last executing test programs: 7.127977569s ago: executing program 3 (id=2428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000210100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000072000000850000000700000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000005f40)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000300)="95a76b850b264df6c97cf77f901545e2a42392a265176d39506870f307978cb886648042c5dfb20058933bea26ee3176c9179154f5fc6c9f4b3d54cb08d5074b54", 0x41}, {&(0x7f0000000580)="6d925bde8a5699a65c5eefe108ec272f10a37cae2954fe5bd5a65260bee44588e8c7d2700007cb60940b2cbeaa21470ee0d00048e763b12f08a62a77de3a42f78ccfaaf6187111350c2afc54932f1d0f4f19bf9cad66883d5f8e49d40b2c320fe000b79d9d7c788419ff8b448ba8c956da4bc882cbaa7663059a5bd7b73a81c8f45036aa7258993acb599ca5d9bd6b902684d240390fc5639bf9d0246e9d9aa741a47f535737fdc22ac40a5272ce66a0fcea3b5c5eb12402588c81606142262ec3086bab54a13881b6aabbe3eccd7536b3d1143683ec8a23d1ab355720fa44a4e4845843ad", 0xe5}, {&(0x7f0000000440)="871045d7c9d3164a15e0c9be843dc4f5eb0fdf75f12336ca3b5ff8444aa3080c5e9ef624b3ee6f3c398396def972c5495563396865a18f9caa6b2ee37c593f6afb663409efd36c424641856913156414689745d3bc53f115b3b6551bd4120ee6c33c0274426d", 0x66}, {&(0x7f0000000680)="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", 0xfa}, {&(0x7f00000007c0)="a8e7111f56a15928dd16bbcb8856fb4b5302cb55c0ce5d9e7cef0fb80730065c9107173f3e26bba54074b38bccdf0f6b699208d30d3b4f0391d7af2045b52665b4ff775faf83bf04ebfb000fc5", 0x4d}], 0x5, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000008c0)="378239ca4b97e18b0c0a5d684beef780f47e6d29b57dc531498651eae424d8544c7fcb0b2ebdb5377ec61ae427734b972365f8e58309f16e4468ea268dbe1faa0d876779826463d286768a615069260941f830e554aaa3c042d11ac22905f76ae97fba15f921c7df91d57151ffc060e41e3b95170ba32653b7d6dbcf4216c953fc759f56f30c1dcc584155284c77bdfd4be614c30194f167d9d09c28780b5a52443453d4574760e78e84ba2b12ebb7c61cc145eb9ae20eff322118e3460a64a14461343cb5b1ef3c456b878d866234b94022e7d15349216dd295f83b7246", 0xde}, {&(0x7f00000009c0)="fa0f3cdae794bbb37badafd38d3d2150b417f96ef4f30209187a67b6cc7b8395cdeaae380283071976fa85fe6f01cbb4ca3303f074b117ed027e21f847559e65938ba694d6a8eb12f2c852881f6c10858e22be9239c2d3de9e6d784bc3cf9f5316bfdd3451b07102d3c43af6538590aecba801067a4150209ea8b9bd23f71c39", 0x80}, {&(0x7f0000000a40)="d67ac7f7024db486fde0d4feb1dbadec86a5f7c4a29bb21c1acb394e79ff234331c2ac0c76e91364447acbb780aa9e6814ebd427c7930ced0f1ba9f0ca9640ee42543928da595522cb8cbddc4b2f696949c30bcfb8e399402e9858cd59da3f66b18d56beac", 0x65}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="a0c0e4aa8575963cba5bbae5ea1400c190ab3178466c9928ae64168aac5317c56fa8cd4111c4f9a3012cc8adcfa7156b3a70513f1a937d02de4fb1ff8b870d6ed5ac73e4a579c0587f526d79c6dbbe3d5f6930ba42bbf8a5b8737f0a9660376e1044a508", 0x64}, {&(0x7f0000000b80)="b6b8567b84d026965abc131665d1ded8efe938939ee4d8fb468ea33e12bfedf9fd92328deff035bd32bd13e895f498e8054d5b7e06f3a7b5a3ec9ba734d5e39bac117e533899abd535207e7ce7dbaa3bdd758abc80da8f66635cb472e5a74d23", 0x60}, {&(0x7f0000000c00)="610fa1236324d93ee72421cd77be5a9d52f55c563624ebe9fb7c9498e5157cf9f41c7f27c3f7a75b0644638a10a39ca52a3499008f7c7708eff24b0ad7e10d94880d9dd9ca9a6016603a9d91926395fcb1e23261d2fd0d76bff57adb5d00017e013e03b7ae6a0aa4fba2995925e13185e7f4bfba", 0x74}, {&(0x7f0000000c80)="fbb63cdafca27c350068954695ecaeb237e1af9a5668fd9eeadafb00280f787d8251010d8cdd65774e6cbb7cdc84f2ee0a53e2e326c61c6933032b585e63b8ab702a10d4c6d2daf801b3fa54b1547fdc5c8dec4ac2710116082d12ed603788e68846eb85684afff350d99fff3afc540980264ec8ac8b86bf0346a6c0b818e5baafa13a7a146c0e", 0x87}], 0x8, &(0x7f0000000dc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00', @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="0f60dd17c9ae7b1960fbc1a88309f3ca0882d5453857474e6539def6772c33240db7e357f7a8ec5117a5811a0bb4c84f8966b92a29089ff24d0bc3c8a3b6ae37ce1586da5bd4230a90758ab5390e65eb5d", 0x51}, {&(0x7f0000000ec0)="1f272357132c36623b1ded67536128735c2b968c", 0x14}], 0x2, &(0x7f0000002040)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x87, 0x15, '\x00', [@pad1, @generic={0xf0, 0x98, "6da6b48bca8ed9180e94a2f39abb4c65a7dcc9c74832e0d3d26dca9d29fcb045a451c9b12aa9013f82621f292b504032660b1bf0548482f4edab9e96f2174289a77e0d0372725a6f0036a80c98ae88647f296243dc3a8817cc5612d5f9d1157319530356474eb1dc0ec7e4eda8f585333d12f58fc7c0b42ad1c3276507bb39db8113a15c235cff38b368233aee062bdd43edbb715b6b0147"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x0, 0xf, '\x00', [@pad1, @generic={0x7, 0x77, "cfd27ff8b79428200a3b0226e2fef715e3a57573cba7b50acbccdcd0bcfeac98965de5beccbefa4d3026a08e314a5299df398b4146cefeb2923e48d46e11d2600cffdb89cf08b9da2e7f821dfd231c1844194f1585e38551df2dd74c84289717eb916b8a4645cb77e065e075300fbe4523e2ea39ec2dfc"}, @enc_lim={0x4, 0x1, 0x4}]}}}, @dstopts={{0xc58, 0x29, 0x37, {0x87, 0x187, '\x00', [@padn, @generic={0x6, 0xbff, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x5, [0x0, 0xd611, 0x0, 0x0]}}, @pad1, @enc_lim={0x4, 0x1, 0xfe}]}}}], 0xde0}}, {{&(0x7f0000000f80)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000fc0)="df20f69cf0a0e5bfb785e190594a55a348ee9ed2917a96cabb0e3fe71b7fab6583686435e58c45f63fcb2878e3e036e561c4ffd910321f808c9c11471ea75f017f7e9ed9559cf69b880b7ad21697eadbf78bb105ef", 0x55}, {&(0x7f0000001040)}, {&(0x7f0000001140)="acd161870a1266e6", 0x8}], 0x3, &(0x7f00000011c0)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x29, 0x7, '\x00', [@ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts={{0x1b8, 0x29, 0x36, {0x2c, 0x33, '\x00', [@jumbo={0xc2, 0x4, 0x97}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x744, [0x7, 0x8, 0x6, 0x0]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x0, [0x2, 0x3, 0x2, 0x1, 0x8]}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1741c420, 0xdd60, 0x7]}}, @generic={0x7, 0xc7, "0a845df64b789b02f452fffad9f01fdb812fb0a7c95f70cc8235cfd36cee7009551972b0840bb92aa49c2a2e102be0cc7d79fe61911b12041a355fbc4b8449e46fdf4ef819cdac58e50856d9a9374a6399f5455676f31c8db3feeee639bc9f2463fe58038286e083b91da9f5be2820f29448b26548122b6abb52473d6dd16ea99701bee22a50611a857be14ee6107e3f9c7a692e38985cc256bbcfd75caf49fb4253036e302e83f1f82b6bc31335a3fd772069e0672c76af7d974c03281937e1064cf8e7e7ab05"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x228}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x80, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0xf8, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x33}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr={{0x68, 0x29, 0x39, {0x16, 0xa, 0x0, 0x2, 0x0, [@local, @remote, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe9}}, @hopopts={{0x70, 0x29, 0x36, {0x0, 0xa, '\x00', [@generic={0x8, 0x4f, "cbbb3db4fcef2e3e70644f44b068c33a564ad2a9372f772808c1a6e40ecab4792ded69b574fc5aa02309854b4e7bd3226a4a58967766713dadaf819480e2ccb0d5f96f8b6c0e9d296421eda7f1c3d1"}]}}}], 0x198}}, {{&(0x7f0000001c40)={0xa, 0x4e23, 0x3, @empty, 0x6}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001d40)}], 0x1, &(0x7f0000005380)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x1, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x0, 0x18, '\x00', [@enc_lim, @hao={0xc9, 0x10, @private0}, @pad1, @enc_lim={0x4, 0x1, 0xfa}, @generic={0xad, 0x9f, "83c66e1ceb4aef15cd4523a9267527dbad81ac7cdef533965f9f68a164172859800825905784199195c9417be24b697d88a471bd564ffef81c20d558d96541637ee697225707286f9da78c5e90ef1bef72441f262f65cd00b99d07e3d6c638d6292d94c3f5afb8a78c45449d7db4cfff35e6c707aafed9aefe64caebaa73ee40a34a632b5a8b963f04d08ddb2dc6e44d932f53dfd0baade52806b8d3e581d2"}, @pad1, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x100}}, {{&(0x7f0000001e00)={0xa, 0x4e24, 0x57b, @empty, 0x4}, 0x1c, &(0x7f00000057c0)=[{&(0x7f0000001e40)="d51acf1af484ed611eea3d21", 0xc}, {0x0}, {&(0x7f0000001f00)="8c4e43ee08c5da4dcd8c0ceef83ca684fcca9c6ba73e8e1c861f5216166092cfcb2592bc0abf5737cddbe91cd5e0575a57383c6e799dd5e17d012696b8de8503d09a67c35548ead29d33feaf0ac458e9c8e7e63209b0554f9dcc0503366756d1cfbb674a3fadab26bc2f08ec06c8986cce8b9a5f6856cbaaa44e5930a8b29efe353e81e45315bf729a48d11c1552c7a5bf769da5c4a1f890251aea62a0cc5439cfb76bc6d8f5d6bd70f2e396d1ce35e42d76d580de67d2820dee9cf32b", 0xbd}, {&(0x7f00000055c0)="bc21d8a0f1fd6d52b71cb17d2284d7a53ce79e15f63a8b4457c73c9e7bcc3017e5359a28109eb72a18c069df9d131782fd0c9a3e07bdf76ea2e5e554399f246b94edf373cfad2cc3127ee30531500513eb4cc121d7bf10d5d4bfbfe20eb78088ebfc311d31446127c19fa44b87ddbbe998a111c22ff7e836671fa922", 0x7c}, {&(0x7f0000005640)="342c1340bd9fef5a1f2aa733c91bb5ea00239b3804ed93d42c7402ee6ed9016eb56438e5f3d951403f4f14067a9f23fbed6fc08a27d841a4102baeb530fa0d39f64d33f8e2ab271a3fc848fe94c2d5135a58a93181a27458f49cd25dd663d0cdd92682004e1476b60cd683aea7da1f9e77af7f33f8409cdda699572884d56470960dae500d82078c079a35a62c5afbdde59ddaef4c8ea688226a52dcac65c1d532bccfb59478d196f96e4ad844cfbffe18cc6dae7ac4f8e92ffe3e91f4e77ffe1e6c9e93c3c46e843b6aca80fb78efee2958eaeedb13db419f4e1a798b3054df70d40b0f664d7dae36ac5b1133931d7826cb8ff33e3f911ba6ae55d3", 0xfc}, {&(0x7f0000005740)="6a092d86aad69c7dc475425617e5c97d01c6d098ba7f4cbc767a7241bd935bea810f92dfa5f75b2460af1591d8cfc53459a7f2d2b182c9bacf4266e6cce500a2f496543315d211aaded80edab87a88e4d620dc7f3ca838fbc4e645cb7e66ea93a5cfc1a2e8", 0x65}], 0x6, &(0x7f0000005840)=[@hopopts_2292={{0xf0, 0x29, 0x36, {0x3b, 0x1a, '\x00', [@generic={0x2, 0xbd, "1a0465072c6146d954ddf893d249b8b3362578b56d7b4b7b24e733b272f105132da6f2fdd6728194cb955063b3e4234b177a060123abe149ee4b083dad1c67fadf85956176b6de93df4c2741713fbd629a9556d9ab5b756eebf8b58508c535fceec65ea9c35dee206baa4a308adfd8812ef9bcff989b0f08f91b57732105a0d8c205fde9fa8dffc4355e5c66b704dcf7bb34671834704df1e86716c7c4b19494eb675b27ab5185ede895b3c40b892c787f89f95547efe360fe6d5b5401"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x1, 0x9, 0x0, [@empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @local, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x1b}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000000}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa3}}, @hopopts={{0x30, 0x29, 0x36, {0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x3a, 0x9, '\x00', [@generic={0xe, 0x48, "95ee243e82e555597c3fb44d63d8877caf2314ce098bc1921d07b608430850d57d0a8ecb5b39b2dc9b0834ed7f5e81c0e604f8a605938bcdc20489fc04d61d59cc050985397d1886"}]}}}, @hopopts={{0x18}}], 0x2b0}}, {{&(0x7f0000005b00)={0xa, 0x4e21, 0x8a5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff01}, 0x1c, &(0x7f0000005ec0)=[{&(0x7f0000005b40)="f80c1bf04b0f5506a98b881f19d05632db2323407316407fa2a01f656e18cea472e17743c3d0d3796abb4efa64a1a79080080704ff6d88d598622f75e3d290e6b4440bb92dc5b912e23c92c28e6f229d0f9dc62f814be99bee9c89980e0d8d314c0cf1849de427a811f002fbd3b0093762babd", 0x73}, {&(0x7f0000005bc0)="78d644dc427e779c654fe551826d79d81bf7b355cc556a34d23d8ca86f4c5fa64ef257d4ce19dd0698c06d577c2ced65afc62761121e8a033c3e268847571b08979ab860a57fad226cbd34a54e2a295b03229da4f26513c181e95afaaafce5cd38ab19f7989efa69f686d37757b22462566c391ea1649edbaa9a6f458d474b3143f3982a6f", 0x85}, {&(0x7f0000005c80)="6691c58c0d5d2c4a04433d4a9ede975b7e941e548289db44c5db0f6fc0850ddf2efff5391244ab1e61710a8178a09367d5cd3c0ef1803ddf28469a705c26bc699f908a0e08cb3a5dc9ef8c9c3e27301839a81a2592fda295db81d694d126adf5ca4a486022b41717ffaea778c902189707e3783bf051830a3f7ba98fa66ef5081fdfab494104a4c6299cc627a46e60087e6f8039143efa050f81ecf81fc635b02c893b3e28f46563da6b2f346c6135cd951156087350c0b6d0a96dfd", 0xbc}, {&(0x7f0000005d40)="308d2835d9b025dd1e9bf1137c08007e163b", 0x12}, {&(0x7f0000005d80)="2a90f1edf886dd482f4e287595afd0c3832f6d57e863403810b9f1ef58e6186cc0eca049a0d8528e771da353280e72f6c13c6a60ff4d7f59bd8c9b6dc4aa9a16618a68ba15607def273ae7cb49fdf29f14688ed3ebcb6e9a3c838996dc33d51393de49b4a39aef2308da442cb36e793a6bd6bbf3ca364e344893f8ecb975bf545b06a83c29d4d00999044eeb8b31b43615de0df89b850c5fb4eaf60327a66e6ca195cb5897a14ec6dd381be73b79c4f07eb4225684aa37f7890b109c98a0e7b24e41712d9bc2fef59d8840f0ee32b48cf24103b317f2be7fbbad36584e3c27026ea9404effc808b9cd7a6fc2fee11d478d1034e75ee29970f9a8c41c67f0e2", 0xff}, {&(0x7f0000005e80)="aa55f5dfcd55fa809ce366202ac26da3680ce5acdca99d9983fab322573f0fe3d6bc4a3f380f52edc089b0c63e9498ae", 0x30}], 0x6}}], 0x8, 0x40048095) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000001c0)={0x24, @short}, 0x14) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}]}, 0x20}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000401500f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r0, &(0x7f0000000140)="6382", 0x5dc, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 5.602650148s ago: executing program 3 (id=2431): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_emit_ethernet(0x100e, &(0x7f0000002d40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@generic={0x6000, "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"}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180200001600830000000000800000008500000020000000850000002a000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0x1000, &(0x7f0000000cc0)=""/4096}, {0x0, 0x5, &(0x7f0000000240)=""/5}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x3bd8, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000a000000000000", 0x1b) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_cancel(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 4.312221626s ago: executing program 3 (id=2438): socket$l2tp6(0xa, 0x2, 0x73) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x8, 0x42, 0x40}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c1f0000000000000d00000008000500", @ANYRES16=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r4], 0x20}, 0x1, 0x6}, 0x0) 3.383917978s ago: executing program 3 (id=2440): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000880)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000680)={{r1, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323441b55cf23ecc4"], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 2.148730247s ago: executing program 1 (id=2453): ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x0, "e24468189dfad5dbcd89a680913922ca591320baf4674016041e188d6810b1eb"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00f0ff0f000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0000000000000000000000d1000000000000000000000005"], 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b}) 2.089858537s ago: executing program 2 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 1.895936946s ago: executing program 1 (id=2455): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002340)=@delchain={0xec, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x68, 0x2, [@TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_nat={0x30, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x5, 0x6, "ef"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.785583956s ago: executing program 1 (id=2456): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.741710981s ago: executing program 2 (id=2457): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r0, 0x521, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.584046202s ago: executing program 1 (id=2458): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x41b}}}, 0x7) 1.583781984s ago: executing program 2 (id=2459): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 1.442290782s ago: executing program 2 (id=2460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x9) 1.28793034s ago: executing program 2 (id=2462): r0 = memfd_create(&(0x7f0000000880)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xbd\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xc0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd67\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\x9e\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfb\n\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x03\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\x05\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x84h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\aJq\xcb3=M\x84\x7f\x18Cb\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xccr?\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xf0/\x9d6\x8aK\x18\\2\xb0Q\xa3\aPv\xd1u/\x96\x1d\x15\x88\n\xc5=Y\'\x1aE\xbbYk\x9d\xf1\xaa@\xce\x05o\xf7$\x1c\x9d\xfe*`\xc9\x9d\x15\x0e\xa8HO)\x1aJ\xadr#\x9f[lHV7o\xefed\x95\xc3\xb2[e\x91\xf1\xb0\xf3=\x04\xc9\xbe\xfcu\xa9!\x13\x8c\xce\xc3\xc6\xadg-\xa8j\xa1<\xd9\x18\x16tz.\xdd\xf6rn\x94S\xf9\xb4\x93\xc9\xa5!\xb8|g\xe0<\"\x0e\x86\xc6\x14vg\xbd\xbf\xecq\xd8\x8b\xefH\xe3\x15\x88`{\xa7\x0e\xe4k\x8eX\x89\xd3\xf5\xe6b\xff\x1f\x16\xb4\xadF\xcf\xda\x82\xd9z\xd2!P\x9b\v7+;\xc7\xd6\xad\x85\x021P1\xde6%<\xa5\x1e\xa9^8\x85Vr\xe3\xa4\xfbj\x9a\xb4\xd2\xfd\xf2\x0et\f2\xf8\xd8\x9eJ\xb6E*\xe5=\x85\xb4\xcc?\x04\xcd\x0f,zf\x81\t\x01\x96A\xb1\xdc\xb320\xc5\n2\xb1\x1c\b\x83\x0f\x1a\bO\xe9\xc9`\xd3\xdd\x01\x1fk;\xc0F)\xe6\x81\xfd\xc6n%6R\x99\xf1\x8ej\xdcJ\xd9i\x89\xcek\x03\xca\xb1I\xab\xb9\xd0\xfe\x1d\xb8,\f?\x00'/1207, 0x0) fallocate(r0, 0x0, 0x0, 0x8000008) 1.191058729s ago: executing program 0 (id=2465): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, r0, 0x0) r1 = memfd_create(&(0x7f0000001ac0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) write(r1, &(0x7f0000000140)='/', 0x1) sendfile(r1, r0, &(0x7f00000011c0), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 1.080136764s ago: executing program 4 (id=2467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000295"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1.013739282s ago: executing program 1 (id=2468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={r0, r1+60000000}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000024c0)={r2, 0x58, &(0x7f0000000200)}, 0xffffffffffffff67) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1081005, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0fc15e154ba2a6, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000380)={'\x00', 0x0, 0x7fff, 0x69}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802070000003800000000edffffffffff84000043b40f00"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) pipe(&(0x7f00000000c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xb) 940.002747ms ago: executing program 4 (id=2469): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 811.909908ms ago: executing program 1 (id=2470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2}}, 0x24}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000540)={&(0x7f00000005c0)="434e75769108f088ae4bf001937843f18892e5a30a210131deb2cbfe30d338400f6fddd6757edad7907e88c25f0a4bb75af7d10ce3b2911104646401f3c2422ffd1bc4c75222a722b2f6dc94f1883c7f8f396f60fd824a7df04ec2ab6ea566d04fee0d26a1522f286204beadf89dd93399e7e2c36450604718043d4405c3c61010f55a5c7a6cf5fc68c98b153e72aab7396dabe78388a7c2827d033bdca1be76743c4d2687859b97921c", 0xaa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "54b49d57243e6c805a56742125f058a2f67fb6bd5dd1e24658300adf2bce87dd02802f7442efbcdac4784dcd79a7001d3588baee06728605950e31a9eb4e6aa8"}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d03"], 0x0, 0x5a}, 0x20) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) socket$inet6(0xa, 0x2, 0x3a) 585.884278ms ago: executing program 0 (id=2471): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 585.775612ms ago: executing program 4 (id=2472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000020000008b00"]) 443.235121ms ago: executing program 0 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000000105"], 0x84}}, 0x0) 396.581003ms ago: executing program 3 (id=2474): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) 308.11081ms ago: executing program 0 (id=2475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) 268.261708ms ago: executing program 3 (id=2476): io_setup(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "4336d88b1a56"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x808}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 237.429633ms ago: executing program 4 (id=2477): getrlimit(0x18, 0x0) 164.058262ms ago: executing program 0 (id=2478): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}) 163.91632ms ago: executing program 4 (id=2479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 101.27158ms ago: executing program 4 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 87.416677ms ago: executing program 0 (id=2481): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0xf4240}) 0s ago: executing program 2 (id=2482): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): isconnect, device number 91 [ 565.378565][ T1162] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 565.562698][ T1162] usb 5-1: device descriptor read/64, error -71 [ 565.635549][ T57] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 565.693728][ T1162] usb usb5-port1: attempt power cycle [ 565.860386][ T57] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 565.888326][ T57] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 565.930780][ T57] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 565.970043][ T57] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 566.010631][ T57] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 566.108383][ T1162] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 566.394473][ T57] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 566.425822][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.448941][ T1162] usb 5-1: device descriptor read/8, error -71 [ 566.507337][T12134] syz.1.1951 (12134): drop_caches: 2 [ 566.570257][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 566.769171][ T1162] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 566.880108][ T1162] usb 5-1: device descriptor read/8, error -71 [ 566.955189][ T5138] usb 3-1: USB disconnect, device number 98 [ 567.055326][ T1162] usb usb5-port1: unable to enumerate USB device [ 567.368487][ T5142] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 567.418362][ T1162] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 567.560491][ T5142] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 567.584350][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.597898][ T5142] usb 2-1: config 0 descriptor?? [ 567.611699][ T1162] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 567.645700][ T1162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.712752][ T1162] usb 4-1: config 0 descriptor?? [ 567.796214][T12157] syz.0.1956 (12157): drop_caches: 2 [ 567.809310][ T29] audit: type=1326 audit(1720504160.787:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12169 comm="syz.2.1962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b99575bd9 code=0x0 [ 568.657602][ T5142] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 568.826045][T12179] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 568.852892][ T29] audit: type=1326 audit(1720504161.827:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.4.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 569.148620][ T5142] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 569.252932][T12189] sctp: [Deprecated]: syz.2.1967 (pid 12189) Use of int in maxseg socket option. [ 569.252932][T12189] Use struct sctp_assoc_value instead [ 569.390100][ T5142] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 569.405502][ T5142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.416118][ T5142] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.433783][ T5142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 569.443809][ T5142] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 569.457921][ T5142] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.501482][ T5142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.520681][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.535411][ T1162] pegasus 4-1:0.0: setup Pegasus II specific registers [ 569.548705][ T5142] usb 1-1: Product: syz [ 569.561319][ T5142] usb 1-1: Manufacturer: syz [ 569.572941][ T5142] usb 1-1: SerialNumber: syz [ 569.611647][ T5142] cdc_ncm 1-1:1.0: skipping garbage [ 569.679345][ T1162] pegasus 4-1:0.0: can't locate MII phy, using default [ 569.749964][ T1162] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 9a:b1:ba:0b:d6:ab [ 569.786687][ T1162] usb 4-1: USB disconnect, device number 92 [ 570.148469][ T45] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 570.241582][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 570.368400][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 570.387110][ T45] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 570.413996][ T45] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.450822][ T45] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.453270][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.474428][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.478508][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.533657][ T45] usbtmc 5-1:16.0: bulk endpoints not found [ 570.568464][T12179] Bluetooth: hci3: command 0x0406 tx timeout [ 570.828913][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.863113][ T45] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 570.884067][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.910110][ T9] usb 2-1: USB disconnect, device number 97 [ 570.956989][ T5142] cdc_ncm 1-1:1.0: bind() failure [ 571.000443][ T5142] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 571.035051][ T5138] usb 5-1: USB disconnect, device number 86 [ 571.039009][ T5142] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 571.058576][ T45] usb 3-1: device descriptor read/64, error -71 [ 571.097792][ T5142] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 571.120535][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 571.126158][ T5142] usb 1-1: USB disconnect, device number 111 [ 571.363220][ T45] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 571.548552][ T45] usb 3-1: device descriptor read/64, error -71 [ 571.554947][ T5137] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 571.668725][ T45] usb usb3-port1: attempt power cycle [ 571.721644][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 571.755458][ T5137] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 571.805476][ T5137] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 571.825828][ T5137] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 571.836202][ T5137] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 571.847521][ T5137] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 571.887752][ T5137] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 571.897823][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.987486][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 572.089653][ T45] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 572.129173][ T45] usb 3-1: device descriptor read/8, error -71 [ 572.138392][ T5169] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 572.180226][ T5137] usb 2-1: USB disconnect, device number 98 [ 572.342347][ T5169] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 572.357296][ T5169] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 572.367178][ T5169] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 572.388389][ T5169] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 572.400616][ T5169] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 572.410756][ T5169] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 572.420130][ T45] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 572.441339][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.469622][ T45] usb 3-1: device descriptor read/8, error -71 [ 572.580657][ T4480] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 572.596200][ T29] audit: type=1326 audit(1720504165.567:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12233 comm="syz.4.1979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 572.620584][ T45] usb usb3-port1: unable to enumerate USB device [ 572.802980][ T45] usb 1-1: USB disconnect, device number 112 [ 573.509454][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.582522][T12240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.835076][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 573.860620][T12248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.984076][T12248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.138407][ T5142] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 575.339991][ T5142] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 575.369851][ T5142] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 575.383769][ T5142] usb 3-1: config 0 has no interface number 0 [ 575.410676][ T5142] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 575.452005][ T5142] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 575.475923][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.505911][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 575.518877][ T5142] usb 3-1: config 0 descriptor?? [ 575.528076][T12267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.644898][ T4480] Bluetooth: hci3: unexpected event 0x17 length: 14 > 6 [ 575.694164][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 576.330481][ T5142] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input41 [ 576.387429][ T4480] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 576.458612][ T1162] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 576.758795][ T1162] usb 5-1: device descriptor read/64, error -71 [ 576.768600][ T5142] usb 3-1: USB disconnect, device number 103 [ 576.774682][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 577.069639][ T1162] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 577.238516][ T1162] usb 5-1: device descriptor read/64, error -71 [ 577.369831][ T1162] usb usb5-port1: attempt power cycle [ 577.688632][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 578.404917][ T1162] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 578.479082][ T1162] usb 5-1: device descriptor read/8, error -71 [ 578.773393][T12293] syz.0.1992 (12293): drop_caches: 2 [ 578.788555][ T1162] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 578.900121][ T1162] usb 5-1: device descriptor read/8, error -71 [ 579.022482][ T1162] usb usb5-port1: unable to enumerate USB device [ 579.395556][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'. [ 579.527078][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 579.743851][T12341] sctp: [Deprecated]: syz.4.2006 (pid 12341) Use of int in maxseg socket option. [ 579.743851][T12341] Use struct sctp_assoc_value instead [ 579.747786][ T4480] Bluetooth: hci3: unexpected event 0x17 length: 14 > 6 [ 580.107284][T12351] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 580.129118][T12351] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2007'. [ 580.143066][T12351] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2007'. [ 581.427971][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 581.768431][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 581.779408][T12179] Bluetooth: hci4: unexpected event 0x17 length: 14 > 6 [ 581.788643][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 582.338489][ T5137] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 582.581990][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 582.624644][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 582.685441][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 582.707156][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 582.731902][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 582.764759][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 582.774309][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.783478][T12407] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 582.798806][T12407] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2022'. [ 582.810176][T12407] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2022'. [ 583.157939][ T5169] usb 1-1: USB disconnect, device number 113 [ 583.534091][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 583.923720][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 584.126761][ T4480] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 584.209718][ T4480] Bluetooth: hci4: unexpected event 0x17 length: 14 > 6 [ 584.588363][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 585.622661][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 585.694481][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.754272][ T9] usb 3-1: config 0 descriptor?? [ 585.782987][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 586.027366][ T4480] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 586.318517][ T9] gspca_spca508: reg_read err -110 [ 586.356993][ T9] gspca_spca508: reg_read err -71 [ 586.370437][ T9] gspca_spca508: reg_read err -71 [ 586.384213][ T9] gspca_spca508: reg_read err -71 [ 586.402756][ T9] gspca_spca508: reg_read err -71 [ 586.418600][ T9] gspca_spca508: reg write: error -71 [ 586.438124][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 586.454967][ T9] usb 3-1: USB disconnect, device number 104 [ 586.724939][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.810353][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.382470][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 587.645528][ T4480] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 587.938478][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 587.991727][ T4480] Bluetooth: hci1: unexpected event 0x17 length: 14 > 6 [ 588.200618][ T9] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 588.403631][ T9] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 588.413599][ T9] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 588.423608][ T9] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 588.434539][ T9] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 589.205573][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 589.252130][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.557492][ T5142] usb 3-1: USB disconnect, device number 105 [ 590.261939][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 590.893449][T12534] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 590.893449][T12534] program syz.4.2056 not setting count and/or reply_len properly [ 590.936066][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 591.302970][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'. [ 591.378470][ T5136] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 591.732969][ T4480] Bluetooth: hci3: unexpected event 0x17 length: 14 > 6 [ 591.769530][ T5136] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 591.790926][ T5136] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 591.808996][ T5136] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 591.871928][ T5136] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 591.923513][ T5136] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 591.979286][ T5136] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 592.003308][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.350198][ T5169] usb 1-1: USB disconnect, device number 114 [ 593.500155][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 593.602215][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 593.770768][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 594.038433][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 594.164690][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'. [ 594.262555][ T9] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 594.278253][ T9] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 594.287141][ T9] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 594.328617][ T9] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 594.358314][ T9] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 594.367929][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 594.408536][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.785843][ T5169] usb 4-1: USB disconnect, device number 93 [ 595.157221][T12591] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 595.157221][T12591] program syz.4.2072 not setting count and/or reply_len properly [ 596.785743][ T4480] Bluetooth: hci0: unexpected event 0x17 length: 14 > 6 [ 596.944917][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 597.657028][T12626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.743206][T12626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.084501][T12657] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 599.084501][T12657] program syz.2.2088 not setting count and/or reply_len properly [ 599.527836][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 600.359287][ T4480] Bluetooth: hci3: unexpected event 0x17 length: 14 > 6 [ 601.600718][ T5137] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 602.108074][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 602.143707][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 602.232596][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 602.450739][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 602.461915][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 602.461934][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 602.513066][T12718] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 602.513066][T12718] program syz.1.2102 not setting count and/or reply_len properly [ 602.618391][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 602.661909][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.948674][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 603.667358][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'. [ 603.743909][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 603.762033][ T25] usb 1-1: USB disconnect, device number 115 [ 603.766879][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.821602][ T9] usb 4-1: config 0 descriptor?? [ 604.049756][T12736] tmpfs: Bad value for 'mpol' [ 604.212379][T12744] sctp: [Deprecated]: syz.2.2109 (pid 12744) Use of int in maxseg socket option. [ 604.212379][T12744] Use struct sctp_assoc_value instead [ 604.250224][ T4480] Bluetooth: hci1: unexpected event 0x17 length: 14 > 6 [ 604.359173][ T25] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 604.610875][ T25] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 604.637552][ T25] usb 5-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 604.687540][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 604.714179][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.593507][ T9] pegasus 4-1:0.0: setup Pegasus II specific registers [ 605.691295][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.752297][ T9] pegasus 4-1:0.0: can't locate MII phy, using default [ 605.766491][T12766] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2115'. [ 605.817657][ T9] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 26:89:58:11:ac:87 [ 605.824959][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.864307][ T9] usb 4-1: USB disconnect, device number 94 [ 606.258330][ T5136] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 606.427563][T12772] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 606.427563][T12772] program syz.1.2116 not setting count and/or reply_len properly [ 606.548280][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 606.662173][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 606.686824][ T5136] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 606.697975][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.724145][ T5136] usb 1-1: config 0 descriptor?? [ 606.761643][ T5142] usb 5-1: USB disconnect, device number 91 [ 606.928011][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 607.311545][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.479687][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.530506][T12789] sctp: [Deprecated]: syz.1.2120 (pid 12789) Use of int in maxseg socket option. [ 607.530506][T12789] Use struct sctp_assoc_value instead [ 608.035998][ T5136] hid (null): unknown global tag 0xc [ 608.057313][ T5136] hid-generic 0003:0158:0100.0031: unknown main item tag 0x1 [ 608.064972][ T5136] hid-generic 0003:0158:0100.0031: unexpected long global item [ 608.079881][ T5136] hid-generic 0003:0158:0100.0031: probe with driver hid-generic failed with error -22 [ 608.111728][ T5136] usb 1-1: USB disconnect, device number 116 [ 608.240890][T12796] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2122'. [ 608.267927][T12797] sctp: [Deprecated]: syz.4.2121 (pid 12797) Use of int in maxseg socket option. [ 608.267927][T12797] Use struct sctp_assoc_value instead [ 608.449238][ T4480] Bluetooth: hci0: unexpected event 0x17 length: 14 > 6 [ 608.738372][ T25] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 609.808989][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 609.817645][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 609.851626][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 609.886778][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.931821][ T25] usb 4-1: config 0 descriptor?? [ 609.939467][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 609.992018][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 610.148370][ T5169] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 610.348548][ T45] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 610.371703][ T5169] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.425871][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.440060][ T5169] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 610.479248][ T5169] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 610.509436][T12830] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 610.509436][T12830] program syz.1.2130 not setting count and/or reply_len properly [ 610.539953][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.580139][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.605484][ T45] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 610.653610][ T45] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 610.684585][ T25] hid (null): unknown global tag 0xc [ 610.713721][ T45] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 610.736588][ T25] hid-generic 0003:0158:0100.0032: unknown main item tag 0x1 [ 610.757361][ T45] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 610.775252][ T25] hid-generic 0003:0158:0100.0032: unexpected long global item [ 610.815399][ T25] hid-generic 0003:0158:0100.0032: probe with driver hid-generic failed with error -22 [ 610.826706][ T45] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 610.865226][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 610.910874][ T25] usb 4-1: USB disconnect, device number 95 [ 610.926561][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.238840][ T5136] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 611.264932][ T9] usb 5-1: USB disconnect, device number 92 [ 611.448536][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 611.539740][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 611.711600][ T5136] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 611.795598][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.844885][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.920885][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.999799][ T5136] usb 1-1: config 0 descriptor?? [ 612.192561][ T5169] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 612.202701][ T5169] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input42 [ 612.223922][ T5169] input: failed to attach handler kbd to device input42, error: -5 [ 612.442452][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.475717][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.512177][ T5136] hid (null): unknown global tag 0xc [ 612.525917][ T5169] usb 3-1: USB disconnect, device number 106 [ 612.531475][ T5136] hid-generic 0003:0158:0100.0033: unknown main item tag 0x1 [ 612.546143][ T5136] hid-generic 0003:0158:0100.0033: unexpected long global item [ 612.614672][ T5142] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 612.626498][ T5136] hid-generic 0003:0158:0100.0033: probe with driver hid-generic failed with error -22 [ 612.775029][T12853] sctp: [Deprecated]: syz.4.2136 (pid 12853) Use of int in maxseg socket option. [ 612.775029][T12853] Use struct sctp_assoc_value instead [ 612.789332][ T5136] usb 1-1: USB disconnect, device number 117 [ 612.868119][ T5142] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 612.891209][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.952142][ T5142] usb 4-1: config 0 descriptor?? [ 612.965443][ T5142] gspca_main: spca508-2.14.0 probing 8086:0110 [ 613.431906][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 613.489593][ T5142] gspca_spca508: reg_read err -110 [ 613.498045][ T4480] Bluetooth: hci0: unexpected event 0x17 length: 14 > 6 [ 613.515142][ T5142] gspca_spca508: reg_read err -32 [ 613.734195][ T5142] gspca_spca508: reg_read err -32 [ 613.747155][ T5142] gspca_spca508: reg_read err -32 [ 613.805254][T12879] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 613.805254][T12879] program syz.4.2142 not setting count and/or reply_len properly [ 614.041775][ T5142] gspca_spca508: reg_read err -32 [ 614.057278][ T5142] gspca_spca508: reg write: error -32 [ 614.064217][ T5142] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 614.307848][ T9] usb 4-1: USB disconnect, device number 96 [ 614.552629][T12886] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2146'. [ 614.618356][ T5142] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 614.734996][ T4480] Bluetooth: hci4: unexpected event 0x17 length: 14 > 6 [ 615.572120][ T5136] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 615.592256][ T5142] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.631097][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.642676][T12892] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 615.671941][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.739184][ T5142] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.759458][ T5142] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.806940][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.818498][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.828642][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 615.835395][ T5142] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.850190][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 615.892954][ T5136] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 615.913022][T12897] sctp: [Deprecated]: syz.1.2147 (pid 12897) Use of int in maxseg socket option. [ 615.913022][T12897] Use struct sctp_assoc_value instead [ 615.914243][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.949219][ T5142] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 615.977959][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 615.989722][ T5136] usb 3-1: config 0 descriptor?? [ 616.011708][ T5142] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 616.026059][ T5142] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.045167][ T5142] usb 1-1: string descriptor 0 read error: -22 [ 616.054445][ T5142] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 616.063783][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.096353][ T5142] adutux 1-1:168.0: interrupt endpoints not found [ 616.425824][ T5169] usb 1-1: USB disconnect, device number 118 [ 616.552520][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.642310][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.738579][ T25] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 616.970639][ T25] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.012599][ T25] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 617.043207][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 617.059796][ T5136] hid (null): unknown global tag 0xc [ 617.073835][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 617.085657][ T5136] hid-generic 0003:0158:0100.0034: unknown main item tag 0x1 [ 617.093218][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.101677][ T5136] hid-generic 0003:0158:0100.0034: unexpected long global item [ 617.110224][ T5136] hid-generic 0003:0158:0100.0034: probe with driver hid-generic failed with error -22 [ 617.125608][ T5136] usb 3-1: USB disconnect, device number 107 [ 617.602884][T12925] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 617.602884][T12925] program syz.0.2155 not setting count and/or reply_len properly [ 617.705098][ T5137] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 618.063891][ T25] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 618.077653][ T5137] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 618.086839][ T25] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input43 [ 618.096808][ T5137] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 618.106922][ T5137] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 618.118722][ T5137] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 618.565012][ T4480] Bluetooth: hci2: unexpected event 0x17 length: 14 > 6 [ 618.597770][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.844598][ T5137] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 618.854028][ T5137] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 618.863542][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.871890][ T25] input: failed to attach handler kbd to device input43, error: -5 [ 618.887322][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.008662][ T25] usb 2-1: USB disconnect, device number 99 [ 619.255945][ T5169] usb 4-1: USB disconnect, device number 97 [ 619.279525][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.348829][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.544690][T12948] sctp: [Deprecated]: syz.0.2160 (pid 12948) Use of int in maxseg socket option. [ 619.544690][T12948] Use struct sctp_assoc_value instead [ 620.148553][ T5169] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 620.372411][ T5169] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 620.398298][ T5169] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 620.407065][ T5169] usb 2-1: config 0 has no interface number 0 [ 620.413522][ T5169] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 620.427154][ T5169] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 620.449119][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 620.467103][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.491825][ T5169] usb 2-1: config 0 descriptor?? [ 620.515052][T12951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 620.810502][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 620.821049][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.833008][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.846987][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.860708][ T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 620.871041][ T25] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.893703][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.908314][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.917002][ T25] usb 4-1: Product: syz [ 620.921588][ T25] usb 4-1: Manufacturer: syz [ 620.927745][ T25] usb 4-1: SerialNumber: syz [ 620.933921][ T5137] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 620.987720][ T25] cdc_ncm 4-1:1.0: skipping garbage [ 621.121939][ T5137] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 621.147694][ T5137] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 621.160265][ T5137] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 621.170267][ T5137] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 621.181413][ T5137] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 621.206699][ T5169] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input44 [ 621.226563][ T5137] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 621.268017][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.607420][ T5137] usb 1-1: USB disconnect, device number 119 [ 621.720889][ T5089] usb 2-1: USB disconnect, device number 100 [ 621.727029][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 621.845764][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.861072][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.928476][ T5169] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 622.126630][ T5169] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 622.142046][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.155209][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.182536][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.191155][ T25] cdc_ncm 4-1:1.0: bind() failure [ 622.211768][ T25] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 622.232820][ T5169] usb 3-1: config 0 descriptor?? [ 622.257297][ T25] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 622.302056][ T25] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 622.336475][ T25] usb 4-1: USB disconnect, device number 98 [ 622.490018][T12992] sctp: [Deprecated]: syz.0.2172 (pid 12992) Use of int in maxseg socket option. [ 622.490018][T12992] Use struct sctp_assoc_value instead [ 622.732739][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 623.026375][T13002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2175'. [ 623.027331][T13004] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2176'. [ 623.066510][T12998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2174'. [ 623.085446][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2174'. [ 623.179159][ T1162] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 623.423892][ T1162] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 623.444674][ T1162] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 623.460000][ T1162] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 623.461236][T13018] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2180'. [ 623.478322][ T1162] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 623.500535][ T5136] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 623.508360][ T1162] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 623.526777][ T1162] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 623.537028][ T1162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.545628][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 623.682871][ T5169] pegasus 3-1:0.0: can't reset MAC [ 623.690631][ T5169] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 623.708391][ T5136] usb 5-1: Using ep0 maxpacket: 16 [ 623.715881][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 623.729235][ T5169] usb 3-1: USB disconnect, device number 108 [ 623.736261][ T5136] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 623.778493][ T5089] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 623.782638][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.819463][ T25] usb 2-1: USB disconnect, device number 101 [ 623.829161][ T5136] usb 5-1: config 0 descriptor?? [ 623.988515][ T5138] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 623.998480][ T5089] usb 4-1: Using ep0 maxpacket: 16 [ 624.008010][ T5089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 624.019697][ T5089] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 624.028936][ T5089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.053243][ T5089] usb 4-1: config 0 descriptor?? [ 624.182739][ T5138] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 624.191363][ T5138] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 624.200343][ T5138] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 624.214080][ T5138] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 624.224668][ T5138] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 624.234025][ T5138] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 624.243339][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.257808][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.272510][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.293303][ T5136] hid (null): unknown global tag 0xc [ 624.324321][ T5136] hid-generic 0003:0158:0100.0035: unknown main item tag 0x1 [ 624.348316][ T5136] hid-generic 0003:0158:0100.0035: unexpected long global item [ 624.368017][ T5136] hid-generic 0003:0158:0100.0035: probe with driver hid-generic failed with error -22 [ 624.470234][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.506805][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.544540][ T5089] hid (null): unknown global tag 0x83 [ 624.554291][ T5089] hid (null): unknown global tag 0xc [ 624.563814][ T5169] usb 5-1: USB disconnect, device number 93 [ 624.585511][ T5089] hid-generic 0003:0158:0100.0036: unknown main item tag 0x1 [ 624.602891][ T5089] hid-generic 0003:0158:0100.0036: unexpected long global item [ 624.614227][ T5089] hid-generic 0003:0158:0100.0036: probe with driver hid-generic failed with error -22 [ 624.618349][ T57] usb 1-1: USB disconnect, device number 120 [ 624.739331][ T5089] usb 4-1: USB disconnect, device number 99 [ 624.778476][ T5136] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 624.812164][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.826637][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.953662][T13032] sctp: [Deprecated]: syz.2.2184 (pid 13032) Use of int in maxseg socket option. [ 624.953662][T13032] Use struct sctp_assoc_value instead [ 624.988352][ T5136] usb 2-1: Using ep0 maxpacket: 16 [ 624.996248][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 625.014500][ T5136] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 625.024781][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.040438][ T5136] usb 2-1: config 0 descriptor?? [ 625.404710][T13035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2185'. [ 625.474772][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2185'. [ 625.492648][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.568824][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.583454][ T4480] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 625.625470][ T5136] usbhid 2-1:0.0: can't add hid device: -71 [ 625.684989][ T5136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 625.750705][ T5136] usb 2-1: USB disconnect, device number 102 [ 626.038613][T12179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.084394][T12179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.098746][T12179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.117489][T12179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.126865][T12179] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 626.143271][T12179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.788608][ T25] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 627.442254][ T25] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 627.634667][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.667077][ T25] usb 4-1: config 0 descriptor?? [ 628.250028][T12179] Bluetooth: hci5: command tx timeout [ 628.529980][T13079] sctp: [Deprecated]: syz.1.2195 (pid 13079) Use of int in maxseg socket option. [ 628.529980][T13079] Use struct sctp_assoc_value instead [ 628.563802][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.878602][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.117605][T12179] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 629.177352][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.250898][T13086] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.2197'. [ 629.422097][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.591401][ T25] pegasus 4-1:0.0: can't reset MAC [ 629.596791][ T25] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 629.658849][ T25] usb 4-1: USB disconnect, device number 100 [ 629.682500][ T5138] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 629.938351][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 629.950020][ T62] bridge_slave_1: left allmulticast mode [ 629.956488][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 629.966174][ T62] bridge_slave_1: left promiscuous mode [ 629.997284][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.040513][ T62] bridge_slave_0: left allmulticast mode [ 630.046985][ T62] bridge_slave_0: left promiscuous mode [ 630.083339][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.133950][ T5138] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 630.185990][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.227021][ T5138] usb 2-1: config 0 descriptor?? [ 630.328821][T12179] Bluetooth: hci5: command tx timeout [ 630.458465][ T25] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 630.547833][T13111] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2201'. [ 630.669857][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 630.697814][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.709155][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.738293][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 630.769475][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 630.784909][ T5138] hid (null): unknown global tag 0xc [ 630.806518][ T5138] hid-generic 0003:0158:0100.0037: unknown main item tag 0x1 [ 630.815370][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.833956][ T5138] hid-generic 0003:0158:0100.0037: unexpected long global item [ 630.856458][ T5138] hid-generic 0003:0158:0100.0037: probe with driver hid-generic failed with error -22 [ 630.872667][ T25] usb 5-1: config 0 descriptor?? [ 630.978510][ T5136] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 631.031130][ T1162] usb 2-1: USB disconnect, device number 103 [ 631.178377][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 631.208363][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 631.227277][ T5136] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 631.243624][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.261838][ T5136] usb 4-1: config 0 descriptor?? [ 631.285654][T13100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.296868][T13100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.313097][ T25] hid (null): unknown global tag 0xc [ 631.326841][ T25] hid-generic 0003:0158:0100.0038: unknown main item tag 0x1 [ 631.336484][ T25] hid-generic 0003:0158:0100.0038: unexpected long global item [ 631.345852][ T25] hid-generic 0003:0158:0100.0038: probe with driver hid-generic failed with error -22 [ 631.349225][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.383175][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.400881][ T62] bond0 (unregistering): Released all slaves [ 631.470155][T13051] chnl_net:caif_netlink_parms(): no params data found [ 631.533656][ T57] usb 5-1: USB disconnect, device number 94 [ 631.580513][ T62] IPVS: stopping backup sync thread 8909 ... [ 631.693353][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.718908][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.892343][ T5136] hid (null): unknown global tag 0xc [ 631.910782][ T5136] hid-generic 0003:0158:0100.0039: unknown main item tag 0x1 [ 631.918326][ T5136] hid-generic 0003:0158:0100.0039: unexpected long global item [ 631.927127][ T5136] hid-generic 0003:0158:0100.0039: probe with driver hid-generic failed with error -22 [ 632.395989][ T5136] usb 4-1: USB disconnect, device number 101 [ 632.434813][T12179] Bluetooth: hci5: command tx timeout [ 632.973053][T13051] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.071062][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 633.092860][T13051] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.107366][T13051] bridge_slave_0: entered allmulticast mode [ 633.116429][T13051] bridge_slave_0: entered promiscuous mode [ 633.129426][T13051] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.136730][T13051] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.154075][T13151] sctp: [Deprecated]: syz.1.2206 (pid 13151) Use of int in maxseg socket option. [ 633.154075][T13151] Use struct sctp_assoc_value instead [ 633.173588][T13051] bridge_slave_1: entered allmulticast mode [ 633.185280][T13051] bridge_slave_1: entered promiscuous mode [ 633.670118][T13051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.727786][T13051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.877732][ T62] hsr_slave_0: left promiscuous mode [ 633.978603][ T62] hsr_slave_1: left promiscuous mode [ 633.987477][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.042504][T12179] Bluetooth: hci0: unexpected event 0x17 length: 14 > 6 [ 634.050041][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.124212][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.152352][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.185506][T13179] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 634.246415][ T62] veth1_macvtap: left promiscuous mode [ 634.263055][ T62] veth0_macvtap: left promiscuous mode [ 634.283025][T13185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.304298][ T62] veth1_vlan: left promiscuous mode [ 634.327909][ T62] veth0_vlan: left promiscuous mode [ 634.537845][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.578510][T12179] Bluetooth: hci5: command tx timeout [ 635.325679][T13152] syz.4.2207 (13152): drop_caches: 2 [ 635.752762][ T62] team0 (unregistering): Port device team_slave_1 removed [ 635.859426][ T62] team0 (unregistering): Port device team_slave_0 removed [ 636.536672][T12179] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 636.657048][T13051] team0: Port device team_slave_0 added [ 638.000739][T13051] team0: Port device team_slave_1 added [ 638.236822][T13051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.286215][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 638.296196][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 638.308511][T13051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.335644][T13051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.376261][T13051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.387332][T13051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.438388][ T5089] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 638.518313][T13051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.588855][ T29] audit: type=1326 audit(1720504231.557:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13215 comm="syz.4.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 638.678993][ T5089] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 638.688113][ T5089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.764470][ T5089] usb 3-1: config 0 descriptor?? [ 638.767440][T13051] hsr_slave_0: entered promiscuous mode [ 638.791578][ T5089] gspca_main: spca508-2.14.0 probing 8086:0110 [ 638.829104][T13051] hsr_slave_1: entered promiscuous mode [ 638.884916][T13228] sctp: [Deprecated]: syz.4.2221 (pid 13228) Use of int in maxseg socket option. [ 638.884916][T13228] Use struct sctp_assoc_value instead [ 638.917641][T13051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.928442][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 638.937870][T13051] Cannot create hsr debugfs directory [ 638.949002][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'. [ 639.314082][ T5089] gspca_spca508: reg_read err -110 [ 639.336496][ T5089] gspca_spca508: reg_read err -32 [ 639.354581][ T5089] gspca_spca508: reg_read err -32 [ 639.390747][ T5089] gspca_spca508: reg_read err -32 [ 639.418800][ T5089] gspca_spca508: reg_read err -32 [ 639.440153][ T5089] gspca_spca508: reg write: error -32 [ 639.453552][ T5089] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 639.471968][ T5136] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 639.923100][ T5136] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 640.627963][ T5136] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 640.648416][ T5136] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 640.658146][ T5136] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 640.716442][ T5138] usb 3-1: USB disconnect, device number 109 [ 640.732460][ T5136] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 640.797215][ T5136] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 640.821693][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'. [ 640.828685][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.140532][ T1162] usb 4-1: USB disconnect, device number 102 [ 641.652393][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 641.786185][T13051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 641.836116][T13051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.861222][T13051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 641.897526][T13051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.254385][T12179] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 642.308320][ T5136] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 642.442407][T13051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.531171][ T5136] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 642.565892][ T5136] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 642.576154][T13051] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.607401][ T5136] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 642.629182][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.636416][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.661361][ T5136] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 642.730912][T13299] sctp: [Deprecated]: syz.4.2234 (pid 13299) Use of int in maxseg socket option. [ 642.730912][T13299] Use struct sctp_assoc_value instead [ 642.761122][ T5136] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 642.792744][ T5136] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 642.833860][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.841072][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.852802][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.934628][T13263] syz.1.2227 (13263): drop_caches: 2 [ 643.166722][ T5140] usb 3-1: USB disconnect, device number 110 [ 643.254594][T13051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.589565][T13317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.785748][T13316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.873713][T13051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.893388][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 645.040708][T13051] veth0_vlan: entered promiscuous mode [ 645.107547][T13051] veth1_vlan: entered promiscuous mode [ 645.124988][T13327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2240'. [ 645.152590][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 645.199332][T13341] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2244'. [ 645.272943][T13051] veth0_macvtap: entered promiscuous mode [ 645.325980][T13051] veth1_macvtap: entered promiscuous mode [ 645.434601][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.490284][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.529340][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.564154][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.604992][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.650997][ T25] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 645.668919][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.679165][T13351] sctp: [Deprecated]: syz.2.2245 (pid 13351) Use of int in maxseg socket option. [ 645.679165][T13351] Use struct sctp_assoc_value instead [ 645.693818][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.704765][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.733326][T13051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.794443][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.838350][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.848591][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 645.874632][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 645.896672][ T4480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.900655][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.919268][ T4480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.923003][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 645.935856][ T4480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.956672][ T4480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.968755][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 645.977436][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.982569][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.987782][ T4480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 646.004119][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.015200][ T4480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.024498][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.036073][T13051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.046770][T13051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.071871][T13051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.086585][ T25] usb 4-1: config 0 descriptor?? [ 646.150565][T13051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.162429][T13051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.189242][T13051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.198080][T13051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.555204][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.586474][ T5081] syz-executor (5081) used greatest stack depth: 18544 bytes left [ 646.602434][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.634422][ T25] hid (null): unknown global tag 0xc [ 646.662481][ T25] hid-generic 0003:0158:0100.003A: unknown main item tag 0x1 [ 646.670069][ T25] hid-generic 0003:0158:0100.003A: unexpected long global item [ 646.679302][ T1162] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 646.691472][ T25] hid-generic 0003:0158:0100.003A: probe with driver hid-generic failed with error -22 [ 646.774908][ T2822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.883402][ T25] usb 4-1: USB disconnect, device number 103 [ 646.906920][ T1162] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 646.918433][ T5169] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 646.933737][ T1162] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 646.985316][ T1162] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 647.000901][ T2822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.022145][ T1162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.150663][ T5169] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 647.178718][ T5169] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 647.193715][ T5169] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 647.207609][ T2822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.219003][ T5169] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 647.232842][ T5169] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 647.251528][ T5169] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 647.261556][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.339214][ T2387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.357602][ T2387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.401217][ T2822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.525213][ T5169] usb 5-1: USB disconnect, device number 95 [ 647.611306][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.637684][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.867767][T13356] chnl_net:caif_netlink_parms(): no params data found [ 647.909628][ T1162] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 647.922551][ T2822] bridge_slave_1: left allmulticast mode [ 647.932132][ T1162] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input45 [ 647.941726][ T2822] bridge_slave_1: left promiscuous mode [ 647.947576][ T2822] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.983366][ T1162] input: failed to attach handler kbd to device input45, error: -5 [ 648.006799][ T2822] bridge_slave_0: left allmulticast mode [ 648.038100][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.053763][ T2822] bridge_slave_0: left promiscuous mode [ 648.078558][ T2822] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.088728][ T4480] Bluetooth: hci2: command tx timeout [ 648.096738][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.596342][ T5089] usb 3-1: USB disconnect, device number 111 [ 649.483378][T13406] syz.3.2250 (13406): drop_caches: 2 [ 649.633677][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 649.697423][ T2822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.729466][ T2822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.744698][ T2822] bond0 (unregistering): Released all slaves [ 649.769208][T13405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2187'. [ 650.060283][ T2822] IPVS: stopping backup sync thread 5897 ... [ 650.168320][ T4480] Bluetooth: hci2: command tx timeout [ 650.182647][T13447] sctp: [Deprecated]: syz.2.2256 (pid 13447) Use of int in maxseg socket option. [ 650.182647][T13447] Use struct sctp_assoc_value instead [ 650.203013][T13448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.440209][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.635759][T13439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2255'. [ 650.669803][T13439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2255'. [ 650.710082][T13466] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 650.815244][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.851364][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.864763][T13356] bridge_slave_0: entered allmulticast mode [ 650.897374][T13356] bridge_slave_0: entered promiscuous mode [ 650.963360][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.998589][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.046720][T13356] bridge_slave_1: entered allmulticast mode [ 651.082383][T13356] bridge_slave_1: entered promiscuous mode [ 651.421452][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.603196][ T2822] hsr_slave_0: left promiscuous mode [ 651.633512][ T2822] hsr_slave_1: left promiscuous mode [ 651.666700][ T2822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.703179][ T2822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.728542][ T5089] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 651.741748][ T2822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.763568][ T2822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.923256][ T2822] veth1_macvtap: left promiscuous mode [ 651.940662][ T5089] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 651.948450][ T2822] veth0_macvtap: left promiscuous mode [ 651.967336][ T5089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.977695][ T2822] veth1_vlan: left promiscuous mode [ 651.998325][ T2822] veth0_vlan: left promiscuous mode [ 652.005244][ T5089] usb 1-1: config 0 descriptor?? [ 652.204806][T13471] syz.3.2257 (13471): drop_caches: 2 [ 652.258050][T13469] syz.2.2258 (13469): drop_caches: 2 [ 652.263828][ T4480] Bluetooth: hci2: command tx timeout [ 653.625408][ T2822] team0 (unregistering): Port device team_slave_1 removed [ 653.716726][ T2822] team0 (unregistering): Port device team_slave_0 removed [ 653.735615][ T5089] pegasus 1-1:0.0: setup Pegasus II specific registers [ 653.883983][ T5089] pegasus 1-1:0.0: can't locate MII phy, using default [ 654.306467][ T29] audit: type=1326 audit(1720504247.277:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13490 comm="syz.0.2262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff126575bd9 code=0x0 [ 654.328444][ T4480] Bluetooth: hci2: command tx timeout [ 654.340502][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.415519][ T5089] pegasus 1-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, da:af:8e:fd:50:11 [ 654.470289][ T5089] usb 1-1: USB disconnect, device number 121 [ 654.670132][T13493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2263'. [ 654.739858][T13356] team0: Port device team_slave_0 added [ 654.821113][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'. [ 654.893795][T13356] team0: Port device team_slave_1 added [ 655.053846][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.066806][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.120959][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.154958][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.163434][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.200091][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 655.213793][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.240613][T13502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2266'. [ 655.280571][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 655.418897][ T5089] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 655.443899][T13356] hsr_slave_0: entered promiscuous mode [ 655.471740][T13356] hsr_slave_1: entered promiscuous mode [ 655.630333][ T5089] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 655.648424][ T5089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.668640][ T5136] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 655.677255][ T5089] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.708305][ T5089] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.749558][ T5089] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 655.768579][ T5137] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 655.790077][ T5089] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.821077][ T5089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.838316][ T5089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.856719][ T5089] usb 4-1: Product: syz [ 655.861442][ T5089] usb 4-1: Manufacturer: syz [ 655.866095][ T5089] usb 4-1: SerialNumber: syz [ 655.894735][ T5089] cdc_ncm 4-1:1.0: skipping garbage [ 655.957142][ T5136] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 655.970595][ T5137] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 655.985608][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.985620][ T5136] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 655.985647][ T5136] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 656.026134][ T5137] usb 1-1: config 0 descriptor?? [ 656.034094][ T5136] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 656.060104][ T5136] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 656.076952][ T5136] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 656.119883][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.394865][ T5136] usb 3-1: USB disconnect, device number 112 [ 656.655973][T13356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.685521][T13356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.709822][T13356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.731105][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.756250][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.769146][T13356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 657.006186][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.044527][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.093414][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.148777][ T5089] cdc_ncm 4-1:1.0: bind() failure [ 657.163119][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.195347][ T5089] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 657.242171][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.249519][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.257530][ T5089] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 657.296230][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.303577][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.312816][ T5089] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 657.344421][ T5089] usb 4-1: USB disconnect, device number 104 [ 657.484682][ T5137] pegasus 1-1:0.0: can't reset MAC [ 657.497010][ T5137] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 657.798777][ T25] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 657.904712][ T5136] usb 1-1: USB disconnect, device number 122 [ 657.966558][ T29] audit: type=1326 audit(1720504250.927:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13550 comm="syz.3.2272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d96375bd9 code=0x0 [ 657.987756][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.107029][ T25] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 658.126998][ T25] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 658.156349][ T25] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 658.174618][ T25] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 658.204410][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.230973][ T25] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 658.257581][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 658.285256][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.364121][T13356] veth0_vlan: entered promiscuous mode [ 658.381736][T13356] veth1_vlan: entered promiscuous mode [ 658.436968][T13356] veth0_macvtap: entered promiscuous mode [ 658.457336][T13356] veth1_macvtap: entered promiscuous mode [ 658.478619][ T5169] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 658.494599][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.507338][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.518891][ T5137] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 658.539494][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.551780][ T25] usb 3-1: USB disconnect, device number 113 [ 658.571741][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.585897][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.599973][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.612283][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.623998][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.666300][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.684618][ T5169] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 658.705069][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.728952][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.748676][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.750603][ T5137] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 658.768280][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.779711][ T5169] usb 4-1: config 0 descriptor?? [ 658.798135][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.802435][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.821644][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.842705][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.844722][ T5137] usb 5-1: config 0 descriptor?? [ 658.865602][ T5137] gspca_main: spca508-2.14.0 probing 8086:0110 [ 658.866905][T13356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.883691][T13356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.902932][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.915804][T13569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2275'. [ 659.055998][T13356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.070016][T13356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.088229][T13356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.100228][T13356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.113155][ T5137] gspca_spca508: reg_read err -71 [ 659.133030][ T5137] gspca_spca508: reg_read err -71 [ 659.148990][ T5137] gspca_spca508: reg_read err -71 [ 659.164761][ T5137] gspca_spca508: reg_read err -71 [ 659.171116][ T5137] gspca_spca508: reg_read err -71 [ 659.176646][ T5137] gspca_spca508: reg write: error -71 [ 659.187400][ T5137] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 659.225692][ T5137] usb 5-1: USB disconnect, device number 96 [ 659.389594][ T2822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.418611][ T2822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.565635][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.596857][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.980014][T13589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2278'. [ 660.020169][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 660.138975][T13592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2279'. [ 660.162080][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2279'. [ 660.343894][ T29] audit: type=1326 audit(1720504253.317:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.4.2282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 660.426606][ T5169] pegasus 4-1:0.0: setup Pegasus II specific registers [ 660.590630][ T5169] pegasus 4-1:0.0: can't locate MII phy, using default [ 660.683340][ T5169] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, be:13:d3:7d:57:74 [ 660.711299][ T5169] usb 4-1: USB disconnect, device number 105 [ 660.928360][ T5137] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 661.133341][ T5137] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 661.149214][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.170219][ T5137] usb 5-1: config 0 descriptor?? [ 661.202007][ T5137] gspca_main: spca508-2.14.0 probing 8086:0110 [ 661.354636][T13618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2285'. [ 661.649094][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 661.768680][ T5137] gspca_spca508: reg_read err -110 [ 661.777148][ T5137] gspca_spca508: reg_read err -32 [ 661.790718][ T5137] gspca_spca508: reg_read err -32 [ 661.793311][ T5136] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 661.811071][ T5137] gspca_spca508: reg_read err -32 [ 661.817765][ T5137] gspca_spca508: reg_read err -32 [ 661.830022][ T5137] gspca_spca508: reg write: error -32 [ 661.848012][ T5137] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 661.848282][ T5140] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 661.928901][ T1162] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 661.966456][ T4480] Bluetooth: hci5: unexpected event 0x17 length: 14 > 6 [ 662.021445][ T5136] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.042689][ T5136] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 662.052840][ T5136] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 662.061868][T13635] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 662.062225][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.084079][ T5140] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 662.101005][ T5140] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 662.111645][ T5140] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 662.130608][ T1162] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.144547][ T5140] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 662.155384][ T1162] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 662.166279][ T5140] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 662.178320][ T1162] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 662.191528][ T1162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.208939][ T5140] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 662.226402][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.407733][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 662.482109][T13068] usb 3-1: USB disconnect, device number 114 [ 662.659142][ T5169] usb 5-1: USB disconnect, device number 97 [ 662.969667][ T5136] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 662.978860][ T5136] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input46 [ 662.990274][ T5136] input: failed to attach handler kbd to device input46, error: -5 [ 663.070480][ T1162] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 663.106512][ T1162] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input47 [ 663.200645][ T1162] input: failed to attach handler kbd to device input47, error: -5 [ 663.220686][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.228370][ T29] audit: type=1326 audit(1720504256.187:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13647 comm="syz.2.2293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b99575bd9 code=0x0 [ 663.255926][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.270017][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.290057][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.341562][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.411229][ T1162] usb 4-1: USB disconnect, device number 106 [ 663.526949][T13651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.563513][ T5169] usb 2-1: USB disconnect, device number 104 [ 663.608495][T13651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.652867][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.687988][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.845569][T13656] sctp: [Deprecated]: syz.0.2296 (pid 13656) Use of int in maxseg socket option. [ 663.845569][T13656] Use struct sctp_assoc_value instead [ 664.091603][T13659] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2298'. [ 664.221502][T13665] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2299'. [ 664.279848][T13662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2297'. [ 664.314104][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2297'. [ 664.363793][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 664.505882][ T1162] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 664.808359][ T1162] usb 4-1: Using ep0 maxpacket: 16 [ 664.842897][ T1162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 664.906300][ T1162] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 664.942924][ T1162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.002239][ T1162] usb 4-1: config 0 descriptor?? [ 665.090568][ T29] audit: type=1326 audit(1720504258.067:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13687 comm="syz.4.2305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 665.423403][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.453495][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.509548][ T1162] hid (null): unknown global tag 0xc [ 665.590097][ T1162] hid-generic 0003:0158:0100.003B: unknown main item tag 0x1 [ 665.617062][ T1162] hid-generic 0003:0158:0100.003B: unexpected long global item [ 665.638951][ T1162] hid-generic 0003:0158:0100.003B: probe with driver hid-generic failed with error -22 [ 665.719850][ T1162] usb 4-1: USB disconnect, device number 107 [ 666.112134][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 666.388835][T13711] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2310'. [ 666.549502][ T5089] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 666.710024][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 666.819876][ T5089] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 666.866177][ T5089] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 666.886923][ T5089] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 666.908284][ T5089] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 666.928316][ T5137] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 666.938833][ T5089] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 666.963323][ T5089] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 666.998232][ T5089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.140514][ T5137] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.161822][ T5137] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 667.198517][T13068] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 667.218683][ T5137] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 667.276185][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.431734][T13068] usb 4-1: config index 0 descriptor too short (expected 9533, got 36) [ 667.446039][T13068] usb 4-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 667.468569][T13068] usb 4-1: config 161 has an invalid interface descriptor of length 7, skipping [ 667.470286][ T5089] usb 2-1: USB disconnect, device number 105 [ 667.478386][T13068] usb 4-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 667.504342][T13068] usb 4-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 667.515700][T13068] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 667.560794][T13068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.648341][ T57] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 667.849303][ T57] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.870714][ T57] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 667.891414][ T57] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 667.911421][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.954271][T13702] syz.2.2308 (13702): drop_caches: 2 [ 667.983560][ T5089] usb 4-1: USB disconnect, device number 108 [ 668.161577][ T5137] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 668.179770][ T5137] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input48 [ 668.215245][ T5137] input: failed to attach handler kbd to device input48, error: -5 [ 668.489883][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 668.509856][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.533420][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.669770][ T5137] usb 5-1: USB disconnect, device number 98 [ 668.790766][ T57] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 668.813596][ T57] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input49 [ 668.861926][ T29] audit: type=1326 audit(1720504261.827:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13731 comm="syz.3.2316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d96375bd9 code=0x0 [ 668.898898][ T57] input: failed to attach handler kbd to device input49, error: -5 [ 668.925628][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.936864][T13068] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 668.974317][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.161049][T13068] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 669.192083][T13068] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 669.240457][T13068] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 669.273046][ T5137] usb 1-1: USB disconnect, device number 123 [ 669.275454][T13068] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 669.288446][ T5089] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 669.307428][T13068] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 669.336187][T13068] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 669.347712][T13068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.516784][ T5089] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.534522][ T5089] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 669.660687][ T5089] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 669.669858][ T5089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.767363][ T5138] usb 2-1: USB disconnect, device number 106 [ 670.721985][ T4480] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 670.989490][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 671.192509][ T5089] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 671.220608][ T5089] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input50 [ 671.311274][ T5089] input: failed to attach handler kbd to device input50, error: -5 [ 671.353988][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.419473][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.428366][ T5137] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 671.587084][ T57] usb 3-1: USB disconnect, device number 115 [ 671.658239][ T5137] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 671.702330][ T5137] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 671.750786][ T5137] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 671.809296][ T5137] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 671.846662][ T5137] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 671.881495][ T5137] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 671.901139][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.250229][ T25] usb 5-1: USB disconnect, device number 99 [ 672.465479][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 672.549140][T13781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.572398][T13783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.605336][T13781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.617782][T13784] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 672.638984][T13783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.758341][ T25] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 672.783151][T13765] syz.3.2325 (13765): drop_caches: 2 [ 672.950090][ T25] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 672.981776][ T25] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 673.001384][ T25] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 673.021302][ T25] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 673.047630][ T25] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 673.073025][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 673.092871][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.107424][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 673.384906][ T25] usb 3-1: USB disconnect, device number 116 [ 673.869244][T13801] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2336'. [ 674.599864][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2335'. [ 674.708691][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2335'. [ 674.770125][T13808] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2337'. [ 674.969688][ T5089] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 674.983820][T13818] sctp: [Deprecated]: syz.1.2338 (pid 13818) Use of int in maxseg socket option. [ 674.983820][T13818] Use struct sctp_assoc_value instead [ 675.003601][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 675.160003][ T5089] usb 5-1: Using ep0 maxpacket: 16 [ 675.201467][ T5089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 675.242264][ T5089] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 675.262032][ T5089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.269128][T13068] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 675.295647][ T5089] usb 5-1: config 0 descriptor?? [ 675.438765][ T5136] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 675.469374][T13068] usb 4-1: Using ep0 maxpacket: 16 [ 675.483698][T13068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 675.495321][T13068] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 675.505734][T13068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.564636][T13068] usb 4-1: config 0 descriptor?? [ 675.663670][ T5136] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 675.695047][ T5136] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 675.730983][ T5136] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 675.744270][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.763765][ T5136] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 675.784939][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.817683][ T5136] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 675.851045][ T5136] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 675.852562][ T5089] hid (null): unknown global tag 0xc [ 675.861182][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.933476][ T5089] hid-generic 0003:0158:0100.003C: unknown main item tag 0x1 [ 675.945865][ T5089] hid-generic 0003:0158:0100.003C: unexpected long global item [ 675.954521][ T5089] hid-generic 0003:0158:0100.003C: probe with driver hid-generic failed with error -22 [ 676.017564][T13808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.037942][T13808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.113865][T13068] hid (null): unknown global tag 0xc [ 676.146860][ T5136] usb 5-1: USB disconnect, device number 100 [ 676.165878][T13068] hid-generic 0003:0158:0100.003D: unknown main item tag 0x1 [ 676.191447][T13068] hid-generic 0003:0158:0100.003D: unexpected long global item [ 676.212303][T13068] hid-generic 0003:0158:0100.003D: probe with driver hid-generic failed with error -22 [ 676.390597][T13068] usb 4-1: USB disconnect, device number 109 [ 676.419944][ T5136] usb 1-1: USB disconnect, device number 124 [ 676.647672][T13834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.674199][T13834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.919193][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.016252][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.280916][ T4480] Bluetooth: hci5: unexpected event 0x17 length: 14 > 6 [ 677.395222][T13841] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 677.439503][ T5089] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 677.596749][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 677.685405][ T5089] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 677.722052][ T5089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.734380][ T4480] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 677.760867][ T5089] usb 3-1: config 0 descriptor?? [ 677.835558][ T29] audit: type=1326 audit(1720504270.807:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13852 comm="syz.4.2349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 677.870472][ T5089] gspca_main: spca508-2.14.0 probing 8086:0110 [ 678.128493][ T4480] Bluetooth: hci4: unexpected event 0x17 length: 14 > 6 [ 678.128567][ T5089] gspca_spca508: reg_read err -71 [ 678.168910][ T5089] gspca_spca508: reg_read err -71 [ 678.181550][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 678.198413][ T5089] gspca_spca508: reg_read err -71 [ 678.213034][ T5089] gspca_spca508: reg_read err -71 [ 678.243675][ T5089] gspca_spca508: reg_read err -71 [ 678.258385][ T5089] gspca_spca508: reg write: error -71 [ 678.298776][ T5089] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 678.325495][ T5089] usb 3-1: USB disconnect, device number 117 [ 678.685810][ T5136] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 678.906919][ T5136] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 678.919271][ T5136] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 678.943781][ T5136] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 678.972115][ T5136] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 678.997095][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 679.007674][ T5136] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 679.024863][ T5136] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 679.045789][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.334318][ T5136] usb 1-1: USB disconnect, device number 125 [ 680.084792][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 680.641566][ T4480] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 680.656207][ T29] audit: type=1326 audit(1720504273.627:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13890 comm="syz.2.2359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b99575bd9 code=0x0 [ 680.677162][T13888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.688825][ T4480] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 680.709889][ T29] audit: type=1326 audit(1720504273.687:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13895 comm="syz.4.2361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6553175bd9 code=0x0 [ 680.761234][T13900] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 680.765320][T13888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.958717][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 681.077310][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 681.466208][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 681.677203][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 683.024735][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 683.097394][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 683.162718][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 683.176566][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 683.510685][ T57] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 683.562838][ T5089] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 683.759814][ T57] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 683.807183][ T57] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 683.834119][ T5089] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 683.856115][ T57] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 683.863406][ T5089] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 683.891338][ T57] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 683.898457][ T5089] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 683.946291][ T5089] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 683.948070][ T57] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 683.988640][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 684.025045][ T57] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 684.052219][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.052236][ T5089] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 684.052289][ T5089] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 684.107339][ T5089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.408573][ T57] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 684.440204][T13068] usb 5-1: USB disconnect, device number 101 [ 684.479210][ T5136] usb 2-1: USB disconnect, device number 107 [ 684.562089][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2376'. [ 684.630671][ T57] usb 1-1: config index 0 descriptor too short (expected 9533, got 36) [ 684.651986][ T57] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 684.675381][ T57] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping [ 684.695802][ T57] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 684.729533][ T57] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 684.748662][ T57] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 684.761895][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.936994][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'. [ 685.192465][T13982] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2379'. [ 685.205811][ T57] usb 1-1: USB disconnect, device number 126 [ 685.409169][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 685.541105][T13992] sctp: [Deprecated]: syz.2.2381 (pid 13992) Use of int in maxseg socket option. [ 685.541105][T13992] Use struct sctp_assoc_value instead [ 685.606401][ T25] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 685.819054][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 685.842636][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 685.856672][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 685.901012][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.942099][ T25] usb 5-1: config 0 descriptor?? [ 686.229070][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 686.253015][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.260617][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.389707][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.414060][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.476310][ T25] hid (null): unknown global tag 0xc [ 686.544755][ T25] hid-generic 0003:0158:0100.003E: unknown main item tag 0x1 [ 686.574825][ T25] hid-generic 0003:0158:0100.003E: unexpected long global item [ 686.591401][ T25] hid-generic 0003:0158:0100.003E: probe with driver hid-generic failed with error -22 [ 686.731892][ T25] usb 5-1: USB disconnect, device number 102 [ 686.809883][ T57] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 687.057414][ T57] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 687.082412][ T57] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 687.102413][ T57] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 687.141229][ T57] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 687.184653][ T57] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 687.227084][ T57] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 687.251434][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.267973][T13980] syz.3.2377 (13980): drop_caches: 2 [ 687.678826][ T5089] usb 3-1: USB disconnect, device number 118 [ 688.035670][ T57] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 688.242016][T14037] __nla_validate_parse: 5 callbacks suppressed [ 688.242041][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 688.262889][ T57] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 688.284633][ T57] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 688.298499][ T57] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 688.323964][ T57] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 688.344040][ T57] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 688.363490][ T57] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 688.393048][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.657590][ T25] usb 2-1: USB disconnect, device number 108 [ 688.840167][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2395'. [ 690.046204][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 690.298595][T13068] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 690.529563][T13068] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 690.553740][T13068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.570207][ T57] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 690.594403][T13068] usb 5-1: config 0 descriptor?? [ 690.612729][T13068] gspca_main: spca508-2.14.0 probing 8086:0110 [ 690.642816][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 690.801510][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 690.833731][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 690.861879][ T57] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 690.914759][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.954558][ T57] usb 4-1: config 0 descriptor?? [ 691.138784][T13068] gspca_spca508: reg_read err -110 [ 691.169277][ T5136] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 691.190823][T13068] gspca_spca508: reg_read err -32 [ 691.210316][T13068] gspca_spca508: reg_read err -32 [ 691.221492][T13068] gspca_spca508: reg_read err -32 [ 691.243401][T13068] gspca_spca508: reg_read err -32 [ 691.265255][T13068] gspca_spca508: reg write: error -32 [ 691.288848][T13068] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 691.407727][T14066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.410694][ T5136] usb 2-1: config index 0 descriptor too short (expected 9533, got 36) [ 691.437583][T14066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.441303][ T5136] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 691.501198][ T57] hid (null): unknown global tag 0xc [ 691.506756][ T5136] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping [ 691.530389][ T57] hid-generic 0003:0158:0100.003F: unknown main item tag 0x1 [ 691.543501][ T5136] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 691.586813][ T57] hid-generic 0003:0158:0100.003F: unexpected long global item [ 691.635849][ T5136] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 691.659038][ T57] hid-generic 0003:0158:0100.003F: probe with driver hid-generic failed with error -22 [ 691.687771][ T5136] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 691.731163][ T57] usb 4-1: USB disconnect, device number 110 [ 691.737410][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.962953][T14077] syz.0.2401 (14077): drop_caches: 2 [ 692.010909][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 692.053882][ T25] usb 5-1: USB disconnect, device number 103 [ 692.212077][ T5138] usb 2-1: USB disconnect, device number 109 [ 692.550080][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'. [ 692.826865][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 692.958429][ T25] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 693.477689][ T25] usb 3-1: config index 0 descriptor too short (expected 9533, got 36) [ 693.526960][ T25] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 693.610867][ T25] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping [ 693.664517][ T25] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 693.692238][ T25] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 693.708859][ T57] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 693.726055][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'. [ 693.742846][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 693.770881][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.975033][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 694.079613][T14129] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 694.079613][T14129] program syz.0.2413 not setting count and/or reply_len properly [ 694.200303][ T57] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 694.418877][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.728282][T13068] usb 3-1: USB disconnect, device number 119 [ 694.800182][ T57] usb 4-1: config 0 descriptor?? [ 695.241263][ T5136] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 695.398563][T13068] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 695.456527][ T5136] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.499577][ T5136] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 695.512076][ T5136] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 695.512723][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'. [ 695.522333][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.593141][T13068] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 695.608091][T13068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.651549][T13068] usb 2-1: config 0 descriptor?? [ 695.675793][T13068] gspca_main: spca508-2.14.0 probing 8086:0110 [ 696.217721][T13068] gspca_spca508: reg_read err -110 [ 696.229915][T13068] gspca_spca508: reg_read err -32 [ 696.248793][T13068] gspca_spca508: reg_read err -32 [ 696.259809][T13068] gspca_spca508: reg_read err -32 [ 696.339199][T13068] gspca_spca508: reg_read err -32 [ 696.355536][T13068] gspca_spca508: reg write: error -32 [ 696.363295][T13068] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 696.428292][ T25] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 696.462023][ T5136] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 696.475313][ T5136] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input51 [ 696.487620][ T5136] input: failed to attach handler kbd to device input51, error: -5 [ 696.564842][ T57] pegasus 4-1:0.0: setup Pegasus II specific registers [ 696.631640][ T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 696.655056][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.707614][ T25] usb 3-1: config 0 descriptor?? [ 696.713764][ T57] pegasus 4-1:0.0: can't locate MII phy, using default [ 696.744514][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.761547][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 696.766056][ T57] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 22:1f:6c:3e:82:b9 [ 696.782350][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.836827][ T57] usb 4-1: USB disconnect, device number 111 [ 697.001644][T13068] usb 1-1: USB disconnect, device number 127 [ 697.217455][ T5137] usb 2-1: USB disconnect, device number 110 [ 697.330411][ T25] gspca_spca508: reg_read err -110 [ 697.355437][ T25] gspca_spca508: reg_read err -32 [ 697.373155][ T25] gspca_spca508: reg_read err -32 [ 697.419196][ T25] gspca_spca508: reg_read err -32 [ 697.432784][ T25] gspca_spca508: reg_read err -32 [ 697.445410][ T25] gspca_spca508: reg write: error -32 [ 697.460336][ T25] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 697.991183][T14177] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2426'. [ 698.026697][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 698.209658][ T5137] usb 3-1: USB disconnect, device number 120 [ 698.322289][T14163] syz.4.2420 (14163): drop_caches: 2 [ 698.348605][T13068] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 698.640934][T14185] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 698.640934][T14185] program syz.1.2427 not setting count and/or reply_len properly [ 699.428282][T13068] usb 1-1: Using ep0 maxpacket: 16 [ 699.435647][T13068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 699.463354][T13068] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 699.490568][T13068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.530668][T13068] usb 1-1: config 0 descriptor?? [ 699.994708][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.018012][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.083602][T13068] hid (null): report_id 2838798905 is invalid [ 700.114077][ T4480] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 700.132938][T13068] hid (null): unknown global tag 0xc [ 700.172602][T13068] hid (null): unknown global tag 0xa5 [ 700.178068][T13068] hid (null): unknown global tag 0xd [ 700.194321][T13068] hid (null): unknown global tag 0xc [ 700.259859][T13068] hid-generic 0003:0158:0100.0040: unknown main item tag 0x1 [ 700.293560][T13068] hid-generic 0003:0158:0100.0040: unexpected long global item [ 700.326474][T13068] hid-generic 0003:0158:0100.0040: probe with driver hid-generic failed with error -22 [ 700.386765][T13068] usb 1-1: USB disconnect, device number 2 [ 701.092878][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 701.291341][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2438'. [ 702.300054][T14230] sctp: [Deprecated]: syz.0.2439 (pid 14230) Use of int in maxseg socket option. [ 702.300054][T14230] Use struct sctp_assoc_value instead [ 702.407904][T14237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.535655][T14237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.544622][T14242] Bluetooth: MGMT ver 1.22 [ 702.626804][ T57] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 702.762198][T14249] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2445'. [ 702.783161][T14247] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2445'. [ 702.838554][ T57] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 702.858394][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.897900][ T57] usb 4-1: config 0 descriptor?? [ 702.927888][ T57] gspca_main: spca508-2.14.0 probing 8086:0110 [ 703.119652][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2450'. [ 703.433469][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2454'. [ 703.469549][ T57] gspca_spca508: reg_read err -110 [ 703.484289][ T57] gspca_spca508: reg_read err -32 [ 703.516492][ T57] gspca_spca508: reg_read err -32 [ 703.538583][ T57] gspca_spca508: reg_read err -32 [ 703.555094][ T57] gspca_spca508: reg_read err -32 [ 703.570814][ T57] gspca_spca508: reg write: error -32 [ 703.576345][ T57] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 703.667119][T14275] team0: Device ipvlan2 is already an upper device of the team interface [ 704.335391][ T57] usb 4-1: USB disconnect, device number 112 [ 704.989646][T14313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2473'. [ 705.096303][T14317] usb usb8: usbfs: process 14317 (syz.0.2475) did not claim interface 0 before use [ 705.158372][ T57] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 705.371516][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.376152][T14329] ------------[ cut here ]------------ [ 705.387428][T14329] WARNING: CPU: 1 PID: 14329 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x36a/0x6c0 [ 705.397140][T14329] Modules linked in: [ 705.401277][T14329] CPU: 1 PID: 14329 Comm: syz.0.2481 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 705.411526][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 705.422409][T14329] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 705.428554][T14329] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 b4 f2 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 705.431286][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.448961][T14329] RSP: 0018:ffffc9000a8ef880 EFLAGS: 00010246 [ 705.463996][T14329] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 705.472081][T14329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000a8ef908 [ 705.480193][T14329] RBP: ffffc9000a8ef998 R08: ffffc9000a8ef907 R09: 0000000000000000 [ 705.488303][T14329] R10: ffffc9000a8ef8e0 R11: fffff5200151df21 R12: 1ffff9200151df18 [ 705.496315][T14329] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff9200151df14 [ 705.499458][ T57] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.504503][T14329] FS: 00007ff1273286c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 705.523329][T14329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.526792][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.530005][T14329] CR2: 00000000203d0000 CR3: 000000002fa7e000 CR4: 00000000003506f0 [ 705.530032][T14329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.530056][T14329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 705.530073][T14329] Call Trace: [ 705.530086][T14329] [ 705.530097][T14329] ? __warn+0x163/0x4e0 [ 705.530134][T14329] ? __alloc_pages_noprof+0x36a/0x6c0 [ 705.530170][T14329] ? report_bug+0x2b3/0x500 [ 705.530201][T14329] ? __alloc_pages_noprof+0x36a/0x6c0 [ 705.530238][T14329] ? handle_bug+0x3e/0x70 [ 705.530262][T14329] ? exc_invalid_op+0x1a/0x50 [ 705.530285][T14329] ? asm_exc_invalid_op+0x1a/0x20 [ 705.530332][T14329] ? __alloc_pages_noprof+0x36a/0x6c0 [ 705.530369][T14329] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 705.530403][T14329] ? irqentry_exit+0x63/0x90 [ 705.550973][ T57] usb 2-1: SerialNumber: syz [ 705.554541][T14329] __kmalloc_large_node+0x8b/0x1d0 [ 705.628892][T14329] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 705.635013][T14329] __kmalloc_noprof+0x2aa/0x400 [ 705.640034][T14329] ? _copy_from_user+0xa6/0xe0 [ 705.644866][T14329] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 705.650915][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 705.657329][T14329] ? do_raw_spin_unlock+0x13c/0x8b0 [ 705.662690][T14329] ? _raw_spin_unlock+0x28/0x50 [ 705.667619][T14329] drm_ioctl_kernel+0x33a/0x440 [ 705.672613][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 705.679096][T14329] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 705.684785][T14329] ? __might_fault+0xc6/0x120 [ 705.689727][T14329] drm_ioctl+0x611/0xad0 [ 705.694035][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 705.700505][T14329] ? __pfx_drm_ioctl+0x10/0x10 [ 705.705351][T14329] ? bpf_lsm_file_ioctl+0x9/0x10 [ 705.710404][T14329] ? security_file_ioctl+0x87/0xb0 [ 705.715582][T14329] ? __pfx_drm_ioctl+0x10/0x10 [ 705.721242][T14329] __se_sys_ioctl+0xfc/0x170 [ 705.725908][T14329] do_syscall_64+0xf3/0x230 [ 705.730548][T14329] ? clear_bhb_loop+0x35/0x90 [ 705.735277][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.741307][T14329] RIP: 0033:0x7ff126575bd9 [ 705.745784][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.765560][T14329] RSP: 002b:00007ff127328048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.774411][T14329] RAX: ffffffffffffffda RBX: 00007ff126703f60 RCX: 00007ff126575bd9 [ 705.782770][T14329] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 705.790921][T14329] RBP: 00007ff1265e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 705.799049][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.807121][T14329] R13: 000000000000000b R14: 00007ff126703f60 R15: 00007ffd4440ca68 [ 705.815233][T14329] [ 705.818503][T14329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 705.825816][T14329] CPU: 1 PID: 14329 Comm: syz.0.2481 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 705.836005][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 705.846122][T14329] Call Trace: [ 705.849468][T14329] [ 705.852522][T14329] dump_stack_lvl+0x241/0x360 [ 705.857264][T14329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.862514][T14329] ? __pfx__printk+0x10/0x10 [ 705.867168][T14329] ? vscnprintf+0x5d/0x90 [ 705.871633][T14329] panic+0x349/0x860 [ 705.875582][T14329] ? __warn+0x172/0x4e0 [ 705.879795][T14329] ? __pfx_panic+0x10/0x10 [ 705.884291][T14329] __warn+0x346/0x4e0 [ 705.888334][T14329] ? __alloc_pages_noprof+0x36a/0x6c0 [ 705.893774][T14329] report_bug+0x2b3/0x500 [ 705.898156][T14329] ? __alloc_pages_noprof+0x36a/0x6c0 [ 705.903585][T14329] handle_bug+0x3e/0x70 [ 705.907781][T14329] exc_invalid_op+0x1a/0x50 [ 705.912316][T14329] asm_exc_invalid_op+0x1a/0x20 [ 705.917216][T14329] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 705.923261][T14329] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 b4 f2 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 705.942917][T14329] RSP: 0018:ffffc9000a8ef880 EFLAGS: 00010246 [ 705.949078][T14329] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 705.957181][T14329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000a8ef908 [ 705.965212][T14329] RBP: ffffc9000a8ef998 R08: ffffc9000a8ef907 R09: 0000000000000000 [ 705.973245][T14329] R10: ffffc9000a8ef8e0 R11: fffff5200151df21 R12: 1ffff9200151df18 [ 705.981269][T14329] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff9200151df14 [ 705.989317][T14329] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 705.995104][T14329] ? irqentry_exit+0x63/0x90 [ 705.999785][T14329] __kmalloc_large_node+0x8b/0x1d0 [ 706.004960][T14329] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 706.011081][T14329] __kmalloc_noprof+0x2aa/0x400 [ 706.016077][T14329] ? _copy_from_user+0xa6/0xe0 [ 706.020901][T14329] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 706.026866][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 706.033270][T14329] ? do_raw_spin_unlock+0x13c/0x8b0 [ 706.038532][T14329] ? _raw_spin_unlock+0x28/0x50 [ 706.043441][T14329] drm_ioctl_kernel+0x33a/0x440 [ 706.048502][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 706.054881][T14329] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 706.060329][T14329] ? __might_fault+0xc6/0x120 [ 706.065320][T14329] drm_ioctl+0x611/0xad0 [ 706.069612][T14329] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 706.076003][T14329] ? __pfx_drm_ioctl+0x10/0x10 [ 706.080841][T14329] ? bpf_lsm_file_ioctl+0x9/0x10 [ 706.085823][T14329] ? security_file_ioctl+0x87/0xb0 [ 706.091044][T14329] ? __pfx_drm_ioctl+0x10/0x10 [ 706.095829][T14329] __se_sys_ioctl+0xfc/0x170 [ 706.100459][T14329] do_syscall_64+0xf3/0x230 [ 706.104994][T14329] ? clear_bhb_loop+0x35/0x90 [ 706.110039][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.115965][T14329] RIP: 0033:0x7ff126575bd9 [ 706.120415][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.140050][T14329] RSP: 002b:00007ff127328048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.148493][T14329] RAX: ffffffffffffffda RBX: 00007ff126703f60 RCX: 00007ff126575bd9 [ 706.156476][T14329] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 706.164454][T14329] RBP: 00007ff1265e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 706.172436][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.180422][T14329] R13: 000000000000000b R14: 00007ff126703f60 R15: 00007ffd4440ca68 [ 706.188420][T14329] [ 706.191769][T14329] Kernel Offset: disabled [ 706.196116][T14329] Rebooting in 86400 seconds..