last executing test programs: 7.220698991s ago: executing program 2 (id=1542): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(0xffffffffffffffff) 6.765506492s ago: executing program 3 (id=1544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000340)={0xa, 0x4e24, 0x20000008, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 6.739640634s ago: executing program 0 (id=1545): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000300)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 6.49887082s ago: executing program 3 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) 6.35056835s ago: executing program 0 (id=1551): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, r3, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000f5c80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x64, "c2c4188dedff3f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000f6c80)={0xd6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}], 0xf9, "6863c7aab22ec6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000f7c80)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}], 0x3, "c399092dde7e50"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 6.335576741s ago: executing program 3 (id=1552): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6.272870265s ago: executing program 2 (id=1553): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x2000, &(0x7f0000000240)="b6"}], 0x1}) 5.302973931s ago: executing program 3 (id=1556): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000400)={{[0xfffffffd, 0x8, 0x9, 0x8]}, 0x0, 0x3, 0x400, 0x0, &(0x7f0000000300)=[{{@_ha_fsid={[0x3, 0x9cc]}, {0x1, 0x6, 0x8000, 0x8}}, 0x5, 0x0, '/dev/virtual_nci\x00'}, {{@align=0x6, {0x4, 0x2, 0x6, 0x80000000}}, 0x100, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x401, 0x9]}, {0x2e65, 0x1, 0x2b4, 0x3ff}}, 0x200, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x3, 0x4]}, {0x0, 0xfff, 0x6, 0x3c3}}, 0x10c, 0x0, '-\x00'}, {{@align=0xd0, {0x2, 0x5, 0x9d2, 0x4}}, 0xfffffffe, 0x0, '@\'[\'\x00'}, {{@align=0xd26, {0x7ff, 0xfffe, 0x800, 0x3800000000000}}, 0x8, 0x0, ':[\x00'}]}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) 5.300907341s ago: executing program 0 (id=1557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 4.739481659s ago: executing program 0 (id=1560): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c81, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 4.189996726s ago: executing program 0 (id=1564): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000400)={{[0xfffffffd, 0x8, 0x9, 0x8]}, 0x0, 0x3, 0x400, 0x0, &(0x7f0000000300)=[{{@_ha_fsid={[0x3, 0x9cc]}, {0x1, 0x6, 0x8000, 0x8}}, 0x5, 0x0, '/dev/virtual_nci\x00'}, {{@align=0x6, {0x4, 0x2, 0x6, 0x80000000}}, 0x100, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x401, 0x9]}, {0x2e65, 0x1, 0x2b4, 0x3ff}}, 0x200, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x3, 0x4]}, {0x0, 0xfff, 0x6, 0x3c3}}, 0x10c, 0x0, '-\x00'}, {{@align=0xd0, {0x2, 0x5, 0x9d2, 0x4}}, 0xfffffffe, 0x0, '@\'[\'\x00'}, {{@align=0xd26, {0x7ff, 0xfffe, 0x800, 0x3800000000000}}, 0x8, 0x0, ':[\x00'}]}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) close(0x3) 4.130253551s ago: executing program 4 (id=1565): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x11}}, @common=@inet=@set2={{0x28}, {{0x1, 0x6, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 3.952865093s ago: executing program 4 (id=1566): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.69168901s ago: executing program 1 (id=1568): r0 = socket$caif_stream(0x25, 0x1, 0x1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20008040) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x40008090) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000080), 0x20000000}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 3.54493335s ago: executing program 2 (id=1569): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mknod$loop(0x0, 0xfff, 0x1) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r4, &(0x7f0000003e40), 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x3ffe, 0x10001}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001600010a00000000000000002d"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.467166425s ago: executing program 1 (id=1570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.266178639s ago: executing program 1 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040", 0xa2}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.076314112s ago: executing program 1 (id=1572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200)={0x1}, 0x4) sendmsg$inet6(r0, 0x0, 0x4048043) 2.886051565s ago: executing program 4 (id=1573): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x23, 0x2, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x140, 0x2, {{0xa, [0xd, 0x10, 0x5, 0xe, 0x10, 0xe, 0x8, 0x4, 0x54, 0x7, 0xa, 0x7, 0x1, 0xe, 0x6, 0xc], 0x1, [0x8, 0x40, 0x5, 0x9, 0x6, 0x4, 0x6, 0x9f1, 0x81, 0x3, 0x2, 0x401, 0x9, 0x8, 0xccce, 0xa8dc], [0x7ff, 0x5, 0xf, 0xfff, 0xb14d, 0x100, 0x8001, 0x6, 0x452, 0x8, 0xb470, 0x1, 0x2, 0x6, 0x1, 0x3]}, [@TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x9}]}, @TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xd}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xb06d}, {0xc, 0x3, 0xc7}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9026}]}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x170}}, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r6, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r9, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001540)="f2", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0x1010}}, {{&(0x7f00000025c0)=@in6={0xa, 0x4e21, 0x1, @local, 0xd}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002640)="d968eef5aad83f785e9a06e6a896bc72c53d424df56bca5023ab16a7279d1ee3a061fcb2f63580aec6bf2d36b26993528b9a9263d8837af4c9f74035656e94d7e7418b9151519f97061b9a139b17dce2d8fc9891efcd7f134361321e", 0x5c}, {&(0x7f0000002700)="d9e08a8be5d7512d1cb56a1cde817c2c3c181994d2f59f857358061aec531675cc5b5b141397900669f18598a419249dbe34aac023ed9a31696b2326b1e0d358ed2aa75c8f99af18ce8520bb5a2eb7f9a51185ccb64447e8840bf739df801b2862360d8e31176acc84c2c5f3c571eac8c75d636f6e769bf93a9e0ffdb4308380c148df403e46f81816fec195b31cab991a1aa8b683d94b5b9993b87e62c270a0a485519daea8f3b5b2e4bcd091f0bc4690f471246a7595fefb92b473f2a53ca62084aac18db84725a78acb9c0cf15206f025f7fdcdea7dbdaae014e7214d", 0xde}, {&(0x7f0000002800)="811ca1ae51d552d715135db2cd0022008dac27c5436e91c4c83ebe3c4b80350eb34e15dacb0c05a0be522450625fed340dfb6601dac3fbadca4fcd6d2cfd33c6ff50790c875fe3ef7960243b6670991f475561ba908029612d913e7908a3d50a692d43e24ff4fb47c29afa7d6e67e2d64f1bff5f82157f1d92543734725e9cc090", 0x81}, {&(0x7f00000028c0)="acda8f356a41fdd0e3", 0x9}], 0x4}}], 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r11 = socket$inet6(0xa, 0x80000, 0x80) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 2.885697375s ago: executing program 1 (id=1574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{0x0}], 0x1, 0x40, 0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 1.985043246s ago: executing program 0 (id=1575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1.954076878s ago: executing program 2 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x1164, &(0x7f00000016c0)={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x1c, 0x114e, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x23, 0x89, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @private=0xa010101, @multicast2, @multicast2, @remote]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x82, 0x3, [0x4], "272db752648ab5c80fe92637b5485bb5f297cf251d0b3e849676c0edf5e4905b278e7d2b76c6c7e15d0a9c99fec726e5cb1bd28e0f683e219e0507219e1494942f45cf74b0b0f159ba0e3a2f3c9705f60e9d6d7724e4b6e350d188c3d1605c8992a6ad46f2a65c6b877badad95a61d7581d4a51bf2ef10058cb561577ed16b819b32"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x1], "82c59ccfaafe0d8179c08d800834fd1e261d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0], "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"}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x43, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x1, {0x7a}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0x40, 0x3, 0x0, 0x3, 0x1, 0x1}, 0x2, {0x6, 0xa, 0x0, 0x15, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "fa4ff89f96133bd7b3e16d8d780f0307fe48d8c609959dcadf6e74f0fcc4bbc393f034bc1d162a8674789193139633e9453a5f363fee41b1"}}}}}}, 0x0) 1.904531081s ago: executing program 3 (id=1577): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x8000}, 0x1c) 1.720810734s ago: executing program 4 (id=1578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 1.661139458s ago: executing program 3 (id=1579): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x2000, &(0x7f0000000240)="b6"}], 0x1}) 1.142784923s ago: executing program 2 (id=1580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x4, {0x0, 0x0, 0x4, r3, 0x4300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdafd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4818}, 0x4000080) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xf}, {0x2, 0xfff1}, {0x3, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4000004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x44}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x7, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1, 0x1, 0x8, 0x3}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x20c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4814) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) 755.787239ms ago: executing program 4 (id=1581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 438.791801ms ago: executing program 1 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 372.440085ms ago: executing program 4 (id=1583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x80000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000c80)) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="f59248a868af70a904000e560ca77a01abf6fc10e91cb2a47f5afa3cf1ef43277d297a6426add0b1472142f98b03e36ae4d555c6f44e05032ed20186b9cb2c6fd3", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x671, 0x0, 0x20}, {0xc00000, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xe8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, @bcast, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @default, 0x2, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 0s ago: executing program 2 (id=1584): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000004a0001002bbd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) kernel console output (not intermixed with test programs): 6646] vhci_hcd vhci_hcd.0: Device attached [ 298.022162][ T6651] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 298.029091][ T6651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.118908][ T6651] vhci_hcd vhci_hcd.0: Device attached [ 298.185480][ T6652] vhci_hcd: connection closed [ 298.190303][ T6647] vhci_hcd: connection closed [ 298.218431][ T5423] vhci_hcd: stop threads [ 298.228304][ T129] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 298.261519][ T5423] vhci_hcd: release socket [ 298.270536][ T6648] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 298.318871][ T5423] vhci_hcd: disconnect device [ 298.329118][ T5423] vhci_hcd: stop threads [ 298.337310][ T5423] vhci_hcd: release socket [ 298.345155][ T5423] vhci_hcd: disconnect device [ 298.676369][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 298.776806][ T6660] device vlan2 entered promiscuous mode [ 298.844664][ T6660] device syz_tun entered promiscuous mode [ 298.883045][ T6655] netlink: 'syz.3.650': attribute type 21 has an invalid length. [ 298.904681][ T6655] netlink: 156 bytes leftover after parsing attributes in process `syz.3.650'. [ 298.924660][ T6658] netlink: 'syz.3.650': attribute type 21 has an invalid length. [ 298.935260][ T6658] netlink: 156 bytes leftover after parsing attributes in process `syz.3.650'. [ 299.810802][ T4312] vhci_hcd: vhci_device speed not set [ 301.219654][ T6697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 301.226327][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.240040][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 301.290949][ T6697] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 301.298754][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.399179][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 301.620730][ T6700] vhci_hcd: connection closed [ 301.621811][ T6698] vhci_hcd: connection closed [ 301.669302][ T4429] vhci_hcd: stop threads [ 301.679118][ T4429] vhci_hcd: release socket [ 301.720177][ T4429] vhci_hcd: disconnect device [ 301.740183][ T4429] vhci_hcd: stop threads [ 301.757459][ T4429] vhci_hcd: release socket [ 301.764532][ T4429] vhci_hcd: disconnect device [ 302.220141][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 302.411652][ T6723] netlink: 100 bytes leftover after parsing attributes in process `syz.0.673'. [ 302.422770][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 302.433351][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.487969][ T126] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.523644][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.597087][ T126] usb 3-1: Product: syz [ 302.617936][ T126] usb 3-1: Manufacturer: syz [ 302.654745][ T126] usb 3-1: SerialNumber: syz [ 302.706575][ T126] usb 3-1: config 0 descriptor?? [ 302.749671][ T126] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.766847][ T126] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 303.006254][ T6731] fuse: Bad value for 'fd' [ 303.326456][ T126] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 303.410079][ T129] vhci_hcd: vhci_device speed not set [ 303.759902][ T126] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 303.795885][ T126] em28xx 3-1:0.0: board has no eeprom [ 303.890123][ T126] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 303.916364][ T126] em28xx 3-1:0.0: dvb set to bulk mode. [ 303.981935][ T126] usb 3-1: USB disconnect, device number 6 [ 304.027411][ T126] em28xx 3-1:0.0: Disconnecting em28xx [ 304.085495][ T4313] em28xx 3-1:0.0: Binding DVB extension [ 304.507092][ T4313] em28xx 3-1:0.0: Registering input extension [ 304.528767][ T126] em28xx 3-1:0.0: Closing input extension [ 304.563285][ T126] em28xx 3-1:0.0: Freeing device [ 304.834261][ T6753] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 304.841208][ T6753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.967645][ T6753] vhci_hcd vhci_hcd.0: Device attached [ 305.056155][ T6758] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 305.062845][ T6758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.129499][ T6758] vhci_hcd vhci_hcd.0: Device attached [ 305.150591][ T6762] vhci_hcd: connection closed [ 305.150982][ T5423] vhci_hcd: stop threads [ 305.162289][ T6754] vhci_hcd: connection closed [ 305.181611][ T5423] vhci_hcd: release socket [ 305.228373][ T6766] xt_hashlimit: size too large, truncated to 1048576 [ 305.240110][ T126] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 305.263255][ T6756] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 305.333008][ T5423] vhci_hcd: disconnect device [ 305.345800][ T5423] vhci_hcd: stop threads [ 305.353272][ T5423] vhci_hcd: release socket [ 305.369175][ T5423] vhci_hcd: disconnect device [ 305.405095][ T6768] binder: BINDER_SET_CONTEXT_MGR already set [ 305.480158][ T6768] binder: 6767:6768 ioctl 4018620d 200000000040 returned -16 [ 306.263983][ T6766] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 308.340140][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 308.550074][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 308.557353][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.620250][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.681574][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.730027][ T27] usb 2-1: Product: syz [ 308.740254][ T27] usb 2-1: Manufacturer: syz [ 308.745214][ T27] usb 2-1: SerialNumber: syz [ 308.761925][ T27] usb 2-1: config 0 descriptor?? [ 308.775420][ T27] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 308.785897][ T27] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 309.376657][ T27] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 309.759562][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 309.824060][ T27] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 309.871748][ T27] em28xx 2-1:0.0: board has no eeprom [ 309.950152][ T6805] team0: Port device batadv1 added [ 310.020058][ T27] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 310.072703][ T27] em28xx 2-1:0.0: dvb set to bulk mode. [ 310.143902][ T27] usb 2-1: USB disconnect, device number 5 [ 310.160944][ T27] em28xx 2-1:0.0: Disconnecting em28xx [ 310.185392][ T4313] em28xx 2-1:0.0: Binding DVB extension [ 310.371782][ T126] vhci_hcd: vhci_device speed not set [ 310.500776][ T6812] binder_alloc: 6810: binder_alloc_buf, no vma [ 310.535513][ T6813] binder: BINDER_SET_CONTEXT_MGR already set [ 310.548926][ T4313] em28xx 2-1:0.0: Registering input extension [ 310.590191][ T27] em28xx 2-1:0.0: Closing input extension [ 310.618625][ T6813] binder: 6811:6813 ioctl 4018620d 200000000040 returned -16 [ 310.633409][ T27] em28xx 2-1:0.0: Freeing device [ 311.046741][ T6820] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 311.053824][ T6820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.181165][ T6817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 311.188446][ T6817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 311.340211][ T6817] vhci_hcd vhci_hcd.0: Device attached [ 311.350870][ T6820] vhci_hcd vhci_hcd.0: Device attached [ 311.410839][ T6821] vhci_hcd: connection closed [ 311.411055][ T4429] vhci_hcd: stop threads [ 311.430294][ T6818] vhci_hcd: connection closed [ 311.468661][ T4429] vhci_hcd: release socket [ 311.529635][ T4429] vhci_hcd: disconnect device [ 311.540301][ T4429] vhci_hcd: stop threads [ 311.544811][ T4429] vhci_hcd: release socket [ 311.580127][ T4429] vhci_hcd: disconnect device [ 311.610056][ T3598] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 311.617812][ T3598] usb 39-1: enqueue for inactive port 0 [ 311.780104][ T3598] vhci_hcd: vhci_device speed not set [ 314.190886][ T6858] binder_alloc: 6857: binder_alloc_buf, no vma [ 314.238028][ T6862] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 314.245453][ T6862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.245460][ T6863] binder: BINDER_SET_CONTEXT_MGR already set [ 314.271533][ T6862] vhci_hcd vhci_hcd.0: Device attached [ 314.299670][ T6863] binder: 6859:6863 ioctl 4018620d 200000000040 returned -16 [ 314.310671][ T6866] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 314.319651][ T6866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.335195][ T6866] vhci_hcd vhci_hcd.0: Device attached [ 314.550202][ T4311] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 315.068557][ T6867] vhci_hcd: connection closed [ 315.068925][ T5002] vhci_hcd: stop threads [ 315.092789][ T6864] vhci_hcd: connection reset by peer [ 315.106147][ T6877] device syzkaller0 entered promiscuous mode [ 315.109203][ T5002] vhci_hcd: release socket [ 315.169254][ T5002] vhci_hcd: disconnect device [ 315.217650][ T5002] vhci_hcd: stop threads [ 315.239251][ T5002] vhci_hcd: release socket [ 315.255696][ T5002] vhci_hcd: disconnect device [ 315.450057][ T3598] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.660276][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 315.686834][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 315.730121][ T3598] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.786495][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.810444][ T3598] usb 5-1: Product: syz [ 315.814886][ T3598] usb 5-1: Manufacturer: syz [ 315.819627][ T3598] usb 5-1: SerialNumber: syz [ 315.857716][ T3598] usb 5-1: config 0 descriptor?? [ 315.917471][ T3598] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.943251][ T3598] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 316.000164][ T4312] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 316.212853][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.255337][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.295243][ T4312] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.319091][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.390728][ T4312] usb 2-1: Product: syz [ 316.406098][ T4312] usb 2-1: Manufacturer: syz [ 316.430234][ T4312] usb 2-1: SerialNumber: syz [ 316.493623][ T3598] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 316.510905][ T4312] usb 2-1: config 0 descriptor?? [ 316.926032][ T3598] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 317.014884][ T3598] em28xx 5-1:0.0: board has no eeprom [ 317.200142][ T3598] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 317.208521][ T3598] em28xx 5-1:0.0: dvb set to bulk mode. [ 317.380334][ T3598] usb 5-1: USB disconnect, device number 8 [ 317.407673][ T3598] em28xx 5-1:0.0: Disconnecting em28xx [ 317.419723][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.490184][ T4312] em28xx 5-1:0.0: Binding DVB extension [ 317.677411][ T4312] em28xx 5-1:0.0: Registering input extension [ 317.690370][ T3598] em28xx 5-1:0.0: Closing input extension [ 317.718622][ T3598] em28xx 5-1:0.0: Freeing device [ 317.758462][ T6906] binder_alloc: 6905: binder_alloc_buf, no vma [ 317.942313][ T6910] tipc: Enabled bearer , priority 0 [ 317.967049][ T6910] device syzkaller0 entered promiscuous mode [ 318.097821][ T6910] tipc: Resetting bearer [ 318.123675][ T6909] tipc: Resetting bearer [ 318.383776][ T6909] tipc: Disabling bearer [ 318.840846][ T27] usb 2-1: USB disconnect, device number 6 [ 319.101579][ T6922] device syzkaller0 entered promiscuous mode [ 319.138265][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 319.145328][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.155969][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 319.186668][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 319.194083][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.210413][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 319.650205][ T129] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 319.733624][ T4311] vhci_hcd: vhci_device speed not set [ 319.890144][ T6934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 319.897193][ T6934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.917999][ T6934] vhci_hcd vhci_hcd.0: Device attached [ 319.972206][ T6926] vhci_hcd: connection reset by peer [ 319.972874][ T6929] vhci_hcd: connection closed [ 319.978177][ T4325] vhci_hcd: stop threads [ 319.988419][ T4325] vhci_hcd: release socket [ 320.030473][ T4325] vhci_hcd: disconnect device [ 320.036210][ T4325] vhci_hcd: stop threads [ 320.080756][ T4325] vhci_hcd: release socket [ 320.101011][ T4325] vhci_hcd: disconnect device [ 320.370212][ T4311] usb 39-1: device descriptor read/64, error -110 [ 320.690034][ T4311] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 320.829533][ T6935] vhci_hcd: connection reset by peer [ 320.836316][ T4317] vhci_hcd: stop threads [ 320.841451][ T4317] vhci_hcd: release socket [ 320.890210][ T3598] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 320.902079][ T4317] vhci_hcd: disconnect device [ 321.100070][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 321.107774][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 321.172884][ T3598] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.210023][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.239101][ T3598] usb 1-1: Product: syz [ 321.267680][ T3598] usb 1-1: Manufacturer: syz [ 321.288040][ T3598] usb 1-1: SerialNumber: syz [ 321.324807][ T3598] usb 1-1: config 0 descriptor?? [ 321.376838][ T3598] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.440256][ T3598] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 321.980933][ T3598] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 322.149121][ T6964] tipc: Enabling of bearer rejected, failed to enable media [ 322.565529][ T3598] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 322.661954][ T3598] em28xx 1-1:0.0: board has no eeprom [ 322.772743][ T3598] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 322.950228][ T3598] em28xx 1-1:0.0: dvb set to bulk mode. [ 323.044119][ T3598] usb 1-1: USB disconnect, device number 4 [ 323.075095][ T3598] em28xx 1-1:0.0: Disconnecting em28xx [ 323.112922][ T14] em28xx 1-1:0.0: Binding DVB extension [ 323.234497][ T6980] device syzkaller0 entered promiscuous mode [ 323.464035][ T14] em28xx 1-1:0.0: Registering input extension [ 323.479848][ T3598] em28xx 1-1:0.0: Closing input extension [ 323.513817][ T3598] em28xx 1-1:0.0: Freeing device [ 324.883275][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 324.890500][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.910274][ T129] vhci_hcd: vhci_device speed not set [ 324.930236][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 324.967116][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 324.973737][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.989405][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 325.170088][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.200069][ T4313] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 325.485517][ T7009] team0: Port device batadv1 added [ 325.789236][ T7010] vhci_hcd: connection closed [ 325.790687][ T7007] vhci_hcd: connection reset by peer [ 325.815715][ T4325] vhci_hcd: stop threads [ 325.900249][ T4311] vhci_hcd: vhci_device speed not set [ 326.048414][ T4325] vhci_hcd: release socket [ 326.059643][ T4325] vhci_hcd: disconnect device [ 326.093534][ T4325] vhci_hcd: stop threads [ 326.173023][ T4325] vhci_hcd: release socket [ 326.189654][ T4325] vhci_hcd: disconnect device [ 329.935283][ T7061] netlink: 100 bytes leftover after parsing attributes in process `syz.3.759'. [ 330.062492][ T7063] binder: BINDER_SET_CONTEXT_MGR already set [ 330.100321][ T7063] binder: 7062:7063 ioctl 4018620d 200000000040 returned -16 [ 330.288446][ T7066] tipc: Enabled bearer , priority 0 [ 330.329595][ T7066] device syzkaller0 entered promiscuous mode [ 330.371476][ T4313] vhci_hcd: vhci_device speed not set [ 330.438880][ T7066] tipc: Resetting bearer [ 330.452667][ T7065] tipc: Resetting bearer [ 330.572392][ T7065] tipc: Disabling bearer [ 332.270360][ T7091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 332.277403][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.297974][ T7091] vhci_hcd vhci_hcd.0: Device attached [ 332.591193][ T4313] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 333.023220][ T7092] vhci_hcd: connection reset by peer [ 333.030231][ T75] vhci_hcd: stop threads [ 333.047798][ T75] vhci_hcd: release socket [ 333.072829][ T75] vhci_hcd: disconnect device [ 333.394445][ T7098] binder: BINDER_SET_CONTEXT_MGR already set [ 333.440099][ T7098] binder: 7097:7098 ioctl 4018620d 200000000040 returned -16 [ 333.901671][ T7106] binder: BINDER_SET_CONTEXT_MGR already set [ 333.908006][ T7106] binder: 7105:7106 ioctl 4018620d 200000000040 returned -16 [ 334.262847][ T7116] netlink: 100 bytes leftover after parsing attributes in process `syz.4.776'. [ 334.529173][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.721280][ T7109] team0: Port device batadv1 added [ 337.730162][ T4313] vhci_hcd: vhci_device speed not set [ 337.901686][ T7144] binder: BINDER_SET_CONTEXT_MGR already set [ 337.908086][ T7143] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 337.915377][ T7143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 337.930183][ T7144] binder: 7141:7144 ioctl 4018620d 200000000040 returned -16 [ 337.947135][ T7143] vhci_hcd vhci_hcd.0: Device attached [ 338.207010][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 338.213702][ T4314] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 338.247687][ T7154] binder: 7153:7154 ioctl 4018620d 200000000040 returned -16 [ 338.417544][ T7145] vhci_hcd: connection reset by peer [ 338.426927][ T4569] vhci_hcd: stop threads [ 338.432384][ T4569] vhci_hcd: release socket [ 338.458910][ T4569] vhci_hcd: disconnect device [ 339.637119][ T4311] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 340.152139][ T4311] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 340.580413][ T4311] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 340.601880][ T4311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.639176][ T4311] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.648875][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.657307][ T4311] usb 2-1: Product: syz [ 340.661936][ T4311] usb 2-1: Manufacturer: syz [ 340.672105][ T4311] usb 2-1: SerialNumber: syz [ 340.700909][ T4311] usb 2-1: config 0 descriptor?? [ 340.722146][ T4311] usb 2-1: selecting invalid altsetting 0 [ 340.972445][ T27] usb 2-1: USB disconnect, device number 7 [ 341.600052][ T7188] binder: BINDER_SET_CONTEXT_MGR already set [ 341.671671][ T7188] binder: 7187:7188 ioctl 4018620d 200000000040 returned -16 [ 342.195364][ T7200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 342.202502][ T7200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.509996][ T7200] vhci_hcd vhci_hcd.0: Device attached [ 342.750336][ T27] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 343.202198][ T7201] vhci_hcd: connection reset by peer [ 343.220894][ T11] vhci_hcd: stop threads [ 343.410357][ T11] vhci_hcd: release socket [ 343.420882][ T4314] vhci_hcd: vhci_device speed not set [ 343.446890][ T11] vhci_hcd: disconnect device [ 343.985030][ T7213] tipc: Enabled bearer , priority 0 [ 344.059338][ T7213] tipc: Resetting bearer [ 344.127432][ T7211] tipc: Disabling bearer [ 344.529186][ T7229] xt_hashlimit: size too large, truncated to 1048576 [ 345.277658][ T7229] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 345.400055][ T3598] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 345.666706][ T3598] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 345.683531][ T3598] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 345.698735][ T3598] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.763643][ T3598] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 345.982354][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.051383][ T3598] usb 4-1: Product: syz [ 346.090970][ T3598] usb 4-1: Manufacturer: syz [ 346.096463][ T3598] usb 4-1: SerialNumber: syz [ 346.223649][ T3598] usb 4-1: config 0 descriptor?? [ 346.325993][ T3598] usb 4-1: selecting invalid altsetting 0 [ 347.753221][ T7253] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 347.762699][ T7253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.778223][ T7253] vhci_hcd vhci_hcd.0: Device attached [ 348.401114][ T7254] vhci_hcd: connection reset by peer [ 348.407911][ T5421] vhci_hcd: stop threads [ 348.413682][ T5421] vhci_hcd: release socket [ 348.474688][ T5421] vhci_hcd: disconnect device [ 348.550100][ T27] vhci_hcd: vhci_device speed not set [ 348.568990][ T126] usb 4-1: USB disconnect, device number 8 [ 349.690631][ T7272] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 349.697399][ T7272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.902761][ T7272] vhci_hcd vhci_hcd.0: Device attached [ 350.210432][ T4313] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 350.367947][ T7277] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 350.375718][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.601761][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 350.975405][ T7278] vhci_hcd: connection closed [ 350.975716][ T11] vhci_hcd: stop threads [ 351.034913][ T7273] vhci_hcd: connection reset by peer [ 351.065210][ T11] vhci_hcd: release socket [ 351.127991][ T11] vhci_hcd: disconnect device [ 351.143278][ T11] vhci_hcd: stop threads [ 351.158682][ T11] vhci_hcd: release socket [ 351.167532][ T11] vhci_hcd: disconnect device [ 353.069845][ T7304] binder: BINDER_SET_CONTEXT_MGR already set [ 353.089131][ T7304] binder: 7303:7304 ioctl 4018620d 200000000040 returned -16 [ 353.098653][ T7301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 353.105929][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.118039][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 353.664350][ T7302] vhci_hcd: connection closed [ 353.664615][ T4289] vhci_hcd: stop threads [ 353.826610][ T4289] vhci_hcd: release socket [ 353.836983][ T4289] vhci_hcd: disconnect device [ 355.340077][ T4313] vhci_hcd: vhci_device speed not set [ 357.165799][ T7349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 357.172843][ T7349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.181421][ T3598] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 357.215577][ T7349] vhci_hcd vhci_hcd.0: Device attached [ 357.766579][ T7350] vhci_hcd: connection closed [ 357.766804][ T4416] vhci_hcd: stop threads [ 357.807765][ T4416] vhci_hcd: release socket [ 357.827751][ T4416] vhci_hcd: disconnect device [ 357.857729][ T3598] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 358.248581][ T3598] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 358.347010][ T3598] usb 3-1: config 0 interface 0 has no altsetting 0 [ 358.559004][ T3598] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.590022][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.669676][ T3598] usb 3-1: Product: syz [ 358.698210][ T3598] usb 3-1: Manufacturer: syz [ 358.729546][ T3598] usb 3-1: SerialNumber: syz [ 358.786017][ T3598] usb 3-1: config 0 descriptor?? [ 358.872775][ T3598] usb 3-1: selecting invalid altsetting 0 [ 361.204787][ T14] usb 3-1: USB disconnect, device number 7 [ 361.583630][ T7396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 361.590626][ T7396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.712981][ T7396] vhci_hcd vhci_hcd.0: Device attached [ 361.970298][ T14] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 362.363298][ T7397] vhci_hcd: connection reset by peer [ 362.382312][ T4414] vhci_hcd: stop threads [ 362.386741][ T4414] vhci_hcd: release socket [ 362.419493][ T4414] vhci_hcd: disconnect device [ 362.720116][ T126] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 362.933471][ T126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 362.962738][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.011862][ T126] usb 3-1: Product: syz [ 363.016119][ T126] usb 3-1: Manufacturer: syz [ 363.050051][ T126] usb 3-1: SerialNumber: syz [ 363.082272][ T126] usb 3-1: config 0 descriptor?? [ 363.351433][ T126] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 363.570678][ T126] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 364.408477][ T7421] tipc: Enabled bearer , priority 0 [ 364.423148][ T7421] device syzkaller0 entered promiscuous mode [ 364.499593][ T7421] tipc: Resetting bearer [ 364.569350][ T7420] tipc: Resetting bearer [ 364.648532][ T7420] tipc: Disabling bearer [ 365.794316][ T129] usb 3-1: USB disconnect, device number 8 [ 367.295382][ T7458] device syzkaller0 entered promiscuous mode [ 367.310169][ T14] vhci_hcd: vhci_device speed not set [ 369.480205][ T14] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 369.688390][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 369.723678][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.779386][ T14] usb 1-1: Product: syz [ 369.801080][ T14] usb 1-1: Manufacturer: syz [ 369.838945][ T14] usb 1-1: SerialNumber: syz [ 369.885528][ T14] usb 1-1: config 0 descriptor?? [ 370.130866][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.341948][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 371.356995][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.887'. [ 372.056563][ T7507] tipc: Enabled bearer , priority 0 [ 372.160458][ T7510] device syzkaller0 entered promiscuous mode [ 372.267806][ T7507] tipc: Resetting bearer [ 372.322509][ T7506] tipc: Resetting bearer [ 372.348274][ T14] usb 1-1: USB disconnect, device number 5 [ 372.370352][ T4307] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 372.461398][ T7506] tipc: Disabling bearer [ 372.590051][ T4307] usb 4-1: Using ep0 maxpacket: 16 [ 372.599609][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.646685][ T4307] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 372.676736][ T7513] device syzkaller0 entered promiscuous mode [ 372.683152][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.714735][ T4307] usb 4-1: Product: syz [ 372.726656][ T4307] usb 4-1: Manufacturer: syz [ 372.759825][ T4307] usb 4-1: SerialNumber: syz [ 372.792889][ T4307] usb 4-1: config 0 descriptor?? [ 372.810501][ T4307] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 372.827470][ T4307] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 373.425110][ T4307] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 373.873316][ T4307] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 373.920863][ T4307] em28xx 4-1:0.0: board has no eeprom [ 374.100384][ T4307] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 374.108388][ T4307] em28xx 4-1:0.0: dvb set to bulk mode. [ 374.147817][ T4307] usb 4-1: USB disconnect, device number 9 [ 374.172027][ T4307] em28xx 4-1:0.0: Disconnecting em28xx [ 374.177742][ T4313] em28xx 4-1:0.0: Binding DVB extension [ 374.375998][ T4313] em28xx 4-1:0.0: Registering input extension [ 374.387418][ T4307] em28xx 4-1:0.0: Closing input extension [ 374.419997][ T4307] em28xx 4-1:0.0: Freeing device [ 375.228601][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.898'. [ 375.674619][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 375.960144][ T4307] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 376.023918][ T7554] tipc: Enabled bearer , priority 0 [ 376.063789][ T7554] device syzkaller0 entered promiscuous mode [ 376.156356][ T7554] tipc: Resetting bearer [ 376.169979][ T129] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 376.178804][ T4307] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 376.200264][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.209114][ T7553] tipc: Resetting bearer [ 376.229305][ T4307] usb 2-1: Product: syz [ 376.258716][ T4307] usb 2-1: Manufacturer: syz [ 376.268869][ T4307] usb 2-1: SerialNumber: syz [ 376.285044][ T7553] tipc: Disabling bearer [ 376.314526][ T4307] usb 2-1: config 0 descriptor?? [ 376.370195][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 376.395360][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 376.483328][ T129] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.542420][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.570566][ T4307] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 376.579374][ T129] usb 1-1: Product: syz [ 376.608242][ T129] usb 1-1: Manufacturer: syz [ 376.657868][ T129] usb 1-1: SerialNumber: syz [ 376.684403][ T129] usb 1-1: config 0 descriptor?? [ 376.708456][ T129] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.719179][ T129] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 376.756777][ T7557] device syzkaller0 entered promiscuous mode [ 376.773700][ T4307] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 377.486522][ T129] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 377.777408][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.909'. [ 377.961536][ T129] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 378.050001][ T4313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 378.085243][ T129] em28xx 1-1:0.0: board has no eeprom [ 378.400001][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 378.408195][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 378.423195][ T4313] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.470028][ T129] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 378.808927][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.818372][ T4313] usb 5-1: Product: syz [ 378.828130][ T129] em28xx 1-1:0.0: dvb set to bulk mode. [ 378.838350][ T4313] usb 5-1: Manufacturer: syz [ 378.852588][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.859545][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878397][ T129] em28xx 1-1:0.0: Binding DVB extension [ 378.903036][ T4313] usb 5-1: SerialNumber: syz [ 378.937811][ T4313] usb 5-1: config 0 descriptor?? [ 378.973873][ T4313] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.997781][ T4313] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 379.061057][ T4312] usb 2-1: USB disconnect, device number 8 [ 379.306377][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.913'. [ 379.550135][ T7552] em28xx 1-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 379.585331][ T4313] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 380.002594][ T126] usb 1-1: USB disconnect, device number 6 [ 380.013370][ T4313] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 380.040788][ T126] em28xx 1-1:0.0: Disconnecting em28xx [ 380.050439][ T4313] em28xx 5-1:0.0: board has no eeprom [ 380.200076][ T4313] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 380.222149][ T4313] em28xx 5-1:0.0: dvb set to bulk mode. [ 380.270275][ T4313] usb 5-1: USB disconnect, device number 9 [ 380.291020][ T129] em28xx 1-1:0.0: Registering input extension [ 380.316504][ T4307] em28xx 5-1:0.0: Binding DVB extension [ 380.349394][ T4313] em28xx 5-1:0.0: Disconnecting em28xx [ 380.707885][ T4307] em28xx 5-1:0.0: Registering input extension [ 380.730533][ T126] em28xx 1-1:0.0: Closing input extension [ 380.737156][ T4313] em28xx 5-1:0.0: Closing input extension [ 380.792103][ T126] em28xx 1-1:0.0: Freeing device [ 380.872622][ T4313] em28xx 5-1:0.0: Freeing device [ 384.410030][ T4312] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 384.521422][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.925'. [ 384.604958][ T4312] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 384.643931][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.694590][ T4312] usb 5-1: Product: syz [ 384.699001][ T4312] usb 5-1: Manufacturer: syz [ 384.738627][ T4312] usb 5-1: SerialNumber: syz [ 384.765609][ T7636] netlink: 100 bytes leftover after parsing attributes in process `syz.2.926'. [ 384.774119][ T4312] usb 5-1: config 0 descriptor?? [ 385.014633][ T4312] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.171779][ T3598] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 385.390039][ T3598] usb 2-1: Using ep0 maxpacket: 16 [ 385.398819][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 385.729435][ T3598] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.789577][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.806796][ T3598] usb 2-1: Product: syz [ 385.827201][ T3598] usb 2-1: Manufacturer: syz [ 385.842560][ T3598] usb 2-1: SerialNumber: syz [ 385.877616][ T3598] usb 2-1: config 0 descriptor?? [ 385.903694][ T4312] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 385.941450][ T3598] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.969671][ T3598] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 386.512572][ T3598] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 387.021147][ T3598] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 387.029442][ T3598] em28xx 2-1:0.0: board has no eeprom [ 387.140270][ T3598] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 387.158919][ T3598] em28xx 2-1:0.0: dvb set to bulk mode. [ 387.204901][ T3598] usb 2-1: USB disconnect, device number 9 [ 387.388464][ T3598] em28xx 2-1:0.0: Disconnecting em28xx [ 387.396045][ T4312] em28xx 2-1:0.0: Binding DVB extension [ 387.403603][ T129] usb 5-1: USB disconnect, device number 10 [ 388.314560][ T4312] em28xx 2-1:0.0: Registering input extension [ 388.341388][ T3598] em28xx 2-1:0.0: Closing input extension [ 388.399120][ T3598] em28xx 2-1:0.0: Freeing device [ 389.280239][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 389.289658][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.937'. [ 389.508448][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 389.588947][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 389.805359][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 389.854543][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.864476][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.874701][ T27] usb 1-1: Product: syz [ 389.879974][ T27] usb 1-1: Manufacturer: syz [ 389.885054][ T27] usb 1-1: SerialNumber: syz [ 389.951806][ T27] usb 1-1: config 0 descriptor?? [ 389.973558][ T27] usb 1-1: selecting invalid altsetting 0 [ 390.192129][ T129] usb 1-1: USB disconnect, device number 7 [ 390.312326][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.982159][ T7690] netlink: 100 bytes leftover after parsing attributes in process `syz.4.939'. [ 392.560093][ T129] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 392.560298][ T4313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 392.764336][ T129] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 392.775480][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.781185][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 392.785637][ T129] usb 3-1: Product: syz [ 392.795749][ T129] usb 3-1: Manufacturer: syz [ 392.798739][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 392.801061][ T129] usb 3-1: SerialNumber: syz [ 392.819205][ T129] usb 3-1: config 0 descriptor?? [ 392.864659][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.056480][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.065308][ T4313] usb 1-1: Product: syz [ 393.069541][ T4313] usb 1-1: Manufacturer: syz [ 393.074270][ T4313] usb 1-1: SerialNumber: syz [ 393.101699][ T129] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.108429][ T4313] usb 1-1: config 0 descriptor?? [ 393.860622][ T4313] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 393.900031][ T4313] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 394.238398][ T4313] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 394.659148][ T4313] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 394.696950][ T4313] em28xx 1-1:0.0: board has no eeprom [ 394.819999][ T4313] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 394.830024][ T4313] em28xx 1-1:0.0: dvb set to bulk mode. [ 394.850140][ T4307] em28xx 1-1:0.0: Binding DVB extension [ 394.909553][ T4313] usb 1-1: USB disconnect, device number 8 [ 394.938671][ T129] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 394.954739][ T4313] em28xx 1-1:0.0: Disconnecting em28xx [ 395.344500][ T4307] em28xx 1-1:0.0: Registering input extension [ 395.370969][ T4313] em28xx 1-1:0.0: Closing input extension [ 395.416989][ T4313] em28xx 1-1:0.0: Freeing device [ 395.428004][ T129] usb 3-1: USB disconnect, device number 9 [ 395.781538][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 396.770064][ T4312] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 396.962600][ T4312] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 396.981307][ T4312] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 397.162663][ T4312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.263178][ T4312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.289114][ T7737] netlink: 100 bytes leftover after parsing attributes in process `syz.4.951'. [ 397.299927][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.319564][ T4312] usb 1-1: Product: syz [ 397.869869][ T4312] usb 1-1: Manufacturer: syz [ 397.921627][ T4312] usb 1-1: SerialNumber: syz [ 397.997052][ T4312] usb 1-1: config 0 descriptor?? [ 398.044260][ T4312] usb 1-1: selecting invalid altsetting 0 [ 398.325977][ T3598] usb 1-1: USB disconnect, device number 9 [ 398.377497][ T4471] udevd[4471]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 399.920151][ T4313] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 399.928306][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 400.114933][ T4313] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 400.124552][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 400.141690][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 400.162607][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.190068][ T4313] usb 1-1: Product: syz [ 400.195673][ T4313] usb 1-1: Manufacturer: syz [ 400.201453][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.212397][ T4307] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 400.228302][ T4313] usb 1-1: SerialNumber: syz [ 400.250181][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.270637][ T4313] usb 1-1: config 0 descriptor?? [ 400.290393][ T27] usb 4-1: Product: syz [ 400.294752][ T27] usb 4-1: Manufacturer: syz [ 400.299848][ T27] usb 4-1: SerialNumber: syz [ 400.322422][ T27] usb 4-1: config 0 descriptor?? [ 400.354956][ T27] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.394355][ T27] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 400.401164][ T4307] usb 3-1: Using ep0 maxpacket: 32 [ 400.409060][ T4307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.460336][ T4307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.482950][ T4313] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.504496][ T4307] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 400.540158][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.559441][ T4307] usb 3-1: config 0 descriptor?? [ 400.940930][ T27] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 400.989243][ T4307] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 401.010609][ T4307] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 401.063215][ T4307] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 401.095589][ T4313] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 401.229378][ T4307] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 401.376056][ T27] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 401.434669][ T27] em28xx 4-1:0.0: board has no eeprom [ 401.508415][ T7773] netlink: 100 bytes leftover after parsing attributes in process `syz.4.963'. [ 401.520398][ T27] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 401.532846][ T27] em28xx 4-1:0.0: dvb set to bulk mode. [ 401.548224][ T4313] em28xx 4-1:0.0: Binding DVB extension [ 401.559563][ T27] usb 4-1: USB disconnect, device number 10 [ 401.567181][ T27] em28xx 4-1:0.0: Disconnecting em28xx [ 401.631431][ T4307] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 401.726738][ T4313] em28xx 4-1:0.0: Registering input extension [ 401.733999][ T27] em28xx 4-1:0.0: Closing input extension [ 401.754337][ T27] em28xx 4-1:0.0: Freeing device [ 401.792952][ T7777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 401.799559][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.812873][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 401.872559][ T7777] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 401.879250][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.903894][ T4307] usb 3-1: USB disconnect, device number 10 [ 401.928468][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 402.110412][ T4313] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 402.197088][ T7775] fido_id[7775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 402.686005][ T7781] vhci_hcd: connection closed [ 402.686379][ T40] vhci_hcd: stop threads [ 402.696964][ T40] vhci_hcd: release socket [ 402.750752][ T40] vhci_hcd: disconnect device [ 402.763691][ T7778] vhci_hcd: connection reset by peer [ 402.803261][ T40] vhci_hcd: stop threads [ 402.815277][ T27] usb 1-1: USB disconnect, device number 10 [ 402.860574][ T40] vhci_hcd: release socket [ 402.985608][ T40] vhci_hcd: disconnect device [ 403.439972][ T27] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 403.662210][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 403.708581][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 403.760023][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 403.765304][ T7802] fuse: Bad value for 'fd' [ 403.799240][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.841671][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.866254][ T27] usb 1-1: Product: syz [ 403.871714][ T27] usb 1-1: Manufacturer: syz [ 403.879130][ T27] usb 1-1: SerialNumber: syz [ 403.914440][ T27] usb 1-1: config 0 descriptor?? [ 403.954733][ T27] usb 1-1: selecting invalid altsetting 0 [ 404.127491][ T4312] usb 1-1: USB disconnect, device number 11 [ 405.191755][ T7812] binder: 7811:7812 ioctl 4018620d 0 returned -22 [ 405.828241][ T7823] netlink: 100 bytes leftover after parsing attributes in process `syz.1.974'. [ 405.866244][ T7825] binder: BINDER_SET_CONTEXT_MGR already set [ 405.913762][ T7825] binder: 7824:7825 ioctl 4018620d 200000000040 returned -16 [ 406.580040][ T4312] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 406.787632][ T4312] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.807544][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.836771][ T4312] usb 4-1: Product: syz [ 406.850330][ T4312] usb 4-1: Manufacturer: syz [ 406.870219][ T4312] usb 4-1: SerialNumber: syz [ 406.930629][ T4312] usb 4-1: config 0 descriptor?? [ 407.075469][ T7842] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 407.082518][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.094434][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 407.119087][ T7842] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 407.126525][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.134991][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 407.154166][ T4312] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.768823][ T4312] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 407.942710][ T7845] vhci_hcd: connection closed [ 407.942977][ T4569] vhci_hcd: stop threads [ 407.956056][ T7843] vhci_hcd: connection reset by peer [ 407.969665][ T4569] vhci_hcd: release socket [ 408.003393][ T4569] vhci_hcd: disconnect device [ 408.081336][ T4569] vhci_hcd: stop threads [ 408.085829][ T4569] vhci_hcd: release socket [ 408.116848][ T4569] vhci_hcd: disconnect device [ 408.190088][ T4313] vhci_hcd: vhci_device speed not set [ 408.408068][ T7854] tipc: Enabled bearer , priority 0 [ 408.488301][ T7854] tipc: Resetting bearer [ 408.593538][ T7853] tipc: Disabling bearer [ 409.726826][ T4312] usb 4-1: USB disconnect, device number 11 [ 409.834372][ T7863] binder: BINDER_SET_CONTEXT_MGR already set [ 409.878635][ T7863] binder: 7862:7863 ioctl 4018620d 200000000040 returned -16 [ 411.095359][ T7881] netlink: 'syz.4.987': attribute type 21 has an invalid length. [ 411.136994][ T7881] netlink: 156 bytes leftover after parsing attributes in process `syz.4.987'. [ 411.285896][ T7883] netlink: 'syz.4.987': attribute type 21 has an invalid length. [ 411.297126][ T7883] netlink: 156 bytes leftover after parsing attributes in process `syz.4.987'. [ 412.870133][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.991'. [ 413.080555][ T7903] fuse: Bad value for 'fd' [ 413.539996][ T129] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 413.744562][ T129] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 413.766969][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.827276][ T129] usb 5-1: Product: syz [ 413.837458][ T129] usb 5-1: Manufacturer: syz [ 413.865600][ T129] usb 5-1: SerialNumber: syz [ 413.927410][ T129] usb 5-1: config 0 descriptor?? [ 414.085677][ T7916] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 414.092468][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.170206][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 414.264782][ T129] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 414.284054][ T7916] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 414.293206][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.301797][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 414.480029][ T4312] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 414.879035][ T129] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 414.927716][ T7919] vhci_hcd: connection closed [ 414.928069][ T4547] vhci_hcd: stop threads [ 414.931663][ T7917] vhci_hcd: connection reset by peer [ 414.939035][ T4547] vhci_hcd: release socket [ 414.968611][ T4547] vhci_hcd: disconnect device [ 415.005333][ T4547] vhci_hcd: stop threads [ 415.025404][ T4547] vhci_hcd: release socket [ 415.052982][ T4547] vhci_hcd: disconnect device [ 416.299506][ T3598] usb 5-1: USB disconnect, device number 11 [ 416.460959][ T7928] binder: BINDER_SET_CONTEXT_MGR already set [ 416.467400][ T7928] binder: 7927:7928 ioctl 4018620d 200000000040 returned -16 [ 417.742990][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 418.654872][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 418.753944][ T7967] team0: Port device batadv2 added [ 419.310054][ T4307] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 419.514843][ T4307] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.535195][ T4307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.571318][ T4307] usb 5-1: Product: syz [ 419.586975][ T4307] usb 5-1: Manufacturer: syz [ 419.612936][ T4307] usb 5-1: SerialNumber: syz [ 419.650690][ T4312] vhci_hcd: vhci_device speed not set [ 419.656649][ T4307] usb 5-1: config 0 descriptor?? [ 419.941034][ T4307] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.093004][ T7981] binder: BINDER_SET_CONTEXT_MGR already set [ 420.099604][ T7981] binder: 7980:7981 ioctl 4018620d 200000000040 returned -16 [ 420.545281][ T4307] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 420.830086][ T7985] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 420.836698][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.887198][ T7987] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 420.893915][ T7987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.910246][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 421.112261][ T7987] vhci_hcd vhci_hcd.0: Device attached [ 421.204002][ T4312] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 421.411675][ T7999] device syzkaller0 entered promiscuous mode [ 421.591887][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 421.617128][ T7988] vhci_hcd: connection closed [ 421.618709][ T4547] vhci_hcd: stop threads [ 421.631917][ T7986] vhci_hcd: connection reset by peer [ 421.661270][ T4547] vhci_hcd: release socket [ 421.666178][ T4547] vhci_hcd: disconnect device [ 421.690379][ T4547] vhci_hcd: stop threads [ 421.694967][ T4547] vhci_hcd: release socket [ 421.815322][ T4547] vhci_hcd: disconnect device [ 422.924406][ T4307] usb 5-1: USB disconnect, device number 12 [ 423.251780][ T8028] binder: 8027:8028 ioctl c0306201 0 returned -14 [ 425.584181][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 425.997913][ T8048] team0: Port device batadv2 added [ 426.128220][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'. [ 426.434720][ T4312] vhci_hcd: vhci_device speed not set [ 427.800409][ T8074] binder: 8073:8074 ioctl c0306201 0 returned -14 [ 427.840577][ T27] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 428.003094][ T8083] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 428.009815][ T8083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.024203][ T8079] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 428.031186][ T8079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.064970][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 428.098474][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.119447][ T8083] vhci_hcd vhci_hcd.0: Device attached [ 428.141494][ T27] usb 3-1: Product: syz [ 428.153913][ T8079] vhci_hcd vhci_hcd.0: Device attached [ 428.186728][ T27] usb 3-1: Manufacturer: syz [ 428.219600][ T27] usb 3-1: SerialNumber: syz [ 428.259744][ T27] usb 3-1: config 0 descriptor?? [ 428.380057][ T129] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 428.501950][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 428.778390][ T8084] vhci_hcd: connection closed [ 428.778797][ T5420] vhci_hcd: stop threads [ 428.831414][ T5420] vhci_hcd: release socket [ 428.852027][ T5420] vhci_hcd: disconnect device [ 429.044262][ T8080] vhci_hcd: connection reset by peer [ 429.051383][ T4423] vhci_hcd: stop threads [ 429.055752][ T4423] vhci_hcd: release socket [ 429.110434][ T4423] vhci_hcd: disconnect device [ 429.731854][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 429.788061][ T27] usb 3-1: USB disconnect, device number 11 [ 432.562644][ T8130] binder: 8129:8130 ioctl c0306201 0 returned -14 [ 433.490291][ T129] vhci_hcd: vhci_device speed not set [ 433.690311][ T4313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 433.780373][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 433.855320][ T8140] team0: Port device batadv3 added [ 433.910082][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 433.917821][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 434.006941][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 434.040848][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.066318][ T4313] usb 1-1: Product: syz [ 434.079463][ T4313] usb 1-1: Manufacturer: syz [ 434.098496][ T4313] usb 1-1: SerialNumber: syz [ 434.143858][ T4313] usb 1-1: config 0 descriptor?? [ 434.175897][ T4313] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 434.224844][ T4313] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 434.776897][ T4313] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 435.197660][ T4313] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 435.230617][ T4313] em28xx 1-1:0.0: board has no eeprom [ 435.559995][ T4313] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.585099][ T4313] em28xx 1-1:0.0: dvb set to bulk mode. [ 435.620639][ T4314] em28xx 1-1:0.0: Binding DVB extension [ 435.667829][ T4313] usb 1-1: USB disconnect, device number 12 [ 435.709239][ T4313] em28xx 1-1:0.0: Disconnecting em28xx [ 436.037288][ T4314] em28xx 1-1:0.0: Registering input extension [ 436.056689][ T4313] em28xx 1-1:0.0: Closing input extension [ 436.094892][ T4313] em28xx 1-1:0.0: Freeing device [ 436.194341][ T8153] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 436.201280][ T8153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.273627][ T8153] vhci_hcd vhci_hcd.0: Device attached [ 436.303501][ T8156] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 436.310277][ T8156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.368243][ T8156] vhci_hcd vhci_hcd.0: Device attached [ 436.540113][ T4314] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 437.586804][ T8157] vhci_hcd: connection closed [ 437.587127][ T4414] vhci_hcd: stop threads [ 437.600657][ T8154] vhci_hcd: connection reset by peer [ 437.630200][ T4414] vhci_hcd: release socket [ 437.645492][ T4414] vhci_hcd: disconnect device [ 437.673029][ T4414] vhci_hcd: stop threads [ 437.696562][ T4414] vhci_hcd: release socket [ 437.706893][ T4414] vhci_hcd: disconnect device [ 438.722146][ T8175] device syzkaller0 entered promiscuous mode [ 439.974065][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 440.009718][ T8201] team0: Port device batadv3 added [ 440.293176][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.300075][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.000189][ T4314] vhci_hcd: vhci_device speed not set [ 444.390124][ T8241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 444.397173][ T8241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.410135][ T8241] vhci_hcd vhci_hcd.0: Device attached [ 444.530669][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 444.537995][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.566917][ T8244] vhci_hcd vhci_hcd.0: Device attached [ 444.690060][ T27] usb 35-1: new low-speed USB device number 8 using vhci_hcd [ 445.248092][ T8246] vhci_hcd: connection closed [ 445.248307][ T4569] vhci_hcd: stop threads [ 445.260839][ T8242] vhci_hcd: connection reset by peer [ 445.291175][ T4569] vhci_hcd: release socket [ 445.366751][ T4569] vhci_hcd: disconnect device [ 445.392797][ T4569] vhci_hcd: stop threads [ 445.397306][ T4569] vhci_hcd: release socket [ 445.431080][ T4569] vhci_hcd: disconnect device [ 446.989156][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 447.080937][ T8262] team0: Port device batadv2 added [ 448.150173][ T129] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 448.380408][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 448.407267][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 448.452018][ T129] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 448.524223][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.541027][ T129] usb 4-1: Product: syz [ 448.560681][ T129] usb 4-1: Manufacturer: syz [ 448.579964][ T129] usb 4-1: SerialNumber: syz [ 448.617961][ T129] usb 4-1: config 0 descriptor?? [ 448.641938][ T129] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.690030][ T129] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 449.249331][ T129] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 449.675157][ T129] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 449.688781][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 449.696389][ T129] em28xx 4-1:0.0: board has no eeprom [ 449.710195][ T4314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 449.804467][ T8282] team0: Port device batadv2 added [ 449.810196][ T27] vhci_hcd: vhci_device speed not set [ 449.900057][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 449.918390][ T4314] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 449.928443][ T4314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.938879][ T4314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.949415][ T4314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.960199][ T4314] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.056326][ T4314] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.210342][ T129] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 450.216505][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.471220][ T129] em28xx 4-1:0.0: dvb set to bulk mode. [ 450.509662][ T4314] usb 5-1: usb_control_msg returned -32 [ 450.528359][ T4314] usbtmc 5-1:16.0: can't read capabilities [ 450.540490][ T129] usb 4-1: USB disconnect, device number 12 [ 450.547575][ T129] em28xx 4-1:0.0: Disconnecting em28xx [ 450.628431][ T3598] em28xx 4-1:0.0: Binding DVB extension [ 450.860432][ T4313] usb 5-1: USB disconnect, device number 13 [ 450.868584][ T8283] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 450.934075][ T3598] em28xx 4-1:0.0: Registering input extension [ 450.953935][ T129] em28xx 4-1:0.0: Closing input extension [ 450.997558][ T129] em28xx 4-1:0.0: Freeing device [ 456.030005][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 456.230051][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 456.236935][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 456.293635][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 456.318959][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.345277][ T27] usb 4-1: Product: syz [ 456.360430][ T27] usb 4-1: Manufacturer: syz [ 456.378550][ T27] usb 4-1: SerialNumber: syz [ 456.422889][ T27] usb 4-1: config 0 descriptor?? [ 456.451246][ T27] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 456.483532][ T27] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 457.043608][ T8360] tipc: Enabled bearer , priority 0 [ 457.044578][ T27] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 457.121507][ T8360] tipc: Resetting bearer [ 457.213510][ T8359] tipc: Disabling bearer [ 457.620038][ T27] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 457.640117][ T27] em28xx 4-1:0.0: board has no eeprom [ 458.689987][ T27] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 458.710647][ T27] em28xx 4-1:0.0: dvb set to bulk mode. [ 458.766565][ T27] usb 4-1: USB disconnect, device number 13 [ 458.784536][ T27] em28xx 4-1:0.0: Disconnecting em28xx [ 458.803363][ T4307] em28xx 4-1:0.0: Binding DVB extension [ 459.123600][ T4307] em28xx 4-1:0.0: Registering input extension [ 459.147623][ T27] em28xx 4-1:0.0: Closing input extension [ 459.213140][ T27] em28xx 4-1:0.0: Freeing device [ 460.168839][ T8383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 460.175716][ T8383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.220308][ T8383] vhci_hcd vhci_hcd.0: Device attached [ 460.903010][ T8384] vhci_hcd: connection closed [ 460.903305][ T4423] vhci_hcd: stop threads [ 460.920048][ T3598] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 460.943903][ T4423] vhci_hcd: release socket [ 460.958775][ T4423] vhci_hcd: disconnect device [ 461.054334][ T8389] binder: 8388:8389 ioctl c0306201 0 returned -14 [ 463.099619][ T8414] tipc: Enabled bearer , priority 0 [ 463.175358][ T8414] tipc: Resetting bearer [ 463.301120][ T8413] tipc: Disabling bearer [ 463.350545][ T8419] binder: 8418:8419 ioctl c0306201 0 returned -14 [ 466.050163][ T3598] vhci_hcd: vhci_device speed not set [ 467.168045][ T8486] binder: 8483:8486 ioctl c0306201 0 returned -14 [ 467.542463][ T8494] tipc: Enabled bearer , priority 0 [ 467.651682][ T8494] tipc: Resetting bearer [ 467.711218][ T8493] tipc: Disabling bearer [ 469.815371][ T8526] binder: 8524:8526 ioctl c0306201 0 returned -14 [ 470.070066][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.270049][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 470.277640][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 470.408972][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 470.533427][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.562397][ T14] usb 3-1: Product: syz [ 470.582930][ T14] usb 3-1: Manufacturer: syz [ 470.593612][ T14] usb 3-1: SerialNumber: syz [ 470.634014][ T14] usb 3-1: config 0 descriptor?? [ 470.681085][ T14] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 470.743070][ T14] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 471.049988][ T4311] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 471.255603][ T4311] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 471.274033][ T14] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 471.280444][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.311366][ T4311] usb 1-1: Product: syz [ 471.322177][ T4311] usb 1-1: Manufacturer: syz [ 471.345159][ T4311] usb 1-1: SerialNumber: syz [ 471.361199][ T4311] usb 1-1: config 0 descriptor?? [ 471.604233][ T4311] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 471.697409][ T14] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 471.730210][ T14] em28xx 3-1:0.0: board has no eeprom [ 472.069963][ T14] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 472.133998][ T14] em28xx 3-1:0.0: dvb set to bulk mode. [ 472.151264][ T4312] em28xx 3-1:0.0: Binding DVB extension [ 472.377245][ T14] usb 3-1: USB disconnect, device number 12 [ 472.390997][ T14] em28xx 3-1:0.0: Disconnecting em28xx [ 472.888654][ T4312] em28xx 3-1:0.0: Registering input extension [ 472.910263][ T14] em28xx 3-1:0.0: Closing input extension [ 472.950674][ T14] em28xx 3-1:0.0: Freeing device [ 473.682362][ T4311] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 473.693637][ T4311] usb 1-1: USB disconnect, device number 13 [ 473.701430][ T8560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 473.708427][ T8560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.731519][ T8560] vhci_hcd vhci_hcd.0: Device attached [ 473.780371][ T8559] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 473.787248][ T8559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.852744][ T8559] vhci_hcd vhci_hcd.0: Device attached [ 474.030382][ T4312] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 474.790665][ T8565] vhci_hcd: connection closed [ 474.790868][ T46] vhci_hcd: stop threads [ 474.801017][ T8561] vhci_hcd: connection reset by peer [ 474.837183][ T46] vhci_hcd: release socket [ 474.864712][ T46] vhci_hcd: disconnect device [ 474.888921][ T46] vhci_hcd: stop threads [ 474.911395][ T46] vhci_hcd: release socket [ 474.934483][ T8583] binder: 8582:8583 ioctl c0306201 0 returned -14 [ 474.946416][ T46] vhci_hcd: disconnect device [ 475.649400][ T8596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1168'. [ 476.510174][ T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 476.752088][ T14] usb 1-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 476.772036][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.860016][ T4314] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 476.888670][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 476.961696][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 476.999975][ T4313] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 477.017119][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 477.026497][ T14] usb 1-1: Product: syz [ 477.041001][ T14] usb 1-1: Manufacturer: syz [ 477.050132][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 477.067441][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 477.109225][ T4314] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 477.138915][ T14] usb 1-1: config 0 descriptor?? [ 477.175835][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.190051][ T4313] usb 3-1: device descriptor read/64, error -71 [ 477.244391][ T4314] usb 4-1: Product: syz [ 477.275658][ T4314] usb 4-1: Manufacturer: syz [ 477.316898][ T4314] usb 4-1: SerialNumber: syz [ 477.351050][ T4314] usb 4-1: config 0 descriptor?? [ 477.378040][ T4314] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 477.406843][ T4314] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 477.469962][ T4313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 477.660033][ T4313] usb 3-1: device descriptor read/64, error -71 [ 477.780160][ T4313] usb usb3-port1: attempt power cycle [ 477.963796][ T4314] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 478.190346][ T4313] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 478.230554][ T4313] usb 3-1: device descriptor read/8, error -71 [ 478.385174][ T4314] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 478.407415][ T4314] em28xx 4-1:0.0: board has no eeprom [ 478.500219][ T4313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 478.535157][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 478.558673][ T8615] team0: Port device batadv3 added [ 478.570908][ T4313] usb 3-1: device descriptor read/8, error -71 [ 478.710214][ T4313] usb usb3-port1: unable to enumerate USB device [ 478.729966][ T4314] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 478.738068][ T4314] em28xx 4-1:0.0: dvb set to bulk mode. [ 478.756302][ T4313] em28xx 4-1:0.0: Binding DVB extension [ 479.040744][ T4314] usb 4-1: USB disconnect, device number 14 [ 479.049418][ T4314] em28xx 4-1:0.0: Disconnecting em28xx [ 479.184554][ T4313] em28xx 4-1:0.0: Registering input extension [ 479.200115][ T4314] em28xx 4-1:0.0: Closing input extension [ 479.259741][ T4314] em28xx 4-1:0.0: Freeing device [ 479.265173][ T4312] vhci_hcd: vhci_device speed not set [ 479.931534][ T27] usb 1-1: USB disconnect, device number 14 [ 481.163350][ T8645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 481.170234][ T8645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 481.178693][ T8643] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1183'. [ 481.251780][ T8645] vhci_hcd vhci_hcd.0: Device attached [ 481.349315][ T8645] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 481.356437][ T8645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 481.415641][ T8645] vhci_hcd vhci_hcd.0: Device attached [ 481.539945][ T4311] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 481.998262][ T8648] vhci_hcd: connection closed [ 481.998488][ T5421] vhci_hcd: stop threads [ 482.010266][ T8646] vhci_hcd: connection reset by peer [ 482.027917][ T5421] vhci_hcd: release socket [ 482.040251][ T4312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 482.048941][ T5421] vhci_hcd: disconnect device [ 482.065385][ T5421] vhci_hcd: stop threads [ 482.077656][ T5421] vhci_hcd: release socket [ 482.093646][ T5421] vhci_hcd: disconnect device [ 482.230402][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 482.237746][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 482.306453][ T4312] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.347522][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.425302][ T4312] usb 5-1: Product: syz [ 482.439152][ T4312] usb 5-1: Manufacturer: syz [ 482.459510][ T4312] usb 5-1: SerialNumber: syz [ 482.488311][ T4312] usb 5-1: config 0 descriptor?? [ 482.509324][ T4312] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.550504][ T4312] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 482.839968][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 483.020011][ T27] usb 3-1: device descriptor read/64, error -71 [ 483.108253][ T4312] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 483.170058][ T4313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 483.310104][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 483.390052][ T4313] usb 2-1: Using ep0 maxpacket: 8 [ 483.397687][ T4313] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 483.416005][ T4313] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.430399][ T4313] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.448281][ T4313] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.468272][ T4313] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.490243][ T4313] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 483.499821][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.500274][ T27] usb 3-1: device descriptor read/64, error -71 [ 483.530796][ T4312] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 483.561496][ T4312] em28xx 5-1:0.0: board has no eeprom [ 483.731506][ T27] usb usb3-port1: attempt power cycle [ 483.788859][ T4313] usb 2-1: usb_control_msg returned -32 [ 483.795378][ T4313] usbtmc 2-1:16.0: can't read capabilities [ 483.890292][ T4312] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 483.909503][ T4312] em28xx 5-1:0.0: dvb set to bulk mode. [ 483.944580][ T3598] em28xx 5-1:0.0: Binding DVB extension [ 483.998979][ T14] usb 5-1: USB disconnect, device number 14 [ 484.014390][ T14] em28xx 5-1:0.0: Disconnecting em28xx [ 484.159966][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 484.230938][ T27] usb 3-1: device descriptor read/8, error -71 [ 484.284199][ T3598] em28xx 5-1:0.0: Registering input extension [ 484.298137][ T14] em28xx 5-1:0.0: Closing input extension [ 484.322927][ T14] em28xx 5-1:0.0: Freeing device [ 484.510011][ T27] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 484.550827][ T27] usb 3-1: device descriptor read/8, error -71 [ 484.691853][ T27] usb usb3-port1: unable to enumerate USB device [ 484.888271][ T8675] KVM: debugfs: duplicate directory 8675-8 [ 485.668818][ T8688] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1196'. [ 486.690260][ T4311] vhci_hcd: vhci_device speed not set [ 487.434027][ T8700] netlink: 'syz.3.1199': attribute type 21 has an invalid length. [ 487.479230][ T8700] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1199'. [ 487.518088][ T8703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 487.524885][ T8703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.534260][ T8703] vhci_hcd vhci_hcd.0: Device attached [ 488.063040][ T8704] vhci_hcd: connection closed [ 488.063363][ T4325] vhci_hcd: stop threads [ 488.078566][ T4325] vhci_hcd: release socket [ 488.100004][ T4325] vhci_hcd: disconnect device [ 488.415581][ T8708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 488.422457][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.440159][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 488.500149][ T8708] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 488.506951][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.520023][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 488.710084][ T3598] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 489.011714][ T8662] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 489.128655][ T4312] usb 2-1: USB disconnect, device number 10 [ 489.237061][ T8711] vhci_hcd: connection closed [ 489.237458][ T4325] vhci_hcd: stop threads [ 489.251178][ T8709] vhci_hcd: connection reset by peer [ 489.280879][ T4325] vhci_hcd: release socket [ 489.341432][ T4325] vhci_hcd: disconnect device [ 489.349286][ T4325] vhci_hcd: stop threads [ 489.372487][ T4325] vhci_hcd: release socket [ 489.377410][ T4325] vhci_hcd: disconnect device [ 489.510024][ T4313] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 489.700080][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 489.708291][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 489.757670][ T8726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1207'. [ 489.766409][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.812518][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.843108][ T4313] usb 1-1: Product: syz [ 489.847524][ T4313] usb 1-1: Manufacturer: syz [ 489.860388][ T8728] binder: BINDER_SET_CONTEXT_MGR already set [ 489.866739][ T4313] usb 1-1: SerialNumber: syz [ 489.871775][ T8728] binder: 8727:8728 ioctl 4018620d 200000000040 returned -16 [ 489.908504][ T4313] usb 1-1: config 0 descriptor?? [ 489.945128][ T4313] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 489.964940][ T4313] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 489.980028][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 490.296505][ T14] usb 5-1: device descriptor read/64, error -71 [ 490.570063][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 490.726787][ T4313] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 490.740032][ T14] usb 5-1: device descriptor read/64, error -71 [ 490.860746][ T14] usb usb5-port1: attempt power cycle [ 491.076144][ T8743] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 491.082924][ T8743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.095142][ T8743] vhci_hcd vhci_hcd.0: Device attached [ 491.627427][ T4313] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 491.642001][ T4313] em28xx 1-1:0.0: board has no eeprom [ 491.676009][ T8744] vhci_hcd: connection closed [ 491.676265][ T4325] vhci_hcd: stop threads [ 491.685747][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 491.699138][ T4325] vhci_hcd: release socket [ 491.740023][ T4325] vhci_hcd: disconnect device [ 491.760648][ T14] usb 5-1: device descriptor read/8, error -71 [ 491.789972][ T27] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 491.818377][ T27] usb 39-1: enqueue for inactive port 0 [ 491.920133][ T27] vhci_hcd: vhci_device speed not set [ 491.949942][ T4313] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 491.958827][ T4313] em28xx 1-1:0.0: dvb set to bulk mode. [ 492.012284][ T4313] em28xx 1-1:0.0: Binding DVB extension [ 492.040051][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 492.061712][ T4307] usb 1-1: USB disconnect, device number 15 [ 492.078795][ T4307] em28xx 1-1:0.0: Disconnecting em28xx [ 492.098844][ T14] usb 5-1: device descriptor read/8, error -71 [ 492.230107][ T14] usb usb5-port1: unable to enumerate USB device [ 492.364802][ T4313] em28xx 1-1:0.0: Registering input extension [ 492.392516][ T4307] em28xx 1-1:0.0: Closing input extension [ 492.440261][ T4307] em28xx 1-1:0.0: Freeing device [ 492.910014][ T4313] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 493.111686][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.191480][ T4313] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.339972][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.391902][ T4313] usb 4-1: config 0 descriptor?? [ 493.415565][ T8765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1219'. [ 493.580810][ T8768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 493.587694][ T8768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.654654][ T8771] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 493.661478][ T8771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.675998][ T4313] usbhid 4-1:0.0: can't add hid device: -71 [ 493.701048][ T4313] usbhid: probe of 4-1:0.0 failed with error -71 [ 493.764552][ T4313] usb 4-1: USB disconnect, device number 15 [ 493.807592][ T8776] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 493.814280][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.826760][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 494.512978][ T8777] vhci_hcd: connection closed [ 494.513307][ T4416] vhci_hcd: stop threads [ 494.526985][ T8768] vhci_hcd vhci_hcd.0: Device attached [ 494.609082][ T8771] vhci_hcd vhci_hcd.0: Device attached [ 494.626126][ T4416] vhci_hcd: release socket [ 494.641268][ T4416] vhci_hcd: disconnect device [ 494.660269][ T129] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 494.670206][ T4313] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 494.684073][ T129] usb 35-1: enqueue for inactive port 0 [ 494.785704][ T129] vhci_hcd: vhci_device speed not set [ 494.834776][ T8759] netlink: 'syz.0.1215': attribute type 21 has an invalid length. [ 494.854644][ T8759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1215'. [ 494.880004][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 494.887700][ T4313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.929758][ T4313] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 494.964348][ T8772] vhci_hcd: connection closed [ 494.964675][ T5421] vhci_hcd: stop threads [ 494.974823][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.983419][ T8769] vhci_hcd: connection reset by peer [ 495.021127][ T5421] vhci_hcd: release socket [ 495.025853][ T5421] vhci_hcd: disconnect device [ 495.032278][ T5421] vhci_hcd: stop threads [ 495.047856][ T5421] vhci_hcd: release socket [ 495.051842][ T4313] usb 4-1: config 0 descriptor?? [ 495.095423][ T5421] vhci_hcd: disconnect device [ 495.105586][ T4313] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 495.157861][ T4313] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 495.170235][ T3598] vhci_hcd: vhci_device speed not set [ 495.570370][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 495.780052][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 495.790284][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 495.858791][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 495.923828][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.958387][ T27] usb 2-1: Product: syz [ 495.973310][ T27] usb 2-1: Manufacturer: syz [ 496.000053][ T27] usb 2-1: SerialNumber: syz [ 496.052049][ T27] usb 2-1: config 0 descriptor?? [ 496.091392][ T27] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 496.129484][ T27] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 496.552135][ T3598] usb 4-1: USB disconnect, device number 16 [ 496.591432][ T3598] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 496.693377][ T27] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 496.824691][ T8802] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 497.114197][ T27] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 497.133778][ T27] em28xx 2-1:0.0: board has no eeprom [ 497.459990][ T27] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 497.472947][ T27] em28xx 2-1:0.0: dvb set to bulk mode. [ 497.501245][ T4313] em28xx 2-1:0.0: Binding DVB extension [ 497.565008][ T27] usb 2-1: USB disconnect, device number 11 [ 497.582765][ T27] em28xx 2-1:0.0: Disconnecting em28xx [ 497.864666][ T4313] em28xx 2-1:0.0: Registering input extension [ 497.960999][ T27] em28xx 2-1:0.0: Closing input extension [ 498.018061][ T27] em28xx 2-1:0.0: Freeing device [ 498.334890][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1233'. [ 499.067267][ T8824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 499.073977][ T8824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.082896][ T8824] vhci_hcd vhci_hcd.0: Device attached [ 499.642066][ T8827] vhci_hcd: connection closed [ 499.642289][ T4416] vhci_hcd: stop threads [ 499.672697][ T4416] vhci_hcd: release socket [ 499.690548][ T4416] vhci_hcd: disconnect device [ 500.426906][ T8843] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 500.433784][ T8843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.509938][ T8831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 500.511231][ T8843] vhci_hcd vhci_hcd.0: Device attached [ 500.546498][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 500.563632][ T8846] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 500.570406][ T8846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.588569][ T8842] device team_slave_0 entered promiscuous mode [ 500.595144][ T8842] device team_slave_1 entered promiscuous mode [ 500.602452][ T8842] device batadv1 entered promiscuous mode [ 500.608540][ T8842] device batadv2 entered promiscuous mode [ 500.615155][ T8842] device batadv3 entered promiscuous mode [ 500.686380][ T8846] vhci_hcd vhci_hcd.0: Device attached [ 500.720598][ T8842] device macvtap1 entered promiscuous mode [ 500.729915][ T8831] usb 5-1: Using ep0 maxpacket: 16 [ 500.738766][ T8831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 500.774408][ T8842] device team0 entered promiscuous mode [ 500.796845][ T8831] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.800997][ T4307] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 500.844862][ T8831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.875114][ T8831] usb 5-1: Product: syz [ 500.886387][ T8831] usb 5-1: Manufacturer: syz [ 500.899225][ T8842] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 500.900151][ T8831] usb 5-1: SerialNumber: syz [ 500.982987][ T8831] usb 5-1: config 0 descriptor?? [ 501.022177][ T8831] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 501.065601][ T8831] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 501.217347][ T8847] vhci_hcd: connection closed [ 501.217744][ T4414] vhci_hcd: stop threads [ 501.231025][ T8844] vhci_hcd: connection reset by peer [ 501.253706][ T4414] vhci_hcd: release socket [ 501.287199][ T4414] vhci_hcd: disconnect device [ 501.324450][ T4414] vhci_hcd: stop threads [ 501.354157][ T4414] vhci_hcd: release socket [ 501.375364][ T4414] vhci_hcd: disconnect device [ 501.430201][ T8855] netlink: 'syz.1.1241': attribute type 4 has an invalid length. [ 501.617214][ T8831] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 501.742686][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.749084][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.173971][ T8831] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 502.426070][ T8831] em28xx 5-1:0.0: board has no eeprom [ 502.720132][ T8831] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 502.751704][ T8831] em28xx 5-1:0.0: dvb set to bulk mode. [ 502.779025][ T4311] em28xx 5-1:0.0: Binding DVB extension [ 502.787603][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1243'. [ 502.821233][ T8831] usb 5-1: USB disconnect, device number 19 [ 502.858805][ T8831] em28xx 5-1:0.0: Disconnecting em28xx [ 503.144021][ T4311] em28xx 5-1:0.0: Registering input extension [ 503.161582][ T8831] em28xx 5-1:0.0: Closing input extension [ 503.214539][ T8831] em28xx 5-1:0.0: Freeing device [ 503.817297][ T8889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 503.823895][ T8889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 503.900076][ T8889] vhci_hcd vhci_hcd.0: Device attached [ 504.210481][ T4313] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 504.486276][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 504.618688][ T8886] team0: Port device batadv3 added [ 504.648272][ T8891] vhci_hcd: connection reset by peer [ 504.666962][ T4417] vhci_hcd: stop threads [ 504.671871][ T4417] vhci_hcd: release socket [ 504.705146][ T4417] vhci_hcd: disconnect device [ 504.828865][ T8901] netlink: 'syz.1.1251': attribute type 21 has an invalid length. [ 504.843885][ T8901] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1251'. [ 505.970125][ T4307] vhci_hcd: vhci_device speed not set [ 506.157618][ T8913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 506.164538][ T8913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.200671][ T8913] vhci_hcd vhci_hcd.0: Device attached [ 506.261856][ T8918] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 506.268613][ T8918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.360229][ T8918] vhci_hcd vhci_hcd.0: Device attached [ 507.038952][ T8919] vhci_hcd: connection closed [ 507.039275][ T4417] vhci_hcd: stop threads [ 507.049224][ T4417] vhci_hcd: release socket [ 507.055041][ T8916] vhci_hcd: connection closed [ 507.068257][ T4417] vhci_hcd: disconnect device [ 507.079607][ T4417] vhci_hcd: stop threads [ 507.084188][ T4417] vhci_hcd: release socket [ 507.088884][ T4417] vhci_hcd: disconnect device [ 507.555261][ T8941] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 507.613348][ T8941] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1263'. [ 507.658275][ T8943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 507.665035][ T8943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.738419][ T8943] vhci_hcd vhci_hcd.0: Device attached [ 508.020062][ T4308] usb 35-1: new low-speed USB device number 11 using vhci_hcd [ 508.514118][ T8944] vhci_hcd: connection reset by peer [ 508.520814][ T5421] vhci_hcd: stop threads [ 508.525490][ T5421] vhci_hcd: release socket [ 508.546154][ T5421] vhci_hcd: disconnect device [ 509.339997][ T4313] vhci_hcd: vhci_device speed not set [ 509.940662][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 509.964357][ T8975] team0: Port device batadv2 added [ 510.551250][ T8980] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 510.558048][ T8980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.582217][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 510.611872][ T8980] vhci_hcd vhci_hcd.0: Device attached [ 510.641313][ T8988] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 510.648060][ T8988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.748031][ T8988] vhci_hcd vhci_hcd.0: Device attached [ 511.408603][ T8989] vhci_hcd: connection closed [ 511.408934][ T4536] vhci_hcd: stop threads [ 511.422768][ T8982] vhci_hcd: connection closed [ 511.446517][ T4536] vhci_hcd: release socket [ 511.535669][ T4536] vhci_hcd: disconnect device [ 511.571268][ T4536] vhci_hcd: stop threads [ 511.575682][ T4536] vhci_hcd: release socket [ 511.632413][ T4536] vhci_hcd: disconnect device [ 511.774540][ T9008] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 511.781228][ T9008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 512.149640][ T9008] vhci_hcd vhci_hcd.0: Device attached [ 512.410038][ T8831] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 512.553974][ T9009] vhci_hcd: connection reset by peer [ 512.559632][ T46] vhci_hcd: stop threads [ 512.573273][ T46] vhci_hcd: release socket [ 512.599118][ T46] vhci_hcd: disconnect device [ 513.170446][ T4308] vhci_hcd: vhci_device speed not set [ 513.957594][ T9034] device syzkaller0 entered promiscuous mode [ 514.520407][ T9043] tipc: Enabling of bearer rejected, failed to enable media [ 516.196148][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 516.219552][ T9070] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 516.226745][ T9070] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.255287][ T9073] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 516.262304][ T9073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.285630][ T9070] vhci_hcd vhci_hcd.0: Device attached [ 516.319376][ T9068] team0: Port device batadv3 added [ 516.372991][ T9073] vhci_hcd vhci_hcd.0: Device attached [ 516.480985][ T9081] netlink: 'syz.4.1295': attribute type 21 has an invalid length. [ 516.499308][ T9081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1295'. [ 516.560027][ T4307] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 516.850699][ T9058] netlink: 'syz.0.1290': attribute type 21 has an invalid length. [ 516.890255][ T9058] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1290'. [ 516.937320][ T9074] vhci_hcd: connection closed [ 516.937551][ T4536] vhci_hcd: stop threads [ 516.942798][ T9071] vhci_hcd: connection reset by peer [ 516.961338][ T4536] vhci_hcd: release socket [ 516.977740][ T4536] vhci_hcd: disconnect device [ 516.995772][ T4536] vhci_hcd: stop threads [ 517.020358][ T4536] vhci_hcd: release socket [ 517.040337][ T4536] vhci_hcd: disconnect device [ 517.570289][ T8831] vhci_hcd: vhci_device speed not set [ 518.849289][ T9099] tipc: Enabling of bearer rejected, failed to enable media [ 519.499963][ T4313] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 519.710081][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 519.718262][ T4313] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 519.859889][ T4313] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.931860][ T9127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 519.938787][ T9127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.957161][ T4313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.979629][ T4313] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.990625][ T9127] vhci_hcd vhci_hcd.0: Device attached [ 520.156837][ T4313] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.171903][ T4313] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.181533][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.330578][ T8831] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 520.441068][ T4313] usb 3-1: usb_control_msg returned -32 [ 520.447394][ T4313] usbtmc 3-1:16.0: can't read capabilities [ 520.628592][ T9128] vhci_hcd: connection reset by peer [ 520.636393][ T4569] vhci_hcd: stop threads [ 520.641952][ T4569] vhci_hcd: release socket [ 520.670060][ T4569] vhci_hcd: disconnect device [ 520.853186][ T4313] usb 3-1: USB disconnect, device number 21 [ 520.963736][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 520.973952][ T9139] team0: Port device batadv4 added [ 521.539489][ T9148] binder: 9147:9148 ioctl c0306201 0 returned -14 [ 521.730594][ T4307] vhci_hcd: vhci_device speed not set [ 523.501301][ T9162] tipc: Enabling of bearer rejected, failed to enable media [ 523.945112][ T9182] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 523.951828][ T9182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.979984][ T9182] vhci_hcd vhci_hcd.0: Device attached [ 524.010116][ T4308] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 524.200014][ T4308] usb 3-1: Using ep0 maxpacket: 16 [ 524.211761][ T4308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.264009][ T4308] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.316842][ T4308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.370161][ T4308] usb 3-1: Product: syz [ 524.388544][ T4308] usb 3-1: Manufacturer: syz [ 524.413022][ T4308] usb 3-1: SerialNumber: syz [ 524.432414][ T9183] vhci_hcd: connection closed [ 524.432799][ T4569] vhci_hcd: stop threads [ 524.460530][ T4308] usb 3-1: config 0 descriptor?? [ 524.486974][ T4569] vhci_hcd: release socket [ 524.503272][ T4569] vhci_hcd: disconnect device [ 524.528894][ T9193] binder: 9192:9193 ioctl c0306201 0 returned -14 [ 524.660252][ T27] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 524.680150][ T9199] netlink: 'syz.0.1328': attribute type 21 has an invalid length. [ 524.688223][ T9199] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1328'. [ 524.850082][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 524.857473][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 524.866556][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.877131][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.887796][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.898576][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.920589][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 524.932110][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.247457][ T27] usb 5-1: usb_control_msg returned -32 [ 525.254642][ T27] usbtmc 5-1:16.0: can't read capabilities [ 525.347936][ T27] usb 5-1: USB disconnect, device number 20 [ 525.732063][ T8831] vhci_hcd: vhci_device speed not set [ 526.871683][ T27] usb 3-1: USB disconnect, device number 22 [ 527.057219][ T9231] tipc: Enabled bearer , priority 10 [ 527.079997][ T9229] tipc: Enabled bearer , priority 0 [ 527.143149][ T9229] tipc: Resetting bearer [ 527.234618][ T9228] tipc: Disabling bearer [ 527.491669][ T9237] binder: 9236:9237 ioctl c0306201 0 returned -14 [ 527.552423][ T9239] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 527.559128][ T9239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.572710][ T9239] vhci_hcd vhci_hcd.0: Device attached [ 528.164592][ T9240] vhci_hcd: connection closed [ 528.170888][ T4308] usb 35-1: new low-speed USB device number 12 using vhci_hcd [ 528.195031][ T4289] vhci_hcd: stop threads [ 528.213753][ T4289] vhci_hcd: release socket [ 528.235596][ T4289] vhci_hcd: disconnect device [ 529.150054][ T4313] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 529.340194][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 529.350475][ T4313] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 529.373687][ T4313] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.394920][ T4313] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.417481][ T4313] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.420446][ T8831] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 529.442660][ T4313] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.471071][ T4313] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.490559][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.621895][ T8831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.638710][ T8831] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 529.649303][ T129] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 529.674594][ T8831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.697316][ T8831] usb 1-1: config 0 descriptor?? [ 529.739209][ T4313] usb 5-1: usb_control_msg returned -32 [ 529.755007][ T4313] usbtmc 5-1:16.0: can't read capabilities [ 529.798234][ T4313] usb 5-1: USB disconnect, device number 21 [ 529.870917][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 529.878646][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 529.917897][ T8831] usbhid 1-1:0.0: can't add hid device: -71 [ 529.926295][ T8831] usbhid: probe of 1-1:0.0 failed with error -71 [ 529.937176][ T129] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 529.967339][ T8831] usb 1-1: USB disconnect, device number 16 [ 529.975943][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.019294][ T129] usb 2-1: Product: syz [ 530.051876][ T129] usb 2-1: Manufacturer: syz [ 530.077464][ T129] usb 2-1: SerialNumber: syz [ 530.093134][ T129] usb 2-1: config 0 descriptor?? [ 530.112389][ T129] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 530.124105][ T129] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 530.560207][ T8831] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 530.656572][ T9268] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 530.714814][ T129] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 530.750429][ T8831] usb 1-1: Using ep0 maxpacket: 32 [ 530.757962][ T8831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.804438][ T8831] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 530.839981][ T8831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.891281][ T8831] usb 1-1: config 0 descriptor?? [ 530.909432][ T8831] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 530.934285][ T8831] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 530.981156][ T9270] tipc: Enabled bearer , priority 0 [ 531.101203][ T9270] tipc: Resetting bearer [ 531.137340][ T129] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 531.148489][ T9269] tipc: Disabling bearer [ 531.154697][ T129] em28xx 2-1:0.0: board has no eeprom [ 531.315313][ T4312] usb 1-1: USB disconnect, device number 17 [ 531.336893][ T4312] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 531.440000][ T129] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 531.450140][ T129] em28xx 2-1:0.0: dvb set to bulk mode. [ 531.476476][ T8831] em28xx 2-1:0.0: Binding DVB extension [ 531.510169][ T129] usb 2-1: USB disconnect, device number 12 [ 531.537884][ T129] em28xx 2-1:0.0: Disconnecting em28xx [ 531.686050][ T8831] em28xx 2-1:0.0: Registering input extension [ 531.713508][ T129] em28xx 2-1:0.0: Closing input extension [ 531.735050][ T129] em28xx 2-1:0.0: Freeing device [ 533.341609][ T4308] vhci_hcd: vhci_device speed not set [ 533.949974][ T27] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 534.169980][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 534.177011][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 534.210862][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 534.245851][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 534.289447][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 534.349975][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.418657][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 534.487108][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.783770][ T27] usb 5-1: usb_control_msg returned -32 [ 534.789684][ T27] usbtmc 5-1:16.0: can't read capabilities [ 534.874477][ T27] usb 5-1: USB disconnect, device number 22 [ 536.090463][ T9320] tipc: Enabled bearer , priority 0 [ 536.270656][ T9320] tipc: Resetting bearer [ 536.382111][ T9319] tipc: Disabling bearer [ 536.871322][ T9337] binder: 9334:9337 ioctl c0306201 0 returned -14 [ 537.940029][ T4308] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 538.649991][ T4308] usb 5-1: Using ep0 maxpacket: 8 [ 538.660756][ T4308] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 538.730109][ T4308] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.857393][ T4308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.888438][ T4308] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.920083][ T4308] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.980089][ T4308] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.059292][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.539685][ T4308] usb 5-1: usb_control_msg returned -71 [ 539.548556][ T4308] usbtmc 5-1:16.0: can't read capabilities [ 539.676850][ T4308] usb 5-1: USB disconnect, device number 23 [ 539.824090][ T9377] netlink: 'syz.3.1380': attribute type 10 has an invalid length. [ 539.953577][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.989166][ T9377] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 540.280154][ T9385] binder: 9384:9385 ioctl c0306201 0 returned -14 [ 540.369976][ T4313] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 540.598538][ T4313] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 540.640088][ T4313] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 540.674100][ T4313] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.702391][ T4313] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.719930][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 540.755484][ T4313] usb 3-1: Product: syz [ 540.791781][ T4313] usb 3-1: Manufacturer: syz [ 540.796525][ T4313] usb 3-1: SerialNumber: syz [ 540.821520][ T4313] usb 3-1: config 0 descriptor?? [ 540.842089][ T4313] usb 3-1: selecting invalid altsetting 0 [ 540.864842][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 541.276857][ T4313] usb 3-1: USB disconnect, device number 23 [ 542.914456][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 542.950748][ T9403] team0: Port device batadv4 added [ 543.590140][ T4313] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 543.779987][ T4313] usb 4-1: Using ep0 maxpacket: 8 [ 543.787259][ T4313] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 543.830766][ T4313] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.905531][ T4313] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.965753][ T4313] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.027638][ T4313] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.098065][ T4313] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 544.140324][ T9426] binder: BINDER_SET_CONTEXT_MGR already set [ 544.162041][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.175900][ T9426] binder: 9425:9426 ioctl 4018620d 200000000040 returned -16 [ 544.232622][ T9426] binder: 9425:9426 ioctl c0306201 0 returned -14 [ 544.618025][ T4313] usb 4-1: usb_control_msg returned -71 [ 544.631207][ T4313] usbtmc 4-1:16.0: can't read capabilities [ 544.694393][ T4313] usb 4-1: USB disconnect, device number 17 [ 545.039001][ T9430] device syzkaller0 entered promiscuous mode [ 546.918317][ T4307] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 547.164525][ T4307] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 547.301663][ T4307] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 547.313775][ T4307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.372522][ T4307] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.449953][ T4307] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.458417][ T4307] usb 5-1: Product: syz [ 547.575145][ T4307] usb 5-1: Manufacturer: syz [ 547.720261][ T4307] usb 5-1: SerialNumber: syz [ 547.760377][ T4307] usb 5-1: config 0 descriptor?? [ 547.847060][ T4307] usb 5-1: selecting invalid altsetting 0 [ 548.200868][ T4307] usb 5-1: USB disconnect, device number 24 [ 548.542030][ T8277] udevd[8277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.960022][ T4314] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 550.149957][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 550.159742][ T4314] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 550.183194][ T4314] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.255606][ T4314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.307035][ T4314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 550.338090][ T4314] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.391487][ T4314] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 550.413518][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.902369][ T4314] usb 2-1: usb_control_msg returned -71 [ 550.908285][ T4314] usbtmc 2-1:16.0: can't read capabilities [ 550.943987][ T4314] usb 2-1: USB disconnect, device number 13 [ 551.020960][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 551.193109][ T9479] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 551.516605][ T9479] team0: Port device netdevsim0 added [ 551.530184][ T9485] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 551.647386][ T9485] team0: Port device netdevsim0 removed [ 551.684391][ T9485] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 552.572899][ T9496] device syzkaller0 entered promiscuous mode [ 553.062759][ T9501] device syzkaller0 entered promiscuous mode [ 553.272772][ T9442] net_ratelimit: 10 callbacks suppressed [ 553.272792][ T9442] Set syz1 is full, maxelem 65536 reached [ 553.737360][ T9519] Bluetooth: MGMT ver 1.22 [ 556.105639][ T9540] tipc: New replicast peer: 255.255.255.255 [ 556.140862][ T9540] tipc: Enabled bearer , priority 10 [ 556.780752][ T9544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 556.787471][ T9544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 556.799190][ T9544] vhci_hcd vhci_hcd.0: Device attached [ 556.815494][ T9545] vhci_hcd: connection closed [ 556.815791][ T4317] vhci_hcd: stop threads [ 556.835296][ T4317] vhci_hcd: release socket [ 556.860163][ T4317] vhci_hcd: disconnect device [ 556.923624][ T9550] device syzkaller0 entered promiscuous mode [ 561.179951][ T129] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 561.421975][ T129] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.436368][ T129] usb 3-1: config 0 has no interface number 0 [ 561.457535][ T129] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 561.548715][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.609499][ T129] usb 3-1: Product: syz [ 561.633390][ T129] usb 3-1: Manufacturer: syz [ 561.638083][ T129] usb 3-1: SerialNumber: syz [ 561.745550][ T129] usb 3-1: config 0 descriptor?? [ 561.966378][ T129] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 562.004977][ T129] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 562.069750][ T129] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 562.121699][ T129] usb 3-1: media controller created [ 562.156764][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.281824][ T129] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 562.450094][ T129] usb 3-1: USB disconnect, device number 24 [ 563.177974][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.185801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.826438][ T9637] netlink: 'syz.3.1454': attribute type 21 has an invalid length. [ 564.853230][ T9637] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1454'. [ 565.600031][ T4307] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 565.808796][ T4307] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 565.821764][ T4307] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 565.833771][ T4307] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.857657][ T4307] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 565.868762][ T4307] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 565.877728][ T4307] usb 3-1: Product: syz [ 565.882155][ T4307] usb 3-1: Manufacturer: syz [ 565.886954][ T4307] usb 3-1: SerialNumber: syz [ 565.906205][ T4307] usb 3-1: config 0 descriptor?? [ 565.946181][ T4307] usb 3-1: selecting invalid altsetting 0 [ 567.094450][ T129] usb 3-1: USB disconnect, device number 25 [ 567.310102][ T4307] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 567.501027][ T4307] usb 4-1: Using ep0 maxpacket: 16 [ 567.508890][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 567.523443][ T4307] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.549461][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.568593][ T4307] usb 4-1: Product: syz [ 567.583210][ T4307] usb 4-1: Manufacturer: syz [ 567.597184][ T4307] usb 4-1: SerialNumber: syz [ 567.614256][ T9703] device syzkaller0 entered promiscuous mode [ 567.625161][ T4307] usb 4-1: config 0 descriptor?? [ 567.647121][ T4307] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.738423][ T4307] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 567.875207][ T9706] netlink: 'syz.1.1477': attribute type 10 has an invalid length. [ 567.899658][ T9706] device syz_tun entered promiscuous mode [ 568.268677][ T4307] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 568.391623][ T9706] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 568.466097][ T9719] binder_alloc: 9718: pid 9718 spamming oneway? 2 buffers allocated for a total size of 5120 [ 568.492086][ T9721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1477'. [ 568.605828][ T9719] binder: 9718:9719 ioctl c0306201 0 returned -14 [ 568.764485][ T4307] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 568.779901][ T4307] em28xx 4-1:0.0: board has no eeprom [ 569.055272][ T4307] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 569.091288][ T4307] em28xx 4-1:0.0: dvb set to bulk mode. [ 569.137607][ T4307] usb 4-1: USB disconnect, device number 18 [ 569.164023][ T4307] em28xx 4-1:0.0: Disconnecting em28xx [ 569.239701][ T27] em28xx 4-1:0.0: Binding DVB extension [ 569.490191][ T27] em28xx 4-1:0.0: Registering input extension [ 569.505196][ T4307] em28xx 4-1:0.0: Closing input extension [ 569.520820][ T4307] em28xx 4-1:0.0: Freeing device [ 569.647524][ T9739] binder_alloc: 9738: pid 9738 spamming oneway? 2 buffers allocated for a total size of 5120 [ 570.090076][ T27] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 570.281559][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 570.297018][ T9761] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 570.309116][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 570.335283][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 570.352117][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.371275][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.398326][ T27] usb 1-1: Product: syz [ 570.410787][ T27] usb 1-1: Manufacturer: syz [ 570.422324][ T27] usb 1-1: SerialNumber: syz [ 570.461984][ T27] usb 1-1: config 0 descriptor?? [ 570.493129][ T9761] team0: Port device netdevsim0 added [ 570.494452][ T27] usb 1-1: selecting invalid altsetting 0 [ 570.520508][ T9763] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 570.717253][ T27] usb 1-1: USB disconnect, device number 18 [ 570.749551][ T9751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.872607][ T9763] team0: Port device netdevsim0 removed [ 571.007882][ T9763] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 571.648996][ T9785] binder_alloc: 9784: pid 9784 spamming oneway? 2 buffers allocated for a total size of 5120 [ 572.180198][ T129] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 572.400256][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 572.408269][ T129] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 572.449086][ T129] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.494189][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.542781][ T129] usb 4-1: Product: syz [ 572.555201][ T129] usb 4-1: Manufacturer: syz [ 572.570031][ T129] usb 4-1: SerialNumber: syz [ 572.599572][ T129] usb 4-1: config 0 descriptor?? [ 572.908222][ T9809] binder_alloc: 9808: pid 9808 spamming oneway? 2 buffers allocated for a total size of 5120 [ 572.922406][ T9809] binder: 9808:9809 ioctl c0306201 0 returned -14 [ 573.350346][ T9805] syz.1.1506 (9805) used greatest stack depth: 20664 bytes left [ 573.389920][ T4307] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 573.591913][ T4307] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 573.613475][ T4307] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 573.636390][ T4307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 573.646749][ T4307] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 573.656725][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 573.666211][ T4307] usb 1-1: Product: syz [ 573.671407][ T4307] usb 1-1: Manufacturer: syz [ 573.676667][ T4307] usb 1-1: SerialNumber: syz [ 573.692235][ T4307] usb 1-1: config 0 descriptor?? [ 573.706925][ T4307] usb 1-1: selecting invalid altsetting 0 [ 573.856053][ T9823] binder_alloc: 9822: pid 9822 spamming oneway? 2 buffers allocated for a total size of 5120 [ 573.903693][ T4307] usb 1-1: USB disconnect, device number 19 [ 574.249997][ T4313] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 574.333015][ T9838] binder_alloc: 9837: pid 9837 spamming oneway? 2 buffers allocated for a total size of 5120 [ 574.425997][ T4313] usb 2-1: device descriptor read/64, error -71 [ 574.710003][ T4313] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 574.880050][ T4313] usb 2-1: device descriptor read/64, error -71 [ 575.001230][ T4307] usb 4-1: USB disconnect, device number 19 [ 575.010120][ T4313] usb usb2-port1: attempt power cycle [ 575.423173][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 575.430408][ T4313] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 575.451576][ T9855] team0: Port device batadv4 added [ 575.467108][ T9800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.472175][ T4313] usb 2-1: device descriptor read/8, error -71 [ 575.769948][ T4313] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 575.812077][ T4313] usb 2-1: device descriptor read/8, error -71 [ 575.950130][ T4313] usb usb2-port1: unable to enumerate USB device [ 577.150148][ T9873] tipc: Enabled bearer , priority 0 [ 577.169085][ T9873] device syzkaller0 entered promiscuous mode [ 577.207805][ T9877] netlink: 'syz.3.1531': attribute type 13 has an invalid length. [ 577.227968][ T9877] netlink: 'syz.3.1531': attribute type 27 has an invalid length. [ 577.231144][ T9878] binder_alloc: 9876: pid 9876 spamming oneway? 2 buffers allocated for a total size of 5120 [ 577.283936][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 577.328643][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.347567][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.594555][ T9885] tipc: Resetting bearer [ 577.660016][ T4313] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 577.674876][ T9871] tipc: Resetting bearer [ 577.722177][ T9871] tipc: Disabling bearer [ 577.859940][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 577.867704][ T4313] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 577.901397][ T4313] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 577.929698][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.958567][ T4313] usb 2-1: Product: syz [ 577.975583][ T4313] usb 2-1: Manufacturer: syz [ 577.990087][ T4313] usb 2-1: SerialNumber: syz [ 578.009346][ T4313] usb 2-1: config 0 descriptor?? [ 578.239138][ T9900] device syzkaller0 entered promiscuous mode [ 580.445345][ T8831] usb 2-1: USB disconnect, device number 18 [ 580.504072][ T9887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.515447][ T9922] binder_alloc: 9921: pid 9921 spamming oneway? 2 buffers allocated for a total size of 5120 [ 581.257578][ T9949] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 581.286396][ T9949] team0: Port device batadv5 added [ 581.451214][ T129] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 581.465913][ T9952] device syzkaller1 entered promiscuous mode [ 581.649939][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 581.663454][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 581.723763][ T129] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.779918][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.832122][ T129] usb 3-1: Product: syz [ 581.846666][ T129] usb 3-1: Manufacturer: syz [ 581.857387][ T129] usb 3-1: SerialNumber: syz [ 581.882142][ T129] usb 3-1: config 0 descriptor?? [ 581.902687][ T129] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 581.916747][ T129] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 582.245227][ T9956] binder_alloc: 9955: pid 9955 spamming oneway? 2 buffers allocated for a total size of 5120 [ 582.506476][ T129] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 582.931063][ T129] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 582.960163][ T129] em28xx 3-1:0.0: board has no eeprom [ 583.270807][ T129] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 583.289201][ T129] em28xx 3-1:0.0: dvb set to bulk mode. [ 583.309548][ T4312] em28xx 3-1:0.0: Binding DVB extension [ 583.328694][ T129] usb 3-1: USB disconnect, device number 26 [ 583.347033][ T129] em28xx 3-1:0.0: Disconnecting em28xx [ 583.454773][ T4312] em28xx 3-1:0.0: Registering input extension [ 583.462153][ T129] em28xx 3-1:0.0: Closing input extension [ 583.489313][ T129] em28xx 3-1:0.0: Freeing device [ 583.587949][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 583.612139][ T9987] team0: Port device batadv5 added [ 583.847290][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1568'. [ 583.999207][ T9997] binder_alloc: 9996: pid 9996 spamming oneway? 2 buffers allocated for a total size of 5120 [ 585.197581][ T9958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.558254][T10020] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 585.622092][T10020] netlink: 'syz.2.1576': attribute type 10 has an invalid length. [ 585.762034][T10020] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 586.089945][ T4307] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 586.279993][ T4307] usb 4-1: Using ep0 maxpacket: 16 [ 586.287954][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 586.352752][ T4307] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 586.392197][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.413492][ T4307] usb 4-1: Product: syz [ 586.417793][ T4307] usb 4-1: Manufacturer: syz [ 586.425154][ T4307] usb 4-1: SerialNumber: syz [ 586.441145][ T4307] usb 4-1: config 0 descriptor?? [ 586.469241][ T4307] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 586.480784][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.488451][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.516975][ T4307] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 586.525471][T10036] device bridge0 entered promiscuous mode [ 586.617230][T10039] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 586.679713][T10039] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 586.787005][T10042] binder_alloc: 10040: pid 10040 spamming oneway? 2 buffers allocated for a total size of 5120 [ 587.046849][T10047] device syzkaller0 entered promiscuous mode [ 587.055238][ T4307] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 587.127730][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 587.474964][ T4307] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 587.520570][ T4307] em28xx 4-1:0.0: board has no eeprom [ 587.534649][T10051] ================================================================== [ 587.543001][T10051] BUG: KASAN: use-after-free in __pm_runtime_resume+0x148/0x170 [ 587.551131][T10051] Read of size 2 at addr ffff88805726e988 by task syz.4.1583/10051 [ 587.559275][T10051] [ 587.561686][T10051] CPU: 0 PID: 10051 Comm: syz.4.1583 Not tainted syzkaller #0 [ 587.569449][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 587.580097][T10051] Call Trace: [ 587.583698][T10051] [ 587.586679][T10051] dump_stack_lvl+0x188/0x24e [ 587.591530][T10051] ? read_lock_is_recursive+0x10/0x10 [ 587.597340][T10051] ? show_regs_print_info+0x12/0x12 [ 587.602888][T10051] ? load_image+0x400/0x400 [ 587.608243][T10051] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 587.614047][T10051] ? __virt_addr_valid+0x188/0x540 [ 587.620139][T10051] ? __virt_addr_valid+0x465/0x540 [ 587.625854][T10051] ? __pm_runtime_resume+0x148/0x170 [ 587.631315][T10051] print_report+0xa8/0x210 [ 587.636164][T10051] kasan_report+0x10b/0x140 [ 587.640975][T10051] ? __pm_runtime_resume+0x148/0x170 [ 587.646616][T10051] __pm_runtime_resume+0x148/0x170 [ 587.652553][T10051] ethnl_ops_begin+0x59/0x1f0 [ 587.657595][T10051] module_prepare_data+0x71/0x110 [ 587.662912][T10051] ethnl_default_doit+0x4c6/0xb40 [ 587.667999][T10051] genl_family_rcv_msg_doit+0x22a/0x330 [ 587.673894][T10051] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 587.680435][T10051] ? memcpy+0x3c/0x60 [ 587.684524][T10051] ? genl_get_cmd+0x4cf/0x8b0 [ 587.689230][T10051] genl_rcv_msg+0x604/0x790 [ 587.693761][T10051] ? genl_bind+0x360/0x360 [ 587.698378][T10051] ? ethnl_default_notify+0x5f0/0x5f0 [ 587.704467][T10051] ? ethnl_default_doit+0xb40/0xb40 [ 587.710120][T10051] ? ethnl_default_start+0x5a0/0x5a0 [ 587.715534][T10051] ? ethnl_default_dumpit+0xed0/0xed0 [ 587.721174][T10051] netlink_rcv_skb+0x1fb/0x450 [ 587.726465][T10051] ? genl_bind+0x360/0x360 [ 587.731444][T10051] ? netlink_ack+0x1170/0x1170 [ 587.736570][T10051] ? down_read+0x1a8/0x2d0 [ 587.741307][T10051] genl_rcv+0x24/0x40 [ 587.745430][T10051] netlink_unicast+0x74d/0x8d0 [ 587.750297][T10051] netlink_sendmsg+0x8ad/0xbd0 [ 587.755466][T10051] ? netlink_getsockopt+0x550/0x550 [ 587.760888][T10051] ? aa_sock_msg_perm+0x94/0x150 [ 587.765951][T10051] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 587.771346][T10051] ? security_socket_sendmsg+0x7c/0xa0 [ 587.777097][T10051] ? netlink_getsockopt+0x550/0x550 [ 587.782338][T10051] ____sys_sendmsg+0x5be/0x970 [ 587.787254][T10051] ? __sys_sendmsg_sock+0x30/0x30 [ 587.792393][T10051] ? __import_iovec+0x315/0x500 [ 587.797495][T10051] ? import_iovec+0x6f/0xa0 [ 587.802038][T10051] ___sys_sendmsg+0x2a2/0x360 [ 587.806924][T10051] ? try_to_wake_up+0x6ae/0x1080 [ 587.811923][T10051] ? __sys_sendmsg+0x290/0x290 [ 587.816923][T10051] __se_sys_sendmsg+0x1bb/0x2a0 [ 587.821937][T10051] ? __x64_sys_sendmsg+0x80/0x80 [ 587.827046][T10051] ? lockdep_hardirqs_on+0x94/0x140 [ 587.832275][T10051] do_syscall_64+0x4c/0xa0 [ 587.836909][T10051] ? clear_bhb_loop+0x60/0xb0 [ 587.842087][T10051] ? clear_bhb_loop+0x60/0xb0 [ 587.846959][T10051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.853066][T10051] RIP: 0033:0x7fdc8db9c819 [ 587.857639][T10051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.878109][T10051] RSP: 002b:00007fdc8eab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.886838][T10051] RAX: ffffffffffffffda RBX: 00007fdc8de16090 RCX: 00007fdc8db9c819 [ 587.895096][T10051] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 587.903220][T10051] RBP: 00007fdc8dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 587.911792][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.920159][T10051] R13: 00007fdc8de16128 R14: 00007fdc8de16090 R15: 00007ffe0fa962d8 [ 587.929309][T10051] [ 587.932568][T10051] [ 587.934961][T10051] Allocated by task 4270: [ 587.939490][T10051] kasan_set_track+0x4b/0x70 [ 587.944426][T10051] __kasan_kmalloc+0x8e/0xa0 [ 587.949374][T10051] __kmalloc_node+0xb0/0x240 [ 587.954556][T10051] kvmalloc_node+0x6c/0x180 [ 587.959234][T10051] alloc_netdev_mqs+0x84/0xf00 [ 587.964364][T10051] rtnl_create_link+0x2fb/0xb80 [ 587.969607][T10051] veth_newlink+0x307/0xc80 [ 587.974575][T10051] rtnl_newlink+0x1542/0x2080 [ 587.979896][T10051] rtnetlink_rcv_msg+0x87c/0xfc0 [ 587.984998][T10051] netlink_rcv_skb+0x1fb/0x450 [ 587.989964][T10051] netlink_unicast+0x74d/0x8d0 [ 587.995259][T10051] netlink_sendmsg+0x8ad/0xbd0 [ 588.000570][T10051] __sys_sendto+0x497/0x650 [ 588.005736][T10051] __x64_sys_sendto+0xda/0xf0 [ 588.010778][T10051] do_syscall_64+0x4c/0xa0 [ 588.015687][T10051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.022140][T10051] [ 588.024684][T10051] Freed by task 10049: [ 588.028915][T10051] kasan_set_track+0x4b/0x70 [ 588.033600][T10051] kasan_save_free_info+0x2d/0x50 [ 588.038903][T10051] ____kasan_slab_free+0x126/0x1e0 [ 588.044184][T10051] slab_free_freelist_hook+0x131/0x1a0 [ 588.050136][T10051] __kmem_cache_free+0xb6/0x1f0 [ 588.055215][T10051] device_release+0x92/0x1c0 [ 588.060042][T10051] kobject_put+0x21d/0x460 [ 588.064841][T10051] netdev_run_todo+0xcb3/0xdb0 [ 588.069665][T10051] rtnetlink_rcv_msg+0xad6/0xfc0 [ 588.074752][T10051] netlink_rcv_skb+0x1fb/0x450 [ 588.079673][T10051] netlink_unicast+0x74d/0x8d0 [ 588.084590][T10051] netlink_sendmsg+0x8ad/0xbd0 [ 588.089529][T10051] ____sys_sendmsg+0x5be/0x970 [ 588.094562][T10051] ___sys_sendmsg+0x2a2/0x360 [ 588.099417][T10051] __se_sys_sendmsg+0x1bb/0x2a0 [ 588.104730][T10051] do_syscall_64+0x4c/0xa0 [ 588.109551][T10051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.115975][T10051] [ 588.118418][T10051] The buggy address belongs to the object at ffff88805726e000 [ 588.118418][T10051] which belongs to the cache kmalloc-cg-4k of size 4096 [ 588.133971][T10051] The buggy address is located 2440 bytes inside of [ 588.133971][T10051] 4096-byte region [ffff88805726e000, ffff88805726f000) [ 588.148280][T10051] [ 588.150959][T10051] The buggy address belongs to the physical page: [ 588.157519][T10051] page:ffffea00015c9a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57268 [ 588.168046][T10051] head:ffffea00015c9a00 order:3 compound_mapcount:0 compound_pincount:0 [ 588.176659][T10051] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 588.185473][T10051] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 588.194459][T10051] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 588.203256][T10051] page dumped because: kasan: bad access detected [ 588.209817][T10051] page_owner tracks the page as allocated [ 588.215756][T10051] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4276, tgid 4276 (syz-executor), ts 82412849667, free_ts 26845929425 [ 588.237877][T10051] post_alloc_hook+0x173/0x1a0 [ 588.243165][T10051] get_page_from_freelist+0x1a1e/0x1ab0 [ 588.248961][T10051] __alloc_pages+0x1ec/0x4f0 [ 588.253805][T10051] alloc_slab_page+0x5d/0x160 [ 588.258742][T10051] new_slab+0x87/0x2c0 [ 588.263309][T10051] ___slab_alloc+0xbc6/0x1240 [ 588.268045][T10051] __kmem_cache_alloc_node+0x1a0/0x260 [ 588.273753][T10051] kmalloc_trace+0x26/0xe0 [ 588.278454][T10051] ipv6_add_dev+0x59c/0x1120 [ 588.283217][T10051] addrconf_notify+0x634/0xf40 [ 588.288225][T10051] raw_notifier_call_chain+0xcb/0x160 [ 588.293976][T10051] register_netdevice+0x163f/0x1b00 [ 588.299392][T10051] macvlan_common_newlink+0x11d7/0x1930 [ 588.305380][T10051] rtnl_newlink+0x1542/0x2080 [ 588.310551][T10051] rtnetlink_rcv_msg+0x87c/0xfc0 [ 588.315631][T10051] netlink_rcv_skb+0x1fb/0x450 [ 588.320471][T10051] page last free stack trace: [ 588.325282][T10051] free_unref_page_prepare+0x8b4/0x9a0 [ 588.331183][T10051] free_unref_page+0x2e/0x3f0 [ 588.335941][T10051] free_contig_range+0x9d/0x150 [ 588.341054][T10051] destroy_args+0xf0/0xa0a [ 588.345805][T10051] debug_vm_pgtable+0x33c/0x38e [ 588.350973][T10051] do_one_initcall+0x26a/0x840 [ 588.356037][T10051] do_initcall_level+0x137/0x1e4 [ 588.361035][T10051] do_initcalls+0x4b/0x8a [ 588.365611][T10051] kernel_init_freeable+0x415/0x5be [ 588.371018][T10051] kernel_init+0x19/0x1b0 [ 588.375403][T10051] ret_from_fork+0x1f/0x30 [ 588.380000][T10051] [ 588.382367][T10051] Memory state around the buggy address: [ 588.388039][T10051] ffff88805726e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.396244][T10051] ffff88805726e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.404810][T10051] >ffff88805726e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.413294][T10051] ^ [ 588.417897][T10051] ffff88805726ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.426629][T10051] ffff88805726ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.434999][T10051] ================================================================== [ 588.520196][ T4307] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 588.532979][T10051] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.540273][T10051] CPU: 1 PID: 10051 Comm: syz.4.1583 Not tainted syzkaller #0 [ 588.547881][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 588.558252][T10051] Call Trace: [ 588.561695][T10051] [ 588.564690][T10051] dump_stack_lvl+0x188/0x24e [ 588.569616][T10051] ? memcpy+0x3c/0x60 [ 588.573912][T10051] ? show_regs_print_info+0x12/0x12 [ 588.579369][T10051] ? load_image+0x400/0x400 [ 588.584263][T10051] panic+0x2e5/0x730 [ 588.588222][T10051] ? bpf_jit_dump+0xd0/0xd0 [ 588.593232][T10051] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 588.599712][T10051] ? _raw_spin_unlock+0x40/0x40 [ 588.604937][T10051] check_panic_on_warn+0x80/0xa0 [ 588.610199][T10051] ? __pm_runtime_resume+0x148/0x170 [ 588.615551][T10051] end_report+0x66/0x110 [ 588.619929][T10051] kasan_report+0x118/0x140 [ 588.624498][T10051] ? __pm_runtime_resume+0x148/0x170 [ 588.630187][T10051] __pm_runtime_resume+0x148/0x170 [ 588.635603][T10051] ethnl_ops_begin+0x59/0x1f0 [ 588.640777][T10051] module_prepare_data+0x71/0x110 [ 588.645856][T10051] ethnl_default_doit+0x4c6/0xb40 [ 588.651027][T10051] genl_family_rcv_msg_doit+0x22a/0x330 [ 588.656635][T10051] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 588.662693][T10051] ? memcpy+0x3c/0x60 [ 588.666818][T10051] ? genl_get_cmd+0x4cf/0x8b0 [ 588.671678][T10051] genl_rcv_msg+0x604/0x790 [ 588.676307][T10051] ? genl_bind+0x360/0x360 [ 588.680991][T10051] ? ethnl_default_notify+0x5f0/0x5f0 [ 588.686524][T10051] ? ethnl_default_doit+0xb40/0xb40 [ 588.692149][T10051] ? ethnl_default_start+0x5a0/0x5a0 [ 588.697735][T10051] ? ethnl_default_dumpit+0xed0/0xed0 [ 588.703330][T10051] netlink_rcv_skb+0x1fb/0x450 [ 588.708220][T10051] ? genl_bind+0x360/0x360 [ 588.713025][T10051] ? netlink_ack+0x1170/0x1170 [ 588.718028][T10051] ? down_read+0x1a8/0x2d0 [ 588.722606][T10051] genl_rcv+0x24/0x40 [ 588.726635][T10051] netlink_unicast+0x74d/0x8d0 [ 588.731748][T10051] netlink_sendmsg+0x8ad/0xbd0 [ 588.736818][T10051] ? netlink_getsockopt+0x550/0x550 [ 588.742105][T10051] ? aa_sock_msg_perm+0x94/0x150 [ 588.747265][T10051] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 588.752962][T10051] ? security_socket_sendmsg+0x7c/0xa0 [ 588.758898][T10051] ? netlink_getsockopt+0x550/0x550 [ 588.764269][T10051] ____sys_sendmsg+0x5be/0x970 [ 588.769247][T10051] ? __sys_sendmsg_sock+0x30/0x30 [ 588.774394][T10051] ? __import_iovec+0x315/0x500 [ 588.779271][T10051] ? import_iovec+0x6f/0xa0 [ 588.784008][T10051] ___sys_sendmsg+0x2a2/0x360 [ 588.788859][T10051] ? try_to_wake_up+0x6ae/0x1080 [ 588.794074][T10051] ? __sys_sendmsg+0x290/0x290 [ 588.799200][T10051] __se_sys_sendmsg+0x1bb/0x2a0 [ 588.804184][T10051] ? __x64_sys_sendmsg+0x80/0x80 [ 588.809350][T10051] ? lockdep_hardirqs_on+0x94/0x140 [ 588.814950][T10051] do_syscall_64+0x4c/0xa0 [ 588.819541][T10051] ? clear_bhb_loop+0x60/0xb0 [ 588.824409][T10051] ? clear_bhb_loop+0x60/0xb0 [ 588.829212][T10051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.835428][T10051] RIP: 0033:0x7fdc8db9c819 [ 588.839889][T10051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.860281][T10051] RSP: 002b:00007fdc8eab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.869052][T10051] RAX: ffffffffffffffda RBX: 00007fdc8de16090 RCX: 00007fdc8db9c819 [ 588.877315][T10051] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 588.885492][T10051] RBP: 00007fdc8dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 588.893761][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.901862][T10051] R13: 00007fdc8de16128 R14: 00007fdc8de16090 R15: 00007ffe0fa962d8 [ 588.910339][T10051] [ 588.913932][T10051] Kernel Offset: disabled [ 588.918770][T10051] Rebooting in 86400 seconds..