last executing test programs: 25m24.76284622s ago: executing program 0 (id=295): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 25m23.695326335s ago: executing program 0 (id=297): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0x8b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1}}], 0x3, 0x60cd894) 25m23.375017846s ago: executing program 0 (id=298): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x6f, 0x7, 0x8, 0x1, 0x3, 0x3, 0x6, 0x24, 0x40, 0x43, 0xfff, 0x1000, 0x38, 0x1, 0x9, 0x3, 0x8}, [{0x5, 0x5, 0x2, 0x5, 0x6, 0xffffffff, 0x1, 0x5}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 25m22.881942508s ago: executing program 0 (id=299): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB, @ANYBLOB], 0x64}}, 0x0) 25m22.828433979s ago: executing program 1 (id=300): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400010000000000800000000a1fa100", @ANYRES32=r2, @ANYBLOB="1400010000000000000000000000ffff0a010101"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d20000000000006040000000000f93132", 0x39}], 0x1) 25m22.041981092s ago: executing program 1 (id=303): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x4000) 25m21.896464013s ago: executing program 0 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x21, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 25m21.659264884s ago: executing program 1 (id=305): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 25m21.312205076s ago: executing program 1 (id=308): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7112c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xad, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9f, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xaf, 0x0, {0x1f, 0x4, 0x1, 0x3e, 0x8, 0x68, 0x2, 0x3, 0x8, 0x7, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x23, 0x5b, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, @loopback, @multicast2, @multicast2, @broadcast]}, @generic={0x82, 0xd, "16abb982b3ced51c2aeab9"}, @timestamp_prespec={0x44, 0x34, 0xc1, 0x3, 0x2, [{@multicast1, 0x7}, {@broadcast, 0xffffffff}, {@empty, 0x63}, {@empty, 0x79a70152}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x400}]}, @timestamp_addr={0x44, 0x4, 0x60, 0x1, 0x8}]}}, "fecb983cb35c43"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @multicast2, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x80, 0x2}, 0x3c) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000003080101000000000000000000000000440004800800064000000000080007400000000008000540fffffffe080001400000000008000540000000040800034000000555080003400000000208000640000100000500030084"], 0x60}}, 0x0) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, 0x0) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7") 25m20.813261708s ago: executing program 0 (id=311): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}, {@data_err_ignore}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r3, &(0x7f00000048c0), 0x0, 0x130, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x1f8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/3) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x28, 0x33, 0x8, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x408c0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000012c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 25m20.061688902s ago: executing program 1 (id=312): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="01002cbd70000400000005000000080018000a01010106001c"], 0x2c}, 0x1, 0x0, 0x0, 0xc100}, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 25m18.647730288s ago: executing program 1 (id=314): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 25m5.29423638s ago: executing program 32 (id=311): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}, {@data_err_ignore}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r3, &(0x7f00000048c0), 0x0, 0x130, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x1f8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/3) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x28, 0x33, 0x8, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x408c0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000012c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 25m3.356768969s ago: executing program 33 (id=314): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 11m6.900991741s ago: executing program 6 (id=2302): socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x200) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x4c, 0xfffffffd) 11m6.586197312s ago: executing program 6 (id=2304): socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd70"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) syz_io_uring_setup(0x2274, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x3}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f7ee25bd7000fcdbdf250200000014000180050001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 11m2.499481119s ago: executing program 6 (id=2311): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(0x0, 0x0) fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x47cdc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) 11m0.649297277s ago: executing program 6 (id=2315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$video(0x0, 0x485, 0x40000) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 10m58.536362695s ago: executing program 6 (id=2317): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) dup3(r4, r3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB]) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) r7 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x35315241, 0xd93f}}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m55.202793409s ago: executing program 6 (id=2324): syz_emit_vhci(&(0x7f0000003040)=ANY=[@ANYBLOB], 0xb) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) 10m39.219400915s ago: executing program 34 (id=2324): syz_emit_vhci(&(0x7f0000003040)=ANY=[@ANYBLOB], 0xb) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) 8.8417325s ago: executing program 3 (id=3981): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.132505983s ago: executing program 7 (id=3983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b, 0x25, 0x0, 0x8d}, 0x49d32d254ae22f79}}, 0x0) 7.772251521s ago: executing program 7 (id=3986): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) close(0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) syz_io_uring_setup(0x238, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009) 7.293080322s ago: executing program 2 (id=3987): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x200, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000014"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 6.984958762s ago: executing program 3 (id=3988): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000011c0)={0x0, 0x3, 0x1, 0x0, 0x0, 0xd, 0x0}) 6.79231029s ago: executing program 4 (id=3989): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000400)={0x4, &(0x7f0000000240)=[{0x6, 0x3, 0x8, 0x5}, {0x0, 0x1, 0xb, 0x8}, {0x5, 0x5, 0xf, 0x9e}, {0xea, 0x8, 0x9, 0x2}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r3, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) open(&(0x7f0000000000)='./file0\x00', 0x111000, 0xe7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 6.73568218s ago: executing program 2 (id=3990): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 6.48390686s ago: executing program 2 (id=3992): preadv(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x6, 0x5) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 6.48310981s ago: executing program 3 (id=3993): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff26, 0x0, 0x0, 0x10, 0x2, @value}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x803, 0x0) pipe2(0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$inet6_udp(0xa, 0x2, 0x0) ioperm(0x0, 0x7, 0x7) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = syz_clone(0xd0804000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = timerfd_create(0x8, 0x0) timerfd_gettime(r4, 0x0) rt_tgsigqueueinfo(0x0, r3, 0x15, &(0x7f0000000000)={0x3c, 0x800800, 0x81}) 5.848552236s ago: executing program 3 (id=3994): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() read$FUSE(r0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 5.798782634s ago: executing program 4 (id=3995): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.684619235s ago: executing program 5 (id=3996): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESHEX=0x0], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000015c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "aa4c29ef"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_disconnect(r2) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 5.602564374s ago: executing program 2 (id=3997): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r5, 0x7fff, 0x4, &(0x7f0000000000)="cd3ee0398a054b75f680f595c43ddc8c04cbbea84fa30958cf", 0x19) listen(0xffffffffffffffff, 0x31f) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d452c6e132be0ee2", "aa4a0921f66631cd1b485cdc27c8265b", "0980e5df", "26837b2d50ba330b"}, 0x28) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="f8ffffff0000000002004e24e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00"/686], 0x310) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r4, 0xd, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x91001, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c76657273696f6e3d3940dddf0fb5e370323030302a", @ANYRESDEC=r3, @ANYBLOB=',appraise,smackfsdef=ext4\x00,fsco']) setsockopt$inet_opts(r3, 0x0, 0x8c06c504c2ea6d6f, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) getpid() gettid() r6 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) 5.600500955s ago: executing program 3 (id=3998): syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x4, 0x6c, {0x6c, 0x11, "13d41c98572a30ecb2f0cfae18ca07afbba96907b85a04bc97264c760456ec9fbd09986b43f03fd70df2afe7610f9f0f4b6fec31e001fda00ba92b11b55ae96ec1bc9e3a9f435bda2b59409304a88b36cbdcfe8f9245fd6b27177706c920cdcbb982099fe3c206adab67"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x11, 0x8, "d482602ebf60d650"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xd}, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000680), 0x4764f57b, 0x40) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) r1 = syz_usb_connect(0x3, 0x7f, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x74, 0xc2, 0x9d, 0x10, 0xbda, 0xc82e, 0xcdcf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x41, 0xe, 0xa0, 0x9, [{{0x9, 0x4, 0xd9, 0x9, 0x2, 0xff, 0xff, 0xff, 0x5, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x5e2e, 0x5}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x1a, 0xf8, [@generic={0x37, 0x23, "25f8bda2ffa427f94956e158de4afef72edb0eda822b8f56fc216d0a216675f0426d8d70323ce8db52288937eec686e89b66b00f22"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x5, 0x40, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x63}, @generic={0x2, 0x11}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x188, 0x66, 0x0, 0x9, 0x10, 0x9}, 0xc, &(0x7f00000009c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x3, 0x8}]}, 0x1, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x500a}}]}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000c00)=""/43) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000d40)={0x14, &(0x7f0000000c40)={0x0, 0x31, 0x32, {0x32, 0x11, "66519abf8227292bb90e313161640c6097ec307e323be26ed2ef50296b949de645d47b6eafad67b169ef28e86f94cc39"}}, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e40)={0x1c, &(0x7f0000000d80)={0x40, 0x31, 0x2c, "a4994d7394dc5320bab0d6d94a100ed7e3c631243276ae085987468648341d9974e9c5ffe9b5e8ac20e25aae"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x1c, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x31}}) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001140)={0x0, 0x22, 0xe, {[@main=@item_012={0x1, 0x0, 0xb, "a5"}, @local=@item_4={0x3, 0x2, 0x8, "ad66b5d2"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "e922c99c"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000001180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x8, 0x1, {0x22, 0x39b}}}}, &(0x7f00000013c0)={0x2c, &(0x7f0000001200)={0x20, 0xa, 0x17, "74e51a476572bd3535f180001f79854ae6d9711cbff69e"}, 0x0, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x55}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000016c0)={0x44, 0x0, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000018c0)={0x2c, &(0x7f0000001740)={0x20, 0x4, 0x4, {0x4, 0xd, "36e0"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001d80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={0x20, 0x0, 0x4, {0x160, 0x8}}, 0x0, &(0x7f0000001b00)={0x40, 0x9, 0x1, 0x34}, &(0x7f0000001b40)={0x40, 0xb, 0x2, "8556"}, &(0x7f0000001b80)={0x40, 0xf, 0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000001d40)={0x40, 0x21, 0x1, 0x6f}}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000001e40)={{0x12, 0x1, 0x300, 0xa7, 0x57, 0xcc, 0x10, 0x4e8, 0xa100, 0x8d00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xc, 0xc0, 0x0, [{{0x9, 0x4, 0xcc, 0x8, 0x0, 0xff, 0xff, 0x0, 0xe7}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5e3) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000003b80)={0x2c, &(0x7f0000003980)={0x40, 0xa, 0xe0, "4c6909be1ced6b01fca9fe6008d31a738e458cc275d0c7103128420ab8dc5661b197a7a2fd65cc432deb94d92c922e2458b02255640d84e1b5fcea5a7543988a096f96867e2918a61069b99d8bfc2a76cac18cdd442bdb66dd7ee5b70b6c5278813025805d9b5b875bd5fbf84df7ffa309a3efd88ef1636de22edc08db35c5099ea31805d3bb8d6524a2e220a30d18d15254549ab2eef8444538696c07ef2abb3df9df06cf81db6c254c2e675f611c51b235fa4d59211d08a7fd5d381a4bb33ff0714221f238c2c11c9bb9a47e0828ff4af923b12260b54f16513886ffcbd03a"}, &(0x7f0000003a80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003ac0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003b00), 0x0}) syz_usb_disconnect(r1) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 4.785358135s ago: executing program 4 (id=3999): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7112c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xad, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9f, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xaf, 0x0, {0x1f, 0x4, 0x1, 0x3e, 0x8, 0x68, 0x2, 0x3, 0x8, 0x7, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x23, 0x5b, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, @loopback, @multicast2, @multicast2, @broadcast]}, @generic={0x82, 0xd, "16abb982b3ced51c2aeab9"}, @timestamp_prespec={0x44, 0x34, 0xc1, 0x3, 0x2, [{@multicast1, 0x7}, {@broadcast, 0xffffffff}, {@empty, 0x63}, {@empty, 0x79a70152}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x400}]}, @timestamp_addr={0x44, 0x4, 0x60, 0x1, 0x8}]}}, "fecb983cb35c43"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @multicast2, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x80, 0x2}, 0x3c) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, 0x0) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x24000800) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 4.479412094s ago: executing program 7 (id=4000): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0xb01, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 3.732227821s ago: executing program 7 (id=4001): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000410000008500000005"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 3.609001644s ago: executing program 4 (id=4002): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) 2.838171639s ago: executing program 4 (id=4003): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.795393454s ago: executing program 2 (id=4004): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "ba2254c3"}, @main=@item_012={0x2, 0x0, 0x9, "deeb"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) 2.730447547s ago: executing program 7 (id=4005): gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, &(0x7f0000000400)={0x4, &(0x7f0000000240)=[{0x6, 0x3, 0x8, 0x5}, {0x0, 0x1, 0xb, 0x8}, {0x5, 0x5, 0xf, 0x9e}, {0xea, 0x8, 0x9, 0x2}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) open(&(0x7f0000000000)='./file0\x00', 0x111000, 0xe7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.144451106s ago: executing program 5 (id=4006): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xfffffffd, 0x2, r1}) 1.96444591s ago: executing program 7 (id=4007): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x19, &(0x7f0000000480)="61030000000000000039d0a04cd10d388d93b1e5cf8883f873") 1.836851326s ago: executing program 5 (id=4008): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() read$FUSE(r0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_delete(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.619475173s ago: executing program 5 (id=4009): syz_usb_connect(0x3, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.12441052s ago: executing program 3 (id=4010): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x4b, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000980)={0x0, 0x16, 0x25, "bde321feea16e71543d32d20b316852b0b04b081227ad15ce2d9251e54f17a3e34a98ccafe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 991.967537ms ago: executing program 4 (id=4011): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) faccessat2(r0, &(0x7f00000001c0)='./file0\x00', 0xc, 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x9942}, &(0x7f0000000180)=0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x60c0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xdc0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 814.90103ms ago: executing program 2 (id=4012): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0xe, {0xe, 0x0, "6c46936e41c5838bf3d423ab"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 104.478943ms ago: executing program 5 (id=4013): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 0s ago: executing program 5 (id=4014): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002) sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r5, 0x7fff, 0x4, &(0x7f0000000000)="cd3ee0398a054b75f680f595c43ddc8c04cbbea84fa30958cf", 0x19) listen(0xffffffffffffffff, 0x31f) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "d452c6e132be0ee2", "aa4a0921f66631cd1b485cdc27c8265b", "0980e5df", "26837b2d50ba330b"}, 0x28) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="f8ffffff0000000002004e24e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00"/686], 0x310) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r4, 0xd, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x91001, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c76657273696f6e3d3940dddf0fb5e370323030302a", @ANYRESDEC=r3, @ANYBLOB=',appraise,smackfsdef=ext4\x00,fsco']) setsockopt$inet_opts(r3, 0x0, 0x8c06c504c2ea6d6f, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) getpid() gettid() r6 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) kernel console output (not intermixed with test programs): 1024 [ 1436.449734][ T126] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1436.491507][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.569937][ T126] hub 3-1:1.0: bad descriptor, ignoring hub [ 1436.576119][T16289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.589376][ T126] hub: probe of 3-1:1.0 failed with error -5 [ 1436.634314][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.655661][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1436.684755][ T126] cdc_wdm 3-1:1.0: skipping garbage [ 1436.688363][T16289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.702934][ T126] cdc_wdm 3-1:1.0: skipping garbage [ 1437.347551][T16535] device syz_tun entered promiscuous mode [ 1437.348697][ T126] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1437.665070][ T126] cdc_wdm 3-1:1.0: Unknown control protocol [ 1437.767439][T16535] device syz_tun left promiscuous mode [ 1438.105542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1438.123326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1438.134389][T16567] fuse: Unknown parameter '0x0000000000000006' [ 1438.147197][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.154355][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.163318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1438.172659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1438.223340][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.230580][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.315634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1438.337358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1438.347536][T12706] usb 3-1: USB disconnect, device number 19 [ 1438.394223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1438.417168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1438.429280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1438.453373][T16289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1438.464772][T16289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1438.596428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1438.612824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1438.642200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1439.479778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1439.503457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1439.537127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1439.555869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1439.566009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1439.596675][T16575] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3086'. [ 1441.407183][T16578] hub 6-0:1.0: USB hub found [ 1441.412024][T16578] hub 6-0:1.0: 1 port detected [ 1441.532289][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1441.554857][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1441.589268][T16289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.915489][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1441.928047][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1442.437225][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1442.453913][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1442.480101][T16289] device veth0_vlan entered promiscuous mode [ 1442.491238][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1442.526414][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1443.074163][T16289] device veth1_vlan entered promiscuous mode [ 1443.233531][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1443.251340][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1443.332968][T16289] device veth0_macvtap entered promiscuous mode [ 1443.412406][T16625] fuse: Unknown parameter '0x0000000000000006' [ 1443.421980][T16289] device veth1_macvtap entered promiscuous mode [ 1443.621489][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.675064][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.731327][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.757824][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.780631][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.832514][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.848760][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.862186][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.878120][T16289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.113086][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.136457][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.160971][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.191611][T12795] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1444.330177][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.622973][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.724719][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.778948][T16289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.832936][T16289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.977842][T16289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.994011][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1445.009790][T12795] usb 8-1: Using ep0 maxpacket: 16 [ 1445.015786][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1445.024236][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1445.028337][T12795] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.047926][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1445.074217][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1445.085310][T12795] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1445.091979][T12795] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1445.102311][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1445.117170][T12795] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.132995][T16650] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3100'. [ 1445.154562][T12795] usb 8-1: config 0 descriptor?? [ 1445.258436][T16289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.272372][T16289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.281789][T16289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.291740][T16289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.938407][T12795] hid (null): unknown global tag 0xe [ 1445.965475][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.973757][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.993075][T12795] cougar 0003:060B:500A.001A: unexpected long global item [ 1446.054204][T12795] cougar 0003:060B:500A.001A: parse failed [ 1446.074960][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1446.078670][T12795] cougar: probe of 0003:060B:500A.001A failed with error -22 [ 1446.168392][ T4298] usb 8-1: USB disconnect, device number 7 [ 1446.216118][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.224805][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.270124][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1446.750783][T16675] IPv6: NLM_F_CREATE should be specified when creating new route [ 1446.758895][T16675] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1450.231650][T16703] vivid-009: kernel_thread() failed [ 1450.852922][T16714] dccp_close: ABORT with 20 bytes unread [ 1452.567850][T16710] hub 6-0:1.0: USB hub found [ 1452.572747][T16710] hub 6-0:1.0: 1 port detected [ 1452.615356][ T126] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1452.835359][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 1452.844141][ T126] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.905014][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1452.943158][ T126] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1452.978185][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.022058][ T126] usb 3-1: config 0 descriptor?? [ 1453.843819][ T126] hid (null): unknown global tag 0xe [ 1454.337736][T16745] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3121'. [ 1454.712712][ T126] cougar 0003:060B:500A.001B: unexpected long global item [ 1454.745805][ T126] cougar 0003:060B:500A.001B: parse failed [ 1454.782231][ T126] cougar: probe of 0003:060B:500A.001B failed with error -22 [ 1454.873097][ T126] usb 3-1: USB disconnect, device number 20 [ 1456.592402][T16764] vivid-005: kernel_thread() failed [ 1459.494588][T16800] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1460.712709][T16821] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1463.131643][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1465.149199][T16857] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3144'. [ 1466.121152][T16866] netlink: 'syz.7.3146': attribute type 39 has an invalid length. [ 1466.165311][ T6192] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1466.356328][ T6192] usb 3-1: Using ep0 maxpacket: 8 [ 1466.363712][ T6192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.476087][T12795] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1466.558659][ T6192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1466.568292][ T6192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1466.579639][ T6192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1466.591406][ T6192] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1466.601124][ T6192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.623551][ T6192] hub 3-1:1.0: bad descriptor, ignoring hub [ 1466.629849][ T6192] hub: probe of 3-1:1.0 failed with error -5 [ 1466.638943][ T6192] cdc_wdm 3-1:1.0: skipping garbage [ 1466.647925][ T6192] cdc_wdm 3-1:1.0: skipping garbage [ 1466.706056][T16877] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3149'. [ 1466.890455][ T6192] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1467.047849][ T6192] cdc_wdm 3-1:1.0: Unknown control protocol [ 1467.403199][T16856] device syz_tun entered promiscuous mode [ 1467.422147][T16856] device syz_tun left promiscuous mode [ 1467.436003][ T6192] usb 3-1: USB disconnect, device number 21 [ 1467.436827][T12795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.473798][T12795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.484956][T12795] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1467.521527][T12795] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1467.544114][T12795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.588167][T12795] usb 5-1: config 0 descriptor?? [ 1468.004491][T12795] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 1468.038022][T12795] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1468.229252][T16881] fuse: Unknown parameter '0x0000000000000003' [ 1468.281401][T12795] usb 5-1: USB disconnect, device number 28 [ 1468.361591][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1469.552392][T16902] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3156'. [ 1471.135299][T12170] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.955286][T16925] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1472.590282][ T4356] Bluetooth: hci3: Frame reassembly failed (-84) [ 1472.980457][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3166'. [ 1473.277954][T16933] fuse: Unknown parameter 'fd0x0000000000000003' [ 1473.751092][ T126] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1474.085261][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 1474.320126][T16949] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3171'. [ 1475.075722][ T4263] Bluetooth: hci3: command 0xfc11 tx timeout [ 1475.086731][T12170] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1475.172284][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.372189][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1475.399753][T16952] bond0: option use_carrier: invalid value (2) [ 1475.793490][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1475.824874][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1475.893981][ T126] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1475.910128][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.951922][ T126] usb 5-1: can't set config #1, error -71 [ 1475.978386][ T126] usb 5-1: USB disconnect, device number 29 [ 1477.135869][T12795] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1477.328400][T12795] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1477.615522][T16971] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1477.622247][T16971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1477.633684][T12795] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.636495][T16971] vhci_hcd vhci_hcd.0: Device attached [ 1477.687904][T12795] usb 8-1: config 0 descriptor?? [ 1477.975780][ T6052] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1478.046625][T16972] vhci_hcd: connection reset by peer [ 1478.053969][ T4356] vhci_hcd: stop threads [ 1478.061163][ T4356] vhci_hcd: release socket [ 1478.093652][ T4356] vhci_hcd: disconnect device [ 1478.595601][T12795] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1478.965995][T12795] usb 8-1: USB disconnect, device number 8 [ 1479.078686][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1480.072918][T16998] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1480.950173][ T4405] Bluetooth: hci3: Frame reassembly failed (-84) [ 1480.980102][T16988] fuse: Unknown parameter 'fd0x0000000000000003' [ 1483.107125][T12170] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1483.206288][ T6052] vhci_hcd: vhci_device speed not set [ 1484.530254][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.537098][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.634376][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1484.865415][ T4295] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1485.436855][ T4295] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1485.500691][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.591442][ T4295] usb 3-1: config 0 descriptor?? [ 1485.673482][ T4295] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1485.894711][T17051] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3197'. [ 1488.700774][ T4295] gspca_stv06xx: I2C: Read error writing address: -71 [ 1488.716828][ T4295] usb 3-1: USB disconnect, device number 22 [ 1488.920746][ T4337] Bluetooth: hci3: Frame reassembly failed (-84) [ 1489.006687][ T4337] Bluetooth: hci3: Frame reassembly failed (-84) [ 1490.139746][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3207'. [ 1490.985466][ T4263] Bluetooth: hci3: command 0xfc11 tx timeout [ 1491.032942][T12170] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1491.212270][T17099] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1491.962317][ T6192] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1493.215838][ T6192] usb 5-1: Using ep0 maxpacket: 16 [ 1493.231725][ T6192] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.249239][ T6192] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1493.257371][ T6192] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1493.271387][ T6192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.500442][ T6192] usb 5-1: config 0 descriptor?? [ 1494.932046][ T6192] usbhid 5-1:0.0: can't add hid device: -71 [ 1494.948443][ T6192] usbhid: probe of 5-1:0.0 failed with error -71 [ 1495.037667][ T6192] usb 5-1: USB disconnect, device number 30 [ 1495.229455][T17126] program syz.3.3219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1496.024802][T17141] can: request_module (can-proto-0) failed. [ 1496.226237][ T6192] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1497.494766][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 1497.605414][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16652, setting to 1024 [ 1498.118832][ T6192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1498.132405][ T6192] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.141801][ T6192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.160618][ T6192] usb 3-1: config 0 descriptor?? [ 1498.425435][ T5167] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1498.588191][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.604912][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.631720][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.656658][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.685283][ T5167] usb 6-1: Using ep0 maxpacket: 16 [ 1498.690615][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.700527][ T5167] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.724722][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1498.739655][ T5167] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1498.757576][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xe [ 1498.767727][ T5167] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1498.783795][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x2 [ 1498.799971][ T5167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.812713][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x1 [ 1498.835035][ T5167] usb 6-1: config 0 descriptor?? [ 1498.849019][ T6192] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x1 [ 1498.883176][ T6192] plantronics 0003:047F:FFFF.001E: invalid report_size 918321780 [ 1498.910061][ T6192] plantronics 0003:047F:FFFF.001E: item 0 4 1 7 parsing failed [ 1498.946403][ T6192] plantronics 0003:047F:FFFF.001E: parse failed [ 1498.989069][ T6192] plantronics: probe of 0003:047F:FFFF.001E failed with error -22 [ 1499.049709][ T6192] usb 3-1: USB disconnect, device number 23 [ 1499.274569][ T5167] hid (null): unknown global tag 0xe [ 1499.329892][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.360859][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.394112][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.434725][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.465390][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.472451][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.523718][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.563679][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.726311][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1499.734298][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.085319][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.092369][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.135245][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.157451][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.164648][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.171811][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.179290][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.186685][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.193848][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.202367][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.210068][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.231549][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.271470][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.311314][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.353364][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.373292][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.400542][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.422559][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.446724][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.509064][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.546161][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.585477][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.593070][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.609403][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.619207][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.629256][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.638997][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.648992][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.659635][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.670984][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.681150][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.693683][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.709362][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.719626][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.775295][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.805463][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.812837][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.825069][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.834563][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.866088][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.878935][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.891142][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.902490][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.912801][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.924902][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.954766][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1500.996817][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1501.009929][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x0 [ 1501.018138][ T5167] cougar 0003:060B:500A.001F: unknown main item tag 0x3 [ 1501.030139][ T5167] cougar 0003:060B:500A.001F: ignoring exceeding usage max [ 1501.080665][ T5167] cougar 0003:060B:500A.001F: unknown global tag 0xe [ 1501.088986][ T5167] cougar 0003:060B:500A.001F: item 0 1 1 14 parsing failed [ 1501.111707][ T5167] cougar 0003:060B:500A.001F: parse failed [ 1501.118606][ T5167] cougar: probe of 0003:060B:500A.001F failed with error -22 [ 1501.150992][ T5167] usb 6-1: USB disconnect, device number 17 [ 1503.295458][T17204] 9pnet_fd: Insufficient options for proto=fd [ 1503.625283][T17211] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1503.631877][T17211] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1503.669990][T17211] vhci_hcd vhci_hcd.0: Device attached [ 1503.692459][T17215] netlink: 'syz.7.3244': attribute type 83 has an invalid length. [ 1503.955548][ T5167] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1503.995657][T12591] usb 44-1: SetAddress Request (2) to port 0 [ 1504.002724][T12591] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1504.182867][ T5167] usb 6-1: config 0 has no interfaces? [ 1504.206867][ T5167] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1504.221318][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.233179][ T5167] usb 6-1: Product: syz [ 1504.239233][ T5167] usb 6-1: Manufacturer: syz [ 1504.244387][ T5167] usb 6-1: SerialNumber: syz [ 1504.305807][ T5167] usb 6-1: config 0 descriptor?? [ 1504.598000][T17211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.619684][T17211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.720224][T12795] usb 6-1: USB disconnect, device number 18 [ 1504.728965][T17212] vhci_hcd: connection reset by peer [ 1504.735626][T10790] vhci_hcd: stop threads [ 1504.740478][T10790] vhci_hcd: release socket [ 1504.760998][T10790] vhci_hcd: disconnect device [ 1504.835024][T17235] 9pnet_fd: Insufficient options for proto=fd [ 1505.828408][T10790] Bluetooth: hci3: Frame reassembly failed (-84) [ 1507.463780][T17273] 9pnet_fd: Insufficient options for proto=fd [ 1507.856868][T12170] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1507.856958][ T4263] Bluetooth: hci3: command 0xfc11 tx timeout [ 1508.815635][ T4295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1509.737684][T12591] usb 44-1: device descriptor read/8, error -110 [ 1509.937134][ T4295] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1510.178749][T12591] usb usb44-port1: attempt power cycle [ 1510.318753][ T4295] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1510.432824][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.455540][T17287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1510.467105][ T4295] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1510.561429][ T4337] Bluetooth: hci3: Frame reassembly failed (-84) [ 1510.702540][T17319] 9pnet_fd: Insufficient options for proto=fd [ 1510.956078][T12591] usb usb44-port1: unable to enumerate USB device [ 1512.280291][ T126] usb 4-1: USB disconnect, device number 16 [ 1512.474300][ T4337] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.580053][T17277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1512.588774][T12466] Bluetooth: hci3: command 0xfc11 tx timeout [ 1513.163628][ T4337] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.237930][T17349] 9pnet_fd: Insufficient options for proto=fd [ 1513.306418][T12466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1513.318432][T12466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1513.326971][T12466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1513.334891][T12466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1513.342774][T12466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1513.350204][T12466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1513.498863][ T4337] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.653824][ T4337] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.706446][T17015] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1514.975242][T17015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.017277][T17015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.037793][T17015] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1515.061152][T17015] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1515.072359][T17015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.108003][T17015] usb 5-1: config 0 descriptor?? [ 1515.535515][T17277] Bluetooth: hci3: command 0x0409 tx timeout [ 1516.573327][T17015] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 1516.585208][T17350] chnl_net:caif_netlink_parms(): no params data found [ 1516.717384][T17015] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1516.818206][T17015] usb 5-1: USB disconnect, device number 31 [ 1517.615919][T17277] Bluetooth: hci3: command 0x041b tx timeout [ 1517.889400][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.902383][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.962195][T17350] device bridge_slave_0 entered promiscuous mode [ 1518.681112][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.718731][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.764030][T17350] device bridge_slave_1 entered promiscuous mode [ 1519.701320][T17277] Bluetooth: hci3: command 0x040f tx timeout [ 1520.690269][T17428] 9pnet_fd: Insufficient options for proto=fd [ 1520.847167][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.888696][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.386794][T17350] team0: Port device team_slave_0 added [ 1521.475626][T17350] team0: Port device team_slave_1 added [ 1521.775732][T17277] Bluetooth: hci3: command 0x0419 tx timeout [ 1522.504328][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.592956][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.755431][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.788178][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.001410][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.849351][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.592273][T17350] device hsr_slave_0 entered promiscuous mode [ 1525.606788][T17350] device hsr_slave_1 entered promiscuous mode [ 1525.624052][T17350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.651779][T17350] Cannot create hsr debugfs directory [ 1525.750157][ T4337] device hsr_slave_0 left promiscuous mode [ 1525.805431][ T4337] device hsr_slave_1 left promiscuous mode [ 1525.816652][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.824137][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.846363][T17480] 9pnet_fd: Insufficient options for proto=fd [ 1525.855496][T15997] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1525.898962][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.924483][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.990721][ T4337] device bridge_slave_1 left promiscuous mode [ 1526.033883][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.055459][T15997] usb 5-1: Using ep0 maxpacket: 16 [ 1526.127272][T15997] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.144169][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1526.170513][T15997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1526.188607][T15997] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1526.229139][T15997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.276045][T15997] usb 5-1: config 0 descriptor?? [ 1526.305603][ T4337] device bridge_slave_0 left promiscuous mode [ 1526.320151][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.414632][ T4337] device veth1_macvtap left promiscuous mode [ 1526.431172][ T4337] device veth0_macvtap left promiscuous mode [ 1526.441435][ T4337] device veth1_vlan left promiscuous mode [ 1526.447522][ T5167] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1526.459727][ T4337] device veth0_vlan left promiscuous mode [ 1526.758772][ T4337] bond2 (unregistering): Released all slaves [ 1526.830797][ T5167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.848465][T15997] hid (null): unknown global tag 0xe [ 1526.853919][ T5167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1526.878023][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1526.885075][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1526.971701][ T5167] usb 4-1: config 1 has no interface number 0 [ 1527.006287][ T5167] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.086075][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.106498][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.117584][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.124796][ T5167] usb 4-1: Product: syz [ 1527.133085][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.142684][ T5167] usb 4-1: Manufacturer: syz [ 1527.149242][ T5167] usb 4-1: SerialNumber: syz [ 1527.154541][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.216606][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.288648][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.333500][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.369822][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.439519][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.559370][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.566861][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.574012][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.581486][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.588921][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.596478][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.603623][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.629519][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.649760][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.677841][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.704720][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.734668][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.759615][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.912904][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.920006][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.927655][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.934633][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.941744][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.948832][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.955884][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.962873][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.969952][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1527.976995][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.051691][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.058932][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.066184][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.073317][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.080486][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.087707][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.094827][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.196201][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.237660][T12170] Bluetooth: hci5: command 0xfc11 tx timeout [ 1528.244236][T17277] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1528.369503][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.414365][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.695428][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.702760][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.710458][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.725710][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.755335][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.771515][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.791401][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.821293][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.832133][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.841667][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.848947][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.862648][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.875486][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.885933][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x0 [ 1528.898029][T15997] cougar 0003:060B:500A.0021: unknown main item tag 0x3 [ 1529.070895][T15997] cougar 0003:060B:500A.0021: ignoring exceeding usage max [ 1529.386295][T15997] cougar 0003:060B:500A.0021: unknown global tag 0xe [ 1529.393059][T15997] cougar 0003:060B:500A.0021: item 0 1 1 14 parsing failed [ 1529.406647][T15997] cougar 0003:060B:500A.0021: parse failed [ 1529.412569][T15997] cougar: probe of 0003:060B:500A.0021 failed with error -22 [ 1529.422044][ T4298] usb 4-1: USB disconnect, device number 17 [ 1529.428386][T15997] usb 5-1: USB disconnect, device number 32 [ 1529.929173][ T4337] bond1 (unregistering): Released all slaves [ 1529.967545][T17530] 9pnet_fd: Insufficient options for proto=fd [ 1532.107089][T17521] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1532.322517][T17521] usb 4-1: Using ep0 maxpacket: 16 [ 1532.330537][T17521] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.346371][T17521] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1532.456537][T17521] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1532.472313][T17521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.828854][T17521] usb 4-1: config 0 descriptor?? [ 1532.920068][T14605] Bluetooth: hci5: Frame reassembly failed (-84) [ 1532.973228][T14605] Bluetooth: hci5: Frame reassembly failed (-84) [ 1533.096839][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 1533.165370][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 1533.230364][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.293023][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.404132][T17521] hid (null): unknown global tag 0xe [ 1533.420658][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.427952][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.436595][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.444201][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.451329][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.458740][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.468085][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.475258][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.482364][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.489634][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.496682][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.510445][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.517567][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.524579][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.532540][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.539597][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.546829][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.553868][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.561086][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.568144][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.575216][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.582258][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.589449][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.596538][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.603544][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.616597][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.623606][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.630649][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.638430][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.645610][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.652642][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.659727][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.667207][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.674203][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.681292][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.688494][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.696742][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.703783][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.710908][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.718222][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.725285][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.732460][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.740382][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.747489][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.754707][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.761756][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.768951][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.776062][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.783255][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.790314][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.797711][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.804758][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.811876][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.819365][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.826442][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.833630][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.841726][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.849006][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x0 [ 1533.856209][T17521] cougar 0003:060B:500A.0022: unknown main item tag 0x3 [ 1533.863198][T17521] cougar 0003:060B:500A.0022: ignoring exceeding usage max [ 1533.871896][T17521] cougar 0003:060B:500A.0022: unknown global tag 0xe [ 1533.878676][T17521] cougar 0003:060B:500A.0022: item 0 1 1 14 parsing failed [ 1533.886508][T17521] cougar 0003:060B:500A.0022: parse failed [ 1533.892358][T17521] cougar: probe of 0003:060B:500A.0022 failed with error -22 [ 1533.909124][T17521] usb 4-1: USB disconnect, device number 18 [ 1534.470223][ T4337] bond0 (unregistering): Released all slaves [ 1534.838812][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 1534.975401][T17277] Bluetooth: hci5: command 0xfc11 tx timeout [ 1534.975443][T12466] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1535.235292][T17568] 9pnet_fd: Insufficient options for proto=fd [ 1535.595375][T15997] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1536.263594][T15997] usb 8-1: Using ep0 maxpacket: 8 [ 1536.277107][T15997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1536.313796][T15997] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1536.341816][T15997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.420113][T15997] usb 8-1: config 0 descriptor?? [ 1536.498005][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1536.811391][T15997] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1537.233450][T15997] usb 8-1: USB disconnect, device number 9 [ 1537.927104][T12466] Bluetooth: hci4: command 0x0406 tx timeout [ 1540.013358][T17350] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1540.097437][T17350] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1540.668374][T17622] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1541.245660][T17350] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1541.503201][T17350] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1541.678277][T17627] 9pnet_fd: Insufficient options for proto=fd [ 1541.986191][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.128156][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1542.136520][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1542.142003][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3365'. [ 1542.158054][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.645234][T17277] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1543.653131][T12466] Bluetooth: hci5: command 0xfc11 tx timeout [ 1543.714606][T17350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1543.735913][T17350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1543.838220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1543.853062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1543.908790][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.916031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.955746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1543.984993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1543.998923][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.006131][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.020985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1544.031269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1544.048048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1544.067498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1544.085775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1544.094857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1544.113076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1544.123285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1544.138187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1544.147656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1544.156579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1544.164770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1544.173258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1544.189687][T17521] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1544.203207][T17645] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1544.227417][T17645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1544.272375][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1544.319914][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1544.388058][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.415403][T17521] usb 4-1: Using ep0 maxpacket: 8 [ 1544.440980][T17521] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1544.479883][T17521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.505324][T17521] usb 4-1: Product: syz [ 1544.661058][T17521] usb 4-1: Manufacturer: syz [ 1544.674097][T17521] usb 4-1: SerialNumber: syz [ 1544.686470][T17663] 9pnet_fd: Insufficient options for proto=fd [ 1544.701864][T17521] usb 4-1: config 0 descriptor?? [ 1544.800048][T17665] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3371'. [ 1545.172275][T17521] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1545.765378][T17521] gspca_sonixj: reg_w1 err -71 [ 1545.774675][T17521] sonixj: probe of 4-1:0.0 failed with error -71 [ 1545.804864][T17521] usb 4-1: USB disconnect, device number 19 [ 1545.858336][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.864851][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.265692][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1547.331307][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1547.392118][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1547.401984][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1548.234504][T10790] Bluetooth: hci5: Frame reassembly failed (-84) [ 1548.264409][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1548.301926][T17350] device veth0_vlan entered promiscuous mode [ 1548.320334][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1548.357117][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1548.400747][T17350] device veth1_vlan entered promiscuous mode [ 1548.544371][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1548.576536][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1548.616178][T17350] device veth0_macvtap entered promiscuous mode [ 1548.652659][T17350] device veth1_macvtap entered promiscuous mode [ 1548.738645][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.757521][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.772873][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.792157][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.804377][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.818727][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.829096][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.841377][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.856147][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.866552][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1548.888325][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1548.913977][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1548.943549][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1548.962038][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.973492][T15997] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1548.981446][T12591] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1548.997289][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.024555][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.051487][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.080319][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.095326][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.111360][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1549.130188][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1549.157263][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1549.168437][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1549.172388][T12591] usb 4-1: Using ep0 maxpacket: 8 [ 1549.183817][T15997] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1549.184041][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1549.207086][T17350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.221637][T17350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.237153][T12591] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.241347][T17350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.263320][T15997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.271550][T12591] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1549.275496][T17350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.316121][T15997] usb 3-1: config 0 descriptor?? [ 1549.332092][T15997] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1549.339325][T12591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1549.369580][T12591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1549.381603][T12591] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1549.392026][T12591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.458014][T12591] hub 4-1:1.0: bad descriptor, ignoring hub [ 1549.474762][T12591] hub: probe of 4-1:1.0 failed with error -5 [ 1549.489972][T12591] cdc_wdm 4-1:1.0: skipping garbage [ 1549.497827][T12591] cdc_wdm 4-1:1.0: skipping garbage [ 1549.510627][T12591] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1549.517159][T12591] cdc_wdm 4-1:1.0: Unknown control protocol [ 1549.532970][T17710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.555656][T14605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.589275][T17710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.606763][T14605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.688035][T14605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1549.704642][T15997] gspca_sn9c20x: Write register 1000 failed -71 [ 1549.733949][ T9271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.743128][T15997] gspca_sn9c20x: Device initialization failed [ 1549.765158][T17711] device syz_tun entered promiscuous mode [ 1549.765594][T15997] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 1549.770971][ T9271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.855682][T15997] usb 3-1: USB disconnect, device number 24 [ 1549.894907][T17711] device syz_tun left promiscuous mode [ 1550.020730][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1550.117258][T17015] usb 4-1: USB disconnect, device number 20 [ 1550.256888][T17277] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1550.562349][T17735] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3383'. [ 1551.445658][T17736] 9pnet_fd: Insufficient options for proto=fd [ 1553.317980][T17783] IPv6: NLM_F_CREATE should be specified when creating new route [ 1553.326375][T17783] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1554.245401][T17521] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1554.575326][T17521] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1554.653991][T17521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.749384][T14605] Bluetooth: hci5: Frame reassembly failed (-84) [ 1554.796460][T14605] Bluetooth: hci5: Frame reassembly failed (-84) [ 1554.845180][T17521] usb 3-1: Product: syz [ 1554.849412][T17521] usb 3-1: Manufacturer: syz [ 1554.988205][T17521] usb 3-1: SerialNumber: syz [ 1555.008299][T17521] usb 3-1: config 0 descriptor?? [ 1555.866011][T17521] usb 3-1: USB disconnect, device number 25 [ 1556.539505][T17789] hub 6-0:1.0: USB hub found [ 1556.544406][T17789] hub 6-0:1.0: 1 port detected [ 1556.640336][T15140] udevd[15140]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.735785][T17277] Bluetooth: hci5: command 0xfc11 tx timeout [ 1556.744645][T12466] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1556.920820][T17808] 9pnet_fd: Insufficient options for proto=fd [ 1559.058088][T17844] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3411'. [ 1561.151620][T17861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1561.491908][T17863] 9pnet_fd: Insufficient options for proto=fd [ 1561.605486][ T5167] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1561.795490][T17015] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1561.826480][ T5167] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.848360][ T5167] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1561.894179][ T5167] usb 5-1: config 1 has no interface number 0 [ 1561.923327][ T5167] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1561.970978][ T5167] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1561.991309][T17015] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1562.007421][T17015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.027134][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.046041][T17015] usb 4-1: Product: syz [ 1562.050712][ T5167] usb 5-1: Product: syz [ 1562.054909][ T5167] usb 5-1: Manufacturer: syz [ 1562.065282][T17015] usb 4-1: Manufacturer: syz [ 1562.071466][T17015] usb 4-1: SerialNumber: syz [ 1562.078313][ T5167] usb 5-1: SerialNumber: syz [ 1562.089449][T17015] usb 4-1: config 0 descriptor?? [ 1562.103142][ T5167] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 1562.126460][ T5167] cdc_ncm 5-1:1.1: bind() failure [ 1562.269719][T17882] 9pnet_fd: Insufficient options for proto=fd [ 1562.325311][ T126] usb 4-1: USB disconnect, device number 21 [ 1563.853965][T17912] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1564.713512][ T126] usb 5-1: USB disconnect, device number 33 [ 1565.955891][T17920] 9pnet_fd: Insufficient options for proto=fd [ 1566.550190][T17933] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1569.983346][T17946] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3436'. [ 1570.705330][T15997] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1571.077750][T15997] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.105398][T15997] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1571.114528][T15997] usb 3-1: config 1 has no interface number 0 [ 1571.165419][T15997] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.200618][T15997] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1571.240140][T15997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.265669][T15997] usb 3-1: Product: syz [ 1571.280208][T15997] usb 3-1: Manufacturer: syz [ 1571.471526][T15997] usb 3-1: SerialNumber: syz [ 1571.506368][T15997] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 1571.513823][T15997] cdc_ncm 3-1:1.1: bind() failure [ 1571.594485][T17971] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3442'. [ 1573.572784][T17521] usb 3-1: USB disconnect, device number 26 [ 1576.018633][T18016] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1578.575317][ T5167] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1578.778654][ T5167] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1578.801316][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.828405][ T5167] usb 3-1: Product: syz [ 1578.832624][ T5167] usb 3-1: Manufacturer: syz [ 1578.845169][ T5167] usb 3-1: SerialNumber: syz [ 1578.894507][ T5167] usb 3-1: config 0 descriptor?? [ 1579.119159][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3468'. [ 1579.159638][ T5167] usb 3-1: USB disconnect, device number 27 [ 1579.995490][ T5167] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1580.615405][ T5167] usb 6-1: Using ep0 maxpacket: 8 [ 1580.626508][ T5167] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1580.655303][ T5167] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.679523][ T5167] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1580.710464][ T5167] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1580.719876][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1580.726422][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1580.751235][ T5167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.754918][T18073] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1580.765815][T18073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1580.811003][T18069] vhci_hcd vhci_hcd.0: Device attached [ 1580.858318][ T5167] usbtmc 6-1:16.0: bulk endpoints not found [ 1581.145393][ T5167] vhci_hcd: vhci_device speed not set [ 1581.215332][ T5167] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1581.383273][T18073] vhci_hcd vhci_hcd.0: Device attached [ 1581.389621][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 1581.396210][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1581.405358][T18069] vhci_hcd vhci_hcd.0: Device attached [ 1581.419567][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 1581.426137][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1581.444460][T18069] vhci_hcd vhci_hcd.0: Device attached [ 1581.474612][T18069] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 1581.481298][T18069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1581.510641][T18069] vhci_hcd vhci_hcd.0: Device attached [ 1581.527835][T18082] vhci_hcd: connection closed [ 1581.528185][T18080] vhci_hcd: connection closed [ 1581.530288][T18074] vhci_hcd: connection closed [ 1581.538083][ T1120] vhci_hcd: stop threads [ 1581.542200][T18070] vhci_hcd: connection reset by peer [ 1581.545214][ T1120] vhci_hcd: release socket [ 1581.580078][T18084] vhci_hcd: connection closed [ 1581.580935][ T1120] vhci_hcd: disconnect device [ 1581.599610][ T1120] vhci_hcd: stop threads [ 1581.605465][ T1120] vhci_hcd: release socket [ 1581.616232][ T1120] vhci_hcd: disconnect device [ 1581.631278][ T1120] vhci_hcd: stop threads [ 1581.641423][ T1120] vhci_hcd: release socket [ 1581.648565][ T1120] vhci_hcd: disconnect device [ 1581.663592][ T1120] vhci_hcd: stop threads [ 1581.673767][ T1120] vhci_hcd: release socket [ 1581.683966][ T1120] vhci_hcd: disconnect device [ 1581.698728][ T1120] vhci_hcd: stop threads [ 1581.708549][ T1120] vhci_hcd: release socket [ 1581.713122][ T1120] vhci_hcd: disconnect device [ 1583.859150][ T4241] usb 6-1: USB disconnect, device number 19 [ 1585.903356][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1586.867106][ T5167] vhci_hcd: vhci_device speed not set [ 1586.955474][T17015] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1587.047356][T18147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1587.545370][T17015] usb 6-1: Using ep0 maxpacket: 8 [ 1587.564526][T17015] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1587.583145][T17015] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.619232][T17015] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1587.644347][T17015] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1587.660267][T17015] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1587.861549][T17015] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1587.871602][T17015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.897785][T17015] usbtmc 6-1:16.0: bulk endpoints not found [ 1589.623312][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1590.765345][T18201] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3506'. [ 1591.620582][ T4241] usb 6-1: USB disconnect, device number 20 [ 1591.890830][T18205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1594.725646][T18243] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1595.340028][ T5167] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1595.725235][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 1595.740617][ T5167] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1595.777636][ T5167] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.815435][ T5167] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1595.845880][ T5167] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1595.873632][ T5167] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1596.026531][ T5167] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1596.036896][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.934877][ T5167] usbtmc 3-1:16.0: bulk endpoints not found [ 1597.234186][T18269] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1597.624148][T18280] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1597.662761][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1597.662799][ T27] audit: type=1326 audit(1741252978.298:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.321364][ T27] audit: type=1326 audit(1741252978.348:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.405209][ T27] audit: type=1326 audit(1741252978.378:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.412592][ T4410] usb 3-1: USB disconnect, device number 28 [ 1598.427501][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.482785][ T27] audit: type=1326 audit(1741252978.388:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.565710][ T27] audit: type=1326 audit(1741252978.388:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.638718][ T27] audit: type=1326 audit(1741252978.398:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.661093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.787879][ T27] audit: type=1326 audit(1741252978.398:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1598.815324][ T27] audit: type=1326 audit(1741252978.398:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1600.101737][ T27] audit: type=1326 audit(1741252978.408:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1600.400265][ T27] audit: type=1326 audit(1741252978.408:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.7.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895238d169 code=0x7fc00000 [ 1601.912474][T18330] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1601.919063][T18330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1601.928839][T18330] vhci_hcd vhci_hcd.0: Device attached [ 1602.086753][T18333] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1602.093349][T18333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1602.125723][T18337] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 1602.132420][T18337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1602.139902][ T4410] vhci_hcd: vhci_device speed not set [ 1602.179287][T18337] vhci_hcd vhci_hcd.0: Device attached [ 1602.226067][T17521] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1602.273549][T18333] vhci_hcd vhci_hcd.0: Device attached [ 1602.407792][T18330] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 1602.414380][T18330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1602.455338][T17521] usb 5-1: Using ep0 maxpacket: 8 [ 1602.470887][T17521] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1602.580337][T17521] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.630847][T18330] vhci_hcd vhci_hcd.0: Device attached [ 1602.796357][T18341] vhci_hcd: connection closed [ 1602.798151][ T9271] vhci_hcd: stop threads [ 1602.808445][T18336] vhci_hcd: connection closed [ 1602.808763][T18334] vhci_hcd: connection closed [ 1602.816216][T18331] vhci_hcd: connection closed [ 1602.821760][T17521] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1602.846908][ T9271] vhci_hcd: release socket [ 1602.867230][ T9271] vhci_hcd: disconnect device [ 1602.892300][ T9271] vhci_hcd: stop threads [ 1602.897758][T17521] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1602.923173][ T9271] vhci_hcd: release socket [ 1602.933630][ T4410] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1602.941545][T18332] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1602.961610][ T9271] vhci_hcd: disconnect device [ 1602.969592][T17521] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1603.010591][ T9271] vhci_hcd: stop threads [ 1603.014899][ T9271] vhci_hcd: release socket [ 1603.022099][T17521] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1603.030353][ T9271] vhci_hcd: disconnect device [ 1603.038242][ T9271] vhci_hcd: stop threads [ 1603.048065][T17521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.052763][ T9271] vhci_hcd: release socket [ 1603.062264][ T9271] vhci_hcd: disconnect device [ 1603.116658][T17521] usbtmc 5-1:16.0: bulk endpoints not found [ 1605.427545][ T5167] usb 5-1: USB disconnect, device number 34 [ 1605.917289][T18383] hub 6-0:1.0: USB hub found [ 1606.016757][T18383] hub 6-0:1.0: 1 port detected [ 1606.651091][T17521] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1607.135407][T17521] usb 6-1: Using ep0 maxpacket: 16 [ 1607.142903][T17521] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.203539][T17521] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1607.238296][T17521] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1607.284891][T17521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.310935][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.317342][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.324691][T17521] usb 6-1: config 0 descriptor?? [ 1607.635378][ T5167] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1607.748932][T17521] hid (null): unknown global tag 0xe [ 1607.801771][T17521] cougar 0003:060B:500A.0023: unexpected long global item [ 1607.840345][T17521] cougar 0003:060B:500A.0023: parse failed [ 1607.850128][T17521] cougar: probe of 0003:060B:500A.0023 failed with error -22 [ 1607.863959][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 1607.883395][ T5167] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1607.898039][ T5167] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1607.944804][ T5167] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1607.973260][T17521] usb 6-1: USB disconnect, device number 21 [ 1607.975976][ T5167] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1608.015895][ T5167] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1608.060091][ T5167] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1608.095367][ T4410] vhci_hcd: vhci_device speed not set [ 1608.111050][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.158605][ T5167] usbtmc 3-1:16.0: bulk endpoints not found [ 1610.459054][T17521] usb 3-1: USB disconnect, device number 29 [ 1610.484704][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1610.506866][ T6192] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1610.722202][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1610.725203][ T6192] usb 6-1: Using ep0 maxpacket: 8 [ 1610.742932][ T6192] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.753495][ T6192] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1610.762651][ T6192] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1610.775246][ T4410] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1610.783022][ T6192] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1610.808058][ T6192] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1610.827743][ T6192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.860515][ T6192] hub 6-1:1.0: bad descriptor, ignoring hub [ 1610.875596][ T6192] hub: probe of 6-1:1.0 failed with error -5 [ 1610.882479][ T6192] cdc_wdm 6-1:1.0: skipping garbage [ 1610.894263][ T6192] cdc_wdm 6-1:1.0: skipping garbage [ 1610.910933][ T6192] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1610.924820][ T6192] cdc_wdm 6-1:1.0: Unknown control protocol [ 1610.977890][ T4410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.002146][ T4410] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1611.016712][ T4410] usb 5-1: config 1 has no interface number 0 [ 1611.024026][ T4410] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1611.027973][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1611.056554][ T4410] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1611.086325][ T4410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.097773][ T4410] usb 5-1: Product: syz [ 1611.102064][ T4410] usb 5-1: Manufacturer: syz [ 1611.108854][ T4410] usb 5-1: SerialNumber: syz [ 1611.231175][T18463] device syz_tun entered promiscuous mode [ 1611.238826][T18462] usb 6-1: USB disconnect, device number 22 [ 1611.245549][ T4410] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 1611.279636][ T4410] cdc_ncm 5-1:1.1: bind() failure [ 1611.308374][T18463] device syz_tun left promiscuous mode [ 1611.505804][T18464] hub 6-0:1.0: USB hub found [ 1611.524854][T18464] hub 6-0:1.0: 1 port detected [ 1611.994210][T18478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1612.515294][T17015] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1612.848956][T17015] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1612.848993][T17015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.852218][T17015] usb 6-1: config 0 descriptor?? [ 1612.854721][T17015] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1613.061514][T18481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.076472][T18481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.100352][T17015] gspca_sn9c20x: Write register 1000 failed -71 [ 1613.107735][T17015] gspca_sn9c20x: Device initialization failed [ 1613.125577][T17015] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71 [ 1613.166127][T17015] usb 6-1: USB disconnect, device number 23 [ 1613.305246][T12591] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1613.495378][T12591] usb 4-1: Using ep0 maxpacket: 8 [ 1613.563927][T12591] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1613.585317][T12591] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1613.595060][ T4298] usb 5-1: USB disconnect, device number 35 [ 1613.609610][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1613.629724][T12591] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1613.650521][T12591] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1613.673849][T12591] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1613.710374][T12591] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1613.729403][T12591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.757692][T12591] usbtmc 4-1:16.0: bulk endpoints not found [ 1613.832899][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1613.853454][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3603'. [ 1613.890122][T18499] device ipvlan2 entered promiscuous mode [ 1613.904630][T18499] bridge0: port 3(ipvlan2) entered blocking state [ 1613.912209][T18499] bridge0: port 3(ipvlan2) entered disabled state [ 1614.044477][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1615.215304][ T4241] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1615.467218][ T4241] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.483282][ T4241] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1615.522412][ T4241] usb 6-1: config 1 has no interface number 0 [ 1615.552779][ T4241] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1615.580134][ T4241] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1615.590351][ T4241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.604339][ T4241] usb 6-1: Product: syz [ 1615.609321][ T4241] usb 6-1: Manufacturer: syz [ 1615.615963][ T4241] usb 6-1: SerialNumber: syz [ 1615.647849][ T4241] cdc_ncm 6-1:1.1: NCM or ECM functional descriptors missing [ 1615.656925][ T4241] cdc_ncm 6-1:1.1: bind() failure [ 1615.925168][T17521] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1616.090212][T12591] usb 4-1: USB disconnect, device number 22 [ 1616.117423][T17521] usb 8-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1616.151300][T17521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.189741][T17521] usb 8-1: config 0 descriptor?? [ 1616.220322][T17521] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1616.427749][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.460055][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.501479][T17521] gspca_sn9c20x: Write register 1000 failed -71 [ 1616.511100][T17521] gspca_sn9c20x: Device initialization failed [ 1616.548279][T17521] gspca_sn9c20x: probe of 8-1:0.0 failed with error -71 [ 1616.578374][T17521] usb 8-1: USB disconnect, device number 10 [ 1617.079432][T18560] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1618.333622][T12795] usb 6-1: USB disconnect, device number 24 [ 1619.532546][T18578] hub 6-0:1.0: USB hub found [ 1619.578144][T18578] hub 6-0:1.0: 1 port detected [ 1620.234135][T18599] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1620.965989][T12591] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1621.164555][T12591] usb 8-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1621.184151][T12591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.209509][T12591] usb 8-1: config 0 descriptor?? [ 1621.214951][T18611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1621.226983][T12591] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1621.246007][ T6192] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1621.444253][T18596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.458550][ T6192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.481452][ T6192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1621.499152][T18596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.514314][ T6192] usb 4-1: config 1 has no interface number 0 [ 1621.531366][ T6192] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1621.563850][ T6192] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1621.594914][ T6192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.613924][ T6192] usb 4-1: Product: syz [ 1621.624190][ T6192] usb 4-1: Manufacturer: syz [ 1621.635854][ T6192] usb 4-1: SerialNumber: syz [ 1621.665611][T18622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1621.672194][T18622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1621.694170][ T6192] usb 4-1: selecting invalid altsetting 1 [ 1621.702780][T12591] gspca_sn9c20x: Write register 1000 failed -71 [ 1621.717755][T18625] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1621.722741][T12591] gspca_sn9c20x: Device initialization failed [ 1621.724309][T18625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1621.726984][T18625] vhci_hcd vhci_hcd.0: Device attached [ 1621.751223][T12591] gspca_sn9c20x: probe of 8-1:0.0 failed with error -71 [ 1621.774538][T18628] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 1621.781135][T18628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1621.791767][T12591] usb 8-1: USB disconnect, device number 11 [ 1621.811933][T18622] vhci_hcd vhci_hcd.0: Device attached [ 1621.812079][T18628] vhci_hcd vhci_hcd.0: Device attached [ 1621.872783][T18625] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 1621.879377][T18625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1621.917254][T18625] vhci_hcd vhci_hcd.0: Device attached [ 1621.946100][T18629] vhci_hcd: connection closed [ 1621.946410][T18626] vhci_hcd: connection closed [ 1621.951214][ T4337] vhci_hcd: stop threads [ 1621.951713][T18623] vhci_hcd: connection closed [ 1621.966293][ T4337] vhci_hcd: release socket [ 1621.985217][T12795] usb 41-2: new low-speed USB device number 3 using vhci_hcd [ 1621.996323][T18631] vhci_hcd: connection closed [ 1621.996627][ T4337] vhci_hcd: disconnect device [ 1622.003178][T18627] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1622.030538][ T4337] vhci_hcd: stop threads [ 1622.034887][ T4337] vhci_hcd: release socket [ 1622.053439][ T4337] vhci_hcd: disconnect device [ 1622.075168][ T4337] vhci_hcd: stop threads [ 1622.079528][ T4337] vhci_hcd: release socket [ 1622.094631][ T4337] vhci_hcd: disconnect device [ 1622.197919][ T4337] vhci_hcd: stop threads [ 1622.212692][ T4337] vhci_hcd: release socket [ 1622.227676][ T4337] vhci_hcd: disconnect device [ 1622.284904][ T6192] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1622.291684][ T6192] cdc_ncm 4-1:1.1: bind() failure [ 1622.301694][ T6192] usb 4-1: USB disconnect, device number 23 [ 1622.426371][T18638] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1623.551748][T18654] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1624.669374][T18673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1624.675964][T18673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1624.792914][T18673] vhci_hcd vhci_hcd.0: Device attached [ 1625.439703][T18668] 9pnet_fd: Insufficient options for proto=fd [ 1625.446585][ T6192] vhci_hcd: vhci_device speed not set [ 1625.513055][T18673] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1625.519638][T18673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1625.545306][T18673] vhci_hcd vhci_hcd.0: Device attached [ 1625.555239][ T6192] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1625.606144][T18681] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 1625.612733][T18681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1625.668634][T18681] vhci_hcd vhci_hcd.0: Device attached [ 1625.691839][T18673] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 1625.698503][T18673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1625.734020][T18673] vhci_hcd vhci_hcd.0: Device attached [ 1625.750196][T18684] vhci_hcd: connection closed [ 1625.750531][T18682] vhci_hcd: connection closed [ 1625.852639][T18677] vhci_hcd: connection closed [ 1625.866525][ T4336] vhci_hcd: stop threads [ 1625.876052][T18674] vhci_hcd: connection reset by peer [ 1625.908127][ T4336] vhci_hcd: release socket [ 1625.929450][ T4336] vhci_hcd: disconnect device [ 1625.975001][ T4336] vhci_hcd: stop threads [ 1625.991770][ T4336] vhci_hcd: release socket [ 1626.006930][ T4336] vhci_hcd: disconnect device [ 1626.023855][ T4336] vhci_hcd: stop threads [ 1626.057221][T18700] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1626.790356][ T4336] vhci_hcd: release socket [ 1626.811666][ T4336] vhci_hcd: disconnect device [ 1626.842882][ T4336] vhci_hcd: stop threads [ 1626.877289][ T4336] vhci_hcd: release socket [ 1626.881944][ T4336] vhci_hcd: disconnect device [ 1627.135537][T12795] vhci_hcd: vhci_device speed not set [ 1627.165313][ T4410] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1628.270357][ T4410] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1628.280085][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.292191][ T4410] usb 4-1: Product: syz [ 1628.296724][ T4410] usb 4-1: Manufacturer: syz [ 1628.301476][ T4410] usb 4-1: SerialNumber: syz [ 1628.321283][ T4410] usb 4-1: config 0 descriptor?? [ 1628.539097][ T4410] usb 4-1: USB disconnect, device number 24 [ 1629.079453][T18739] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1629.466971][T17277] Bluetooth: hci5: command 0xfc11 tx timeout [ 1629.473691][T12466] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1630.443365][ T126] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1630.655180][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 1630.671202][ T126] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.773935][ T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1630.866407][ T126] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1630.997292][ T126] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1631.385498][ T126] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1631.395258][ T6192] vhci_hcd: vhci_device speed not set [ 1631.435567][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.513590][ T126] hub 6-1:1.0: bad descriptor, ignoring hub [ 1631.551021][ T126] hub: probe of 6-1:1.0 failed with error -5 [ 1631.568593][ T126] cdc_wdm 6-1:1.0: skipping garbage [ 1631.584115][ T126] cdc_wdm 6-1:1.0: skipping garbage [ 1631.621737][ T126] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1631.644184][ T126] cdc_wdm 6-1:1.0: Unknown control protocol [ 1631.721347][T18744] device syz_tun entered promiscuous mode [ 1631.813038][T18744] device syz_tun left promiscuous mode [ 1632.639812][T18785] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3690'. [ 1632.735891][T12591] usb 6-1: USB disconnect, device number 25 [ 1632.769470][T12342] Bluetooth: hci5: Frame reassembly failed (-84) [ 1632.810623][T12342] Bluetooth: hci5: Frame reassembly failed (-84) [ 1632.985286][ T4410] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1633.400772][ T4410] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1633.435383][ T4410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.455216][ T4410] usb 3-1: Product: syz [ 1633.459440][ T4410] usb 3-1: Manufacturer: syz [ 1633.464281][ T4410] usb 3-1: SerialNumber: syz [ 1634.046330][ T4410] usb 3-1: config 0 descriptor?? [ 1634.853440][T12466] Bluetooth: hci5: command 0xfc11 tx timeout [ 1634.862986][T12170] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1634.934156][T18808] 9pnet_fd: Insufficient options for proto=fd [ 1635.002339][T12795] usb 3-1: USB disconnect, device number 30 [ 1635.123526][T18817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1635.130085][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1635.175442][T18817] vhci_hcd vhci_hcd.0: Device attached [ 1635.214879][T18817] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1635.221463][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1635.260115][T18817] vhci_hcd vhci_hcd.0: Device attached [ 1635.268564][T18826] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 1635.275132][T18826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1635.332700][T18826] vhci_hcd vhci_hcd.0: Device attached [ 1635.372433][T18817] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(7) [ 1635.379016][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1635.387563][ T6192] vhci_hcd: vhci_device speed not set [ 1635.394951][T18817] vhci_hcd vhci_hcd.0: Device attached [ 1635.432373][T18835] vhci_hcd: connection closed [ 1635.432766][ T4336] vhci_hcd: stop threads [ 1635.442539][T18827] vhci_hcd: connection closed [ 1635.442872][T18822] vhci_hcd: connection closed [ 1635.455288][ T6192] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 1635.485389][T18818] vhci_hcd: connection closed [ 1635.488173][ T4336] vhci_hcd: release socket [ 1635.512036][T18819] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1635.524154][ T4336] vhci_hcd: disconnect device [ 1635.536073][ T4336] vhci_hcd: stop threads [ 1635.540414][ T4336] vhci_hcd: release socket [ 1635.544931][ T4336] vhci_hcd: disconnect device [ 1635.591226][ T4336] vhci_hcd: stop threads [ 1635.640973][T18842] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3705'. [ 1635.694280][ T4336] vhci_hcd: release socket [ 1635.765030][ T4336] vhci_hcd: disconnect device [ 1635.879115][ T4336] vhci_hcd: stop threads [ 1635.956543][ T4336] vhci_hcd: release socket [ 1636.020098][ T4336] vhci_hcd: disconnect device [ 1636.505361][T12795] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1636.735881][T12795] usb 3-1: Using ep0 maxpacket: 8 [ 1636.748994][T12795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.824491][T12795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1636.849617][T12795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1636.883697][T12795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1636.913270][T12795] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1636.951573][T12795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.012628][T12795] hub 3-1:1.0: bad descriptor, ignoring hub [ 1637.028307][T12795] hub: probe of 3-1:1.0 failed with error -5 [ 1637.045221][T12795] cdc_wdm 3-1:1.0: skipping garbage [ 1637.051012][T12795] cdc_wdm 3-1:1.0: skipping garbage [ 1637.069189][T12795] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1637.080253][T12795] cdc_wdm 3-1:1.0: Unknown control protocol [ 1637.264987][T18845] device syz_tun entered promiscuous mode [ 1637.271413][ T4297] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1638.046046][T18845] device syz_tun left promiscuous mode [ 1638.281416][ T4297] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1638.326433][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.335799][ T4297] usb 5-1: Product: syz [ 1638.340042][ T4297] usb 5-1: Manufacturer: syz [ 1638.350873][T18870] 9pnet_fd: Insufficient options for proto=fd [ 1638.359291][ T4297] usb 5-1: SerialNumber: syz [ 1638.399304][ T4297] usb 5-1: config 0 descriptor?? [ 1638.410417][ T4241] usb 3-1: USB disconnect, device number 31 [ 1638.645243][ T4410] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1638.837105][ T4297] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1638.850455][ T4410] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1638.867882][ T4297] asix: probe of 5-1:0.0 failed with error -71 [ 1638.875658][ T4410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.878643][ T4297] usb 5-1: USB disconnect, device number 36 [ 1638.885663][ T4410] usb 4-1: Product: syz [ 1638.893798][ T4410] usb 4-1: Manufacturer: syz [ 1638.905352][ T4410] usb 4-1: SerialNumber: syz [ 1638.937418][ T4410] usb 4-1: config 0 descriptor?? [ 1639.085294][T17015] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1639.149012][T12591] usb 4-1: USB disconnect, device number 25 [ 1639.277169][T17015] usb 6-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1639.286676][ T4410] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1639.301374][T17015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.331896][T17015] usb 6-1: config 0 descriptor?? [ 1639.358382][T17015] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1639.519497][T18887] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3721'. [ 1640.181217][T12170] Bluetooth: hci3: command 0x0406 tx timeout [ 1640.285552][T17015] gspca_sn9c20x: Write register 1000 failed -71 [ 1640.291876][T17015] gspca_sn9c20x: Device initialization failed [ 1640.302126][T17015] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71 [ 1640.303948][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1640.311033][T17015] usb 6-1: USB disconnect, device number 26 [ 1640.325369][ T4410] usb 3-1: Using ep0 maxpacket: 16 [ 1640.334975][ T4410] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.385162][ T4410] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1640.397202][ T4410] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1640.416919][ T4410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.447056][ T4410] usb 3-1: config 0 descriptor?? [ 1641.889364][ T6192] vhci_hcd: vhci_device speed not set [ 1641.916700][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1641.924775][ T4410] usbhid 3-1:0.0: can't add hid device: -71 [ 1641.931115][ T4410] usbhid: probe of 3-1:0.0 failed with error -71 [ 1641.945781][ T4410] usb 3-1: USB disconnect, device number 32 [ 1642.647719][T18906] 9pnet_fd: Insufficient options for proto=fd [ 1643.181830][ T4410] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1643.321496][T18929] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3735'. [ 1644.105884][ T4410] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1644.138683][ T4410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.232825][ T4410] usb 5-1: config 0 descriptor?? [ 1644.311386][ T4410] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1644.350863][ T4410] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 1647.275249][ T4410] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1647.465324][ T4410] usb 8-1: Using ep0 maxpacket: 16 [ 1647.472485][ T4410] usb 8-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.502475][ T4410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1647.534659][ T4410] usb 8-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 1647.575206][ T4410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.621793][ T4410] usb 8-1: config 0 descriptor?? [ 1647.739532][T18966] 9pnet_fd: Insufficient options for proto=fd [ 1648.521325][ T4410] logitech-djreceiver 0003:046D:C53F.0024: item fetching failed at offset 0/5 [ 1648.561671][ T4410] logitech-djreceiver 0003:046D:C53F.0024: logi_dj_probe: parse failed [ 1648.605294][ T4410] logitech-djreceiver: probe of 0003:046D:C53F.0024 failed with error -22 [ 1648.723047][ T4410] usb 8-1: USB disconnect, device number 12 [ 1649.344797][T18974] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1650.230114][ T6192] usb 5-1: USB disconnect, device number 37 [ 1651.659463][T18998] 9pnet_fd: Insufficient options for proto=fd [ 1653.045504][T18999] 9pnet_fd: Insufficient options for proto=fd [ 1653.312802][T19016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3760'. [ 1653.418848][T19017] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1654.768218][T19031] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1656.182212][T19043] 9pnet_fd: Insufficient options for proto=fd [ 1657.147925][ T4410] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1657.154562][T19059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3774'. [ 1657.274103][T19060] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3773'. [ 1660.469133][T19079] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3779'. [ 1661.708983][T19096] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1661.715583][T19096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1662.008717][T19093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1662.015314][T19093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1662.291142][T19103] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 1662.297820][T19103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1662.306829][T19103] vhci_hcd vhci_hcd.0: Device attached [ 1662.312505][T19093] vhci_hcd vhci_hcd.0: Device attached [ 1662.320015][T19096] vhci_hcd vhci_hcd.0: Device attached [ 1662.364220][T19112] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(5) [ 1662.370808][T19112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1662.419109][T19112] vhci_hcd vhci_hcd.0: Device attached [ 1662.435449][T19107] vhci_hcd: connection closed [ 1662.435781][T14605] vhci_hcd: stop threads [ 1662.445021][T19113] vhci_hcd: connection closed [ 1662.454191][T19097] vhci_hcd: connection closed [ 1662.463483][T19095] vhci_hcd: connection closed [ 1662.469977][T14605] vhci_hcd: release socket [ 1662.491777][T19117] 9pnet_fd: Insufficient options for proto=fd [ 1662.509183][T14605] vhci_hcd: disconnect device [ 1662.517698][T14605] vhci_hcd: stop threads [ 1662.522797][T14605] vhci_hcd: release socket [ 1662.540385][T14605] vhci_hcd: disconnect device [ 1662.549115][T14605] vhci_hcd: stop threads [ 1662.553505][T14605] vhci_hcd: release socket [ 1662.575591][ T4297] usb 39-3: new low-speed USB device number 3 using vhci_hcd [ 1662.583342][ T4297] usb 39-3: enqueue for inactive port 2 [ 1662.599614][T14605] vhci_hcd: disconnect device [ 1662.608458][T14605] vhci_hcd: stop threads [ 1662.612884][T14605] vhci_hcd: release socket [ 1662.622791][T14605] vhci_hcd: disconnect device [ 1662.695336][ T4297] vhci_hcd: vhci_device speed not set [ 1663.004618][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1664.116900][T19130] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1665.684450][T19142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3796'. [ 1667.231068][T19156] device hsr0 entered promiscuous mode [ 1667.295220][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3802'. [ 1668.237109][T19171] netlink: 'syz.4.3805': attribute type 83 has an invalid length. [ 1668.270572][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3805'. [ 1668.750699][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.758309][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.020406][T19204] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1671.199685][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'. [ 1672.069726][T19224] netlink: 'syz.3.3820': attribute type 83 has an invalid length. [ 1672.124441][T19227] 9pnet_fd: Insufficient options for proto=fd [ 1675.052834][T19255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1675.444065][T19259] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3829'. [ 1676.615339][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3832'. [ 1677.496932][T19275] netlink: 'syz.7.3834': attribute type 83 has an invalid length. [ 1680.101704][T19305] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3842'. [ 1681.095529][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'. [ 1681.760643][T19310] netlink: 'syz.7.3846': attribute type 83 has an invalid length. [ 1683.251646][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1683.251689][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1683.448482][T19342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1683.818541][T19347] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1684.660747][T19357] 9pnet_fd: Insufficient options for proto=fd [ 1685.638205][T19377] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1685.968338][ T126] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1686.110973][T19383] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3871'. [ 1686.221017][ T126] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 1686.230134][ T126] usb 5-1: config 0 has no interface number 0 [ 1686.317329][ T126] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1686.467109][ T126] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 1686.743288][ T126] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1686.763036][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.773023][ T126] usb 5-1: Product: syz [ 1686.800858][ T126] usb 5-1: Manufacturer: syz [ 1686.813207][ T126] usb 5-1: SerialNumber: syz [ 1686.903922][ T126] usb 5-1: config 0 descriptor?? [ 1686.941781][ T126] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1687.742832][ T126] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1687.765031][ T126] gspca_pac7302: probe of 5-1:0.101 failed with error -71 [ 1687.802187][ T126] usb 5-1: USB disconnect, device number 38 [ 1687.931326][T19411] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3881'. [ 1688.166652][T19415] netlink: 'syz.2.3883': attribute type 83 has an invalid length. [ 1688.445809][T19421] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1688.831171][T19430] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3884'. [ 1689.546269][T19431] 9pnet_fd: Insufficient options for proto=fd [ 1690.187655][T19442] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3893'. [ 1690.364679][T19444] netlink: 'syz.4.3894': attribute type 83 has an invalid length. [ 1691.195244][T12795] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1691.407063][T12795] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 1691.427195][T12795] usb 6-1: config 0 has no interface number 0 [ 1691.433442][T12795] usb 6-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1691.514935][T12795] usb 6-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 1691.540323][T19463] device netdevsim0 entered promiscuous mode [ 1691.551198][T12795] usb 6-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1691.564479][T12795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.598109][T12795] usb 6-1: Product: syz [ 1691.603619][T12795] usb 6-1: Manufacturer: syz [ 1692.243407][T12795] usb 6-1: SerialNumber: syz [ 1692.258412][T12795] usb 6-1: config 0 descriptor?? [ 1692.282903][T19467] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3899'. [ 1692.293606][T12795] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1692.756497][T19477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1692.855517][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3907'. [ 1693.095264][T12795] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1693.102457][T12795] gspca_pac7302: probe of 6-1:0.101 failed with error -71 [ 1693.161432][T12795] usb 6-1: USB disconnect, device number 27 [ 1693.495208][ T4410] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1693.703245][ T4410] usb 5-1: Using ep0 maxpacket: 32 [ 1693.713926][ T4410] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1693.732362][ T4410] usb 5-1: config 0 has no interface number 0 [ 1693.742176][T19503] 9pnet_fd: Insufficient options for proto=fd [ 1693.760177][ T4410] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1693.918380][T19501] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3913'. [ 1694.002259][ T4410] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1694.410003][ T4410] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1694.426585][ T4410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.482470][ T4410] usb 5-1: Product: syz [ 1694.487135][ T4410] usb 5-1: Manufacturer: syz [ 1694.491843][ T4410] usb 5-1: SerialNumber: syz [ 1694.510457][ T4410] usb 5-1: config 0 descriptor?? [ 1694.533573][T19490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1694.545573][T19490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1694.559101][ T4410] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 1694.711288][ T4410] ums-sddr09: probe of 5-1:0.20 failed with error -22 [ 1694.799174][ T4410] usb 5-1: USB disconnect, device number 39 [ 1695.272121][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1695.563489][T19519] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3919'. [ 1695.986383][T19525] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1696.015240][T12795] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1696.206890][T12795] usb 6-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1696.234531][T12795] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1696.245314][T12795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.265946][T19523] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1696.292782][T12795] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1696.464787][T19538] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1696.495541][T19538] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1697.745204][ T4410] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1697.947032][ T4410] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1697.965244][ T4410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.986024][ T4410] usb 5-1: config 0 descriptor?? [ 1698.003016][ T4410] cp210x 5-1:0.0: cp210x converter detected [ 1698.164615][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1698.456411][ T4410] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1698.477662][T19567] 9pnet_fd: Insufficient options for proto=fd [ 1698.519983][ T4410] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1698.691214][ T4410] usb 5-1: USB disconnect, device number 40 [ 1698.706631][ T4410] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1698.773505][T17521] usb 6-1: USB disconnect, device number 28 [ 1699.114792][ T4410] cp210x 5-1:0.0: device disconnected [ 1701.248721][T17015] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1701.485930][T17015] usb 4-1: Using ep0 maxpacket: 8 [ 1702.031134][T17015] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.047360][T17015] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1702.102236][T17015] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1702.129127][T17015] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1702.152735][T17015] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1702.189517][T17015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.256365][T17015] hub 4-1:1.0: bad descriptor, ignoring hub [ 1702.295131][T17015] hub: probe of 4-1:1.0 failed with error -5 [ 1702.301668][T17015] cdc_wdm 4-1:1.0: skipping garbage [ 1702.335114][T17015] cdc_wdm 4-1:1.0: skipping garbage [ 1702.366395][T17015] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1702.372371][T17015] cdc_wdm 4-1:1.0: Unknown control protocol [ 1702.834228][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1702.841290][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1702.847943][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1702.854592][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1702.861425][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1702.868050][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1702.895975][T17015] usb 4-1: Failed to suspend device, error -71 [ 1702.908872][T17015] usb 4-1: USB disconnect, device number 26 [ 1703.577291][T19660] 9pnet_fd: Insufficient options for proto=fd [ 1704.309276][T19673] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1706.901126][T14605] Bluetooth: hci5: Frame reassembly failed (-84) [ 1707.800771][T19722] 9pnet_fd: Insufficient options for proto=fd [ 1708.365248][T17521] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1708.455144][ T126] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1708.546912][T17521] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1708.555937][T17521] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1708.566779][T17521] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1708.576112][T17521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1708.587800][T17521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1708.613896][T17521] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1708.626646][T17521] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1708.634728][T17521] usb 6-1: Product: syz [ 1708.639893][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 1708.645302][T17521] usb 6-1: Manufacturer: syz [ 1708.653054][ T126] usb 4-1: config 65 has an invalid interface number: 217 but max is 0 [ 1708.672739][ T126] usb 4-1: config 65 has no interface number 0 [ 1708.682636][T17521] cdc_wdm 6-1:1.0: skipping garbage [ 1708.689972][T17521] cdc_wdm 6-1:1.0: skipping garbage [ 1708.696428][ T126] usb 4-1: config 65 interface 217 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1708.718758][T17521] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1708.724765][T17521] cdc_wdm 6-1:1.0: Unknown control protocol [ 1708.731224][ T126] usb 4-1: config 65 interface 217 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 64 [ 1708.755656][ T126] usb 4-1: config 65 interface 217 has no altsetting 0 [ 1708.776511][ T126] usb 4-1: New USB device found, idVendor=0bda, idProduct=c82e, bcdDevice=cd.cf [ 1708.786370][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.794504][ T126] usb 4-1: Product: syz [ 1708.799356][ T126] usb 4-1: Manufacturer: syz [ 1708.804059][ T126] usb 4-1: SerialNumber: syz [ 1708.820093][T19734] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1708.889574][ T6052] usb 6-1: USB disconnect, device number 29 [ 1708.975364][T12170] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1709.386650][T19744] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1710.286790][T17521] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1710.716567][T19750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.758099][T19750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.758398][T17521] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1710.822576][T17521] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1710.841732][T17521] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1710.865333][T17521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1710.885268][T17521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1710.933762][T17521] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1710.955691][T17521] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1710.963924][T17521] usb 6-1: Product: syz [ 1711.002074][T17521] usb 6-1: Manufacturer: syz [ 1711.048816][T17521] cdc_wdm 6-1:1.0: skipping garbage [ 1711.054109][T17521] cdc_wdm 6-1:1.0: skipping garbage [ 1711.246662][T17521] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1711.252655][T17521] cdc_wdm 6-1:1.0: Unknown control protocol [ 1711.285571][ T6052] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1711.315413][T12591] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1711.514168][ T6052] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1711.555441][T12591] usb 3-1: Using ep0 maxpacket: 16 [ 1711.575878][T12591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.584499][T12795] usb 6-1: USB disconnect, device number 30 [ 1711.587269][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.607760][T12591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.627649][T12591] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1711.644351][T12591] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1711.657857][T12591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.675501][ T6052] usb 5-1: config 0 descriptor?? [ 1711.718635][T12591] usb 3-1: config 0 descriptor?? [ 1711.939265][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.956314][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.967071][ T6052] [drm] vendor descriptor length:6 data:06 5f 01 05 a1 00 00 00 00 00 00 [ 1711.975924][ T6052] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1712.125486][ T4410] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1712.152197][T12591] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 1712.171480][ T6052] [drm:udl_init] *ERROR* Selecting channel failed [ 1712.195014][T12591] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0025/input/input15 [ 1712.214785][ T6052] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1712.223463][ T6052] [drm] Initialized udl on minor 2 [ 1712.231916][ T6052] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1712.242525][ T6052] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1712.253046][ T6052] usb 5-1: USB disconnect, device number 41 [ 1712.318829][ T4410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.331066][ T4410] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1712.340694][T12591] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1712.361422][ T4410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.374407][T12591] usb 3-1: USB disconnect, device number 34 [ 1712.394607][ T4410] usb 8-1: config 0 descriptor?? [ 1712.435293][T12795] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1712.517215][ T5167] usb 4-1: USB disconnect, device number 27 [ 1712.618133][ T4410] usbhid 8-1:0.0: can't add hid device: -71 [ 1712.624482][ T4410] usbhid: probe of 8-1:0.0 failed with error -71 [ 1712.625430][T12795] usb 6-1: Using ep0 maxpacket: 16 [ 1712.644879][ T4410] usb 8-1: USB disconnect, device number 13 [ 1712.668633][T12795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1712.691774][T12795] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1712.711002][T12795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.725396][T12795] usb 6-1: Product: syz [ 1712.740076][T12795] usb 6-1: Manufacturer: syz [ 1712.745003][T12795] usb 6-1: SerialNumber: syz [ 1712.761272][T12795] usb 6-1: config 0 descriptor?? [ 1712.782539][T12795] hub 6-1:0.0: bad descriptor, ignoring hub [ 1712.801033][T12795] hub: probe of 6-1:0.0 failed with error -5 [ 1712.812840][T12795] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 1713.015377][ T5167] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1713.197883][ T5167] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1713.210249][ T5167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.220191][ T4410] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1713.229557][ T5167] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1713.238788][ T5167] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1713.246934][ T5167] usb 4-1: Manufacturer: syz [ 1713.253177][ T5167] usb 4-1: config 0 descriptor?? [ 1713.255192][T12795] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1713.258379][T12591] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1713.345195][ T5167] rc_core: IR keymap rc-hauppauge not found [ 1713.351166][ T5167] Registered IR keymap rc-empty [ 1713.358006][ T5167] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1713.369762][ T5167] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 1713.435190][ T4410] usb 8-1: Using ep0 maxpacket: 16 [ 1713.442930][ T4410] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.453211][T12795] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1713.454651][ T4410] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1713.471859][T12795] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.481129][T12591] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1713.498700][T12591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.507267][ T4410] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1713.507924][T12795] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1713.516737][T12591] usb 5-1: Product: syz [ 1713.528026][ T4410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.536613][T12591] usb 5-1: Manufacturer: syz [ 1713.553927][ T4410] usb 8-1: config 0 descriptor?? [ 1713.559216][T12591] usb 5-1: SerialNumber: syz [ 1713.573885][T12795] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1713.583960][T12591] usb 5-1: config 0 descriptor?? [ 1713.590016][T12795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.614214][T12795] usb 3-1: config 0 descriptor?? [ 1713.754745][ C1] igorplugusb 4-1:0.0: receive overflow, at least 33 lost [ 1713.805296][ T126] usb 5-1: USB disconnect, device number 42 [ 1713.961224][T17521] usb 4-1: USB disconnect, device number 28 [ 1713.975583][ T4410] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1714.044905][T12795] hid-steam 0003:28DE:1102.0027: unknown main item tag 0x0 [ 1714.054739][T12795] hid-steam 0003:28DE:1102.0027: unknown main item tag 0x0 [ 1714.069861][T12795] hid-steam 0003:28DE:1102.0027: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1714.089170][T12795] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 1714.104681][T12795] hid-steam 0003:28DE:1102.0028: unknown main item tag 0x0 [ 1714.128523][T12795] hid-steam 0003:28DE:1102.0028: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1714.215633][T12795] hid-steam 0003:28DE:1102.0027: Steam Controller 'XXXXXXXXXX' connected [ 1714.233540][T12795] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0027/input/input18 [ 1714.265212][T19785] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0027/input/input19 [ 1714.294233][T19785] [ 1714.296632][T19785] ====================================================== [ 1714.303686][T19785] WARNING: possible circular locking dependency detected [ 1714.310726][T19785] 6.1.129-syzkaller #0 Not tainted [ 1714.315855][T19785] ------------------------------------------------------ [ 1714.322891][T19785] syz.2.4012/19785 is trying to acquire lock: [ 1714.328976][T19785] ffffffff8e03ce88 (input_mutex){+.+.}-{3:3}, at: input_register_device+0xb54/0x1250 [ 1714.338516][T19785] [ 1714.338516][T19785] but task is already holding lock: [ 1714.345900][T19785] ffff888056a65e18 (&hdev->ll_open_lock){+.+.}-{3:3}, at: hid_hw_close+0x2c/0xd0 [ 1714.355084][T19785] [ 1714.355084][T19785] which lock already depends on the new lock. [ 1714.355084][T19785] [ 1714.365510][T19785] [ 1714.365510][T19785] the existing dependency chain (in reverse order) is: [ 1714.374551][T19785] [ 1714.374551][T19785] -> #2 (&hdev->ll_open_lock){+.+.}-{3:3}: [ 1714.374809][T12795] usb 8-1: USB disconnect, device number 14 [ 1714.382565][T19785] lock_acquire+0x1f8/0x5a0 [ 1714.382604][T19785] __mutex_lock+0x132/0xd80 [ 1714.382630][T19785] hid_hw_open+0x24/0x160 [ 1714.382657][T19785] input_open_device+0x188/0x2d0 [ 1714.382686][T19785] kbd_connect+0xe5/0x120 [ 1714.382706][T19785] input_register_device+0xd65/0x1250 [ 1714.419731][T19785] hidinput_connect+0x2375/0x2be0 [ 1714.425316][T19785] hid_connect+0x47e/0x1a90 [ 1714.430395][T19785] hid_hw_start+0x99/0x100 [ 1714.435381][T19785] hid_device_probe+0x335/0x3a0 [ 1714.440794][T19785] really_probe+0x2ab/0xcb0 [ 1714.445857][T19785] __driver_probe_device+0x1a2/0x3d0 [ 1714.451695][T19785] driver_probe_device+0x50/0x420 [ 1714.457275][T19785] __device_attach_driver+0x2cf/0x510 [ 1714.463203][T19785] bus_for_each_drv+0x183/0x200 [ 1714.468612][T19785] __device_attach+0x359/0x570 [ 1714.473933][T19785] bus_probe_device+0xba/0x1e0 [ 1714.479251][T19785] device_add+0xb48/0xfd0 [ 1714.484144][T19785] hid_add_device+0x3a5/0x510 [ 1714.489381][T19785] usbhid_probe+0xc09/0xfc0 [ 1714.494432][T19785] usb_probe_interface+0x5c0/0xaf0 [ 1714.500106][T19785] really_probe+0x2ab/0xcb0 [ 1714.505165][T19785] __driver_probe_device+0x1a2/0x3d0 [ 1714.510992][T19785] driver_probe_device+0x50/0x420 [ 1714.516560][T19785] __device_attach_driver+0x2cf/0x510 [ 1714.522474][T19785] bus_for_each_drv+0x183/0x200 [ 1714.527878][T19785] __device_attach+0x359/0x570 [ 1714.533180][T19785] bus_probe_device+0xba/0x1e0 [ 1714.538515][T19785] device_add+0xb48/0xfd0 [ 1714.543483][T19785] usb_set_configuration+0x19dd/0x2020 [ 1714.549506][T19785] usb_generic_driver_probe+0x84/0x140 [ 1714.555517][T19785] usb_probe_device+0x130/0x260 [ 1714.560921][T19785] really_probe+0x2ab/0xcb0 [ 1714.565967][T19785] __driver_probe_device+0x1a2/0x3d0 [ 1714.571791][T19785] driver_probe_device+0x50/0x420 [ 1714.577361][T19785] __device_attach_driver+0x2cf/0x510 [ 1714.583280][T19785] bus_for_each_drv+0x183/0x200 [ 1714.588683][T19785] __device_attach+0x359/0x570 [ 1714.593987][T19785] bus_probe_device+0xba/0x1e0 [ 1714.599300][T19785] device_add+0xb48/0xfd0 [ 1714.604175][T19785] usb_new_device+0xbdd/0x1900 [ 1714.609482][T19785] hub_event+0x2efe/0x5730 [ 1714.614442][T19785] process_one_work+0x917/0x1260 [ 1714.619927][T19785] worker_thread+0xa47/0x1200 [ 1714.625149][T19785] kthread+0x28d/0x320 [ 1714.629754][T19785] ret_from_fork+0x1f/0x30 [ 1714.634720][T19785] [ 1714.634720][T19785] -> #1 (&dev->mutex#2){+.+.}-{3:3}: [ 1714.642227][T19785] lock_acquire+0x1f8/0x5a0 [ 1714.647287][T19785] __mutex_lock+0x132/0xd80 [ 1714.652336][T19785] input_register_handle+0x69/0x3a0 [ 1714.658079][T19785] kbd_connect+0xbb/0x120 [ 1714.662948][T19785] input_register_device+0xd65/0x1250 [ 1714.668878][T19785] acpi_button_add+0x62a/0x9f0 [ 1714.674194][T19785] acpi_device_probe+0xa0/0x2f0 [ 1714.679597][T19785] really_probe+0x2ab/0xcb0 [ 1714.684650][T19785] __driver_probe_device+0x1a2/0x3d0 [ 1714.690479][T19785] driver_probe_device+0x50/0x420 [ 1714.696047][T19785] __driver_attach+0x458/0x6f0 [ 1714.701353][T19785] bus_for_each_dev+0x17c/0x1f0 [ 1714.706763][T19785] bus_add_driver+0x334/0x600 [ 1714.711999][T19785] driver_register+0x2bf/0x3a0 [ 1714.712024][T19785] do_one_initcall+0x265/0x8f0 [ 1714.712050][T19785] do_initcall_level+0x157/0x207 [ 1714.728069][T19785] do_initcalls+0x49/0x86 [ 1714.732949][T19785] kernel_init_freeable+0x45c/0x60f [ 1714.738727][T19785] kernel_init+0x19/0x290 [ 1714.743587][T19785] ret_from_fork+0x1f/0x30 [ 1714.748568][T19785] [ 1714.748568][T19785] -> #0 (input_mutex){+.+.}-{3:3}: [ 1714.755869][T19785] validate_chain+0x1661/0x5950 [ 1714.761253][T19785] __lock_acquire+0x125b/0x1f80 [ 1714.766639][T19785] lock_acquire+0x1f8/0x5a0 [ 1714.771672][T19785] __mutex_lock+0x132/0xd80 [ 1714.776731][T19785] input_register_device+0xb54/0x1250 [ 1714.782643][T19785] steam_input_register+0x96b/0xbf0 [ 1714.788383][T19785] hid_hw_close+0xa4/0xd0 [ 1714.793252][T19785] hidraw_release+0x46d/0x6c0 [ 1714.798470][T19785] __fput+0x3f6/0x8d0 [ 1714.802986][T19785] task_work_run+0x246/0x300 [ 1714.808101][T19785] exit_to_user_mode_loop+0xde/0x100 [ 1714.813906][T19785] exit_to_user_mode_prepare+0xb1/0x140 [ 1714.819983][T19785] syscall_exit_to_user_mode+0x60/0x270 [ 1714.826070][T19785] do_syscall_64+0x47/0xb0 [ 1714.831013][T19785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.837430][T19785] [ 1714.837430][T19785] other info that might help us debug this: [ 1714.837430][T19785] [ 1714.847673][T19785] Chain exists of: [ 1714.847673][T19785] input_mutex --> &dev->mutex#2 --> &hdev->ll_open_lock [ 1714.847673][T19785] [ 1714.860562][T19785] Possible unsafe locking scenario: [ 1714.860562][T19785] [ 1714.868100][T19785] CPU0 CPU1 [ 1714.873466][T19785] ---- ---- [ 1714.878837][T19785] lock(&hdev->ll_open_lock); [ 1714.883632][T19785] lock(&dev->mutex#2); [ 1714.890438][T19785] lock(&hdev->ll_open_lock); [ 1714.897840][T19785] lock(input_mutex); [ 1714.901931][T19785] [ 1714.901931][T19785] *** DEADLOCK *** [ 1714.901931][T19785] [ 1714.910074][T19785] 2 locks held by syz.2.4012/19785: [ 1714.915273][T19785] #0: ffffffff8e3bccd0 (minors_rwsem){++++}-{3:3}, at: hidraw_release+0x70/0x6c0 [ 1714.924539][T19785] #1: ffff888056a65e18 (&hdev->ll_open_lock){+.+.}-{3:3}, at: hid_hw_close+0x2c/0xd0 [ 1714.934132][T19785] [ 1714.934132][T19785] stack backtrace: [ 1714.940034][T19785] CPU: 1 PID: 19785 Comm: syz.2.4012 Not tainted 6.1.129-syzkaller #0 [ 1714.948186][T19785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1714.958244][T19785] Call Trace: [ 1714.961521][T19785] [ 1714.964449][T19785] dump_stack_lvl+0x1e3/0x2cb [ 1714.969143][T19785] ? nf_tcp_handle_invalid+0x647/0x647 [ 1714.974626][T19785] ? print_circular_bug+0x12b/0x1a0 [ 1714.979845][T19785] check_noncircular+0x2fa/0x3b0 [ 1714.984797][T19785] ? mark_lock+0x9a/0x340 [ 1714.989125][T19785] ? add_chain_block+0x850/0x850 [ 1714.994062][T19785] ? lockdep_lock+0x11f/0x2a0 [ 1714.998752][T19785] ? _find_first_zero_bit+0xd0/0x100 [ 1715.004043][T19785] validate_chain+0x1661/0x5950 [ 1715.008906][T19785] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1715.014920][T19785] ? reacquire_held_locks+0x660/0x660 [ 1715.020313][T19785] ? print_irqtrace_events+0x210/0x210 [ 1715.025867][T19785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1715.032054][T19785] ? lockdep_hardirqs_on+0x94/0x130 [ 1715.037290][T19785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1715.043548][T19785] ? mark_lock+0x9a/0x340 [ 1715.047883][T19785] ? mark_lock+0x9a/0x340 [ 1715.052214][T19785] __lock_acquire+0x125b/0x1f80 [ 1715.057170][T19785] lock_acquire+0x1f8/0x5a0 [ 1715.061732][T19785] ? input_register_device+0xb54/0x1250 [ 1715.067301][T19785] ? read_lock_is_recursive+0x10/0x10 [ 1715.072685][T19785] ? __might_sleep+0xb0/0xb0 [ 1715.077326][T19785] ? mark_lock+0x9a/0x340 [ 1715.081656][T19785] __mutex_lock+0x132/0xd80 [ 1715.086189][T19785] ? input_register_device+0xb54/0x1250 [ 1715.091747][T19785] ? print_irqtrace_events+0x210/0x210 [ 1715.097218][T19785] ? input_register_device+0xb54/0x1250 [ 1715.102804][T19785] ? mutex_lock_nested+0x10/0x10 [ 1715.107753][T19785] ? kasan_quarantine_put+0xd4/0x220 [ 1715.113068][T19785] ? __kmem_cache_free+0x25c/0x3c0 [ 1715.118188][T19785] ? input_register_device+0xb46/0x1250 [ 1715.123748][T19785] input_register_device+0xb54/0x1250 [ 1715.129163][T19785] steam_input_register+0x96b/0xbf0 [ 1715.134387][T19785] hid_hw_close+0xa4/0xd0 [ 1715.138726][T19785] hidraw_release+0x46d/0x6c0 [ 1715.143444][T19785] ? hidraw_open+0x8d0/0x8d0 [ 1715.148035][T19785] __fput+0x3f6/0x8d0 [ 1715.152057][T19785] task_work_run+0x246/0x300 [ 1715.156685][T19785] ? task_work_cancel+0x2e0/0x2e0 [ 1715.161715][T19785] ? exit_to_user_mode_loop+0x39/0x100 [ 1715.167187][T19785] exit_to_user_mode_loop+0xde/0x100 [ 1715.172508][T19785] exit_to_user_mode_prepare+0xb1/0x140 [ 1715.178053][T19785] syscall_exit_to_user_mode+0x60/0x270 [ 1715.183734][T19785] do_syscall_64+0x47/0xb0 [ 1715.188176][T19785] ? clear_bhb_loop+0x45/0xa0 [ 1715.192860][T19785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.198769][T19785] RIP: 0033:0x7fb1ea78d169 [ 1715.203200][T19785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.222833][T19785] RSP: 002b:00007ffce475dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1715.231268][T19785] RAX: 0000000000000000 RBX: 00000000001a2335 RCX: 00007fb1ea78d169 [ 1715.239253][T19785] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1715.247230][T19785] RBP: 00007fb1ea9a7ba0 R08: 0000000000000001 R09: 00000007e475df6f [ 1715.255205][T19785] R10: 00007fb1ea400000 R11: 0000000000000246 R12: 00007fb1ea9a5fac [ 1715.263179][T19785] R13: 00007fb1ea9a5fa0 R14: ffffffffffffffff R15: 00007ffce475dd90 [ 1715.271247][T19785] [ 1716.065987][T17521] usb 3-1: USB disconnect, device number 35 [ 1716.080466][T17521] hid-steam 0003:28DE:1102.0027: Steam Controller 'XXXXXXXXXX' disconnected [ 1718.127067][ T6192] usb 6-1: USB disconnect, device number 31 [ 1718.133935][ T3609] ================================================================== [ 1718.142069][ T3609] BUG: KASAN: use-after-free in __mutex_lock+0xfa/0xd80 [ 1718.149018][ T3609] Read of size 8 at addr ffff888078c544e8 by task acpid/3609 [ 1718.156561][ T3609] [ 1718.158890][ T3609] CPU: 0 PID: 3609 Comm: acpid Not tainted 6.1.129-syzkaller #0 [ 1718.166560][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1718.176640][ T3609] Call Trace: [ 1718.179922][ T3609] [ 1718.182851][ T3609] dump_stack_lvl+0x1e3/0x2cb [ 1718.187546][ T3609] ? nf_tcp_handle_invalid+0x647/0x647 [ 1718.193020][ T3609] ? panic+0x764/0x764 [ 1718.197096][ T3609] ? _printk+0xd1/0x111 [ 1718.201258][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.206378][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.211497][ T3609] print_report+0x15f/0x4f0 [ 1718.216007][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.221130][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.226256][ T3609] ? __virt_addr_valid+0x45b/0x530 [ 1718.231393][ T3609] ? __phys_addr+0xb6/0x170 [ 1718.235906][ T3609] ? __mutex_lock+0xfa/0xd80 [ 1718.240506][ T3609] kasan_report+0x136/0x160 [ 1718.245013][ T3609] ? __mutex_lock+0xfa/0xd80 [ 1718.249633][ T3609] __mutex_lock+0xfa/0xd80 [ 1718.254063][ T3609] ? __mutex_trylock_common+0x17e/0x2e0 [ 1718.259631][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1718.264415][ T3609] ? steam_input_open+0x93/0x1b0 [ 1718.269381][ T3609] ? trace_contention_end+0x61/0x170 [ 1718.274685][ T3609] ? mutex_lock_nested+0x10/0x10 [ 1718.279641][ T3609] ? __mutex_lock+0x2f7/0xd80 [ 1718.284341][ T3609] ? trace_contention_end+0x61/0x170 [ 1718.289643][ T3609] ? __mutex_lock+0x2f7/0xd80 [ 1718.294330][ T3609] ? input_open_device+0x4e/0x2d0 [ 1718.299385][ T3609] steam_input_open+0x93/0x1b0 [ 1718.304203][ T3609] ? steam_input_register+0xbf0/0xbf0 [ 1718.309584][ T3609] ? mutex_lock_nested+0x10/0x10 [ 1718.314532][ T3609] input_open_device+0x188/0x2d0 [ 1718.319481][ T3609] evdev_open+0x3ed/0x600 [ 1718.323821][ T3609] chrdev_open+0x54a/0x630 [ 1718.328249][ T3609] ? cd_forget+0x160/0x160 [ 1718.332675][ T3609] ? do_raw_spin_unlock+0x137/0x8a0 [ 1718.337878][ T3609] ? fsnotify_perm+0x472/0x590 [ 1718.342653][ T3609] ? cd_forget+0x160/0x160 [ 1718.347080][ T3609] do_dentry_open+0x7f9/0x10f0 [ 1718.351857][ T3609] path_openat+0x2644/0x2e60 [ 1718.356488][ T3609] ? __kasan_slab_alloc+0x65/0x70 [ 1718.361528][ T3609] ? slab_post_alloc_hook+0x52/0x3a0 [ 1718.366829][ T3609] ? do_syscall_64+0x3b/0xb0 [ 1718.371438][ T3609] ? do_filp_open+0x480/0x480 [ 1718.376132][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.381255][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1718.386086][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1718.391225][ T3609] ? lock_release+0xd6/0xa20 [ 1718.395845][ T3609] do_filp_open+0x230/0x480 [ 1718.400380][ T3609] ? vfs_tmpfile+0x4a0/0x4a0 [ 1718.405000][ T3609] ? _raw_spin_unlock+0x24/0x40 [ 1718.409864][ T3609] ? alloc_fd+0x5a0/0x640 [ 1718.414201][ T3609] do_sys_openat2+0x13b/0x4f0 [ 1718.418892][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1718.423661][ T3609] ? do_sys_open+0x220/0x220 [ 1718.428263][ T3609] __x64_sys_openat+0x243/0x290 [ 1718.433120][ T3609] ? __ia32_sys_open+0x270/0x270 [ 1718.438059][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1718.442830][ T3609] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1718.448815][ T3609] do_syscall_64+0x3b/0xb0 [ 1718.453247][ T3609] ? clear_bhb_loop+0x45/0xa0 [ 1718.457957][ T3609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.463957][ T3609] RIP: 0033:0x7ff7f50bb9a4 [ 1718.468388][ T3609] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1718.488010][ T3609] RSP: 002b:00007fff497ad7c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1718.496535][ T3609] RAX: ffffffffffffffda RBX: 00007fff497adac8 RCX: 00007ff7f50bb9a4 [ 1718.504508][ T3609] RDX: 0000000000080800 RSI: 00007fff497ad9a8 RDI: 00000000ffffff9c [ 1718.512483][ T3609] RBP: 00007fff497ad9a8 R08: 00000000000000f4 R09: 00007fff497ad9a8 [ 1718.520469][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 1718.528457][ T3609] R13: 0000000000000100 R14: 00007fff497adaa8 R15: 00007fff497ad9a8 [ 1718.536448][ T3609] [ 1718.539465][ T3609] [ 1718.541782][ T3609] Allocated by task 12795: [ 1718.546190][ T3609] kasan_set_track+0x4b/0x70 [ 1718.550783][ T3609] __kasan_kmalloc+0x97/0xb0 [ 1718.555372][ T3609] __kmalloc_node_track_caller+0xb1/0x220 [ 1718.561100][ T3609] devm_kmalloc+0x7c/0x2b0 [ 1718.565520][ T3609] steam_probe+0x12e/0xc10 [ 1718.569941][ T3609] hid_device_probe+0x298/0x3a0 [ 1718.574802][ T3609] really_probe+0x2ab/0xcb0 [ 1718.579307][ T3609] __driver_probe_device+0x1a2/0x3d0 [ 1718.584619][ T3609] driver_probe_device+0x50/0x420 [ 1718.589646][ T3609] __device_attach_driver+0x2cf/0x510 [ 1718.595021][ T3609] bus_for_each_drv+0x183/0x200 [ 1718.599884][ T3609] __device_attach+0x359/0x570 [ 1718.604648][ T3609] bus_probe_device+0xba/0x1e0 [ 1718.609417][ T3609] device_add+0xb48/0xfd0 [ 1718.613753][ T3609] hid_add_device+0x3a5/0x510 [ 1718.618438][ T3609] usbhid_probe+0xc09/0xfc0 [ 1718.622944][ T3609] usb_probe_interface+0x5c0/0xaf0 [ 1718.628067][ T3609] really_probe+0x2ab/0xcb0 [ 1718.632574][ T3609] __driver_probe_device+0x1a2/0x3d0 [ 1718.637859][ T3609] driver_probe_device+0x50/0x420 [ 1718.642884][ T3609] __device_attach_driver+0x2cf/0x510 [ 1718.648260][ T3609] bus_for_each_drv+0x183/0x200 [ 1718.653218][ T3609] __device_attach+0x359/0x570 [ 1718.657981][ T3609] bus_probe_device+0xba/0x1e0 [ 1718.662754][ T3609] device_add+0xb48/0xfd0 [ 1718.667093][ T3609] usb_set_configuration+0x19dd/0x2020 [ 1718.672564][ T3609] usb_generic_driver_probe+0x84/0x140 [ 1718.678032][ T3609] usb_probe_device+0x130/0x260 [ 1718.682894][ T3609] really_probe+0x2ab/0xcb0 [ 1718.687395][ T3609] __driver_probe_device+0x1a2/0x3d0 [ 1718.692766][ T3609] driver_probe_device+0x50/0x420 [ 1718.697796][ T3609] __device_attach_driver+0x2cf/0x510 [ 1718.703168][ T3609] bus_for_each_drv+0x183/0x200 [ 1718.708036][ T3609] __device_attach+0x359/0x570 [ 1718.712815][ T3609] bus_probe_device+0xba/0x1e0 [ 1718.717614][ T3609] device_add+0xb48/0xfd0 [ 1718.721956][ T3609] usb_new_device+0xbdd/0x1900 [ 1718.726732][ T3609] hub_event+0x2efe/0x5730 [ 1718.731181][ T3609] process_one_work+0x917/0x1260 [ 1718.736138][ T3609] worker_thread+0xa47/0x1200 [ 1718.740820][ T3609] kthread+0x28d/0x320 [ 1718.744896][ T3609] ret_from_fork+0x1f/0x30 [ 1718.749405][ T3609] [ 1718.751725][ T3609] Freed by task 17521: [ 1718.755787][ T3609] kasan_set_track+0x4b/0x70 [ 1718.760377][ T3609] kasan_save_free_info+0x27/0x40 [ 1718.765425][ T3609] ____kasan_slab_free+0xd6/0x120 [ 1718.770480][ T3609] __kmem_cache_free+0x25c/0x3c0 [ 1718.775425][ T3609] devres_release_all+0x1c1/0x240 [ 1718.780465][ T3609] device_release_driver_internal+0x5bf/0x880 [ 1718.786534][ T3609] bus_remove_device+0x2e5/0x400 [ 1718.791479][ T3609] device_del+0x6e2/0xbd0 [ 1718.795811][ T3609] hid_destroy_device+0x64/0x100 [ 1718.800844][ T3609] usbhid_disconnect+0x9a/0xc0 [ 1718.805613][ T3609] usb_unbind_interface+0x1cd/0x840 [ 1718.810819][ T3609] device_release_driver_internal+0x59e/0x880 [ 1718.816886][ T3609] bus_remove_device+0x2e5/0x400 [ 1718.821832][ T3609] device_del+0x6e2/0xbd0 [ 1718.826169][ T3609] usb_disable_device+0x3b8/0x840 [ 1718.831202][ T3609] usb_disconnect+0x33c/0x8c0 [ 1718.835881][ T3609] hub_event+0x1f78/0x5730 [ 1718.840300][ T3609] process_one_work+0x917/0x1260 [ 1718.845246][ T3609] worker_thread+0xa47/0x1200 [ 1718.849929][ T3609] kthread+0x28d/0x320 [ 1718.853996][ T3609] ret_from_fork+0x1f/0x30 [ 1718.858419][ T3609] [ 1718.860742][ T3609] Last potentially related work creation: [ 1718.866538][ T3609] kasan_save_stack+0x3b/0x60 [ 1718.871236][ T3609] __kasan_record_aux_stack+0xb0/0xc0 [ 1718.876613][ T3609] insert_work+0x54/0x3d0 [ 1718.880969][ T3609] __queue_work+0xb4b/0xf90 [ 1718.885476][ T3609] call_timer_fn+0x1ad/0x6b0 [ 1718.890071][ T3609] __run_timers+0x6a8/0x890 [ 1718.894578][ T3609] run_timer_softirq+0x63/0xf0 [ 1718.899349][ T3609] handle_softirqs+0x2ee/0xa40 [ 1718.904144][ T3609] __irq_exit_rcu+0x157/0x240 [ 1718.908820][ T3609] irq_exit_rcu+0x5/0x20 [ 1718.913063][ T3609] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1718.918700][ T3609] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1718.924681][ T3609] [ 1718.927005][ T3609] Second to last potentially related work creation: [ 1718.933579][ T3609] kasan_save_stack+0x3b/0x60 [ 1718.938260][ T3609] __kasan_record_aux_stack+0xb0/0xc0 [ 1718.943643][ T3609] kvfree_call_rcu+0x116/0x8c0 [ 1718.948419][ T3609] drop_sysctl_table+0x317/0x460 [ 1718.953381][ T3609] drop_sysctl_table+0x329/0x460 [ 1718.958320][ T3609] unregister_sysctl_table+0x86/0x130 [ 1718.963703][ T3609] neigh_sysctl_unregister+0x74/0x90 [ 1718.968994][ T3609] inetdev_event+0x74f/0x1480 [ 1718.973672][ T3609] raw_notifier_call_chain+0xd0/0x170 [ 1718.979048][ T3609] unregister_netdevice_many+0xe48/0x1710 [ 1718.984771][ T3609] default_device_exit_batch+0x98d/0xa20 [ 1718.990404][ T3609] cleanup_net+0x886/0xd20 [ 1718.994830][ T3609] process_one_work+0x917/0x1260 [ 1718.999772][ T3609] worker_thread+0xa47/0x1200 [ 1719.004453][ T3609] kthread+0x28d/0x320 [ 1719.008521][ T3609] ret_from_fork+0x1f/0x30 [ 1719.012940][ T3609] [ 1719.015261][ T3609] The buggy address belongs to the object at ffff888078c54400 [ 1719.015261][ T3609] which belongs to the cache kmalloc-512 of size 512 [ 1719.029315][ T3609] The buggy address is located 232 bytes inside of [ 1719.029315][ T3609] 512-byte region [ffff888078c54400, ffff888078c54600) [ 1719.042593][ T3609] [ 1719.044918][ T3609] The buggy address belongs to the physical page: [ 1719.051619][ T3609] page:ffffea0001e31500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78c54 [ 1719.061773][ T3609] head:ffffea0001e31500 order:2 compound_mapcount:0 compound_pincount:0 [ 1719.070096][ T3609] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1719.078094][ T3609] raw: 00fff00000010200 ffffea0000bfa100 dead000000000002 ffff888017c41c80 [ 1719.086731][ T3609] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1719.095310][ T3609] page dumped because: kasan: bad access detected [ 1719.101739][ T3609] page_owner tracks the page as allocated [ 1719.107451][ T3609] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3625, tgid 3625 (udevadm), ts 26524462653, free_ts 22532876062 [ 1719.128640][ T3609] post_alloc_hook+0x18d/0x1b0 [ 1719.133408][ T3609] get_page_from_freelist+0x3731/0x38d0 [ 1719.138957][ T3609] __alloc_pages+0x28d/0x770 [ 1719.143549][ T3609] alloc_slab_page+0x6a/0x150 [ 1719.148236][ T3609] new_slab+0x84/0x2d0 [ 1719.152320][ T3609] ___slab_alloc+0xc20/0x1270 [ 1719.157060][ T3609] __kmem_cache_alloc_node+0x19f/0x260 [ 1719.162525][ T3609] kmalloc_trace+0x26/0xe0 [ 1719.166947][ T3609] kernfs_fop_open+0x3e3/0xcc0 [ 1719.171712][ T3609] do_dentry_open+0x7f9/0x10f0 [ 1719.176562][ T3609] path_openat+0x2644/0x2e60 [ 1719.181161][ T3609] do_filp_open+0x230/0x480 [ 1719.185674][ T3609] do_sys_openat2+0x13b/0x4f0 [ 1719.190455][ T3609] __x64_sys_openat+0x243/0x290 [ 1719.195317][ T3609] do_syscall_64+0x3b/0xb0 [ 1719.199762][ T3609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1719.205664][ T3609] page last free stack trace: [ 1719.210334][ T3609] free_unref_page_prepare+0x12a6/0x15b0 [ 1719.215977][ T3609] free_unref_page+0x33/0x3e0 [ 1719.220657][ T3609] free_contig_range+0x9a/0x150 [ 1719.225518][ T3609] destroy_args+0xfe/0x997 [ 1719.229966][ T3609] debug_vm_pgtable+0x46d/0x4c2 [ 1719.234859][ T3609] do_one_initcall+0x265/0x8f0 [ 1719.239643][ T3609] do_initcall_level+0x157/0x207 [ 1719.244601][ T3609] do_initcalls+0x49/0x86 [ 1719.248981][ T3609] kernel_init_freeable+0x45c/0x60f [ 1719.254198][ T3609] kernel_init+0x19/0x290 [ 1719.258539][ T3609] ret_from_fork+0x1f/0x30 [ 1719.262968][ T3609] [ 1719.265300][ T3609] Memory state around the buggy address: [ 1719.270930][ T3609] ffff888078c54380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1719.278994][ T3609] ffff888078c54400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.287058][ T3609] >ffff888078c54480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.295114][ T3609] ^ [ 1719.302562][ T3609] ffff888078c54500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.310622][ T3609] ffff888078c54580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1719.318678][ T3609] ================================================================== [ 1719.326808][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.341906][ T3609] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1719.349144][ T3609] CPU: 0 PID: 3609 Comm: acpid Not tainted 6.1.129-syzkaller #0 [ 1719.356797][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1719.366873][ T3609] Call Trace: [ 1719.370153][ T3609] [ 1719.373083][ T3609] dump_stack_lvl+0x1e3/0x2cb [ 1719.377779][ T3609] ? nf_tcp_handle_invalid+0x647/0x647 [ 1719.383251][ T3609] ? panic+0x764/0x764 [ 1719.387322][ T3609] ? preempt_schedule_common+0xa6/0xd0 [ 1719.392787][ T3609] ? vscnprintf+0x59/0x80 [ 1719.397125][ T3609] panic+0x318/0x764 [ 1719.401023][ T3609] ? check_panic_on_warn+0x1d/0xa0 [ 1719.406140][ T3609] ? memcpy_page_flushcache+0xfc/0xfc [ 1719.411601][ T3609] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1719.417659][ T3609] ? _raw_spin_unlock+0x40/0x40 [ 1719.422526][ T3609] ? print_report+0x4a3/0x4f0 [ 1719.427244][ T3609] check_panic_on_warn+0x7e/0xa0 [ 1719.432192][ T3609] ? __mutex_lock+0xfa/0xd80 [ 1719.436794][ T3609] end_report+0x66/0x110 [ 1719.441052][ T3609] kasan_report+0x143/0x160 [ 1719.445568][ T3609] ? __mutex_lock+0xfa/0xd80 [ 1719.450172][ T3609] __mutex_lock+0xfa/0xd80 [ 1719.454600][ T3609] ? __mutex_trylock_common+0x17e/0x2e0 [ 1719.460249][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1719.465020][ T3609] ? steam_input_open+0x93/0x1b0 [ 1719.469970][ T3609] ? trace_contention_end+0x61/0x170 [ 1719.475267][ T3609] ? mutex_lock_nested+0x10/0x10 [ 1719.480211][ T3609] ? __mutex_lock+0x2f7/0xd80 [ 1719.484903][ T3609] ? trace_contention_end+0x61/0x170 [ 1719.490196][ T3609] ? __mutex_lock+0x2f7/0xd80 [ 1719.494890][ T3609] ? input_open_device+0x4e/0x2d0 [ 1719.499942][ T3609] steam_input_open+0x93/0x1b0 [ 1719.504720][ T3609] ? steam_input_register+0xbf0/0xbf0 [ 1719.510108][ T3609] ? mutex_lock_nested+0x10/0x10 [ 1719.515067][ T3609] input_open_device+0x188/0x2d0 [ 1719.520021][ T3609] evdev_open+0x3ed/0x600 [ 1719.524403][ T3609] chrdev_open+0x54a/0x630 [ 1719.528855][ T3609] ? cd_forget+0x160/0x160 [ 1719.533287][ T3609] ? do_raw_spin_unlock+0x137/0x8a0 [ 1719.538490][ T3609] ? fsnotify_perm+0x472/0x590 [ 1719.543263][ T3609] ? cd_forget+0x160/0x160 [ 1719.547694][ T3609] do_dentry_open+0x7f9/0x10f0 [ 1719.552465][ T3609] path_openat+0x2644/0x2e60 [ 1719.557081][ T3609] ? __kasan_slab_alloc+0x65/0x70 [ 1719.562111][ T3609] ? slab_post_alloc_hook+0x52/0x3a0 [ 1719.567406][ T3609] ? do_syscall_64+0x3b/0xb0 [ 1719.572036][ T3609] ? do_filp_open+0x480/0x480 [ 1719.576722][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1719.581855][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1719.586621][ T3609] ? __virt_addr_valid+0x17f/0x530 [ 1719.591741][ T3609] ? lock_release+0xd6/0xa20 [ 1719.596356][ T3609] do_filp_open+0x230/0x480 [ 1719.600870][ T3609] ? vfs_tmpfile+0x4a0/0x4a0 [ 1719.605503][ T3609] ? _raw_spin_unlock+0x24/0x40 [ 1719.610361][ T3609] ? alloc_fd+0x5a0/0x640 [ 1719.614697][ T3609] do_sys_openat2+0x13b/0x4f0 [ 1719.619380][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1719.624169][ T3609] ? do_sys_open+0x220/0x220 [ 1719.628764][ T3609] __x64_sys_openat+0x243/0x290 [ 1719.633623][ T3609] ? __ia32_sys_open+0x270/0x270 [ 1719.638565][ T3609] ? rcu_is_watching+0x11/0xb0 [ 1719.643334][ T3609] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1719.649319][ T3609] do_syscall_64+0x3b/0xb0 [ 1719.653750][ T3609] ? clear_bhb_loop+0x45/0xa0 [ 1719.658434][ T3609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1719.664338][ T3609] RIP: 0033:0x7ff7f50bb9a4 [ 1719.668757][ T3609] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1719.688371][ T3609] RSP: 002b:00007fff497ad7c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1719.696790][ T3609] RAX: ffffffffffffffda RBX: 00007fff497adac8 RCX: 00007ff7f50bb9a4 [ 1719.704853][ T3609] RDX: 0000000000080800 RSI: 00007fff497ad9a8 RDI: 00000000ffffff9c [ 1719.712826][ T3609] RBP: 00007fff497ad9a8 R08: 00000000000000f4 R09: 00007fff497ad9a8 [ 1719.720811][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 1719.728791][ T3609] R13: 0000000000000100 R14: 00007fff497adaa8 R15: 00007fff497ad9a8 [ 1719.736772][ T3609] [ 1719.740624][ T3609] Kernel Offset: disabled [ 1719.744949][ T3609] Rebooting in 86400 seconds..