last executing test programs: 3m34.13575491s ago: executing program 0 (id=1374): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) listen(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43ff13948ebf1b9e478f1adcb25f"], 0x18}}, 0x2000c090) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000011c0)=ANY=[], 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3m32.911968814s ago: executing program 0 (id=1378): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x1, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000cc0)={0x20, 0x9, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x24, &(0x7f0000000200)={0x20, 0x0, 0x1, '2'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x88, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000600)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m29.798877327s ago: executing program 0 (id=1388): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3m28.737653856s ago: executing program 3 (id=1390): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3m28.348844214s ago: executing program 0 (id=1391): syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) 3m27.864675884s ago: executing program 0 (id=1395): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x10, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xf, 0xc3], [0x1cf9, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc3}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r3, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$UHID_CREATE2(r3, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x59, 0x8001, 0x6, 0x40, 0x10000, 0x7, "7439237b69559e5e3cda8116a4a70e8078a77fb20ead00a229d640472aa687f6250a41bf49716969357f73c7a9077c27f0ce12f253e9d2455dbf1d451024878353def2d9ac9d6df8ae04e80553f774263a53f31515da8036b3"}}, 0x171) getdents64(r2, &(0x7f0000020ac0)=""/4107, 0x100b) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) close(0x3) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) renameat2(r2, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m27.546555454s ago: executing program 0 (id=1397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 3m26.660142024s ago: executing program 32 (id=1397): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 3m26.335023457s ago: executing program 3 (id=1401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8004, 0x0, 0x2, 0x8, 0xfffffe0000000008, 0x3, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x11) 3m23.794373556s ago: executing program 3 (id=1403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000980)=""/154, 0x9a}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f0000000b80)=""/234, 0xea}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20002000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m22.614663749s ago: executing program 3 (id=1406): syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) 3m22.439328849s ago: executing program 3 (id=1408): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x80) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m21.45852839s ago: executing program 3 (id=1410): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) r3 = syz_open_dev$loop(0x0, 0x7, 0x180062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 2m27.225821093s ago: executing program 5 (id=1522): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fchdir(0xffffffffffffffff) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) 2m26.182102151s ago: executing program 1 (id=1525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) keyctl$read(0x20, r2, 0x0, 0x0) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) unshare(0x2c020400) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/1, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r4, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) 2m24.420150498s ago: executing program 5 (id=1530): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x45c0db36944583ee, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x1083a5, 0x4) bind$xdp(r4, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4e) socket$netlink(0x10, 0x3, 0x400000000000004) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x27}, 0x3, 0x0, 0x80}) 2m22.629353287s ago: executing program 5 (id=1532): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) 2m22.437067902s ago: executing program 5 (id=1534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r4 = geteuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@sr0, r4, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904000000f2a7cc00"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1d, "af7c6bf862b2280bb85232db66bc20f9edf5e5930593cb097bd659d078"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000d00)={0x60, 0xa, 0x2, "f60d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) 2m22.205511382s ago: executing program 5 (id=1536): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xea580, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r1, 0x602cb000) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$inet6(0xa, 0x3, 0x7) r4 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2m22.204442149s ago: executing program 1 (id=1537): socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 2m20.879976525s ago: executing program 34 (id=1536): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xea580, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r1, 0x602cb000) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) socket$inet6(0xa, 0x3, 0x7) r4 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2m19.801267063s ago: executing program 1 (id=1543): r0 = io_uring_setup(0xfc8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="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", 0x194}, {&(0x7f00000000c0)="9837712a0257872c0ba019db927265daa91d5ac28cc41a810108cf926b9f653c5039e4ca35ba975242f26d3f6d3dcf0542809010773a21f5b49746f5697e19cb58e53f02bd3f99a65c4d47f316a8471871ce759f534a0135ef7edc8056bb1dc5cdeb8328a700090f5fa53038a0fec7536c03cda374", 0x75}], 0x2}}], 0x1, 0x480e0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.964278821s ago: executing program 1 (id=1544): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) 2m18.715958398s ago: executing program 1 (id=1545): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) geteuid() fsmount(0xffffffffffffffff, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904000000f2a7cc00"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1d, "af7c6bf862b2280bb85232db66bc20f9edf5e5930593cb097bd659d078"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000d00)={0x60, 0xa, 0x2, "f60d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) 2m17.378566342s ago: executing program 1 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) 2m16.597102391s ago: executing program 35 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) 11.638072403s ago: executing program 2 (id=1943): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c40)={0x34, &(0x7f0000001a80)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x40, 0x16, 0x1c, "9f9adb933c79b0b452438f241e2b0841c2806d525a0b845a5ff93630"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9e}, 0x0, &(0x7f0000000300)={0x20, 0x82, 0x1, 'p'}, &(0x7f0000000340)={0x20, 0x83, 0x1, '!'}, &(0x7f0000000380)={0x20, 0x84, 0x4, "f65d8d65"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "587ef6"}}) 9.183748898s ago: executing program 7 (id=1952): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000c80)={0x0, 0x3, 0x3010, 0x9, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9.01846079s ago: executing program 4 (id=1953): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) 8.996921463s ago: executing program 2 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x40000) 8.715658107s ago: executing program 2 (id=1955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3826, 0xc, 0x3, 0x8000}]}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xfffffd53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r3) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') keyctl$invalidate(0x15, r7) 8.53042046s ago: executing program 4 (id=1956): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@dev}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 8.133067635s ago: executing program 8 (id=1958): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/122, 0x7a}], 0x1}, 0x3}], 0x1, 0x40000023, 0x0) 7.862273378s ago: executing program 8 (id=1959): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @empty, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e31ab23548d0e72b15905e381d80b7c18626afa"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3aa7ae2af019a305a75ae615566eaafc8bea4bcb"}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r6 = eventfd2(0x5, 0x1) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000000)=0x3) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x49, r6, 0x0, 0x0, 0x2, 0x0, 0x7ffffffe, r6}]) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r7, 0xffffffffffbffffb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x4}, 0x80, 0x0}}], 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 7.375951084s ago: executing program 6 (id=1960): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300"/47, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.220044397s ago: executing program 4 (id=1961): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000040)=""/1, 0xfffffffffffffed0}], 0x3, &(0x7f0000000580)=[{&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f0000000440)=""/5, 0x5}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/144, 0x90}], 0x4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsmount(r2, 0x0, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r6, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x5640}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.12189459s ago: executing program 8 (id=1962): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x2000c090) close_range(r2, r4, 0x0) 6.829564267s ago: executing program 7 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) 6.47862568s ago: executing program 7 (id=1964): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d0000000109021801"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x1f, "9f9adb933c79b0b452438f241e2b0841c2806d525a0b845a5ff93630f56882"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9e}, 0x0, &(0x7f0000000300)={0x20, 0x82, 0x1, 'p'}, &(0x7f0000000340)={0x20, 0x83, 0x1, '!'}, &(0x7f0000000380)={0x20, 0x84, 0x4, "f65d8d65"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "587ef6"}}) 6.33732849s ago: executing program 2 (id=1965): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x40000) 6.316189482s ago: executing program 6 (id=1966): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) 5.872401741s ago: executing program 2 (id=1967): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0x1, 0xd, "b68ef1c291785b8e54bef54eed"}, 0x0}) 5.845298515s ago: executing program 6 (id=1968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f04ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a860", 0xa6}, {&(0x7f00000002c0)="5bea410000008000000000", 0xb}, {&(0x7f00000005c0)="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", 0x3d1}], 0x3}}], 0x1, 0x95) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 5.68692304s ago: executing program 8 (id=1969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/122, 0x7a}], 0x1}, 0x3}], 0x1, 0x40000023, 0x0) 5.309860081s ago: executing program 8 (id=1970): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0xca, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd3, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x101c, 0x6, 0x9, 0x9fb4, 0xd, 0x1}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0xaa) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESHEX=0x0], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000240)="7422618c876d29b7417c1f55be5048888b444fba33095448a0b49c11a69dc15c9926e4ae049547aa7aa2b6c5557c220dcc24499ccaa1a181801d6b3432fbcdbc6f973c986107950f607647", 0x4b, 0x33df54818c7589a5, &(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() fcntl$lock(r4, 0x24, &(0x7f0000000140)={0x1, 0x2, 0x240000000000000, 0x7fff, r5}) 5.017801892s ago: executing program 4 (id=1971): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@dev}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 4.790666753s ago: executing program 6 (id=1972): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x148, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @empty, 0xffffff80}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e31ab23548d0e72b15905e381d80b7c18626afa"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3aa7ae2af019a305a75ae615566eaafc8bea4bcb"}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r6 = eventfd2(0x5, 0x1) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000000)=0x3) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x49, r6, 0x0, 0x0, 0x2, 0x0, 0x7ffffffe, r6}]) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r7, 0xffffffffffbffffb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x4}, 0x80, 0x0}}], 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.872601539s ago: executing program 6 (id=1973): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904000000f2a7cc00"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1d, "af7c6bf862b2280bb85232db66bc20f9edf5e5930593cb097bd659d078"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000d00)={0x60, 0xa, 0x2, "f60d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.242381109s ago: executing program 7 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) 2.882896883s ago: executing program 4 (id=1975): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0600fa06"], 0x7) 2.632241682s ago: executing program 4 (id=1976): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3826, 0xc, 0x3, 0x8000}]}) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xfffffd53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r3) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') keyctl$invalidate(0x15, r7) 2.573053699s ago: executing program 7 (id=1977): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x40000) 2.221701301s ago: executing program 2 (id=1978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 1.533609515s ago: executing program 8 (id=1979): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) 439.013378ms ago: executing program 7 (id=1980): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x1b6f, 0x40, 0x0, 0x3bd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xcc}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/212, 0xd4) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x2000c090) close_range(r2, r4, 0x0) 0s ago: executing program 6 (id=1981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/122, 0x7a}], 0x1}, 0x3}], 0x1, 0x40000023, 0x0) kernel console output (not intermixed with test programs): : Product: syz [ 582.900655][T12303] delete_channel: no stack [ 582.915216][ T5898] usb 3-1: USB disconnect, device number 85 [ 582.990512][ T9] usb 7-1: Manufacturer: syz [ 583.012469][ T9] usb 7-1: SerialNumber: syz [ 583.063572][ T9] usb 7-1: config 0 descriptor?? [ 583.133512][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 584.360163][T11495] Bluetooth: hci2: command tx timeout [ 584.463739][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.515787][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.564265][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.582692][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.592177][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.892990][T11677] team0 (unregistering): Port device team_slave_1 removed [ 584.938187][T11677] team0 (unregistering): Port device team_slave_0 removed [ 585.047406][ T10] usb 7-1: USB disconnect, device number 5 [ 585.480119][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 585.607901][T12332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.622897][T12332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.657273][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 585.666868][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.676457][ T10] usb 7-1: Product: syz [ 585.681560][ T10] usb 7-1: Manufacturer: syz [ 585.686366][ T10] usb 7-1: SerialNumber: syz [ 585.875390][ T75] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.925521][ T1011] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.940278][ T1011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.025714][ T1011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.063599][T12306] chnl_net:caif_netlink_parms(): no params data found [ 586.397517][ T5907] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 586.430992][ T5835] Bluetooth: hci2: command tx timeout [ 586.570394][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 586.591123][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 586.592168][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.613433][ T5907] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 586.620217][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.623357][ T5907] usb 5-1: config 4 has no interface number 0 [ 586.632435][T12306] bridge_slave_0: entered allmulticast mode [ 586.649182][T12306] bridge_slave_0: entered promiscuous mode [ 586.652578][ T5907] usb 5-1: config 4 interface 30 has no altsetting 0 [ 586.680198][ T5835] Bluetooth: hci0: command tx timeout [ 586.713114][ T5907] usb 5-1: string descriptor 0 read error: -22 [ 586.719494][ T5907] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 586.798612][T11677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.818916][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.838059][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.846314][T12306] bridge_slave_1: entered allmulticast mode [ 586.855057][T12306] bridge_slave_1: entered promiscuous mode [ 587.050085][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 587.062204][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 587.080760][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 587.092398][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.115084][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 587.129033][ T5907] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 587.144270][ T5907] dw2102: su3000_power_ctrl: 1, initialized 0 [ 587.164589][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 587.175339][T11677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.191025][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.211954][ T5907] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 587.219929][ T5907] usb 5-1: media controller created [ 587.226608][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.244960][ T5907] dw2102: i2c transfer failed. [ 587.259885][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.273067][ T5907] dw2102: i2c transfer failed. [ 587.277893][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.299847][ T5907] dw2102: i2c transfer failed. [ 587.321431][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.331787][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.338112][ T5907] dw2102: i2c transfer failed. [ 587.353496][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.362891][T12354] dw2102: i2c wr: len=69 is too big! [ 587.362891][T12354] [ 587.382540][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.388356][ T5907] dw2102: i2c transfer failed. [ 587.411165][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 587.417214][ T5907] dw2102: i2c transfer failed. [ 587.430031][ T5907] dvb-usb: MAC address: 02:02:02:02:02:02 [ 587.469780][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.495111][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 587.501522][ T5907] dw2102: command 0x0e transfer failed. [ 587.507211][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 587.517882][ T5907] dw2102: command 0x0e transfer failed. [ 587.585651][T11677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.638977][T12306] team0: Port device team_slave_0 added [ 587.648153][T12306] team0: Port device team_slave_1 added [ 587.709673][T11677] bond0: (slave netdevsim0): Releasing backup interface [ 587.719734][T11677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.738096][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.746887][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.773031][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.792330][T12344] chnl_net:caif_netlink_parms(): no params data found [ 587.803710][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.810715][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.837014][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.851220][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 587.857414][ T5907] dw2102: command 0x0e transfer failed. [ 587.863261][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 587.869444][ T5907] dw2102: command 0x0e transfer failed. [ 587.870117][ T983] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 587.880715][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 587.888542][ T5907] dw2102: command 0x51 transfer failed. [ 587.894650][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 587.900947][ T5907] dw2102: i2c probe for address 0x68 failed. [ 587.906987][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 587.920048][ T5907] dw2102: i2c probe for address 0x69 failed. [ 587.926706][ T5907] dvb-usb: bulk message failed: -22 (5/0) [ 587.932566][ T5907] dw2102: i2c probe for address 0x6a failed. [ 587.938590][ T5907] dw2102: probing for demodulator failed. Is the external power switched on? [ 587.947482][ T5907] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 587.999331][T12306] hsr_slave_0: entered promiscuous mode [ 588.007212][T12306] hsr_slave_1: entered promiscuous mode [ 588.014393][T12306] debugfs: 'hsr0' already exists in 'hsr' [ 588.020639][T12306] Cannot create hsr debugfs directory [ 588.051553][ T5907] rc_core: IR keymap rc-tt-1500 not found [ 588.057822][ T5907] Registered IR keymap rc-empty [ 588.060039][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 588.064625][ T5907] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 588.087633][ T983] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 588.095300][ T5907] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input48 [ 588.110358][ T5907] dvb-usb: schedule remote query interval to 250 msecs. [ 588.118030][ T5907] dw2102: su3000_power_ctrl: 0, initialized 1 [ 588.124487][ T5907] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 588.126691][ T983] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 588.149696][ T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.231891][ T983] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.246929][ T5907] usb 7-1: USB disconnect, device number 6 [ 588.256450][ T983] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.357221][ T983] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 588.370069][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 588.375850][ T5946] dw2102: i2c transfer failed. [ 588.388235][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.510811][ T5835] Bluetooth: hci2: command tx timeout [ 588.518684][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.529807][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.538939][T12344] bridge_slave_0: entered allmulticast mode [ 588.549445][T12344] bridge_slave_0: entered promiscuous mode [ 588.561101][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.570903][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.578671][T12344] bridge_slave_1: entered allmulticast mode [ 588.588496][T12344] bridge_slave_1: entered promiscuous mode [ 588.648264][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 588.662563][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 588.678862][ T5907] dw2102: i2c transfer failed. [ 588.705046][ T983] usb 3-1: usb_control_msg returned -32 [ 588.725375][ T983] usbtmc 3-1:16.0: can't read capabilities [ 588.743968][T12400] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1556'. [ 588.753325][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 588.762371][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 588.772076][ T5835] Bluetooth: hci0: command tx timeout [ 588.796002][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1556'. [ 588.914896][ T10] usb 3-1: USB disconnect, device number 86 [ 588.967606][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 588.973781][ T5907] dw2102: i2c transfer failed. [ 589.007760][ T983] usb 5-1: USB disconnect, device number 69 [ 589.124033][ T983] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 590.511549][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.532846][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.542629][T11677] bond0 (unregistering): Released all slaves [ 590.682718][T12405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1557'. [ 590.698191][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.730339][T11677] tipc: Left network mode [ 590.756224][T12413] netlink: 'syz.6.1559': attribute type 10 has an invalid length. [ 590.828036][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.838160][ T5835] Bluetooth: hci0: command tx timeout [ 590.856733][T12413] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 591.133961][T12344] team0: Port device team_slave_0 added [ 591.174973][T12344] team0: Port device team_slave_1 added [ 591.362158][ T5907] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 591.590437][ T983] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 591.776679][ T983] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 591.786280][ T983] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 591.799166][ T983] usb 3-1: Product: syz [ 591.806606][ T983] usb 3-1: SerialNumber: syz [ 591.817005][ T5907] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 591.845980][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.853950][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.888616][ T983] usb 3-1: config 0 descriptor?? [ 591.895051][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 591.897238][ T5907] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 591.916580][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.927998][ T5907] usb 5-1: Product: syz [ 591.933905][ T5907] usb 5-1: Manufacturer: syz [ 591.941448][ T5907] usb 5-1: SerialNumber: syz [ 591.965098][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.978737][ T5907] usb 5-1: config 0 descriptor?? [ 591.995345][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 592.090842][T11677] hsr_slave_0: left promiscuous mode [ 592.173602][T11677] hsr_slave_1: left promiscuous mode [ 592.187921][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.335610][T11677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.340843][ T983] hso 3-1:0.0: Failed to find BULK IN ep [ 592.381171][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.406478][T11677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.506584][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.539434][T11677] veth1_macvtap: left promiscuous mode [ 592.552690][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.577451][T11677] veth0_macvtap: left promiscuous mode [ 592.602065][T11677] veth1_vlan: left promiscuous mode [ 592.607602][T11677] veth0_vlan: left promiscuous mode [ 592.638089][ T5907] usb 3-1: USB disconnect, device number 87 [ 592.944759][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1563'. [ 592.963303][ T5835] Bluetooth: hci0: command tx timeout [ 593.356400][T11677] team0 (unregistering): Port device batadv7 removed [ 593.443412][T11677] team0 (unregistering): Port device batadv6 removed [ 593.512851][ T983] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 593.534538][T11677] team0 (unregistering): Port device batadv5 removed [ 593.596202][T11677] team0 (unregistering): Port device batadv4 removed [ 593.667633][T11677] team0 (unregistering): Port device batadv3 removed [ 593.692883][T11677] team0 (unregistering): Port device batadv2 removed [ 593.724058][ T983] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 593.736780][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.758137][ T983] usb 3-1: Product: syz [ 593.764968][T11677] team0 (unregistering): Port device batadv1 removed [ 593.770155][ T983] usb 3-1: Manufacturer: syz [ 593.788656][ T983] usb 3-1: SerialNumber: syz [ 594.369429][T11677] team0 (unregistering): Port device team_slave_1 removed [ 594.419128][T11677] team0 (unregistering): Port device team_slave_0 removed [ 594.669242][T12155] usb 5-1: USB disconnect, device number 70 [ 595.018505][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.026126][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.053475][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.198041][T12344] hsr_slave_0: entered promiscuous mode [ 595.208191][T12344] hsr_slave_1: entered promiscuous mode [ 595.215454][T12344] debugfs: 'hsr0' already exists in 'hsr' [ 595.221875][T12155] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 595.226400][T12344] Cannot create hsr debugfs directory [ 595.257450][T12306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 595.265708][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 595.282392][T12306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 595.289246][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 595.303948][T12306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 595.313211][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 595.328006][T12306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.891809][ T983] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 595.970141][T12155] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 595.995126][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.033821][T12155] usb 5-1: Product: syz [ 596.039277][T12155] usb 5-1: Manufacturer: syz [ 596.044837][T12155] usb 5-1: SerialNumber: syz [ 596.061330][T12155] usb 5-1: config 0 descriptor?? [ 596.319837][T12155] hso 5-1:0.0: Failed to find BULK IN ep [ 596.331184][ T5907] usb 3-1: USB disconnect, device number 88 [ 596.364693][T12155] usb-storage 5-1:0.0: USB Mass Storage device detected [ 596.545762][T12155] usb 5-1: USB disconnect, device number 71 [ 596.699551][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 596.709266][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 597.119423][T12344] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 597.145020][T12344] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 597.181482][T12344] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 597.351379][T12344] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 597.540195][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1570'. [ 597.717324][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.747460][T12489] netlink: 'syz.6.1570': attribute type 13 has an invalid length. [ 597.816993][T12489] netlink: 'syz.6.1570': attribute type 17 has an invalid length. [ 597.818575][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.050326][ T5907] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 598.064894][T12489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.342317][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.349520][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.406025][ T5907] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 598.425785][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 598.442497][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.449713][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.540468][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 598.683533][ T5907] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 598.700136][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.720173][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 598.727798][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.760797][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.777257][T12510] netlink: 'syz.6.1573': attribute type 10 has an invalid length. [ 598.789032][ T5907] usb 5-1: Product: syz [ 598.801888][ T5907] usb 5-1: Manufacturer: syz [ 598.829868][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.843629][ T5907] usb 5-1: SerialNumber: syz [ 598.918465][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.937043][ T5907] usb 5-1: config 0 descriptor?? [ 598.965509][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.997712][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 599.036760][T12306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.095469][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.099051][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.160037][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.167408][T11710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.214480][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.227146][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.234313][T11710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.334367][T12306] veth0_vlan: entered promiscuous mode [ 599.489441][T12306] veth1_vlan: entered promiscuous mode [ 599.620383][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 599.705156][ T10] usbtmc 3-1:16.0: can't read capabilities [ 599.862039][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.013908][T12306] veth0_macvtap: entered promiscuous mode [ 600.057895][T12306] veth1_macvtap: entered promiscuous mode [ 600.117501][T12306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.214812][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 600.468235][T12532] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1575'. [ 600.478651][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 600.491785][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 600.539352][T12532] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1575'. [ 600.863153][T12306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.977454][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.003130][T12344] veth0_vlan: entered promiscuous mode [ 601.052012][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.084849][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.173340][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.246497][T12344] veth1_vlan: entered promiscuous mode [ 601.476001][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1576'. [ 601.541022][ T10] usb 3-1: USB disconnect, device number 89 [ 601.559361][ T5920] usb 5-1: USB disconnect, device number 72 [ 601.575670][T12507] delete_channel: no stack [ 601.637036][T12344] veth0_macvtap: entered promiscuous mode [ 601.657609][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.674247][T12539] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1576'. [ 601.703576][T12344] veth1_macvtap: entered promiscuous mode [ 601.721077][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.784202][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.023651][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.037566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.047803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.067897][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.077521][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.090090][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 602.126631][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.150571][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.240165][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 602.271171][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 602.284154][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.333173][ T9] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 602.342094][T11677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.420310][ T9] usb 3-1: config 4 has no interface number 0 [ 602.427082][T11677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.480095][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.497264][ T9] usb 3-1: config 4 interface 30 has no altsetting 0 [ 602.514563][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.535732][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.553017][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.553141][ T9] usb 3-1: string descriptor 0 read error: -22 [ 602.569493][ T9] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 602.580750][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.602057][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.614035][T11677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.626374][ T10] usb 5-1: config 0 descriptor?? [ 602.642976][T11677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.689243][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 602.728618][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 602.735919][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 602.777578][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.798066][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 602.840119][ T9] usb 3-1: media controller created [ 602.845410][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 602.888407][ T9] dw2102: i2c transfer failed. [ 602.910061][T12543] dvb-usb: bulk message failed: -22 (3/0) [ 602.918011][T12543] dw2102: i2c transfer failed. [ 602.936999][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 602.957479][ T9] dw2102: i2c transfer failed. [ 602.971576][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 602.979266][ T9] dw2102: i2c transfer failed. [ 602.992135][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 602.997934][ T9] dw2102: i2c transfer failed. [ 603.005563][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 603.012086][ T9] dw2102: i2c transfer failed. [ 603.017043][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 603.042524][ T9] dw2102: i2c transfer failed. [ 603.047921][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 603.365766][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 603.380120][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 603.410499][ T10] usb 5-1: USB disconnect, device number 73 [ 603.476647][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.613784][T12564] __nla_validate_parse: 3 callbacks suppressed [ 603.613797][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1549'. [ 603.639750][T12564] bridge_slave_1: left allmulticast mode [ 603.646465][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 603.646486][ T9] dw2102: command 0x0e transfer failed. [ 603.646498][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 603.646511][ T9] dw2102: command 0x0e transfer failed. [ 603.728084][T12564] bridge_slave_1: left promiscuous mode [ 603.820712][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.847685][T12563] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1549'. [ 603.860212][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1549'. [ 603.869122][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1549'. [ 603.888272][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1549'. [ 603.959683][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 604.238349][ T9] dw2102: command 0x0e transfer failed. [ 604.274446][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 604.307076][T12564] bridge_slave_0: left allmulticast mode [ 604.315572][ T9] dw2102: command 0x0e transfer failed. [ 604.337212][T12575] misc userio: Begin command sent, but we're already running [ 604.349854][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 604.361242][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 604.507871][ T9] dw2102: command 0x51 transfer failed. [ 604.540474][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 604.546513][ T9] dw2102: i2c probe for address 0x68 failed. [ 604.565162][T12564] bridge_slave_0: left promiscuous mode [ 604.582241][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 604.640050][T12550] misc userio: Begin command sent, but we're already running [ 604.648388][ T9] dw2102: i2c probe for address 0x69 failed. [ 604.661029][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.693142][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 604.698998][ T9] dw2102: i2c probe for address 0x6a failed. [ 604.732653][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 604.760056][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 604.932017][T12584] netlink: 'syz.4.1581': attribute type 13 has an invalid length. [ 605.043341][T12584] netlink: 'syz.4.1581': attribute type 17 has an invalid length. [ 605.140044][ T9] rc_core: IR keymap rc-tt-1500 not found [ 605.180074][ T9] Registered IR keymap rc-empty [ 605.202987][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 605.240453][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 605.285260][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 605.320186][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 605.326306][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 605.396004][ T9] usb 3-1: USB disconnect, device number 90 [ 605.491640][T12590] mmap: syz.7.1582 (12590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 605.930131][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 605.975732][ T5946] dw2102: i2c transfer failed. [ 606.102218][T12584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.430756][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 606.608790][T12598] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1583'. [ 606.633548][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 606.643775][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 606.673290][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 606.720075][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 606.980581][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 607.000116][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 607.021338][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.070831][ T5920] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 607.087281][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.114221][ T5920] usb 7-1: Product: syz [ 607.140337][ T5920] usb 7-1: Manufacturer: syz [ 607.174567][ T5920] usb 7-1: SerialNumber: syz [ 607.191186][T12608] misc userio: Invalid payload size [ 607.360110][ T5920] usb 7-1: config 0 descriptor?? [ 607.393380][ T5920] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 607.471228][ T5920] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 608.192196][ T5920] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 608.201250][ T5920] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 608.629067][T12626] __nla_validate_parse: 2 callbacks suppressed [ 608.629081][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 608.812454][ T5920] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 608.821066][ T5920] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 608.837998][ T5920] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 608.874372][ T5920] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 608.902166][ T5920] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 608.918221][ T5920] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 608.944339][ T5920] usb 7-1: USB disconnect, device number 7 [ 609.310173][T11782] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 609.423274][T12608] misc userio: Begin command sent, but we're already running [ 609.480083][T11782] usb 3-1: Using ep0 maxpacket: 8 [ 609.521779][T11782] usb 3-1: unable to get BOS descriptor or descriptor too short [ 609.531092][T11782] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 609.539282][T11782] usb 3-1: config 4 has no interface number 0 [ 609.564158][T11782] usb 3-1: config 4 interface 30 has no altsetting 0 [ 609.588739][T11782] usb 3-1: string descriptor 0 read error: -22 [ 609.597626][T11782] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 609.616919][T11782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.666490][T11782] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 609.700934][T11782] dw2102: su3000_power_ctrl: 1, initialized 0 [ 609.722881][T11782] dvb-usb: bulk message failed: -22 (2/0) [ 609.754989][T11782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.798708][T11782] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 609.837025][T11782] usb 3-1: media controller created [ 609.858505][T12634] dw2102: i2c wr: len=69 is too big! [ 609.858505][T12634] [ 609.885796][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 609.930097][T11782] dw2102: i2c transfer failed. [ 609.957520][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 609.990433][T11782] dw2102: i2c transfer failed. [ 610.008448][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 610.038583][T11782] dw2102: i2c transfer failed. [ 610.054501][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 610.071988][T11782] dw2102: i2c transfer failed. [ 610.084730][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 610.147952][T11782] dw2102: i2c transfer failed. [ 610.180444][T11782] dvb-usb: bulk message failed: -22 (6/0) [ 610.212535][T11782] dw2102: i2c transfer failed. [ 610.227161][T11782] dvb-usb: MAC address: 02:02:02:02:02:02 [ 610.321612][T11782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.433150][T11782] dvb-usb: bulk message failed: -22 (3/0) [ 610.464088][T11782] dw2102: command 0x0e transfer failed. [ 610.480983][T11782] dvb-usb: bulk message failed: -22 (3/0) [ 610.500500][T11782] dw2102: command 0x0e transfer failed. [ 610.661210][T12642] misc userio: Begin command sent, but we're already running [ 610.737132][T12656] misc userio: Begin command sent, but we're already running [ 610.830302][T11782] dvb-usb: bulk message failed: -22 (3/0) [ 610.836121][T11782] dw2102: command 0x0e transfer failed. [ 610.854774][T11782] dvb-usb: bulk message failed: -22 (3/0) [ 610.876964][T11782] dw2102: command 0x0e transfer failed. [ 610.899263][T11782] dvb-usb: bulk message failed: -22 (1/0) [ 610.924621][T11782] dw2102: command 0x51 transfer failed. [ 610.944047][T11782] dvb-usb: bulk message failed: -22 (5/0) [ 610.975014][T11782] dw2102: i2c probe for address 0x68 failed. [ 610.988415][T11782] dvb-usb: bulk message failed: -22 (5/0) [ 611.002243][T11782] dw2102: i2c probe for address 0x69 failed. [ 611.014929][T11782] dvb-usb: bulk message failed: -22 (5/0) [ 611.026434][T11782] dw2102: i2c probe for address 0x6a failed. [ 611.041379][T11782] dw2102: probing for demodulator failed. Is the external power switched on? [ 611.072411][T11782] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 611.258217][T11782] rc_core: IR keymap rc-tt-1500 not found [ 611.290232][T11782] Registered IR keymap rc-empty [ 611.304089][T11782] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 611.343270][T11782] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input53 [ 611.387043][T11782] dvb-usb: schedule remote query interval to 250 msecs. [ 611.409880][T11782] dw2102: su3000_power_ctrl: 0, initialized 1 [ 611.430682][T11782] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 611.660069][T11782] dvb-usb: bulk message failed: -22 (1/0) [ 611.666001][T11782] dw2102: i2c transfer failed. [ 611.950089][T11782] dvb-usb: bulk message failed: -22 (1/0) [ 611.955870][T11782] dw2102: i2c transfer failed. [ 612.159615][ T5920] usb 3-1: USB disconnect, device number 91 [ 612.405165][ T5920] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 612.481789][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 612.647962][T12671] netlink: 'syz.2.1597': attribute type 13 has an invalid length. [ 612.667040][T12671] netlink: 'syz.2.1597': attribute type 17 has an invalid length. [ 612.764851][T12671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.796466][T12671] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.825502][T12671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.518396][T12679] binder: 12677:12679 unknown command 0 [ 613.541778][T12679] binder: 12677:12679 ioctl c0306201 80000080 returned -22 [ 613.940060][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 614.116037][ T983] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 614.180137][ T5920] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 614.274669][ T983] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.284029][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.292532][ T983] usb 3-1: Product: syz [ 614.296798][ T983] usb 3-1: Manufacturer: syz [ 614.302879][ T983] usb 3-1: SerialNumber: syz [ 614.341916][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 614.354301][ T10] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 614.375364][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 614.387315][ T5920] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 614.389016][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 614.406271][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.414554][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.414687][ T10] usb 7-1: Product: syz [ 614.428230][ T10] usb 7-1: Manufacturer: syz [ 614.434236][ T10] usb 7-1: SerialNumber: syz [ 614.444742][ T10] usb 7-1: config 0 descriptor?? [ 614.461888][ T5920] usb 8-1: config 0 descriptor?? [ 614.476740][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 614.500122][ T5898] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 614.664169][ T5898] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 614.680630][ T5920] ath6kl: Failed to submit usb control message: -71 [ 614.704981][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 614.724207][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 614.737856][ T5920] ath6kl: Unable to send get target info: -71 [ 614.766394][ T5898] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 614.787274][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 614.802708][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.814683][ T5920] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 614.840873][ T5898] usb 5-1: Product: syz [ 614.845085][ T5898] usb 5-1: Manufacturer: syz [ 614.866093][ T5898] usb 5-1: SerialNumber: syz [ 614.888110][ T5920] usb 8-1: USB disconnect, device number 2 [ 614.902579][ T5898] usb 5-1: config 0 descriptor?? [ 614.951775][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 615.602657][ T5898] videodev: could not get a free minor [ 615.620267][ T5898] gspca_main: video_register_device err -23 [ 615.915365][ T5898] sunplus 5-1:0.0: probe with driver sunplus failed with error -23 [ 615.946486][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1604'. [ 616.081513][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 616.094882][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 616.105655][ T983] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 616.127371][ T983] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 616.834873][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1605'. [ 616.968951][ T10] usb 5-1: USB disconnect, device number 74 [ 617.224251][T11782] usb 3-1: USB disconnect, device number 92 [ 617.347401][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1607'. [ 617.357755][T12723] bridge_slave_1: left allmulticast mode [ 617.590259][T12723] bridge_slave_1: left promiscuous mode [ 617.596250][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.699503][T12727] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1607'. [ 617.709824][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1607'. [ 617.719343][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1607'. [ 617.752364][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1607'. [ 617.832177][ T5898] usb 7-1: USB disconnect, device number 8 [ 617.840908][T12723] bridge_slave_0: left allmulticast mode [ 617.910404][T12723] bridge_slave_0: left promiscuous mode [ 618.014296][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1611'. [ 618.145195][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.494454][T12732] netlink: 'syz.6.1611': attribute type 13 has an invalid length. [ 618.506948][T12732] netlink: 'syz.6.1611': attribute type 17 has an invalid length. [ 618.538645][T12732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.958187][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1613'. [ 619.167700][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1614'. [ 619.285998][T12752] loop7: detected capacity change from 0 to 16384 [ 619.350273][T12753] loop7: detected capacity change from 16384 to 16297 [ 620.371631][ T983] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 620.651244][ T983] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 620.660617][ T983] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 620.681211][ T983] usb 5-1: Product: syz [ 621.338884][ T983] usb 5-1: SerialNumber: syz [ 621.377898][ T983] usb 5-1: config 0 descriptor?? [ 621.685210][ T983] hso 5-1:0.0: Failed to find BULK IN ep [ 621.963628][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.994617][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.033220][T11782] usb 5-1: USB disconnect, device number 75 [ 622.163115][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 622.306327][T12797] __nla_validate_parse: 6 callbacks suppressed [ 622.306346][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 622.325694][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 622.334458][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 622.344548][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 622.408268][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 622.433338][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.444461][T12797] netlink: 'syz.2.1624': attribute type 13 has an invalid length. [ 622.454627][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.460394][T12797] netlink: 'syz.2.1624': attribute type 17 has an invalid length. [ 622.472197][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 622.488453][T12797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.493907][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.742319][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 622.747959][ T10] usbtmc 7-1:16.0: can't read capabilities [ 622.940315][ T983] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 623.021823][T12155] usb 7-1: USB disconnect, device number 9 [ 623.135465][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 623.155050][ T983] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 623.166361][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.186977][ T983] usb 3-1: Product: syz [ 623.197715][ T983] usb 3-1: Manufacturer: syz [ 623.211682][ T983] usb 3-1: SerialNumber: syz [ 623.239424][ T983] r8152-cfgselector 3-1: Unknown version 0x0000 [ 623.246630][ T983] r8152-cfgselector 3-1: config 0 descriptor?? [ 623.747043][ T983] r8152-cfgselector 3-1: Unknown version 0x0000 [ 623.770560][ T983] r8152-cfgselector 3-1: bad CDC descriptors [ 623.795387][ T983] r8152-cfgselector 3-1: USB disconnect, device number 93 [ 624.440736][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447089][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.374322][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 625.760282][ T5946] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 626.025295][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.050846][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.082955][ T5946] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 626.093467][ T5946] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.125898][ T5946] usb 7-1: Manufacturer: syz [ 626.184707][ T5946] usb 7-1: config 0 descriptor?? [ 626.307111][T11782] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 626.439418][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1637'. [ 626.470200][T12865] netlink: 'syz.8.1637': attribute type 13 has an invalid length. [ 626.478191][T12865] netlink: 'syz.8.1637': attribute type 17 has an invalid length. [ 626.508567][T11782] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 626.518004][T11782] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 626.537896][T11782] usb 8-1: Product: syz [ 626.545693][T11782] usb 8-1: SerialNumber: syz [ 626.569753][T11782] usb 8-1: config 0 descriptor?? [ 626.692994][T12865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.742233][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 626.770078][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 626.820077][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 626.854176][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 626.892827][T11782] hso 8-1:0.0: Failed to find BULK IN ep [ 626.929688][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 627.006593][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 627.022937][ T5946] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 627.054246][ T5946] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 627.111171][ T5946] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 627.127310][ T5946] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 627.142477][ T5946] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -32 [ 627.325199][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 627.575392][ T1966] usb 8-1: USB disconnect, device number 3 [ 627.973230][T12155] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 628.200156][T12155] usb 3-1: Using ep0 maxpacket: 16 [ 628.262403][T12155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.327399][T12155] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.354382][T12155] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.374201][T12155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.399894][T12155] usb 3-1: Product: syz [ 628.414830][T12155] usb 3-1: Manufacturer: syz [ 628.419471][T12155] usb 3-1: SerialNumber: syz [ 628.520950][ T5946] usb 7-1: USB disconnect, device number 10 [ 628.946722][T12155] usb 3-1: 0:2 : does not exist [ 628.965448][T12155] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 628.993110][T12155] usb 3-1: USB disconnect, device number 94 [ 629.061215][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1641'. [ 629.099539][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.178919][T12906] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1641'. [ 629.193684][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1641'. [ 629.253823][T12910] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1644'. [ 629.264745][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1641'. [ 629.276949][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1641'. [ 629.783767][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1650'. [ 629.818264][T12930] netlink: 'syz.8.1650': attribute type 13 has an invalid length. [ 629.840171][T12155] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 629.853876][T12930] netlink: 'syz.8.1650': attribute type 17 has an invalid length. [ 629.885977][T12930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.050967][T12155] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 630.060311][T12155] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.086718][T12155] usb 7-1: Product: syz [ 630.240433][T12155] usb 7-1: Manufacturer: syz [ 630.249081][T12155] usb 7-1: SerialNumber: syz [ 630.268856][T12155] usb 7-1: config 0 descriptor?? [ 630.514281][T12155] hso 7-1:0.0: Failed to find BULK IN ep [ 630.533162][T12155] usb-storage 7-1:0.0: USB Mass Storage device detected [ 630.725378][T12155] usb 7-1: USB disconnect, device number 11 [ 630.735409][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1653'. [ 630.800134][T11782] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 631.040676][T11782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.052524][T11782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.066112][T11782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.260020][T11782] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.460198][T11782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.506625][T11782] usb 5-1: config 0 descriptor?? [ 632.092815][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'. [ 632.242492][T11782] usbhid 5-1:0.0: can't add hid device: -71 [ 632.248525][T11782] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 632.298312][T11782] usb 5-1: USB disconnect, device number 76 [ 632.497305][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1661'. [ 632.510426][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1661'. [ 632.719670][T12983] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1661'. [ 632.731907][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1661'. [ 632.934754][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1661'. [ 632.965515][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1661'. [ 633.017653][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 634.267544][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1664'. [ 634.300206][ T983] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 634.495354][T13003] netlink: 'syz.6.1664': attribute type 13 has an invalid length. [ 634.520250][ T983] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 634.528979][ T983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 634.565322][T13009] binder: 13008:13009 unknown command 0 [ 634.570998][T13009] binder: 13008:13009 ioctl c0306201 80000080 returned -22 [ 634.578462][T13003] netlink: 'syz.6.1664': attribute type 17 has an invalid length. [ 634.622387][ T983] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 634.636490][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.723659][ T983] usb 5-1: Product: syz [ 634.738971][ T983] usb 5-1: Manufacturer: syz [ 634.743984][T13003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.787898][ T983] usb 5-1: SerialNumber: syz [ 634.853000][ T983] usb 5-1: config 0 descriptor?? [ 634.900080][T11782] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 634.902701][ T983] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 635.152950][T11782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 635.210116][T11782] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 635.257678][T11782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.303112][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1667'. [ 635.331774][T11782] usb 3-1: config 0 descriptor?? [ 635.360247][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1667'. [ 635.558076][T11782] ath6kl: Failed to submit usb control message: -71 [ 635.584568][T11782] ath6kl: unable to send the bmi data to the device: -71 [ 635.611495][T11782] ath6kl: Unable to send get target info: -71 [ 635.620637][ T5907] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 635.707745][T11782] ath6kl: Failed to init ath6kl core: -71 [ 635.790899][T11782] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 635.813167][ T5907] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 635.855580][ T5907] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 635.884427][T11782] usb 3-1: USB disconnect, device number 95 [ 635.929187][ T5907] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 636.429823][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.443601][ T5907] usb 7-1: Product: syz [ 636.509642][ T5907] usb 7-1: Manufacturer: syz [ 636.516633][ T5907] usb 7-1: SerialNumber: syz [ 636.553033][ T5907] usb 7-1: config 0 descriptor?? [ 636.917779][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 637.565513][ T5907] videodev: could not get a free minor [ 637.577526][ T5907] gspca_main: video_register_device err -23 [ 637.596796][ T5907] sunplus 7-1:0.0: probe with driver sunplus failed with error -23 [ 637.854932][ T5907] usb 5-1: USB disconnect, device number 77 [ 638.722559][T13063] __nla_validate_parse: 2 callbacks suppressed [ 638.722604][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 638.931634][T11782] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 639.548395][T11782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.584581][ T983] usb 7-1: USB disconnect, device number 12 [ 639.613201][T11782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.688624][T11782] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 639.698457][T11782] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.720001][T11782] usb 8-1: Manufacturer: syz [ 639.903805][T11782] usb 8-1: config 0 descriptor?? [ 640.013127][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1679'. [ 640.465776][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 640.477951][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 640.880574][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 640.887867][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 640.915622][T13094] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 641.010293][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 641.028935][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 641.045551][T13094] batadv14: entered promiscuous mode [ 641.051377][T13094] batadv14: entered allmulticast mode [ 641.058655][T13094] team0: Port device batadv14 added [ 641.127955][T11782] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 641.169018][T11782] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 641.279489][T11782] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 641.310367][T11782] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 641.348438][T11782] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -32 [ 642.413038][T12155] usb 8-1: USB disconnect, device number 4 [ 642.846032][T12155] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 643.131087][T12155] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 643.140831][T12155] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.150396][ T5949] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 643.237170][T12155] usb 8-1: Product: syz [ 643.270823][T12155] usb 8-1: Manufacturer: syz [ 643.362135][T12155] usb 8-1: SerialNumber: syz [ 643.372229][ T5949] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 643.385358][ T5949] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 643.410075][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.427022][ T5949] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 644.169279][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1691'. [ 644.181292][T13141] openvswitch: netlink: EtherType 0 is less than min 600 [ 644.541917][ T5949] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 644.575390][ T5949] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 644.597586][ T5949] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 644.845293][ T5898] usb 5-1: USB disconnect, device number 78 [ 644.876704][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1693'. [ 644.904053][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 645.074941][T12155] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 645.099195][T13154] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1693'. [ 645.117260][T12155] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 645.131281][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1693'. [ 645.140287][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1693'. [ 645.149664][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1693'. [ 645.271278][T12155] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 645.292460][T12155] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 645.309844][T12155] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 645.326516][T12155] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 645.521179][T12155] usb 8-1: USB disconnect, device number 5 [ 646.077478][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1697'. [ 646.100066][ T5898] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 646.128659][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1697'. [ 646.271333][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.300408][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.340503][ T5898] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 646.360216][ T5898] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.378505][ T5898] usb 3-1: Manufacturer: syz [ 646.406189][ T5898] usb 3-1: config 0 descriptor?? [ 646.936013][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.953106][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.961952][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.969144][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.977492][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.985513][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 646.994998][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 647.002602][ T5898] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 647.017479][ T5898] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 647.136269][ T5898] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 647.320238][ T5898] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 647.585002][ T5898] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -32 [ 647.822400][T13185] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 647.833921][T13185] team0: Port device batadv1 added [ 648.266702][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'. [ 648.330321][T13194] openvswitch: netlink: EtherType 0 is less than min 600 [ 648.860240][ T5898] usb 3-1: USB disconnect, device number 96 [ 649.992987][ T5898] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 650.320932][ T5898] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 650.360514][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 650.439923][ T5898] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 650.451610][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.493636][ T5898] usb 7-1: Product: syz [ 650.498303][ T5898] usb 7-1: Manufacturer: syz [ 650.547547][ T5898] usb 7-1: SerialNumber: syz [ 650.620524][ T5898] usb 7-1: config 0 descriptor?? [ 650.652464][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 650.767544][T13222] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 650.783380][T13222] batadv15: entered promiscuous mode [ 650.792490][T13222] batadv15: entered allmulticast mode [ 650.803681][T13222] team0: Port device batadv15 added [ 652.876556][T13023] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 653.222212][T13023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.252931][T13023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.488131][T13023] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 653.500091][T13023] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.688015][T13023] usb 5-1: Manufacturer: syz [ 653.721018][T13023] usb 5-1: config 0 descriptor?? [ 653.744432][ T5898] usb 7-1: USB disconnect, device number 13 [ 654.161920][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.182378][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.235039][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.323911][ T5907] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 654.332831][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.343959][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.354558][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.364234][T13023] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 654.397549][T13023] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 654.419896][T13023] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 654.463492][T13251] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 654.475579][T13251] team0: Port device batadv1 added [ 654.640121][ T5907] usb 7-1: Using ep0 maxpacket: 16 [ 654.650941][T13023] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 654.660290][ T5907] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.677019][ T5907] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.689886][T13023] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -5 [ 654.707703][ T5907] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.740065][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.784223][ T5907] usb 7-1: Product: syz [ 654.802621][ T5907] usb 7-1: Manufacturer: syz [ 654.950169][ T5907] usb 7-1: SerialNumber: syz [ 655.588404][ T5907] usb 7-1: 0:2 : does not exist [ 655.650703][ T5907] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 655.760726][T13023] usb 5-1: USB disconnect, device number 79 [ 655.857713][ T5907] usb 7-1: USB disconnect, device number 14 [ 656.136318][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1724'. [ 656.215846][T13263] netlink: 'syz.8.1724': attribute type 13 has an invalid length. [ 656.225731][T13263] netlink: 'syz.8.1724': attribute type 17 has an invalid length. [ 656.277202][T13263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.585815][ T5907] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 656.619095][T13282] netlink: 196 bytes leftover after parsing attributes in process `syz.8.1729'. [ 657.140333][T13023] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 657.407798][ T5907] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 657.421304][ T5907] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 657.460383][T13023] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 657.536387][T13023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.560433][T13023] usb 8-1: Product: syz [ 657.572466][T13023] usb 8-1: Manufacturer: syz [ 657.587419][ T5907] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 657.609869][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.630573][ T5907] usb 3-1: Product: syz [ 657.637052][T13023] usb 8-1: SerialNumber: syz [ 657.667261][ T5907] usb 3-1: Manufacturer: syz [ 657.698220][ T5907] usb 3-1: SerialNumber: syz [ 657.736882][ T5907] usb 3-1: config 0 descriptor?? [ 657.759926][T13288] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1731'. [ 657.776781][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 658.780108][ T5907] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 658.879087][ T5949] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 659.000366][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.015267][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.082049][ T5907] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 659.096963][ T5907] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.148137][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.227230][ T5907] usb 7-1: Manufacturer: syz [ 659.235500][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.290193][ T5907] usb 7-1: config 0 descriptor?? [ 659.306963][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.362318][ T5949] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.391335][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.414166][ T5949] usb 5-1: config 0 descriptor?? [ 659.738957][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.747522][T13023] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 659.764349][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.773603][T13023] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 659.809282][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.819013][T13023] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 659.829509][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.840857][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.851007][T13023] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 659.868863][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.870396][T13023] usb 8-1: USB disconnect, device number 6 [ 659.886839][ T5907] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 659.901150][ T5907] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 659.964402][ T5907] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 659.974408][ T5907] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 659.985289][ T5907] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -5 [ 660.063110][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 660.069279][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.080602][ T5949] usb 5-1: USB disconnect, device number 80 [ 660.517461][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1735'. [ 660.650583][ T5920] usb 3-1: USB disconnect, device number 97 [ 660.830131][T13023] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 661.015666][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 661.026611][T13023] usb 8-1: Using ep0 maxpacket: 8 [ 661.118253][T13319] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1738'. [ 661.143373][T13023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 661.151387][T13316] netlink: 'syz.4.1739': attribute type 13 has an invalid length. [ 661.168073][T13023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 661.179173][T13023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 661.190314][T13023] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.192238][T13316] netlink: 'syz.4.1739': attribute type 17 has an invalid length. [ 661.207110][T13023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 661.242083][T13316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.267060][T13023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.331146][ T5907] usb 7-1: USB disconnect, device number 15 [ 661.466160][T13325] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1741'. [ 661.610685][T13023] usb 8-1: GET_CAPABILITIES returned 0 [ 661.647663][T13023] usbtmc 8-1:16.0: can't read capabilities [ 662.142638][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1747'. [ 662.170160][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 662.178109][ T5920] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 662.277079][T13343] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1747'. [ 662.287789][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1747'. [ 662.297674][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1747'. [ 662.306752][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1747'. [ 662.340097][ T5898] usb 7-1: device descriptor read/64, error -71 [ 662.361538][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.372639][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.429568][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.674096][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.700051][ T5898] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 662.719585][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.825214][ T5920] usb 3-1: config 0 descriptor?? [ 662.898682][ T5898] usb 7-1: device descriptor read/64, error -71 [ 663.180571][ T5898] usb usb7-port1: attempt power cycle [ 663.543525][T13303] delete_channel: no stack [ 663.558802][ T5898] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 663.576770][T12155] usb 8-1: USB disconnect, device number 7 [ 663.617348][ T5898] usb 7-1: device descriptor read/8, error -71 [ 663.689558][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 663.711655][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 663.873167][ T5920] usb 3-1: USB disconnect, device number 98 [ 664.042500][ T5898] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 664.092531][ T5898] usb 7-1: device descriptor read/8, error -71 [ 664.190080][T12155] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 664.201192][ T5898] usb usb7-port1: unable to enumerate USB device [ 664.465863][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1753'. [ 664.502404][T12155] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 664.517497][T12155] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 664.541525][T13363] netlink: 'syz.2.1753': attribute type 13 has an invalid length. [ 664.550543][T13363] netlink: 'syz.2.1753': attribute type 17 has an invalid length. [ 664.574773][T12155] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 664.584984][T12155] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.598096][T12155] usb 8-1: Product: syz [ 664.603091][T12155] usb 8-1: Manufacturer: syz [ 664.608010][T13363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.627393][T12155] usb 8-1: SerialNumber: syz [ 664.654186][T12155] usb 8-1: config 0 descriptor?? [ 664.727427][T12155] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 665.155132][T13373] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1757'. [ 666.050352][ T5907] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 666.240619][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 666.330181][T13023] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 666.381858][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.394539][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.426441][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.436287][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.456296][ T5907] usb 3-1: Product: syz [ 666.467786][ T5907] usb 3-1: Manufacturer: syz [ 666.478416][ T5907] usb 3-1: SerialNumber: syz [ 666.552755][T13023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.572144][T13023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.624066][T13023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.705525][T13023] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.726391][ T5907] usb 3-1: 0:2 : does not exist [ 666.759877][ T5898] usb 8-1: USB disconnect, device number 8 [ 666.763652][T13023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.790731][ T5907] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 666.834224][ T5907] usb 3-1: USB disconnect, device number 99 [ 666.841853][T13023] usb 7-1: config 0 descriptor?? [ 667.189044][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.214991][T13398] binder: 13397:13398 unknown command 0 [ 667.221313][T13398] binder: 13397:13398 ioctl c0306201 80000080 returned -22 [ 667.480462][ T5898] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 667.540311][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 667.568193][T13023] usbhid 7-1:0.0: can't add hid device: -71 [ 667.578242][T13023] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 667.652849][T13023] usb 7-1: USB disconnect, device number 20 [ 667.683090][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 667.796151][ T5898] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 667.803524][T13400] netlink: 'syz.2.1766': attribute type 13 has an invalid length. [ 667.813788][T13400] netlink: 'syz.2.1766': attribute type 17 has an invalid length. [ 667.821303][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.893754][ T5898] usb 8-1: config 0 descriptor?? [ 667.923868][T13400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.165700][ T5898] ath6kl: Failed to submit usb control message: -71 [ 668.289841][T13410] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1769'. [ 668.581563][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 668.589086][ T5898] ath6kl: Unable to send get target info: -71 [ 668.611182][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 668.618310][ T5898] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 668.670544][ T5898] usb 8-1: USB disconnect, device number 9 [ 669.526453][ T5898] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 669.734284][ T5898] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 669.745016][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 669.788009][ T5898] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 669.797756][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.817048][ T5898] usb 7-1: Product: syz [ 669.843627][ T5898] usb 7-1: Manufacturer: syz [ 669.851989][ T5898] usb 7-1: SerialNumber: syz [ 669.867767][ T5898] usb 7-1: config 0 descriptor?? [ 669.897243][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 669.930401][T12155] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 670.062559][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 670.090515][T12155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.111261][T12155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.125285][T12155] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 670.135508][T12155] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.144489][T12155] usb 5-1: Manufacturer: syz [ 670.153138][T12155] usb 5-1: config 0 descriptor?? [ 670.335940][T13440] netlink: 'syz.2.1779': attribute type 13 has an invalid length. [ 670.344855][T13440] netlink: 'syz.2.1779': attribute type 17 has an invalid length. [ 670.393691][T13440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.603325][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.641811][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.658908][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.688337][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.706677][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.715110][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.725350][T12155] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 670.737610][T12155] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 670.760589][ T5898] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 670.802052][T12155] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 670.902645][T12155] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 670.913153][T12155] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -5 [ 670.927126][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.992352][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.012181][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.025349][ T5898] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.038207][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.057015][ T5898] usb 8-1: config 0 descriptor?? [ 671.103749][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 671.312114][T13454] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1782'. [ 671.370231][T12155] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 671.650176][T12155] usb 3-1: Using ep0 maxpacket: 8 [ 671.701614][ T5898] usbhid 8-1:0.0: can't add hid device: -71 [ 671.728390][ T5898] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 671.742399][T12155] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.752512][T12155] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.782052][ T5898] usb 8-1: USB disconnect, device number 10 [ 671.788265][T12155] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 671.820958][T12155] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.834664][T12155] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 671.848095][T12155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.094982][T12155] usb 3-1: GET_CAPABILITIES returned 0 [ 672.102741][T12155] usbtmc 3-1:16.0: can't read capabilities [ 672.944426][ T5898] usb 5-1: USB disconnect, device number 81 [ 673.276397][T12155] usb 7-1: USB disconnect, device number 21 [ 673.760713][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1791'. [ 673.939284][T13486] netlink: 'syz.6.1791': attribute type 13 has an invalid length. [ 673.965716][T13486] netlink: 'syz.6.1791': attribute type 17 has an invalid length. [ 674.011622][T13486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.450049][T12155] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 674.469789][T13023] usb 3-1: USB disconnect, device number 100 [ 674.506203][T13448] delete_channel: no stack [ 674.611020][T12155] usb 8-1: device descriptor read/64, error -71 [ 674.630886][T13495] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1794'. [ 674.870032][T12155] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 675.010780][T12155] usb 8-1: device descriptor read/64, error -71 [ 675.120536][T12155] usb usb8-port1: attempt power cycle [ 675.210546][T13023] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 675.402789][T13023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.418496][T13023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.454858][T13023] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 675.476613][T13023] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.480670][T12155] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 675.493139][T13023] usb 5-1: Manufacturer: syz [ 675.516409][T13023] usb 5-1: config 0 descriptor?? [ 675.532860][T12155] usb 8-1: device descriptor read/8, error -71 [ 675.620068][ T983] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 675.770106][T12155] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 675.787576][ T983] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 675.798467][ T983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 675.807850][T12155] usb 8-1: device descriptor read/8, error -71 [ 675.835475][ T983] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 675.847084][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.855643][ T5898] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 675.864921][ T983] usb 7-1: Product: syz [ 675.869524][ T983] usb 7-1: Manufacturer: syz [ 675.878774][ T983] usb 7-1: SerialNumber: syz [ 675.890784][ T983] usb 7-1: config 0 descriptor?? [ 675.902049][ T983] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 675.930593][T12155] usb usb8-port1: unable to enumerate USB device [ 675.960667][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 675.967661][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.010554][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.019897][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.028091][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.035165][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 676.037273][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.047771][T13023] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 676.048921][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.068066][ T5898] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 676.078101][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.086274][ T5898] usb 3-1: Product: syz [ 676.095623][ T5898] usb 3-1: Manufacturer: syz [ 676.095896][T13023] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 676.128386][ T5898] usb 3-1: SerialNumber: syz [ 676.140573][ T5898] usb 3-1: config 0 descriptor?? [ 676.140692][T13023] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 676.153578][T13023] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 676.167479][T13023] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -5 [ 676.170503][ T5898] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 676.193261][ T5898] usb 3-1: selecting invalid altsetting 1 [ 676.375414][ T5898] gspca_stk014: reg_r err -71 [ 676.380563][ T5898] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 676.397931][ T5898] usb 3-1: USB disconnect, device number 101 [ 677.057456][T13531] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1807'. [ 678.107640][ T983] usb 5-1: USB disconnect, device number 82 [ 678.154663][T13023] usb 7-1: USB disconnect, device number 22 [ 678.480363][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1814'. [ 678.680725][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 678.752792][T13563] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1819'. [ 679.192171][ T983] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 679.782104][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.902736][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.933278][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.984955][ T983] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.013255][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.063673][ T983] usb 7-1: config 0 descriptor?? [ 680.090135][T13023] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 680.252405][T13023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.264193][T13023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.277401][T13023] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 680.297110][T13023] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 680.321253][T13023] usb 8-1: Manufacturer: syz [ 680.338015][T13023] usb 8-1: config 0 descriptor?? [ 680.504006][ T983] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 680.550701][ T5949] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 680.703122][ T983] usb 7-1: USB disconnect, device number 23 [ 680.723384][ T5949] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 680.733398][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 680.760821][ T5949] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 680.772863][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.786875][ T5949] usb 3-1: Product: syz [ 680.793191][T13023] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 680.816242][T13023] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 680.825744][ T5949] usb 3-1: Manufacturer: syz [ 680.832408][T13023] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 680.839854][ T5949] usb 3-1: SerialNumber: syz [ 680.932123][ T5949] usb 3-1: config 0 descriptor?? [ 680.938404][T13023] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 680.979269][T13023] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 680.987920][T13023] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 681.162740][T13023] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -5 [ 681.235813][ T5949] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 681.773938][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1830'. [ 682.826503][T13614] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1832'. [ 682.921033][ T5949] usb 8-1: USB disconnect, device number 15 [ 683.780348][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'. [ 684.050115][ T5949] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 684.230790][T13023] usb 3-1: USB disconnect, device number 102 [ 684.264179][ T5949] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 684.286867][ T5949] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 684.318824][ T5949] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 684.330687][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.339819][ T5949] usb 8-1: Product: syz [ 684.380451][ T5949] usb 8-1: Manufacturer: syz [ 684.385315][ T5949] usb 8-1: SerialNumber: syz [ 684.398491][ T5949] usb 8-1: config 0 descriptor?? [ 684.409921][ T5949] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 684.660118][ T5907] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 684.712382][T13023] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 684.830289][ T5907] usb 7-1: Using ep0 maxpacket: 8 [ 684.891788][ T5907] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 684.901431][ T5907] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.915914][T13023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.927976][T13023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.938334][T13023] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.951971][ T5907] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.963653][T13023] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.973331][ T5907] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.984659][T13023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.994240][ T5907] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.013156][T13023] usb 3-1: config 0 descriptor?? [ 685.103915][T13648] netdevsim netdevsim8: Direct firmware load for . [ 685.103915][T13648] failed with error -2 [ 685.115128][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 685.123091][T13648] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 685.123091][T13648] [ 685.141880][ T5907] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 685.221885][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.291827][ T10] usb 5-1: no configurations [ 685.296780][ T10] usb 5-1: can't read configurations, error -22 [ 685.432762][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 685.466602][ T5907] usb 7-1: GET_CAPABILITIES returned 0 [ 685.481564][ T5907] usbtmc 7-1:16.0: can't read capabilities [ 685.493378][T13023] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 685.652846][ T10] usb 5-1: no configurations [ 685.674280][ T10] usb 5-1: can't read configurations, error -22 [ 685.684558][ T10] usb usb5-port1: attempt power cycle [ 685.699804][ T983] usb 3-1: USB disconnect, device number 103 [ 685.746267][ T5907] usb 7-1: USB disconnect, device number 24 [ 685.786501][T13650] fido_id[13650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 685.880229][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.886599][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.030124][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 686.061427][ T10] usb 5-1: no configurations [ 686.066160][ T10] usb 5-1: can't read configurations, error -22 [ 686.200196][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 686.223710][ T10] usb 5-1: no configurations [ 686.228562][ T10] usb 5-1: can't read configurations, error -22 [ 686.229259][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1842'. [ 686.260825][ T10] usb usb5-port1: unable to enumerate USB device [ 686.346735][T13655] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1843'. [ 686.770377][ T983] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 687.203873][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.250041][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.284422][ T983] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 687.308629][ T983] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.336229][ T10] usb 8-1: USB disconnect, device number 16 [ 687.366517][ T983] usb 3-1: Manufacturer: syz [ 687.411450][ T983] usb 3-1: config 0 descriptor?? [ 687.440054][ T5907] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 687.697764][ T5907] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 687.707617][ T5907] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 687.752496][T13676] binder: 13675:13676 unknown command 0 [ 687.753183][ T5907] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 687.758794][T13676] binder: 13675:13676 ioctl c0306201 80000080 returned -22 [ 687.768351][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.787093][ T5907] usb 7-1: Product: syz [ 687.838110][ T5907] usb 7-1: Manufacturer: syz [ 687.853596][ T5907] usb 7-1: SerialNumber: syz [ 687.862562][ T983] hid_parser_main: 4 callbacks suppressed [ 687.862588][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 687.896732][ T5907] usb 7-1: config 0 descriptor?? [ 687.925644][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 687.950686][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 687.965871][T13681] netdevsim netdevsim4: Direct firmware load for . [ 687.965871][T13681] failed with error -2 [ 687.982873][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1851'. [ 688.002173][T13681] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 688.002173][T13681] [ 688.034248][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 688.041520][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 688.063007][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 688.086943][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 688.103361][ T983] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 688.136690][ T983] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 688.150354][T13023] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 688.314612][T13023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 688.328205][T13023] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 688.367860][T13023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.399728][T13023] usb 8-1: config 0 descriptor?? [ 688.606015][ T983] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 688.732083][T13023] ath6kl: Failed to submit usb control message: -71 [ 688.753944][T13023] ath6kl: unable to send the bmi data to the device: -71 [ 688.774805][T13023] ath6kl: Unable to send get target info: -71 [ 688.792739][ T983] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 688.811418][T13023] ath6kl: Failed to init ath6kl core: -71 [ 688.822399][T13023] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 688.862570][ T983] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -32 [ 688.900401][T13023] usb 8-1: USB disconnect, device number 17 [ 689.427174][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 689.551743][T13700] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1857'. [ 689.607706][ T10] usb 3-1: USB disconnect, device number 104 [ 689.885290][ T983] usb 7-1: USB disconnect, device number 25 [ 689.934288][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1861'. [ 690.246492][T13715] netdevsim netdevsim6: Direct firmware load for . [ 690.246492][T13715] failed with error -2 [ 690.259202][T13715] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 690.259202][T13715] [ 690.450128][ T983] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 690.660878][ T983] usb 5-1: no configurations [ 690.667588][ T983] usb 5-1: can't read configurations, error -22 [ 691.218288][ T983] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 691.382629][ T983] usb 5-1: no configurations [ 691.389426][ T983] usb 5-1: can't read configurations, error -22 [ 691.409516][ T983] usb usb5-port1: attempt power cycle [ 691.439089][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 691.660684][ T5898] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 691.800525][ T983] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 691.869894][ T5898] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 691.892914][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.924319][ T983] usb 5-1: no configurations [ 691.931728][ T983] usb 5-1: can't read configurations, error -22 [ 691.940984][ T5898] usb 3-1: Product: syz [ 692.088583][ T5898] usb 3-1: Manufacturer: syz [ 692.096249][ T5898] usb 3-1: SerialNumber: syz [ 692.109856][ T5898] usb 3-1: config 0 descriptor?? [ 692.210314][ T983] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 692.251647][ T983] usb 5-1: no configurations [ 692.257112][ T983] usb 5-1: can't read configurations, error -22 [ 692.265603][ T983] usb usb5-port1: unable to enumerate USB device [ 692.446197][ T5898] usb-storage 3-1:0.0: USB Mass Storage device detected [ 692.490814][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1869'. [ 692.691659][ T5898] usb 3-1: USB disconnect, device number 105 [ 693.040956][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 693.424465][T13746] netdevsim netdevsim4: Direct firmware load for . [ 693.424465][T13746] failed with error -2 [ 693.436169][T13746] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 693.436169][T13746] [ 693.445943][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 693.620233][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 693.660877][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.692681][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 693.751482][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 693.796579][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.947641][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 693.977309][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.997609][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.134072][T13760] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1877'. [ 694.383486][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 694.396287][ T10] usbtmc 7-1:16.0: can't read capabilities [ 694.426207][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 694.484477][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 694.499258][T13760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 695.547499][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 695.740658][ T5898] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 695.756162][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1882'. [ 695.910044][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 695.931285][ T5898] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 695.972634][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.069795][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.092165][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.255221][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.352553][ T10] usb 7-1: USB disconnect, device number 26 [ 696.381364][T13742] delete_channel: no stack [ 696.389005][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 696.441671][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.701752][ T5898] usb 3-1: GET_CAPABILITIES returned 0 [ 696.740094][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 696.830250][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 696.934050][ T983] usb 3-1: USB disconnect, device number 106 [ 696.991183][ T10] usb 7-1: no configurations [ 697.016208][ T10] usb 7-1: can't read configurations, error -22 [ 697.160357][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 697.329522][ T10] usb 7-1: no configurations [ 697.336745][ T10] usb 7-1: can't read configurations, error -22 [ 697.361254][ T10] usb usb7-port1: attempt power cycle [ 697.370962][T13803] netdevsim netdevsim8: Direct firmware load for . [ 697.370962][T13803] failed with error -2 [ 697.390206][T13803] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 697.390206][T13803] [ 697.590938][ T983] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 697.750319][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 697.771389][ T10] usb 7-1: no configurations [ 697.776355][ T10] usb 7-1: can't read configurations, error -22 [ 697.783060][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.862677][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.899915][ T983] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 697.980063][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 698.007519][ T983] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.020006][ T983] usb 5-1: Manufacturer: syz [ 698.034472][ T983] usb 5-1: config 0 descriptor?? [ 698.077432][ T10] usb 7-1: no configurations [ 698.088156][ T10] usb 7-1: can't read configurations, error -22 [ 698.095573][ T10] usb usb7-port1: unable to enumerate USB device [ 698.193855][T11495] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 698.201596][T11495] Bluetooth: hci1: Unable to find connection for dst 00:00:00:ff:ff:ff sid 0x00 [ 698.457261][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.464697][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.480890][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.500025][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.508022][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.536003][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.556661][ T983] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 698.565186][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1895'. [ 698.580847][ T983] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 698.869004][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1896'. [ 699.057766][ T983] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 699.067680][ T983] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 699.122039][ T983] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -32 [ 699.160150][ T5949] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 699.320189][ T5949] usb 8-1: Using ep0 maxpacket: 16 [ 699.338731][ T5949] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.359148][ T5949] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.398212][ T5949] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.418239][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.435052][ T5949] usb 8-1: Product: syz [ 699.445471][ T5949] usb 8-1: Manufacturer: syz [ 699.455087][ T5949] usb 8-1: SerialNumber: syz [ 699.694783][ T5949] usb 8-1: 0:2 : does not exist [ 699.728088][ T5949] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 699.793528][ T5949] usb 8-1: USB disconnect, device number 18 [ 699.887146][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.124954][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 700.225131][T13846] netdevsim netdevsim6: Direct firmware load for . [ 700.225131][T13846] failed with error -2 [ 700.264038][T13846] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 700.264038][T13846] [ 700.369715][ T983] usb 5-1: USB disconnect, device number 91 [ 701.091096][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1911'. [ 701.223401][T13859] netlink: 'syz.7.1911': attribute type 13 has an invalid length. [ 701.238884][T13859] netlink: 'syz.7.1911': attribute type 17 has an invalid length. [ 701.535341][T13859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.580529][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 701.930218][ T983] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 702.084163][ T983] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.108539][ T983] usb 8-1: config 0 has no interfaces? [ 702.133535][ T983] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 702.133598][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 702.182507][ T983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.215155][ T983] usb 8-1: config 0 descriptor?? [ 702.588513][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 702.772022][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.790565][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.825319][T13892] netdevsim netdevsim6: Direct firmware load for . [ 702.825319][T13892] failed with error -2 [ 702.837593][T13892] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 702.837593][T13892] [ 702.850747][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 702.862499][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.872602][ T10] usb 5-1: Manufacturer: syz [ 702.898277][ T10] usb 5-1: config 0 descriptor?? [ 703.316149][T11495] Bluetooth: hci2: command 0x0406 tx timeout [ 703.462626][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.478698][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.483069][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1924'. [ 703.503869][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.514615][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.521991][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.529400][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.537995][ T10] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 703.565764][T13896] netlink: 'syz.8.1924': attribute type 13 has an invalid length. [ 703.574572][T13896] netlink: 'syz.8.1924': attribute type 17 has an invalid length. [ 703.606350][ T10] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 703.643605][T13896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.976955][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1925'. [ 704.049865][ T10] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 704.062660][ T10] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 704.077777][ T10] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -32 [ 704.720602][ T5949] usb 8-1: USB disconnect, device number 19 [ 704.881392][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 705.089488][ T10] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 705.100610][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 705.310186][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 705.328526][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 705.341344][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.402254][ T10] usb 3-1: Product: syz [ 705.414725][ T10] usb 3-1: Manufacturer: syz [ 705.437716][ T10] usb 3-1: SerialNumber: syz [ 705.444836][ T5907] usb 5-1: USB disconnect, device number 92 [ 705.503734][ T10] usb 3-1: config 0 descriptor?? [ 705.620505][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 705.873809][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 705.930137][T13023] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 706.041505][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1936'. [ 706.145540][T13934] netlink: 'syz.7.1936': attribute type 13 has an invalid length. [ 706.164491][T13934] netlink: 'syz.7.1936': attribute type 17 has an invalid length. [ 706.173453][ T10] gspca_sunplus: reg_r err -110 [ 706.179071][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 706.190339][T13023] usb 7-1: Using ep0 maxpacket: 8 [ 706.198480][T13023] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 706.207252][T13023] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.240835][T13023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.308171][T13934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.328570][T13023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.460107][T13023] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.484286][T13023] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 706.494566][T13023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.711204][T13023] usb 7-1: GET_CAPABILITIES returned 0 [ 706.716917][T13023] usbtmc 7-1:16.0: can't read capabilities [ 706.864172][T13944] netdevsim netdevsim7: Direct firmware load for . [ 706.864172][T13944] failed with error -2 [ 706.876084][T13944] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 706.876084][T13944] [ 706.923394][ T10] usb 7-1: USB disconnect, device number 31 [ 707.250057][T13023] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 707.305753][T12129] usb 3-1: USB disconnect, device number 107 [ 707.402051][T13023] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.413093][T13023] usb 5-1: config 0 has no interfaces? [ 707.460540][T13023] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 707.562108][T13023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.612960][T13023] usb 5-1: config 0 descriptor?? [ 707.647810][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'. [ 707.995848][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1945'. [ 708.090053][ T5898] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 708.261998][ T5898] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 708.293092][ T5898] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 708.470711][T11495] Bluetooth: hci0: command 0x0406 tx timeout [ 708.474372][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.518073][ T5898] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 708.774365][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1948'. [ 708.813714][T13972] netlink: 'syz.6.1948': attribute type 13 has an invalid length. [ 708.825255][T13972] netlink: 'syz.6.1948': attribute type 17 has an invalid length. [ 708.840813][T13972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.160404][ T5835] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 709.169099][ T5835] Bluetooth: hci3: Injecting HCI hardware error event [ 709.178507][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1950'. [ 709.190452][ T5835] Bluetooth: hci3: hardware error 0x00 [ 709.484228][T13023] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 709.556324][ T5898] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 709.563463][ T5898] stv0680 3-1:4.0: last error: 159, command = 0x9a [ 709.704526][T13023] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 709.742551][T13023] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 709.777779][ T5898] usb 3-1: USB disconnect, device number 108 [ 709.810962][T13023] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 709.830509][T13023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.849900][T13023] usb 7-1: Product: syz [ 709.903162][T13023] usb 7-1: Manufacturer: syz [ 709.913574][T13023] usb 7-1: SerialNumber: syz [ 709.972239][T13023] usb 7-1: config 0 descriptor?? [ 709.982522][T13023] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 710.049513][ T5898] usb 5-1: USB disconnect, device number 93 [ 710.460132][T12129] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 710.626254][T12129] usb 8-1: Using ep0 maxpacket: 8 [ 710.643410][T12129] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 710.660147][T12129] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 710.680456][T12129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 710.695544][T12129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.706916][T12129] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.775326][T12129] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 710.906920][T12129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.961953][T13999] netdevsim netdevsim4: Direct firmware load for . [ 710.961953][T13999] failed with error -2 [ 710.972635][T13999] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 710.972635][T13999] [ 711.175844][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1957'. [ 711.310601][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 711.344253][T12129] usb 8-1: GET_CAPABILITIES returned 0 [ 711.349890][T12129] usbtmc 8-1:16.0: can't read capabilities [ 711.644593][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1959'. [ 711.912364][T14006] netlink: 'syz.8.1959': attribute type 13 has an invalid length. [ 711.921779][T14006] netlink: 'syz.8.1959': attribute type 17 has an invalid length. [ 711.936485][T12129] usb 8-1: USB disconnect, device number 20 [ 711.982426][ T5898] usb 7-1: USB disconnect, device number 32 [ 712.054970][T14006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.332313][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 712.590035][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1962'. [ 713.220103][T12129] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 713.571090][T12129] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.644887][T12129] usb 8-1: config 0 has no interfaces? [ 713.678283][T12129] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 713.755771][T12129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.825681][T12129] usb 8-1: config 0 descriptor?? [ 713.869572][T13023] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 714.123255][T14041] binder: 14040:14041 unknown command 0 [ 714.129933][T14041] binder: 14040:14041 ioctl c0306201 80000080 returned -22 [ 714.284286][T13023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.301292][T13023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.382675][T13023] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 714.418993][T13023] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.441918][T14045] netdevsim netdevsim4: Direct firmware load for . [ 714.441918][T14045] failed with error -2 [ 714.453526][T14045] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 714.453526][T14045] [ 714.470676][T13023] usb 3-1: Manufacturer: syz [ 714.481730][T13023] usb 3-1: config 0 descriptor?? [ 715.034407][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.059532][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1972'. [ 715.060168][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.180734][T14047] netlink: 'syz.6.1972': attribute type 13 has an invalid length. [ 715.188947][T14047] netlink: 'syz.6.1972': attribute type 17 has an invalid length. [ 715.202382][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.282879][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.292457][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.327821][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.378508][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.425406][T13023] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 715.499524][T13023] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 715.804437][T13023] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 715.819453][T13023] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 715.949773][T13023] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -32 [ 716.092528][T12129] usb 8-1: USB disconnect, device number 21 [ 716.434711][ T983] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 717.078552][ T983] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 717.197637][ T983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 717.207752][ T5920] usb 3-1: USB disconnect, device number 109 [ 717.604055][ T983] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 717.769391][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.711264][ T983] usb 7-1: Product: syz [ 718.751536][ T983] usb 7-1: Manufacturer: syz [ 718.897686][ T983] usb 7-1: SerialNumber: syz [ 719.330266][ T983] usb 7-1: config 0 descriptor?? [ 719.829351][ T983] usb 7-1: can't set config #0, error -71 [ 722.041008][ T983] usb 7-1: USB disconnect, device number 33 [ 730.699994][ C0] sched: DL replenish lagged too much [ 829.779981][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 829.786983][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14068/1:b..l [ 829.795546][ C0] rcu: (detected by 0, t=10503 jiffies, g=80413, q=782 ncpus=2) [ 829.803365][ C0] task:syz.8.1979 state:R running task stack:25576 pid:14068 tgid:14068 ppid:12344 task_flags:0x40044c flags:0x10080003 [ 829.817927][ C0] Call Trace: [ 829.821227][ C0] [ 829.824174][ C0] __schedule+0x1798/0x4cc0 [ 829.828697][ C0] ? free_pages_and_swap_cache+0x4be/0x520 [ 829.834527][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 829.840442][ C0] ? __pfx___schedule+0x10/0x10 [ 829.845311][ C0] ? irqentry_exit+0x74/0x90 [ 829.849919][ C0] ? __lock_acquire+0xab9/0xd20 [ 829.854775][ C0] ? preempt_schedule+0xae/0xc0 [ 829.859643][ C0] preempt_schedule_common+0x83/0xd0 [ 829.864941][ C0] preempt_schedule+0xae/0xc0 [ 829.869631][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 829.875024][ C0] preempt_schedule_thunk+0x16/0x30 [ 829.880241][ C0] _raw_spin_unlock+0x3f/0x50 [ 829.885362][ C0] unmap_page_range+0x3a7f/0x4370 [ 829.890879][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 829.896266][ C0] ? mas_find+0xb0e/0xd30 [ 829.900605][ C0] ? unmap_vmas+0x144/0x580 [ 829.905119][ C0] unmap_vmas+0x399/0x580 [ 829.909465][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 829.914433][ C0] exit_mmap+0x240/0xb40 [ 829.918681][ C0] ? uprobe_clear_state+0x20f/0x290 [ 829.923892][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 829.928658][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 829.934312][ C0] ? __pfx_exit_aio+0x10/0x10 [ 829.939013][ C0] ? uprobe_clear_state+0x27c/0x290 [ 829.944228][ C0] __mmput+0x118/0x430 [ 829.948312][ C0] exit_mm+0x1da/0x2c0 [ 829.952388][ C0] ? __pfx_exit_mm+0x10/0x10 [ 829.956984][ C0] ? rcu_is_watching+0x15/0xb0 [ 829.961764][ C0] do_exit+0x648/0x2300 [ 829.965936][ C0] ? do_raw_spin_lock+0x121/0x290 [ 829.970972][ C0] ? __pfx_do_exit+0x10/0x10 [ 829.975742][ C0] ? cgroup_freezing+0x20/0x350 [ 829.980620][ C0] do_group_exit+0x21c/0x2d0 [ 829.985237][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 829.990536][ C0] get_signal+0x1285/0x1340 [ 829.995070][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 830.000625][ C0] ? _copy_to_user+0x8a/0xb0 [ 830.005251][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 830.011504][ C0] ? __ia32_compat_sys_rt_sigprocmask+0x292/0x310 [ 830.017953][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 830.023429][ C0] exit_to_user_mode_loop+0x72/0x130 [ 830.028727][ C0] ? asm_int80_emulation+0x1a/0x20 [ 830.033846][ C0] do_int80_emulation+0x2a0/0x390 [ 830.038886][ C0] ? clear_bhb_loop+0x60/0xb0 [ 830.043571][ C0] ? clear_bhb_loop+0x60/0xb0 [ 830.048348][ C0] asm_int80_emulation+0x1a/0x20 [ 830.053386][ C0] RIP: 0023:0xf72585d0 [ 830.057731][ C0] RSP: 002b:00000000f75af894 EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 830.066156][ C0] RAX: 00000000000000f4 RBX: 00000000f75af900 RCX: 0000000000000058 [ 830.074132][ C0] RDX: 00000000f71e5dc0 RSI: 00000000f54adb40 RDI: 00000000ffffffd4 [ 830.082107][ C0] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 830.090086][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 830.098061][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.106061][ C0] [ 830.109095][ C0] rcu: rcu_preempt kthread starved for 4125 jiffies! g80413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 830.120335][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 830.130319][ C0] rcu: RCU grace-period kthread stack dump: [ 830.136206][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 830.149727][ C0] Call Trace: [ 830.153019][ C0] [ 830.155958][ C0] __schedule+0x1798/0x4cc0 [ 830.160504][ C0] ? __pfx___schedule+0x10/0x10 [ 830.165364][ C0] ? __lock_acquire+0xab9/0xd20 [ 830.170247][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 830.175545][ C0] preempt_schedule_irq+0xb5/0x150 [ 830.180688][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 830.186420][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 830.192236][ C0] irqentry_exit+0x6f/0x90 [ 830.196660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.202643][ C0] RIP: 0010:lock_release+0x2c5/0x3e0 [ 830.207937][ C0] Code: 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 ab fa f3 10 48 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 0d ff b2 09 cc 90 0f 0b 90 e9 5d fd [ 830.227550][ C0] RSP: 0018:ffffc900001572a8 EFLAGS: 00000286 [ 830.233632][ C0] RAX: 61571871ec518200 RBX: ffffffff90310101 RCX: 61571871ec518200 [ 830.241608][ C0] RDX: 0000000000000001 RSI: ffffffff8d9d457d RDI: ffffffff8bc07360 [ 830.249585][ C0] RBP: ffff88801c2d6618 R08: ffffc90000157950 R09: 0000000000000000 [ 830.257572][ C0] R10: ffffc900001573f8 R11: fffff5200002ae81 R12: 0000000000000001 [ 830.265566][ C0] R13: 0000000000000001 R14: ffffffff8e13d2e0 R15: ffff88801c2d5ac0 [ 830.273577][ C0] ? unwind_next_frame+0xa5/0x2390 [ 830.278706][ C0] unwind_next_frame+0x19a9/0x2390 [ 830.283843][ C0] ? unwind_next_frame+0xa5/0x2390 [ 830.288978][ C0] ? __try_to_del_timer_sync+0x29/0x3a0 [ 830.294633][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.300813][ C0] arch_stack_walk+0x11c/0x150 [ 830.305595][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 830.310891][ C0] stack_trace_save+0x9c/0xe0 [ 830.315581][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 830.321053][ C0] ? stack_depot_save_flags+0x40/0x860 [ 830.326526][ C0] kasan_save_track+0x3e/0x80 [ 830.331218][ C0] ? kasan_save_track+0x3e/0x80 [ 830.336071][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 830.341113][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 830.346945][ C0] ? fill_pool+0x100/0x570 [ 830.351378][ C0] ? debug_object_assert_init+0x2b1/0x380 [ 830.357103][ C0] ? __try_to_del_timer_sync+0x29/0x3a0 [ 830.362707][ C0] __kasan_slab_alloc+0x6c/0x80 [ 830.367573][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 830.373039][ C0] ? __lock_acquire+0xab9/0xd20 [ 830.377998][ C0] ? fill_pool+0x100/0x570 [ 830.382438][ C0] fill_pool+0x100/0x570 [ 830.386765][ C0] ? __pfx_fill_pool+0x10/0x10 [ 830.391549][ C0] ? debug_object_assert_init+0x288/0x380 [ 830.397293][ C0] debug_object_assert_init+0x2b1/0x380 [ 830.402866][ C0] __try_to_del_timer_sync+0x29/0x3a0 [ 830.408245][ C0] ? __timer_delete_sync+0x133/0x2d0 [ 830.413554][ C0] __timer_delete_sync+0x1fe/0x2d0 [ 830.418697][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 830.424346][ C0] ? schedule+0x91/0x360 [ 830.428613][ C0] ? schedule+0x16f/0x360 [ 830.432961][ C0] schedule_timeout+0x133/0x270 [ 830.437832][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 830.443323][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 830.449239][ C0] ? __pfx_process_timeout+0x10/0x10 [ 830.454540][ C0] ? prepare_to_swait_event+0x341/0x380 [ 830.460623][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 830.465873][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 830.472306][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 830.477602][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 830.482906][ C0] ? finish_swait+0xcd/0x1f0 [ 830.487594][ C0] rcu_gp_kthread+0x99/0x390 [ 830.492199][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 830.497411][ C0] ? __kthread_parkme+0x7b/0x200 [ 830.502365][ C0] ? __kthread_parkme+0x1a1/0x200 [ 830.507409][ C0] kthread+0x711/0x8a0 [ 830.511975][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 830.517360][ C0] ? __pfx_kthread+0x10/0x10 [ 830.522048][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.527259][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.532742][ C0] ? __pfx_kthread+0x10/0x10 [ 830.538131][ C0] ret_from_fork+0x4bc/0x870 [ 830.542749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 830.547915][ C0] ? __switch_to_asm+0x39/0x70 [ 830.552713][ C0] ? __switch_to_asm+0x33/0x70 [ 830.557604][ C0] ? __pfx_kthread+0x10/0x10 [ 830.562491][ C0] ret_from_fork_asm+0x1a/0x30 [ 830.567386][ C0] [ 830.570417][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 830.576846][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 830.585799][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 830.595864][ C0] RIP: 0010:rcu_is_watching+0x6c/0xb0 [ 830.601260][ C0] Code: 7f 00 48 c7 c3 d8 cf 92 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 19 12 eb 10 74 11 83 e0 04 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 31 ea 8c ff eb e8 48 [ 830.620875][ C0] RSP: 0018:ffffc90000006b78 EFLAGS: 00000202 [ 830.626964][ C0] RAX: 0000000000000004 RBX: ffff8880b8632fd8 RCX: d0a07026576a1c00 [ 830.635037][ C0] RDX: 0000000000000000 RSI: ffffffff8bc07340 RDI: ffffffff8bc07300 [ 830.643115][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8173cd25 [ 830.651106][ C0] R10: ffffc90000006cb8 R11: ffffffff81ac6cb0 R12: 1ffff92000000d8d [ 830.659891][ C0] R13: ffffc90000006ca0 R14: ffffffff8da0ddd0 R15: dffffc0000000000 [ 830.667899][ C0] FS: 0000000000000000(0000) GS:ffff888125d06000(0000) knlGS:0000000000000000 [ 830.676841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.683437][ C0] CR2: 00000000f50794d6 CR3: 000000007dd62000 CR4: 00000000003526f0 [ 830.691421][ C0] Call Trace: [ 830.694707][ C0] [ 830.697640][ C0] ? common_startup_64+0x13e/0x147 [ 830.703291][ C0] ? unwind_next_frame+0xa5/0x2390 [ 830.708430][ C0] unwind_next_frame+0xd4/0x2390 [ 830.713395][ C0] ? unwind_next_frame+0xa5/0x2390 [ 830.718619][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 830.724543][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.730817][ C0] arch_stack_walk+0x11c/0x150 [ 830.735617][ C0] ? common_startup_64+0x13e/0x147 [ 830.740747][ C0] stack_trace_save+0x9c/0xe0 [ 830.745428][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 830.750815][ C0] ? unwind_next_frame+0xa5/0x2390 [ 830.755939][ C0] ? common_startup_64+0x13e/0x147 [ 830.761063][ C0] kasan_save_track+0x3e/0x80 [ 830.765750][ C0] ? kasan_save_track+0x3e/0x80 [ 830.770608][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 830.775638][ C0] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 830.781710][ C0] ? __alloc_skb+0x112/0x2d0 [ 830.786312][ C0] ? synproxy_send_client_synack_ipv6+0x169/0xca0 [ 830.792741][ C0] ? nft_synproxy_eval_v6+0x36e/0x560 [ 830.798122][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 830.803500][ C0] ? nft_do_chain+0x40c/0x1920 [ 830.808279][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 830.813393][ C0] ? nf_hook_slow+0xc5/0x220 [ 830.818094][ C0] ? NF_HOOK+0x206/0x3a0 [ 830.822358][ C0] ? ip6_input+0x16a/0x270 [ 830.826790][ C0] ? NF_HOOK+0x30c/0x3a0 [ 830.831037][ C0] ? __netif_receive_skb+0xd3/0x380 [ 830.836247][ C0] ? process_backlog+0x60e/0x14f0 [ 830.841273][ C0] ? __napi_poll+0xc7/0x360 [ 830.845784][ C0] ? net_rx_action+0x5f7/0xdf0 [ 830.850547][ C0] ? handle_softirqs+0x286/0x870 [ 830.855493][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 830.860274][ C0] ? irq_exit_rcu+0x9/0x30 [ 830.864715][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 830.870631][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.876802][ C0] ? pv_native_safe_halt+0x13/0x20 [ 830.881926][ C0] ? default_idle+0x13/0x20 [ 830.886438][ C0] ? default_idle_call+0x73/0xb0 [ 830.891376][ C0] ? do_idle+0x1e7/0x510 [ 830.895625][ C0] ? cpu_startup_entry+0x44/0x60 [ 830.900566][ C0] ? rest_init+0x2de/0x300 [ 830.905009][ C0] ? start_kernel+0x3ae/0x410 [ 830.909688][ C0] ? x86_64_start_reservations+0x24/0x30 [ 830.915334][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 830.920909][ C0] ? common_startup_64+0x13e/0x147 [ 830.926824][ C0] ? irq_exit_rcu+0x9/0x30 [ 830.931347][ C0] __kasan_slab_alloc+0x6c/0x80 [ 830.936208][ C0] kmem_cache_alloc_node_noprof+0x433/0x710 [ 830.942116][ C0] ? __alloc_skb+0x112/0x2d0 [ 830.946723][ C0] __alloc_skb+0x112/0x2d0 [ 830.951164][ C0] synproxy_send_client_synack_ipv6+0x169/0xca0 [ 830.957421][ C0] ? synproxy_pernet+0x45/0x270 [ 830.962309][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 830.969085][ C0] ? nft_osf_reduce+0x490/0x560 [ 830.973951][ C0] ? synproxy_pernet+0x45/0x270 [ 830.978911][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 830.984137][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 830.989871][ C0] ? nf_ip_checksum+0x13c/0x510 [ 830.994747][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 830.999961][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 831.005688][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 831.011085][ C0] nft_do_chain+0x40c/0x1920 [ 831.015693][ C0] ? ip6t_do_table+0x1376/0x1560 [ 831.020734][ C0] ? nf_nat_inet_fn+0x924/0xba0 [ 831.025685][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 831.030717][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 831.035596][ C0] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 831.040466][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 831.045685][ C0] nft_do_chain_inet+0x25d/0x340 [ 831.050638][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 831.056106][ C0] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 831.061496][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 831.067234][ C0] ? NF_HOOK+0x9a/0x3a0 [ 831.071397][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 831.076868][ C0] nf_hook_slow+0xc5/0x220 [ 831.081335][ C0] NF_HOOK+0x206/0x3a0 [ 831.085415][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 831.090793][ C0] ? NF_HOOK+0x9a/0x3a0 [ 831.094954][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 831.099548][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 831.104945][ C0] ip6_input+0x16a/0x270 [ 831.109716][ C0] ? ip6_input+0x23/0x270 [ 831.114052][ C0] NF_HOOK+0x30c/0x3a0 [ 831.118156][ C0] ? skb_orphan+0xaf/0xd0 [ 831.122492][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 831.127703][ C0] ? NF_HOOK+0x9a/0x3a0 [ 831.131860][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 831.136922][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 831.142136][ C0] __netif_receive_skb+0xd3/0x380 [ 831.147176][ C0] ? process_backlog+0x2d5/0x14f0 [ 831.152204][ C0] process_backlog+0x60e/0x14f0 [ 831.157060][ C0] ? rcu_is_watching+0x15/0xb0 [ 831.161852][ C0] ? __pfx_process_backlog+0x10/0x10 [ 831.167154][ C0] __napi_poll+0xc7/0x360 [ 831.171493][ C0] ? skb_defer_free_flush+0x229/0x250 [ 831.176880][ C0] net_rx_action+0x5f7/0xdf0 [ 831.181496][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 831.186628][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 831.192113][ C0] handle_softirqs+0x286/0x870 [ 831.196913][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 831.201703][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 831.207097][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 831.212316][ C0] __irq_exit_rcu+0xca/0x1f0 [ 831.217058][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 831.222452][ C0] irq_exit_rcu+0x9/0x30 [ 831.226703][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 831.232352][ C0] [ 831.235284][ C0] [ 831.238247][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 831.244232][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 831.249959][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 71 1a 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 831.269570][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 831.275655][ C0] RAX: d0a07026576a1c00 RBX: ffffffff8196bb87 RCX: d0a07026576a1c00 [ 831.283642][ C0] RDX: 0000000000000001 RSI: ffffffff8d7eb243 RDI: ffffffff8bc07360 [ 831.291623][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 831.299597][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e1570 [ 831.307579][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 831.315560][ C0] ? do_idle+0x1e7/0x510 [ 831.319825][ C0] default_idle+0x13/0x20 [ 831.324244][ C0] default_idle_call+0x73/0xb0 [ 831.329013][ C0] do_idle+0x1e7/0x510 [ 831.333094][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.338303][ C0] ? __pfx_do_idle+0x10/0x10 [ 831.342915][ C0] ? do_idle+0x4e6/0x510 [ 831.347174][ C0] cpu_startup_entry+0x44/0x60 [ 831.351947][ C0] rest_init+0x2de/0x300 [ 831.356242][ C0] start_kernel+0x3ae/0x410 [ 831.360765][ C0] x86_64_start_reservations+0x24/0x30 [ 831.366248][ C0] x86_64_start_kernel+0x143/0x1c0 [ 831.371379][ C0] common_startup_64+0x13e/0x147 [ 831.376342][ C0] [ 831.722156][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 831.735669][ T1300] ieee802154 phy1 wpan1: encryption failed: -22