][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1550.686090][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1550.739757][ T5871] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1550.773370][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.799073][ T5871] usb 7-1: Product: syz [ 1550.803312][ T5871] usb 7-1: Manufacturer: syz [ 1550.930605][ T5871] usb 7-1: SerialNumber: syz [ 1550.957603][ T5871] usb 7-1: config 0 descriptor?? [ 1550.996730][ T5871] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1551.052950][T20053] syz.5.3737 (20053): drop_caches: 1 [ 1551.300217][T20071] netlink: 'syz.4.3743': attribute type 1 has an invalid length. [ 1551.303379][ T5871] usb 7-1: USB disconnect, device number 6 [ 1551.439610][T20071] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1551.700532][T20077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1553.375530][T16552] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1554.071969][T16552] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1554.126380][T16552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.135114][T16552] usb 7-1: Product: syz [ 1554.221679][T16552] usb 7-1: Manufacturer: syz [ 1554.229056][T16552] usb 7-1: SerialNumber: syz [ 1554.249115][T16552] usb 7-1: config 0 descriptor?? [ 1554.260424][T16552] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1554.705575][T16552] sonixb 7-1:0.0: Error writing register 01: -71 [ 1554.746548][T16552] sonixb 7-1:0.0: probe with driver sonixb failed with error -71 [ 1554.816499][T16552] usb 7-1: USB disconnect, device number 7 [ 1555.427820][T20099] siw: device registration error -23 [ 1555.808927][T20105] netlink: 'syz.6.3753': attribute type 1 has an invalid length. [ 1555.838863][T20105] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1556.289610][T20117] netlink: 'syz.0.3754': attribute type 12 has an invalid length. [ 1557.611974][T20123] siw: device registration error -23 [ 1560.280777][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1560.358728][T20137] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1560.512055][T20137] netlink: 'syz.6.3760': attribute type 10 has an invalid length. [ 1560.565856][T20137] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3760'. [ 1560.924661][T20137] team0: Port device geneve0 added [ 1562.171876][T20157] siw: device registration error -23 [ 1563.828328][T20178] netlink: 'syz.5.3768': attribute type 4 has an invalid length. [ 1563.996179][T20178] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3768'. [ 1564.019232][T20174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3765'. [ 1565.167828][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3771'. [ 1566.107794][T20191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1567.230179][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3774'. [ 1568.066367][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1568.719356][T16552] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1568.916195][T16552] usb 5-1: Using ep0 maxpacket: 8 [ 1568.933489][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1569.002129][T16552] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1569.076004][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.084987][ T9] usb 4-1: Product: syz [ 1569.093465][ T9] usb 4-1: Manufacturer: syz [ 1569.099493][T16552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1569.113124][ T9] usb 4-1: SerialNumber: syz [ 1569.123413][ T9] usb 4-1: config 0 descriptor?? [ 1569.142354][T16552] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1569.158414][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1569.167423][T16552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.177163][T16552] usb 5-1: Product: syz [ 1569.181948][T16552] usb 5-1: Manufacturer: syz [ 1569.190974][T16552] usb 5-1: SerialNumber: syz [ 1569.207382][T16552] usb 5-1: config 0 descriptor?? [ 1569.259928][T16552] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1569.594860][ T24] usb 5-1: USB disconnect, device number 34 [ 1569.606038][ T9] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 1569.889024][ T9] usb 4-1: USB disconnect, device number 33 [ 1570.615039][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1571.890011][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1572.768608][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1574.545169][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1574.746104][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1574.783903][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3789'. [ 1574.809686][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1574.844078][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1574.876059][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1574.887465][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.912215][ T24] usb 5-1: Product: syz [ 1575.079016][ T24] usb 5-1: Manufacturer: syz [ 1575.085102][ T24] usb 5-1: SerialNumber: syz [ 1575.098155][ T24] usb 5-1: config 0 descriptor?? [ 1575.118471][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1575.128352][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1575.552241][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1575.847885][T20274] netlink: 'syz.5.3796': attribute type 7 has an invalid length. [ 1576.099899][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1576.116545][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1577.081555][ T24] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1577.122502][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1577.230817][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1577.903180][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3799'. [ 1578.183667][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1578.236691][ T24] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1578.446511][ T24] usb 5-1: USB disconnect, device number 35 [ 1578.824351][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1579.134846][T20303] 8021q: VLANs not supported on vcan0 [ 1580.335990][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1580.509480][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1580.532516][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1580.571156][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1580.585632][T16552] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1580.628822][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1580.659977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.688564][ T9] usb 5-1: Product: syz [ 1580.692866][ T9] usb 5-1: Manufacturer: syz [ 1580.704363][ T9] usb 5-1: SerialNumber: syz [ 1580.734106][ T9] usb 5-1: config 0 descriptor?? [ 1580.739812][T12880] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1580.748302][T16552] usb 7-1: device descriptor read/64, error -71 [ 1580.788529][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1580.810912][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1581.596148][T12880] usb 6-1: Using ep0 maxpacket: 16 [ 1581.666285][T16552] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1581.703425][T12880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1581.787720][T12880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1581.874223][T12880] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1581.911687][T16552] usb 7-1: device descriptor read/64, error -71 [ 1581.962023][T12880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.011718][T12880] usb 6-1: Product: syz [ 1582.044225][T12880] usb 6-1: Manufacturer: syz [ 1582.060735][T16552] usb usb7-port1: attempt power cycle [ 1582.085954][T12880] usb 6-1: SerialNumber: syz [ 1582.148873][T12880] usb 6-1: config 0 descriptor?? [ 1582.184228][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1582.209535][T12880] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1582.232573][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1582.300563][T12880] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1582.453934][T20330] siw: device registration error -23 [ 1582.476888][T16552] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1582.561442][T16552] usb 7-1: device descriptor read/8, error -71 [ 1582.873465][T16552] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1582.935199][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1582.950239][T12880] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1582.959912][T16552] usb 7-1: device descriptor read/8, error -71 [ 1583.008118][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1583.015008][T12880] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1584.320707][T16552] usb usb7-port1: unable to enumerate USB device [ 1584.349001][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1584.356599][T12880] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1584.363565][T12880] em28xx 6-1:0.0: No AC97 audio processor [ 1584.445166][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1584.484826][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1584.541580][T12880] usb 6-1: USB disconnect, device number 17 [ 1584.593954][T12880] em28xx 6-1:0.0: Disconnecting em28xx [ 1584.639724][T12880] em28xx 6-1:0.0: Freeing device [ 1584.780809][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1584.830925][ T9] usb 5-1: USB disconnect, device number 36 [ 1586.407707][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 1587.137095][T20360] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1587.805756][ T5827] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1587.959101][T20360] netlink: 'syz.4.3818': attribute type 10 has an invalid length. [ 1587.993940][T20360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1588.922455][T20376] siw: device registration error -23 [ 1589.114397][T20355] lo speed is unknown, defaulting to 1000 [ 1589.386282][T13613] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1589.566381][T13613] usb 1-1: device descriptor read/64, error -71 [ 1589.593883][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1589.788681][T20382] openvswitch: : Dropping previously announced user features [ 1589.919712][T13613] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1590.120243][T20389] bond_slave_0: entered promiscuous mode [ 1590.126448][T20389] bond_slave_1: entered promiscuous mode [ 1590.132197][T20389] team_slave_0: entered promiscuous mode [ 1590.138244][T20389] team_slave_1: entered promiscuous mode [ 1590.185717][T13613] usb 1-1: device descriptor read/64, error -71 [ 1590.309042][T20389] vlan2: entered promiscuous mode [ 1590.354869][T13613] usb usb1-port1: attempt power cycle [ 1590.364686][T20389] bond0: entered promiscuous mode [ 1590.479312][T20389] team0: entered promiscuous mode [ 1590.518023][T20389] geneve0: entered promiscuous mode [ 1590.827175][T13613] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1590.895719][T13613] usb 1-1: device descriptor read/8, error -71 [ 1591.166839][T13613] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1591.224478][T13613] usb 1-1: device descriptor read/8, error -71 [ 1591.408701][T13613] usb usb1-port1: unable to enumerate USB device [ 1592.756218][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1592.937491][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3828'. [ 1594.299189][ T5827] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 1594.616322][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3834'. [ 1595.265901][T20432] vlan2: entered promiscuous mode [ 1596.136281][T20438] fuse: Unknown parameter 'user_i00000000000000000000' [ 1597.316073][T13613] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1597.490163][T13613] usb 6-1: device descriptor read/64, error -71 [ 1598.015119][T13613] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1598.437250][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1598.915983][T13613] usb 6-1: device descriptor read/64, error -71 [ 1599.107520][T13613] usb usb6-port1: attempt power cycle [ 1599.477669][T13613] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1599.518980][T13613] usb 6-1: device descriptor read/8, error -71 [ 1599.696376][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1599.736163][T16302] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1599.867124][T13613] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1599.955716][T16302] usb 5-1: Using ep0 maxpacket: 32 [ 1599.969162][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1599.995635][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.010850][ T24] usb 4-1: Product: syz [ 1600.026224][ T24] usb 4-1: Manufacturer: syz [ 1600.044792][ T24] usb 4-1: SerialNumber: syz [ 1600.063561][T16302] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1600.085568][ T24] usb 4-1: config 0 descriptor?? [ 1600.093227][T16302] usb 5-1: config 0 has no interface number 0 [ 1600.105874][T13613] usb 6-1: device not accepting address 21, error -71 [ 1600.118238][ T24] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1600.128450][T13613] usb usb6-port1: unable to enumerate USB device [ 1600.158438][T16302] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1600.236827][T16302] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1600.286831][T16302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.295000][T16302] usb 5-1: Product: syz [ 1600.349189][T16302] usb 5-1: Manufacturer: syz [ 1600.376668][T16302] usb 5-1: SerialNumber: syz [ 1600.406453][T16302] usb 5-1: config 0 descriptor?? [ 1600.464062][T16302] smsc75xx v1.0.0 [ 1600.495133][T16302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1600.540051][T16302] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1600.611646][ T24] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 1601.029648][ T9] usb 4-1: USB disconnect, device number 34 [ 1601.392315][T20474] siw: device registration error -23 [ 1603.057025][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1603.395577][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1603.441331][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.457923][T16302] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1603.469606][ T9] usb 4-1: Product: syz [ 1603.480783][ T9] usb 4-1: Manufacturer: syz [ 1603.482293][T20495] 8021q: VLANs not supported on vcan0 [ 1603.497690][ T9] usb 4-1: SerialNumber: syz [ 1603.518127][ T9] usb 4-1: config 0 descriptor?? [ 1603.553969][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1603.636715][T16302] usb 1-1: device descriptor read/64, error -71 [ 1603.861051][T12880] usb 5-1: USB disconnect, device number 37 [ 1603.918599][T16302] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1604.010613][ T9] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1604.108514][T16302] usb 1-1: device descriptor read/64, error -71 [ 1604.214967][T20500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1604.268021][T16302] usb usb1-port1: attempt power cycle [ 1604.277977][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3859'. [ 1604.319320][T12880] usb 4-1: USB disconnect, device number 35 [ 1604.671902][T16302] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1604.757366][T16302] usb 1-1: device descriptor read/8, error -71 [ 1605.086130][T16302] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1605.132782][T16302] usb 1-1: device descriptor read/8, error -71 [ 1605.163353][T20512] siw: device registration error -23 [ 1605.273493][T16302] usb usb1-port1: unable to enumerate USB device [ 1606.624799][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1607.617591][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.627875][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.214414][T20536] 8021q: VLANs not supported on vcan0 [ 1608.738695][T13474] Bluetooth: hci0: command 0x0405 tx timeout [ 1608.866741][T13474] Bluetooth: Frame is too long (len 16, expected len 4) [ 1609.073774][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1610.036098][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1610.339543][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1610.350108][ T24] usb 5-1: config 0 has no interface number 0 [ 1610.361732][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1610.421177][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1610.421203][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.421220][ T24] usb 5-1: Product: syz [ 1610.421231][ T24] usb 5-1: Manufacturer: syz [ 1610.421242][ T24] usb 5-1: SerialNumber: syz [ 1610.446211][ T24] usb 5-1: config 0 descriptor?? [ 1610.454354][ T24] smsc75xx v1.0.0 [ 1610.454371][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1610.454546][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1610.948473][T20557] batadv0: entered promiscuous mode [ 1611.734120][T20555] lo speed is unknown, defaulting to 1000 [ 1612.516144][T16302] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1612.725692][T16302] usb 4-1: device descriptor read/64, error -71 [ 1613.094340][T16302] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1613.571525][T20582] siw: device registration error -23 [ 1613.653436][T16302] usb 4-1: device descriptor read/64, error -71 [ 1613.797986][T20577] netlink: 'syz.6.3876': attribute type 1 has an invalid length. [ 1613.871302][T16302] usb usb4-port1: attempt power cycle [ 1613.938325][T20577] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1614.179552][T12880] usb 5-1: USB disconnect, device number 38 [ 1614.276427][T16302] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1614.318766][T16302] usb 4-1: device descriptor read/8, error -71 [ 1615.156119][T16302] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1615.529763][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1615.533844][T16302] usb 4-1: device not accepting address 39, error -71 [ 1615.572315][T16302] usb usb4-port1: unable to enumerate USB device [ 1617.216701][T20613] batadv2: entered promiscuous mode [ 1620.446866][T20636] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1620.546975][T20636] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1620.633270][T20636] bridge_slave_0: default FDB implementation only supports local addresses [ 1621.047737][T13613] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1621.415486][T13613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.469611][T13613] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1621.512214][T13613] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1621.550143][T13613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.592911][T13613] usb 6-1: config 0 descriptor?? [ 1623.325733][T16302] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1623.753429][T16302] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1623.801856][T16302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.898685][T16302] usb 5-1: Product: syz [ 1623.902928][T16302] usb 5-1: Manufacturer: syz [ 1623.936602][T16302] usb 5-1: SerialNumber: syz [ 1623.967954][T16302] usb 5-1: config 0 descriptor?? [ 1624.013063][T16302] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1624.488114][T16302] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 1624.875840][T16302] usb 5-1: USB disconnect, device number 39 [ 1626.192428][T16302] usb 6-1: USB disconnect, device number 22 [ 1627.632944][T20685] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.678465][T20683] netlink: 'syz.5.3902': attribute type 39 has an invalid length. [ 1627.731966][T20685] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1627.780218][T20685] bridge_slave_0: default FDB implementation only supports local addresses [ 1631.571913][T20713] lo speed is unknown, defaulting to 1000 [ 1632.076948][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1633.278861][T20727] siw: device registration error -23 [ 1633.488851][T20730] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1633.510615][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1633.527264][T20730] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1633.587244][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1633.610535][ T9] usb 5-1: config 0 has no interface number 0 [ 1633.612643][T20730] bridge_slave_0: default FDB implementation only supports local addresses [ 1633.645965][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1634.004181][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1634.045219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.068225][ T9] usb 5-1: Product: syz [ 1634.072444][ T9] usb 5-1: Manufacturer: syz [ 1634.141535][ T9] usb 5-1: SerialNumber: syz [ 1634.192187][ T9] usb 5-1: config 0 descriptor?? [ 1634.229378][ T9] smsc75xx v1.0.0 [ 1634.241824][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1634.288039][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1634.979042][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1635.256855][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1635.281128][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1635.297150][ T9] usb 7-1: config 0 has no interface number 0 [ 1635.309080][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1635.441228][T20748] lo speed is unknown, defaulting to 1000 [ 1635.476314][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1635.533310][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.574030][ T9] usb 7-1: Product: syz [ 1635.609067][ T9] usb 7-1: Manufacturer: syz [ 1635.649116][ T9] usb 7-1: SerialNumber: syz [ 1635.734657][ T9] usb 7-1: config 0 descriptor?? [ 1635.879655][T13613] usb 5-1: USB disconnect, device number 40 [ 1636.080980][ T9] smsc75xx v1.0.0 [ 1636.084680][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1636.838623][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1637.907718][T20762] siw: device registration error -23 [ 1639.029870][T20772] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1639.097044][T20772] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1639.213582][T13613] usb 7-1: USB disconnect, device number 12 [ 1639.248260][T20772] bridge_slave_0: default FDB implementation only supports local addresses [ 1639.649871][T20779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3931'. [ 1640.421541][T20792] openvswitch: : Dropping previously announced user features [ 1640.444086][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 1641.122196][T20798] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1642.206382][T13613] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1642.436390][T13613] usb 6-1: Using ep0 maxpacket: 16 [ 1642.451626][T13613] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1642.476280][T13613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1642.501504][T13613] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1642.549511][T13613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.585858][T13613] usb 6-1: Product: syz [ 1642.592814][T13613] usb 6-1: Manufacturer: syz [ 1642.611275][T13613] usb 6-1: SerialNumber: syz [ 1642.788635][T13613] usb 6-1: config 0 descriptor?? [ 1642.809128][T13613] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1643.188728][T20811] fuse: Unknown parameter '0x0000000000000005' [ 1643.223082][T13613] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1643.775121][T13613] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1643.808573][T13613] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1644.803460][T13613] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1644.845850][T13613] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1644.859092][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 1645.330391][T13474] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 1645.379833][T13613] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1645.911498][T13613] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1645.972672][T13613] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1646.039959][T13613] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1646.115112][T13613] usb 6-1: USB disconnect, device number 23 [ 1647.376709][T20855] fuse: Unknown parameter '0x0000000000000005' [ 1648.314073][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1649.011503][ T9] usb 1-1: no configurations [ 1649.026651][ T9] usb 1-1: can't read configurations, error -22 [ 1649.128716][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1649.176385][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1649.587307][ T9] usb 1-1: no configurations [ 1649.592699][ T9] usb 1-1: can't read configurations, error -22 [ 1649.609255][ T9] usb usb1-port1: attempt power cycle [ 1650.366067][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1650.430537][ T9] usb 1-1: no configurations [ 1650.456483][ T9] usb 1-1: can't read configurations, error -22 [ 1650.608770][T20873] netlink: 'syz.3.3959': attribute type 7 has an invalid length. [ 1650.655994][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1650.906847][ T9] usb 1-1: device not accepting address 34, error -71 [ 1650.938828][ T9] usb usb1-port1: unable to enumerate USB device [ 1650.997143][T20890] bridge0: entered promiscuous mode [ 1651.024111][T20890] vlan2: entered promiscuous mode [ 1651.426744][T20898] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1652.208985][T20905] fuse: Unknown parameter '0x0000000000000005' [ 1653.377306][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3970'. [ 1653.807810][T13474] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 1655.927456][T20935] lo speed is unknown, defaulting to 1000 [ 1658.034328][T20934] netlink: 'syz.6.3976': attribute type 7 has an invalid length. [ 1658.830788][T13474] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1659.722068][T20959] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1659.807075][T20965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1659.829299][T20959] netlink: 'syz.3.3980': attribute type 10 has an invalid length. [ 1659.895114][T20959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3980'. [ 1660.242884][T20959] team0: Port device geneve0 added [ 1661.429502][T20988] lo speed is unknown, defaulting to 1000 [ 1662.049504][T20991] lo speed is unknown, defaulting to 1000 [ 1664.041852][T13474] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1664.833988][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1664.884779][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1666.233597][T21034] siw: device registration error -23 [ 1666.286191][T16552] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1666.527290][T16552] usb 1-1: Using ep0 maxpacket: 16 [ 1666.534179][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4002'. [ 1666.901138][T16552] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1666.914484][T21039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1666.930445][T16552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1666.963898][T16552] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1667.004961][T16552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.064188][T16552] usb 1-1: Product: syz [ 1667.086644][T16552] usb 1-1: Manufacturer: syz [ 1667.106459][T16552] usb 1-1: SerialNumber: syz [ 1667.147282][T16552] usb 1-1: config 0 descriptor?? [ 1667.249281][T21045] lo speed is unknown, defaulting to 1000 [ 1667.324892][T16552] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1667.361637][T16552] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1668.101796][ T5827] Bluetooth: hci3: unexpected event for opcode 0x0062 [ 1668.348918][T16552] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1668.462254][T16552] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1668.837049][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.843510][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.966385][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 1669.131696][T16552] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1669.166780][T16552] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1669.947219][T16552] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1670.345830][T16552] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1670.366613][T16552] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1670.421494][T16552] usb 1-1: USB disconnect, device number 35 [ 1671.575491][T16552] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1671.786268][T16552] usb 7-1: Using ep0 maxpacket: 8 [ 1671.839683][T16552] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.872465][T16552] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1671.916624][T16552] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1671.963091][T16552] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1672.044670][T21088] openvswitch: : Dropping previously announced user features [ 1672.227501][T16552] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1672.239038][T16552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.267960][T16552] hub 7-1:1.0: bad descriptor, ignoring hub [ 1672.273936][T16552] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1672.685003][T16552] cdc_wdm 7-1:1.0: skipping garbage [ 1672.686236][T13474] Bluetooth: hci0: unexpected event for opcode 0x0062 [ 1672.700739][T16552] cdc_wdm 7-1:1.0: skipping garbage [ 1672.964467][T16552] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1672.997342][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'. [ 1673.259732][T16552] cdc_wdm 7-1:1.0: Unknown control protocol [ 1673.309468][T16552] usb 7-1: USB disconnect, device number 13 [ 1674.146066][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1674.284026][T21110] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 1674.309363][T21110] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1674.347028][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.373009][ T9] usb 6-1: config 0 has no interfaces? [ 1674.410927][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1674.440697][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.461400][ T9] usb 6-1: Product: syz [ 1674.490402][ T9] usb 6-1: Manufacturer: syz [ 1674.495068][ T9] usb 6-1: SerialNumber: syz [ 1674.533436][ T9] usb 6-1: config 0 descriptor?? [ 1674.884047][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1675.156944][T21121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.259753][T21121] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1676.148740][T21131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1677.021371][ T24] usb 6-1: USB disconnect, device number 24 [ 1678.060117][T21156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4035'. [ 1678.390933][T21161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1678.447117][T21159] 8021q: VLANs not supported on vcan0 [ 1678.648360][T21165] netlink: 'syz.6.4039': attribute type 1 has an invalid length. [ 1678.669678][T21165] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1679.636797][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4041'. [ 1679.998941][T16552] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1680.376627][T16552] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1680.403594][T16552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.446331][T16552] usb 4-1: Product: syz [ 1680.450568][T16552] usb 4-1: Manufacturer: syz [ 1680.467797][T16552] usb 4-1: SerialNumber: syz [ 1680.488440][T16552] usb 4-1: config 0 descriptor?? [ 1680.512910][T16552] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1680.544650][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1680.612806][T21184] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1681.547640][T16552] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 1681.899757][ T24] usb 4-1: USB disconnect, device number 40 [ 1681.966787][T21203] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1683.419002][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1685.968077][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1686.174268][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1686.221132][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1686.247028][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1686.266806][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.295611][ T24] usb 6-1: Product: syz [ 1686.305014][ T24] usb 6-1: Manufacturer: syz [ 1686.323854][ T24] usb 6-1: SerialNumber: syz [ 1686.351614][ T24] usb 6-1: config 0 descriptor?? [ 1686.427502][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1686.478606][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1686.534103][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1686.605174][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1686.642088][ T24] usb 6-1: USB disconnect, device number 25 [ 1686.676375][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.068387][ T9] usb 1-1: Product: syz [ 1687.085798][ T9] usb 1-1: Manufacturer: syz [ 1687.090456][ T9] usb 1-1: SerialNumber: syz [ 1687.123437][ T9] usb 1-1: config 0 descriptor?? [ 1687.133198][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1687.153632][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1687.798827][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1687.820508][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1688.450626][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 1688.481136][ T9] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1688.512281][ T9] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1689.096228][ T9] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1689.161988][ T9] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1689.190134][ T9] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1689.208153][ T9] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1689.237457][ T9] usb 1-1: USB disconnect, device number 36 [ 1691.088975][T21281] input: syz1 as /devices/virtual/input/input40 [ 1693.783902][T21299] siw: device registration error -23 [ 1694.334847][T21301] lo speed is unknown, defaulting to 1000 [ 1697.176328][T21325] lo speed is unknown, defaulting to 1000 [ 1698.274443][T21295] ALSA: mixer_oss: invalid OSS volume '' [ 1699.921968][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4089'. [ 1701.720610][T21365] lo speed is unknown, defaulting to 1000 [ 1702.516414][T21375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.992689][T21386] siw: device registration error -23 [ 1707.338339][T21423] loop6: detected capacity change from 0 to 524287999 [ 1707.723530][T21426] lo speed is unknown, defaulting to 1000 [ 1709.397569][T21436] netlink: 'syz.6.4114': attribute type 7 has an invalid length. [ 1711.981259][T21486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1712.008144][T21489] loop6: detected capacity change from 0 to 524287999 [ 1713.912009][T21508] netlink: 'syz.5.4136': attribute type 12 has an invalid length. [ 1714.006186][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 1714.543755][T21513] lo speed is unknown, defaulting to 1000 [ 1714.720805][T21502] netlink: 'syz.3.4134': attribute type 7 has an invalid length. [ 1714.739100][T21517] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1714.831618][T21517] netlink: 'syz.4.4138': attribute type 10 has an invalid length. [ 1714.904533][T21517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1716.041615][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1717.651361][T21538] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1717.822539][T21538] netlink: 'syz.5.4144': attribute type 10 has an invalid length. [ 1717.856038][T21538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4144'. [ 1718.082676][T21538] team0: Port device geneve0 added [ 1718.103806][T13613] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1718.326143][T13613] usb 4-1: Using ep0 maxpacket: 16 [ 1718.334453][T13613] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1718.346894][T13613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1718.392596][T13613] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1718.402181][T13613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.417134][T13613] usb 4-1: Product: syz [ 1718.455176][T13613] usb 4-1: Manufacturer: syz [ 1718.499157][T13613] usb 4-1: SerialNumber: syz [ 1718.515004][T13613] usb 4-1: config 0 descriptor?? [ 1719.054952][T13613] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1719.065882][T13613] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1719.679228][T13613] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1719.688430][T13613] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1720.311120][T13613] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1720.329552][T21568] IPv6: Can't replace route, no match found [ 1720.344313][T13613] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1721.007610][T13613] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1721.015665][T13613] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1721.082616][T13613] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1721.208010][T13613] usb 4-1: USB disconnect, device number 41 [ 1722.614157][T21576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4153'. [ 1724.065547][T16552] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1724.346342][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1724.389653][T16552] usb 7-1: Using ep0 maxpacket: 32 [ 1724.455813][T16552] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1724.492919][T16552] usb 7-1: config 0 has no interface number 0 [ 1724.527986][T16552] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1724.616371][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.669585][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1724.701958][T16552] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1724.724067][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1724.734571][T16552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.749123][T16552] usb 7-1: Product: syz [ 1724.753763][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.762656][T16552] usb 7-1: Manufacturer: syz [ 1724.771281][T16552] usb 7-1: SerialNumber: syz [ 1724.793434][ T9] usb 4-1: config 0 descriptor?? [ 1724.827281][T16552] usb 7-1: config 0 descriptor?? [ 1724.902017][T16552] smsc75xx v1.0.0 [ 1724.939920][T16552] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1725.016339][T16552] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1725.346560][T21616] 9pnet_fd: Insufficient options for proto=fd [ 1726.601152][T21627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1728.313118][T16302] usb 4-1: USB disconnect, device number 42 [ 1728.710808][T16302] usb 7-1: USB disconnect, device number 14 [ 1729.569893][T21647] openvswitch: : Dropping previously announced user features [ 1729.582078][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4173'. [ 1730.551089][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.560618][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.571827][T13613] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1730.791139][T13613] usb 1-1: Using ep0 maxpacket: 8 [ 1730.820851][T13613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.906447][T13613] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1730.937541][T13613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.957061][T16552] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1731.067955][T13613] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1731.083457][T13613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.144271][T13613] hub 1-1:1.0: bad descriptor, ignoring hub [ 1731.305912][T16552] usb 7-1: Using ep0 maxpacket: 32 [ 1731.335790][T13613] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1731.344549][T16552] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1731.733446][T16552] usb 7-1: config 0 has no interface number 0 [ 1731.733688][T13613] cdc_wdm 1-1:1.0: skipping garbage [ 1731.784695][T16552] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1731.786151][T13613] cdc_wdm 1-1:1.0: skipping garbage [ 1731.823976][T13613] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1732.074189][T16552] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1732.187010][T16552] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.207798][T13613] usb 1-1: reset high-speed USB device number 37 using dummy_hcd [ 1732.210779][T16552] usb 7-1: Product: syz [ 1732.237844][T16552] usb 7-1: Manufacturer: syz [ 1732.257200][T16552] usb 7-1: SerialNumber: syz [ 1732.271889][T16552] usb 7-1: config 0 descriptor?? [ 1732.307445][T16552] smsc75xx v1.0.0 [ 1732.311576][T16552] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1732.328236][T16552] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1732.426592][T16302] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1732.616768][T16302] usb 6-1: Using ep0 maxpacket: 8 [ 1732.660802][T16302] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.679636][T16302] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1732.693747][T16302] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.721916][T16302] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1732.748776][T16302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.780966][T16302] hub 6-1:1.0: bad descriptor, ignoring hub [ 1732.793126][T16302] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1732.828346][T16302] cdc_wdm 6-1:1.0: skipping garbage [ 1732.848020][T16302] cdc_wdm 6-1:1.0: skipping garbage [ 1732.858642][T16302] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1732.960703][T13613] usb 1-1: USB disconnect, device number 37 [ 1733.126765][T13613] usb 6-1: USB disconnect, device number 26 [ 1733.173846][T21680] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1733.479989][T13613] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1733.658961][T13613] usb 5-1: Using ep0 maxpacket: 8 [ 1733.695702][T13613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.734382][T13613] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1733.794931][T13613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.632218][T13613] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1734.678163][T13613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.770014][T13613] hub 5-1:1.0: bad descriptor, ignoring hub [ 1734.802908][T13613] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1734.999226][T13613] cdc_wdm 5-1:1.0: skipping garbage [ 1735.004585][T13613] cdc_wdm 5-1:1.0: skipping garbage [ 1735.021842][T13613] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1736.137011][T13613] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 1736.876110][T20159] usb 7-1: USB disconnect, device number 15 [ 1737.133522][T13613] usb 5-1: USB disconnect, device number 41 [ 1737.277006][T21712] netlink: 'syz.6.4193': attribute type 1 has an invalid length. [ 1737.346721][T21701] netlink: 'syz.0.4190': attribute type 7 has an invalid length. [ 1737.371882][T21712] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1737.931138][T21716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1740.398060][T21729] tty tty20: ldisc open failed (-12), clearing slot 19 [ 1740.508453][T21735] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1740.567233][T21735] netlink: 'syz.5.4200': attribute type 10 has an invalid length. [ 1740.602909][T21735] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4200'. [ 1740.950854][T21740] input: syz1 as /devices/virtual/input/input41 [ 1743.556468][T21756] netlink: 'syz.0.4207': attribute type 7 has an invalid length. [ 1744.672816][T21768] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1746.210381][T21783] netlink: 'syz.4.4212': attribute type 1 has an invalid length. [ 1746.288758][T21783] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1747.104492][T21789] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1748.252862][T21796] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1748.287960][T21796] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 1748.363271][T21796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1748.629470][T21796] team0: Port device geneve0 added [ 1750.460650][T21833] netlink: 'syz.6.4228': attribute type 1 has an invalid length. [ 1750.578780][T21833] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1751.810680][T21851] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4235'. [ 1753.413322][T21869] netlink: 'syz.6.4241': attribute type 1 has an invalid length. [ 1753.444694][T21869] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1754.074515][T21878] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1755.186319][T16552] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1755.365567][T13613] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1755.431421][T16552] usb 5-1: no configurations [ 1755.465776][T16552] usb 5-1: can't read configurations, error -22 [ 1755.674623][T13613] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 1755.688393][T16552] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1755.741045][T13613] usb 4-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 1755.816069][T13613] usb 4-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 1755.855928][T13613] usb 4-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 1755.910560][T16552] usb 5-1: no configurations [ 1755.936791][T13613] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1755.941633][T16552] usb 5-1: can't read configurations, error -22 [ 1755.986213][T13613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.986601][T16552] usb usb5-port1: attempt power cycle [ 1756.415564][T16552] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1756.504324][T16552] usb 5-1: no configurations [ 1756.535574][T16552] usb 5-1: can't read configurations, error -22 [ 1756.736021][T16552] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1756.796643][T16552] usb 5-1: no configurations [ 1756.813222][T16552] usb 5-1: can't read configurations, error -22 [ 1756.838920][T16552] usb usb5-port1: unable to enumerate USB device [ 1757.322393][T21915] siw: device registration error -23 [ 1758.094620][T21924] lo speed is unknown, defaulting to 1000 [ 1758.861003][T21934] siw: device registration error -23 [ 1759.755533][T16552] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1759.935867][T16552] usb 1-1: Using ep0 maxpacket: 16 [ 1759.982539][T16552] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1760.031462][T16552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.074379][T16552] usb 1-1: Product: syz [ 1760.086856][T16552] usb 1-1: Manufacturer: syz [ 1760.092709][T16552] usb 1-1: SerialNumber: syz [ 1760.236258][T16552] usb 1-1: config 0 descriptor?? [ 1760.270178][T16552] as10x_usb: device has been detected [ 1760.294661][T16552] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1760.304188][T13613] usb 4-1: string descriptor 0 read error: -71 [ 1760.384637][T16552] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1760.388761][T13613] usb 4-1: USB disconnect, device number 43 [ 1760.746681][T16552] as10x_usb: error during firmware upload part1 [ 1760.753665][T16552] Registered device Sky IT Digital Key (green led) [ 1760.766961][T16552] usb 1-1: USB disconnect, device number 38 [ 1760.809434][T16552] Unregistered device Sky IT Digital Key (green led) [ 1760.812886][T16552] as10x_usb: device has been disconnected [ 1761.788583][T21959] siw: device registration error -23 [ 1762.335103][T21965] netlink: 'syz.3.4271': attribute type 10 has an invalid length. [ 1762.343380][T21965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1762.924507][T21971] lo speed is unknown, defaulting to 1000 [ 1764.161638][T20159] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1764.264297][T21984] lo speed is unknown, defaulting to 1000 [ 1764.365428][T20159] usb 4-1: Using ep0 maxpacket: 32 [ 1764.448924][T20159] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1764.490700][T20159] usb 4-1: config 0 has no interface number 0 [ 1764.580455][T20159] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1765.273803][T20159] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1765.358763][T20159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.375655][T20159] usb 4-1: Product: syz [ 1765.386985][T20159] usb 4-1: Manufacturer: syz [ 1765.449280][T20159] usb 4-1: SerialNumber: syz [ 1766.026834][T20159] usb 4-1: config 0 descriptor?? [ 1766.079100][T20159] smsc75xx v1.0.0 [ 1766.082780][T20159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1766.136904][T20159] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1767.095104][T21996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.161213][T21996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1767.211287][T21996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.241147][T21996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.559584][T22011] lo speed is unknown, defaulting to 1000 [ 1769.387206][ T5871] usb 4-1: USB disconnect, device number 44 [ 1771.037566][ T5871] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1771.246199][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 1771.407324][ T5871] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1771.429131][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.441128][ T5871] usb 5-1: Product: syz [ 1771.445556][ T5871] usb 5-1: Manufacturer: syz [ 1771.450280][ T5871] usb 5-1: SerialNumber: syz [ 1771.468446][ T5871] usb 5-1: config 0 descriptor?? [ 1771.544192][ T5871] as10x_usb: device has been detected [ 1771.552155][ T5871] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1771.583244][ T5871] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1771.611384][ T5871] as10x_usb: error during firmware upload part1 [ 1771.667124][ T5871] Registered device Sky IT Digital Key (green led) [ 1771.872703][T22044] random: crng reseeded on system resumption [ 1773.447614][ T5871] usb 5-1: USB disconnect, device number 46 [ 1773.598737][ T5871] Unregistered device Sky IT Digital Key (green led) [ 1773.611692][ T5871] as10x_usb: device has been disconnected [ 1773.627189][T20159] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1773.837274][T20159] usb 4-1: Using ep0 maxpacket: 32 [ 1773.872934][T20159] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1773.921692][T20159] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1773.969290][T20159] usb 4-1: can't read configurations, error -71 [ 1775.832449][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 1778.434220][T22119] lo speed is unknown, defaulting to 1000 [ 1778.507986][ T5827] Bluetooth: Frame is too long (len 16, expected len 4) [ 1779.284411][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1780.127296][T20159] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1780.559035][T20159] usb 5-1: config 0 has no interfaces? [ 1781.026554][T22149] siw: device registration error -23 [ 1781.072925][T20159] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1781.092634][T20159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.107171][T20159] usb 5-1: Product: syz [ 1781.111389][T20159] usb 5-1: Manufacturer: syz [ 1781.117582][T20159] usb 5-1: SerialNumber: syz [ 1781.124905][T20159] usb 5-1: config 0 descriptor?? [ 1784.940587][ T5827] Bluetooth: Frame is too long (len 16, expected len 4) [ 1785.219441][T16552] usb 5-1: USB disconnect, device number 47 [ 1786.181419][T22191] siw: device registration error -23 [ 1788.020351][T22204] loop6: detected capacity change from 0 to 524287999 [ 1788.092326][T22206] netlink: 'syz.0.4335': attribute type 12 has an invalid length. [ 1790.437969][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4341'. [ 1791.312914][T22226] Bluetooth: Frame is too long (len 16, expected len 4) [ 1791.694551][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.702343][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.086706][T22226] Bluetooth: hci0: command 0x0405 tx timeout [ 1797.249877][T16552] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1797.525913][T16552] usb 6-1: Using ep0 maxpacket: 16 [ 1797.745893][T16552] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1798.148892][T16552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1798.202269][T16552] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1798.244978][T16552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.278868][T16552] usb 6-1: Product: syz [ 1798.292349][T16552] usb 6-1: Manufacturer: syz [ 1798.432119][T16552] usb 6-1: SerialNumber: syz [ 1798.482197][T16552] usb 6-1: config 0 descriptor?? [ 1798.499549][T16552] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1798.568431][T16552] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1799.215930][T16552] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1799.248337][T16552] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1800.322097][T16552] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1800.339568][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 1800.381948][T16552] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1800.452806][T16552] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1801.111022][T16552] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1801.134362][T16552] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1801.186951][T16552] usb 6-1: USB disconnect, device number 27 [ 1801.256723][T13613] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1801.528134][T13613] usb 1-1: Using ep0 maxpacket: 32 [ 1801.550230][ T30] audit: type=1326 audit(1748660204.094:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22302 comm="syz.3.4361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461c98e969 code=0x0 [ 1801.592494][T13613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.607713][T13613] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1801.638513][T13613] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1801.664857][T13613] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1801.681396][T13613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.690622][T13613] usb 1-1: Product: syz [ 1801.696287][T13613] usb 1-1: Manufacturer: syz [ 1801.700913][T13613] usb 1-1: SerialNumber: syz [ 1802.595828][T22295] futex_wake_op: syz.0.4359 tries to shift op by 144; fix this program [ 1804.262481][T22326] lo speed is unknown, defaulting to 1000 [ 1808.009085][T13613] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1808.257533][T13613] usb 1-1: USB disconnect, device number 39 [ 1808.482612][T22347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4373'. [ 1810.288397][T22364] loop6: detected capacity change from 0 to 524287999 [ 1810.662169][T22363] netlink: 'syz.4.4375': attribute type 12 has an invalid length. [ 1810.794610][T22364] loop6: unable to read partition table [ 1810.800646][T22364] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1811.064315][T22367] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1811.151752][T22367] netlink: 'syz.3.4377': attribute type 10 has an invalid length. [ 1811.202021][T22367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1813.096158][T13613] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1813.270760][T13613] usb 1-1: device descriptor read/64, error -71 [ 1813.672878][T13613] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1813.837930][T13613] usb 1-1: device descriptor read/64, error -71 [ 1814.156786][T13613] usb usb1-port1: attempt power cycle [ 1815.206719][T13613] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1815.288914][T13613] usb 1-1: device descriptor read/8, error -71 [ 1815.553423][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4386'. [ 1817.740393][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1817.845792][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1818.242882][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1818.304269][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.341422][ T9] usb 4-1: Product: syz [ 1818.346126][ T9] usb 4-1: Manufacturer: syz [ 1818.351306][ T9] usb 4-1: SerialNumber: syz [ 1818.362500][ T9] usb 4-1: config 0 descriptor?? [ 1818.379489][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1819.075710][T22428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1819.293419][ T9] usb 4-1: USB disconnect, device number 47 [ 1822.506333][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1822.768673][ T9] usb 5-1: device descriptor read/64, error -71 [ 1823.307436][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1823.510142][T22455] netlink: 'syz.0.4400': attribute type 12 has an invalid length. [ 1823.886674][ T9] usb 5-1: device descriptor read/64, error -71 [ 1824.006658][ T9] usb usb5-port1: attempt power cycle [ 1824.496470][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1824.600766][ T9] usb 5-1: device descriptor read/8, error -71 [ 1824.708296][T22464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 1824.887251][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1824.926744][ T9] usb 5-1: device descriptor read/8, error -71 [ 1825.275844][ T9] usb usb5-port1: unable to enumerate USB device [ 1825.627691][T22469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4405'. [ 1826.556101][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1826.788396][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1826.826344][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.858878][ T9] usb 4-1: Product: syz [ 1826.863095][ T9] usb 4-1: Manufacturer: syz [ 1826.911561][ T9] usb 4-1: SerialNumber: syz [ 1826.956859][ T9] usb 4-1: config 0 descriptor?? [ 1827.069337][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1827.524618][ T9] usb 4-1: USB disconnect, device number 48 [ 1828.768954][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1829.111991][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1829.144018][ T9] usb 1-1: config 0 has no interface number 0 [ 1829.172361][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1829.232901][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.404496][T16552] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1829.478360][ T9] usb 1-1: config 0 descriptor?? [ 1829.497148][ T9] usb 1-1: selecting invalid altsetting 1 [ 1829.508506][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1829.528973][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1829.615946][T16552] usb 6-1: device descriptor read/64, error -71 [ 1829.777306][ T9] DVB: Unable to find symbol cx22700_attach() [ 1829.865954][T16552] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1829.932217][ T9] DVB: Unable to find symbol tda10046_attach() [ 1830.105013][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1830.123477][T16552] usb 6-1: device descriptor read/64, error -71 [ 1830.158712][ T9] usb 1-1: USB disconnect, device number 44 [ 1830.522560][T16552] usb usb6-port1: attempt power cycle [ 1830.890307][T16552] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1830.948327][T16552] usb 6-1: device descriptor read/8, error -71 [ 1831.798342][T16552] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1832.436823][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1832.499179][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1832.533174][T16552] usb 6-1: device descriptor read/8, error -71 [ 1832.625601][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1832.640041][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1832.646855][T16552] usb usb6-port1: unable to enumerate USB device [ 1832.710402][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1832.778824][T22527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4422'. [ 1832.811959][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1832.854591][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.910609][ T24] usb 1-1: Product: syz [ 1832.914925][ T24] usb 1-1: Manufacturer: syz [ 1832.951077][ T24] usb 1-1: SerialNumber: syz [ 1833.025687][ T24] usb 1-1: config 0 descriptor?? [ 1833.061165][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1833.161738][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1833.418670][T13613] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1833.468108][T22539] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1833.641247][T22540] lo speed is unknown, defaulting to 1000 [ 1833.651707][T13613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.679287][T13613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.733738][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1833.742376][T13613] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1833.774995][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1833.807422][T13613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.840562][T13613] usb 5-1: config 0 descriptor?? [ 1834.293848][T13613] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 1834.386521][T13613] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1834.432251][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1834.484672][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1834.516630][T13613] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 1835.403785][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1835.430418][T13613] cp2112 0003:10C4:EA90.0002: error setting SMBus config [ 1835.454537][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1835.477770][T13613] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 1835.487569][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1835.494843][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1835.508088][T13613] usb 5-1: USB disconnect, device number 52 [ 1835.656076][ T24] usb 1-1: USB disconnect, device number 45 [ 1836.063053][ T5871] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1836.267054][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 1836.288239][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1836.324300][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1836.352409][ T5871] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1836.362584][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.375939][ T5871] usb 6-1: Product: syz [ 1836.380135][ T5871] usb 6-1: Manufacturer: syz [ 1836.388044][ T5871] usb 6-1: SerialNumber: syz [ 1836.411464][ T5871] usb 6-1: config 0 descriptor?? [ 1836.415838][T16552] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1836.450274][ T5871] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1836.476002][T20159] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1836.495043][ T5871] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1836.558381][T16552] usb 7-1: device descriptor read/64, error -71 [ 1836.663859][T20159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.692757][T20159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.706527][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1836.714455][T20159] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1836.767555][T20159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.793704][T20159] usb 5-1: config 0 descriptor?? [ 1836.826960][T16552] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1836.877446][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1836.889572][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1836.917442][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1836.956115][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1836.974318][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.978995][T16552] usb 7-1: device descriptor read/64, error -71 [ 1837.029226][ T24] usb 1-1: Product: syz [ 1837.033985][ T24] usb 1-1: Manufacturer: syz [ 1837.056653][ T24] usb 1-1: SerialNumber: syz [ 1837.069791][ T24] usb 1-1: config 0 descriptor?? [ 1837.082799][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1837.096767][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1837.112943][ T5871] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1837.122643][ T5871] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1837.158372][T16552] usb usb7-port1: attempt power cycle [ 1837.267210][T20159] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1837.308892][T20159] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1837.459782][T20159] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 1837.506556][T16552] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1837.559461][T16552] usb 7-1: device descriptor read/8, error -71 [ 1837.704290][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1837.718316][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1837.754243][ T5871] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1837.787940][ T5871] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1837.817376][T16552] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1837.894276][T16552] usb 7-1: device descriptor read/8, error -71 [ 1838.028901][T16552] usb usb7-port1: unable to enumerate USB device [ 1838.073395][T20159] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 1838.101749][T20159] usb 5-1: USB disconnect, device number 53 [ 1838.308714][T22572] siw: device registration error -23 [ 1838.355932][ T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1838.369157][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1838.422392][ T5871] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1838.440732][ T5871] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1838.452059][ T5871] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1838.466803][ T5871] usb 6-1: USB disconnect, device number 32 [ 1838.474513][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1839.187725][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1839.257224][ T24] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1839.502012][ T24] usb 1-1: USB disconnect, device number 46 [ 1839.735608][ T5826] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1839.847802][T22595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4441'. [ 1839.953093][ T5826] usb 4-1: config 0 has no interfaces? [ 1840.038278][ T5826] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1840.061807][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.078676][T20159] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1840.167730][ T5826] usb 4-1: Product: syz [ 1840.172049][ T5826] usb 4-1: Manufacturer: syz [ 1840.204364][ T5826] usb 4-1: SerialNumber: syz [ 1840.236833][ T5826] usb 4-1: config 0 descriptor?? [ 1840.352737][T20159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.390301][T20159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.424684][T20159] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1840.449652][T20159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.528352][T20159] usb 5-1: config 0 descriptor?? [ 1841.296247][T20159] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1841.432003][T20159] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1841.557100][T20159] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 1841.719345][T20159] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 1841.767952][T20159] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 1841.841566][T20159] usb 5-1: USB disconnect, device number 54 [ 1842.013204][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4447'. [ 1842.029058][T22610] vlan2: entered promiscuous mode [ 1842.714463][T22615] IPv6: Can't replace route, no match found [ 1843.471978][ T5827] Bluetooth: Frame is too long (len 16, expected len 4) [ 1843.700903][ T5826] usb 4-1: USB disconnect, device number 49 [ 1844.166130][ T5826] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1844.466377][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1845.178248][ T5826] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1845.336361][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1845.462296][ T5826] usb usb4-port1: attempt power cycle [ 1845.648344][T22651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1845.875919][ T5826] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1845.916303][T16552] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1845.988660][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1846.096766][T16552] usb 6-1: Using ep0 maxpacket: 32 [ 1846.236983][T16552] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1846.248643][T16552] usb 6-1: config 0 has no interface number 0 [ 1846.254774][T16552] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1846.293057][T16552] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1846.306190][ T5826] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1846.328289][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1846.339523][T16552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.449418][ T5826] usb usb4-port1: unable to enumerate USB device [ 1846.536402][T16552] usb 6-1: Product: syz [ 1846.555498][T16552] usb 6-1: Manufacturer: syz [ 1846.587128][T16552] usb 6-1: SerialNumber: syz [ 1846.620107][T16552] usb 6-1: config 0 descriptor?? [ 1846.637958][T16552] smsc75xx v1.0.0 [ 1846.641609][T16552] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1846.664281][T16552] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1846.848261][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1846.892698][T22649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1846.934586][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1846.978200][T22649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.106908][T16552] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1848.287280][T16552] usb 5-1: Using ep0 maxpacket: 8 [ 1848.499464][T16552] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1848.536140][T16552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1848.562819][ T5827] Bluetooth: Frame is too long (len 16, expected len 4) [ 1848.587406][T16552] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1848.606260][T16552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.619979][T16552] usb 5-1: Product: syz [ 1848.633528][ T5871] usb 6-1: USB disconnect, device number 33 [ 1848.636294][T16552] usb 5-1: Manufacturer: syz [ 1848.656708][T16552] usb 5-1: SerialNumber: syz [ 1848.673557][T16552] usb 5-1: config 0 descriptor?? [ 1848.691992][T16552] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1848.991711][T16552] usb 5-1: USB disconnect, device number 55 [ 1850.956301][T22696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4473'. [ 1851.046518][ T5826] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1851.371043][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.382128][ T5826] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1851.392498][ T5826] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1851.402410][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.414570][ T5826] usb 4-1: config 0 descriptor?? [ 1851.838056][T22707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4475'. [ 1853.236390][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.242807][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.459025][ T5826] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1854.856834][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.265975][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.281858][ T5826] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1855.297134][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.317938][ T5826] usb 5-1: config 0 descriptor?? [ 1855.361763][ T5871] usb 4-1: USB disconnect, device number 54 [ 1855.690730][T22737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4484'. [ 1855.769474][T22737] vlan2: entered promiscuous mode [ 1855.892185][ T5826] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1855.909817][ T5826] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1856.338893][ T5826] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 1856.538495][ T5826] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 1856.552329][ T5826] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 1856.579266][ T5826] usb 5-1: USB disconnect, device number 56 [ 1856.956219][T13613] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1857.106476][T13613] usb 1-1: device descriptor read/64, error -71 [ 1857.375480][T13613] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1857.535410][T13613] usb 1-1: device descriptor read/64, error -71 [ 1857.733754][T13613] usb usb1-port1: attempt power cycle [ 1858.169033][T13613] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1858.564115][T22761] siw: device registration error -23 [ 1858.600467][T13613] usb 1-1: device descriptor read/8, error -71 [ 1858.935767][T13613] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1858.956829][T13613] usb 1-1: device descriptor read/8, error -71 [ 1859.068278][T13613] usb usb1-port1: unable to enumerate USB device [ 1859.659881][T22781] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4494'. [ 1860.331973][T22778] lo speed is unknown, defaulting to 1000 [ 1860.515891][T22787] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1860.606871][T22787] binder: BINDER_SET_CONTEXT_MGR already set [ 1860.616105][T22787] binder: 22786:22787 ioctl 4018620d 200000000040 returned -16 [ 1861.136232][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1861.756902][T22795] loop6: detected capacity change from 0 to 524287999 [ 1861.785485][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1861.807962][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1861.823430][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1862.026764][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1862.186973][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.220239][ T9] usb 4-1: Product: syz [ 1862.236609][ T9] usb 4-1: Manufacturer: syz [ 1862.261990][ T9] usb 4-1: SerialNumber: syz [ 1862.304697][ T9] usb 4-1: config 0 descriptor?? [ 1862.376341][T22795] loop6: unable to read partition table [ 1862.382297][T22795] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1862.396480][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1862.440806][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1863.155654][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1863.170131][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1863.652361][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1863.677042][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 1864.102452][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1864.399547][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.438274][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1864.471352][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1864.507502][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.572667][ T9] usb 1-1: config 0 descriptor?? [ 1865.354136][T22817] siw: device registration error -23 [ 1865.503933][T20159] usb 4-1: USB disconnect, device number 55 [ 1865.610792][T20159] em28xx 4-1:0.0: Disconnecting em28xx [ 1865.737355][T20159] em28xx 4-1:0.0: Freeing device [ 1867.646502][T13613] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1867.978201][T13613] usb 5-1: Using ep0 maxpacket: 8 [ 1868.075301][T13613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.086776][T13613] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1868.097319][T13613] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1868.111663][T13613] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1868.121924][T13613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.173377][T13613] hub 5-1:1.0: bad descriptor, ignoring hub [ 1868.204726][T13613] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1868.244513][T13613] cdc_wdm 5-1:1.0: skipping garbage [ 1868.260405][T13613] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1868.305422][T16552] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1868.526060][T16552] usb 6-1: Using ep0 maxpacket: 32 [ 1868.603256][T16552] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.643910][T16552] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1868.723485][T16552] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1868.779044][T16552] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1868.810770][T16552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.819891][T20159] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 1868.862084][T16552] usb 6-1: Product: syz [ 1868.869264][T12880] usb 1-1: USB disconnect, device number 51 [ 1868.878644][T16552] usb 6-1: Manufacturer: syz [ 1868.883282][T16552] usb 6-1: SerialNumber: syz [ 1868.920977][T22851] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4511'. [ 1869.288021][T22845] futex_wake_op: syz.5.4510 tries to shift op by 144; fix this program [ 1869.416595][T13613] usb 5-1: USB disconnect, device number 57 [ 1870.688882][T16552] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1870.781815][T22867] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1870.831550][T16552] usb 6-1: USB disconnect, device number 34 [ 1870.935912][T13613] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1871.142103][T13613] usb 1-1: Using ep0 maxpacket: 16 [ 1871.178406][T13613] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1871.209113][T13613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1871.569895][T13613] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1871.582433][T13613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.591813][T13613] usb 1-1: Product: syz [ 1871.597527][T13613] usb 1-1: Manufacturer: syz [ 1871.603193][T13613] usb 1-1: SerialNumber: syz [ 1871.615975][T13613] usb 1-1: config 0 descriptor?? [ 1871.639992][T13613] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1871.670815][T13613] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1871.697002][T16302] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1872.478339][T16302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.497128][T16302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.526237][T16302] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1872.537099][T16302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.551346][T16302] usb 5-1: config 0 descriptor?? [ 1872.636223][T16552] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1872.678059][T13613] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1872.702312][T13613] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1872.807427][T16552] usb 6-1: Using ep0 maxpacket: 32 [ 1873.001361][T16552] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.373122][T16552] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1873.411946][T16552] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1873.416203][T13613] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1873.432470][T22891] siw: device registration error -23 [ 1873.434375][T13613] em28xx 1-1:0.0: No AC97 audio processor [ 1873.448550][T16302] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1873.482868][T16302] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1873.522103][T16552] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1873.549637][T16552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.606987][T16552] usb 6-1: Product: syz [ 1873.625014][T16552] usb 6-1: Manufacturer: syz [ 1873.639629][T16552] usb 6-1: SerialNumber: syz [ 1873.667790][T16302] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 1873.894123][T22884] futex_wake_op: syz.5.4522 tries to shift op by 144; fix this program [ 1874.233773][T16302] cp2112 0003:10C4:EA90.0006: error setting SMBus config [ 1874.271520][T16302] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 1874.526622][T16302] usb 5-1: USB disconnect, device number 58 [ 1874.809859][T16552] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1874.964756][T16552] usb 6-1: USB disconnect, device number 35 [ 1874.980525][T12880] usb 1-1: USB disconnect, device number 52 [ 1875.004989][T12880] em28xx 1-1:0.0: Disconnecting em28xx [ 1875.062382][T12880] em28xx 1-1:0.0: Freeing device [ 1875.889698][T22911] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1876.452294][T22912] lo speed is unknown, defaulting to 1000 [ 1879.456427][T13613] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1879.795703][T13613] usb 5-1: Using ep0 maxpacket: 16 [ 1880.246254][T22947] siw: device registration error -23 [ 1880.343582][T13613] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1880.422031][T13613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.468828][T13613] usb 5-1: Product: syz [ 1880.486662][T13613] usb 5-1: Manufacturer: syz [ 1880.514562][T13613] usb 5-1: SerialNumber: syz [ 1880.599560][T13613] usb 5-1: config 0 descriptor?? [ 1880.626763][T13613] as10x_usb: device has been detected [ 1880.642907][T13613] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1880.734723][T13613] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1880.771988][T13613] as10x_usb: error during firmware upload part1 [ 1880.790959][T13613] Registered device Sky IT Digital Key (green led) [ 1880.936937][T22942] random: crng reseeded on system resumption [ 1880.963580][T22954] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4544'. [ 1880.977597][T12880] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1881.147218][T12880] usb 4-1: Using ep0 maxpacket: 32 [ 1881.165019][T12880] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1881.199813][T12880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1881.225553][T12880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1881.252577][T12880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1881.296471][T12880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1881.340877][T12880] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1881.353798][T12880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.362715][T12880] usb 4-1: Product: syz [ 1881.367313][T12880] usb 4-1: Manufacturer: syz [ 1881.371936][T12880] usb 4-1: SerialNumber: syz [ 1881.386575][T12880] usb 4-1: config 0 descriptor?? [ 1881.944725][T22973] netlink: 'syz.5.4550': attribute type 4 has an invalid length. [ 1881.995055][T12880] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1882.029554][T12880] input input42: Device does not respond to id packet M [ 1882.082014][T22973] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4550'. [ 1882.087708][T12880] input input42: Device does not respond to id packet P [ 1882.191793][T16302] usb 5-1: USB disconnect, device number 59 [ 1882.322470][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.322929][T16302] Unregistered device Sky IT Digital Key (green led) [ 1882.349690][T12880] input input42: Device does not respond to id packet B [ 1882.408947][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.453018][T12880] input input42: Device does not respond to id packet N [ 1882.481764][T16302] as10x_usb: device has been disconnected [ 1882.503413][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.554198][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.601411][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.667134][T12880] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1882.731988][T12880] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 1882.885904][T12880] usb 4-1: USB disconnect, device number 56 [ 1883.004254][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1883.461111][T22993] lo speed is unknown, defaulting to 1000 [ 1883.792661][T23001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.950091][T23007] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1885.285562][T17757] ================================================================== [ 1885.293765][T17757] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1da/0x5f0 [ 1885.301433][T17757] Read of size 4 at addr ffff88807e51fe18 by task kworker/u8:9/17757 [ 1885.309503][T17757] [ 1885.311846][T17757] CPU: 0 UID: 0 PID: 17757 Comm: kworker/u8:9 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1885.311868][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1885.311880][T17757] Workqueue: events_unbound netfs_write_collection_worker [ 1885.311906][T17757] Call Trace: [ 1885.311917][T17757] [ 1885.311925][T17757] dump_stack_lvl+0x189/0x250 [ 1885.311970][T17757] ? __kasan_check_byte+0x12/0x40 [ 1885.311997][T17757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1885.312021][T17757] ? lock_release+0x4b/0x3e0 [ 1885.312042][T17757] ? __virt_addr_valid+0x4a5/0x5c0 [ 1885.312066][T17757] print_report+0xd2/0x2b0 [ 1885.312087][T17757] ? iov_iter_revert+0x1da/0x5f0 [ 1885.312119][T17757] kasan_report+0x118/0x150 [ 1885.312145][T17757] ? iov_iter_revert+0x1da/0x5f0 [ 1885.312188][T17757] iov_iter_revert+0x1da/0x5f0 [ 1885.312219][T17757] netfs_retry_writes+0x1645/0x1840 [ 1885.312237][T17757] ? psi_task_change+0xe5/0x250 [ 1885.312267][T17757] ? __pfx_netfs_retry_writes+0x10/0x10 [ 1885.312288][T17757] ? psi_task_change+0xe5/0x250 [ 1885.312314][T17757] netfs_write_collection_worker+0x2007/0x2bd0 [ 1885.312347][T17757] ? process_scheduled_works+0x9ef/0x17b0 [ 1885.312368][T17757] process_scheduled_works+0xae1/0x17b0 [ 1885.312401][T17757] ? __pfx_process_scheduled_works+0x10/0x10 [ 1885.312428][T17757] worker_thread+0x8a0/0xda0 [ 1885.312449][T17757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1885.312480][T17757] ? __kthread_parkme+0x7b/0x200 [ 1885.312506][T17757] kthread+0x70e/0x8a0 [ 1885.312531][T17757] ? __pfx_worker_thread+0x10/0x10 [ 1885.312551][T17757] ? __pfx_kthread+0x10/0x10 [ 1885.312575][T17757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1885.312599][T17757] ? lockdep_hardirqs_on+0x9c/0x150 [ 1885.312613][T17757] ? __pfx_kthread+0x10/0x10 [ 1885.312637][T17757] ret_from_fork+0x3fc/0x770 [ 1885.312657][T17757] ? __pfx_ret_from_fork+0x10/0x10 [ 1885.312677][T17757] ? __switch_to_asm+0x39/0x70 [ 1885.312691][T17757] ? __switch_to_asm+0x33/0x70 [ 1885.312706][T17757] ? __pfx_kthread+0x10/0x10 [ 1885.312730][T17757] ret_from_fork_asm+0x1a/0x30 [ 1885.312754][T17757] [ 1885.312759][T17757] [ 1885.518446][T17757] Allocated by task 20665: [ 1885.522858][T17757] kasan_save_track+0x3e/0x80 [ 1885.527551][T17757] __kasan_kmalloc+0x93/0xb0 [ 1885.532149][T17757] __kmalloc_cache_noprof+0x230/0x3d0 [ 1885.537535][T17757] __set_page_owner+0x25c/0x4a0 [ 1885.542394][T17757] post_alloc_hook+0x240/0x2a0 [ 1885.547209][T17757] get_page_from_freelist+0x21d1/0x22b0 [ 1885.552767][T17757] __alloc_frozen_pages_noprof+0x181/0x370 [ 1885.558578][T17757] __alloc_pages_noprof+0xa/0x30 [ 1885.563518][T17757] ___kmalloc_large_node+0x85/0x210 [ 1885.568729][T17757] __kmalloc_large_node_noprof+0x18/0x90 [ 1885.574370][T17757] __kmalloc_node_track_caller_noprof+0x361/0x4e0 [ 1885.580794][T17757] kmalloc_reserve+0x136/0x290 [ 1885.585566][T17757] __alloc_skb+0x142/0x2d0 [ 1885.589989][T17757] alloc_skb_with_frags+0xca/0x890 [ 1885.595110][T17757] sock_alloc_send_pskb+0x857/0x990 [ 1885.600415][T17757] packet_sendmsg+0x3672/0x53f0 [ 1885.605282][T17757] __sock_sendmsg+0x21c/0x270 [ 1885.609968][T17757] __sys_sendto+0x3bd/0x520 [ 1885.614476][T17757] __x64_sys_sendto+0xde/0x100 [ 1885.619257][T17757] do_syscall_64+0xfa/0x3b0 [ 1885.623761][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.629656][T17757] [ 1885.631982][T17757] The buggy address belongs to the object at ffff88807e51fe00 [ 1885.631982][T17757] which belongs to the cache kmalloc-16 of size 16 [ 1885.645878][T17757] The buggy address is located 8 bytes to the right of [ 1885.645878][T17757] allocated 16-byte region [ffff88807e51fe00, ffff88807e51fe10) [ 1885.660299][T17757] [ 1885.662626][T17757] The buggy address belongs to the physical page: [ 1885.669046][T17757] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e51fce0 pfn:0x7e51f [ 1885.679112][T17757] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1885.686221][T17757] page_type: f5(slab) [ 1885.690208][T17757] raw: 00fff00000000000 ffff88801a441640 ffffea00009f6a80 dead000000000002 [ 1885.698791][T17757] raw: ffff88807e51fce0 000000000080007e 00000000f5000000 0000000000000000 [ 1885.707376][T17757] page dumped because: kasan: bad access detected [ 1885.713817][T17757] page_owner tracks the page as allocated [ 1885.719529][T17757] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5820, tgid 5820 (syz-executor), ts 1077738933482, free_ts 1077738816912 [ 1885.739419][T17757] post_alloc_hook+0x240/0x2a0 [ 1885.744273][T17757] get_page_from_freelist+0x21d1/0x22b0 [ 1885.749823][T17757] __alloc_frozen_pages_noprof+0x181/0x370 [ 1885.755635][T17757] allocate_slab+0x65/0x3b0 [ 1885.760168][T17757] ___slab_alloc+0xbfc/0x1480 [ 1885.764847][T17757] __kvmalloc_node_noprof+0x430/0x600 [ 1885.770237][T17757] xt_replace_table+0x180/0x790 [ 1885.775131][T17757] __do_replace+0x15a/0x980 [ 1885.779659][T17757] do_ip6t_set_ctl+0xa16/0xce0 [ 1885.784426][T17757] nf_setsockopt+0x26c/0x290 [ 1885.789027][T17757] do_sock_setsockopt+0x257/0x3e0 [ 1885.794076][T17757] __x64_sys_setsockopt+0x18b/0x220 [ 1885.799280][T17757] do_syscall_64+0xfa/0x3b0 [ 1885.803783][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.809677][T17757] page last free pid 5820 tgid 5820 stack trace: [ 1885.815994][T17757] __free_frozen_pages+0xc65/0xe50 [ 1885.821104][T17757] kasan_populate_vmalloc+0x118/0x1a0 [ 1885.826475][T17757] alloc_vmap_area+0x1e2b/0x24c0 [ 1885.831469][T17757] __get_vm_area_node+0x1f8/0x300 [ 1885.836515][T17757] __vmalloc_node_range_noprof+0x301/0x1340 [ 1885.842406][T17757] vzalloc_noprof+0xb2/0xf0 [ 1885.846910][T17757] __do_replace+0xab/0x980 [ 1885.851333][T17757] do_ip6t_set_ctl+0xa16/0xce0 [ 1885.856125][T17757] nf_setsockopt+0x26c/0x290 [ 1885.860732][T17757] do_sock_setsockopt+0x257/0x3e0 [ 1885.865765][T17757] __x64_sys_setsockopt+0x18b/0x220 [ 1885.870982][T17757] do_syscall_64+0xfa/0x3b0 [ 1885.875490][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.881394][T17757] [ 1885.883716][T17757] Memory state around the buggy address: [ 1885.889347][T17757] ffff88807e51fd00: 00 04 fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 1885.897408][T17757] ffff88807e51fd80: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 1885.905473][T17757] >ffff88807e51fe00: 00 00 fc fc 00 00 fc fc 00 07 fc fc 00 00 fc fc [ 1885.913538][T17757] ^ [ 1885.918416][T17757] ffff88807e51fe80: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 1885.926476][T17757] ffff88807e51ff00: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 1885.934531][T17757] ================================================================== [ 1886.010400][T17757] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1886.017639][T17757] CPU: 1 UID: 0 PID: 17757 Comm: kworker/u8:9 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 1886.029574][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.039657][T17757] Workqueue: events_unbound netfs_write_collection_worker [ 1886.046821][T17757] Call Trace: [ 1886.050141][T17757] [ 1886.053095][T17757] dump_stack_lvl+0x99/0x250 [ 1886.057817][T17757] ? __asan_memcpy+0x40/0x70 [ 1886.062445][T17757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.067689][T17757] ? __pfx__printk+0x10/0x10 [ 1886.072504][T17757] panic+0x2db/0x790 [ 1886.076429][T17757] ? __pfx_preempt_schedule+0x10/0x10 [ 1886.081807][T17757] ? __pfx_panic+0x10/0x10 [ 1886.086238][T17757] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1886.092159][T17757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1886.098507][T17757] ? iov_iter_revert+0x1da/0x5f0 [ 1886.103455][T17757] check_panic_on_warn+0x89/0xb0 [ 1886.108409][T17757] ? iov_iter_revert+0x1da/0x5f0 [ 1886.113353][T17757] end_report+0x78/0x160 [ 1886.117616][T17757] kasan_report+0x129/0x150 [ 1886.122150][T17757] ? iov_iter_revert+0x1da/0x5f0 [ 1886.127096][T17757] iov_iter_revert+0x1da/0x5f0 [ 1886.131880][T17757] netfs_retry_writes+0x1645/0x1840 [ 1886.137099][T17757] ? psi_task_change+0xe5/0x250 [ 1886.142052][T17757] ? __pfx_netfs_retry_writes+0x10/0x10 [ 1886.147613][T17757] ? psi_task_change+0xe5/0x250 [ 1886.152495][T17757] netfs_write_collection_worker+0x2007/0x2bd0 [ 1886.158668][T17757] ? process_scheduled_works+0x9ef/0x17b0 [ 1886.164396][T17757] process_scheduled_works+0xae1/0x17b0 [ 1886.169963][T17757] ? __pfx_process_scheduled_works+0x10/0x10 [ 1886.175959][T17757] worker_thread+0x8a0/0xda0 [ 1886.180561][T17757] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1886.186907][T17757] ? __kthread_parkme+0x7b/0x200 [ 1886.191853][T17757] kthread+0x70e/0x8a0 [ 1886.195938][T17757] ? __pfx_worker_thread+0x10/0x10 [ 1886.201051][T17757] ? __pfx_kthread+0x10/0x10 [ 1886.205666][T17757] ? _raw_spin_unlock_irq+0x23/0x50 [ 1886.210876][T17757] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.216075][T17757] ? __pfx_kthread+0x10/0x10 [ 1886.220674][T17757] ret_from_fork+0x3fc/0x770 [ 1886.225278][T17757] ? __pfx_ret_from_fork+0x10/0x10 [ 1886.230407][T17757] ? __switch_to_asm+0x39/0x70 [ 1886.235191][T17757] ? __switch_to_asm+0x33/0x70 [ 1886.239966][T17757] ? __pfx_kthread+0x10/0x10 [ 1886.244565][T17757] ret_from_fork_asm+0x1a/0x30 [ 1886.249339][T17757] [ 1886.252503][T17757] Kernel Offset: disabled [ 1886.256825][T17757] Rebooting in 86400 seconds..